Skip to content
OpenAdvisories
Critical 1 exploited CVE SUSE-SU-2026:20249-1 7 CVEs

Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)

Published Jan 19, 2026 · Updated Mar 23, 2026

Ecosystem: SUSE

Summary

This update for the SUSE Linux Enterprise kernel 6.4.0-28.1 fixes various security issues

The following security issues were fixed:

- CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787).
- CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1251203).
- CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248400).
- CVE-2025-38588: ipv6: prevent infinite loop in rt6_nlmsg_size() (bsc#1249241).
- CVE-2025-38608: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1248670).
- CVE-2025-39682: tls: fix handling of zero-length records on the rx_list (bsc#1250192).
- CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437).

Fixed packages 1

ReleasePackageFixed in
SUSE · SLE Micro 6.0 Linux Micro 6.0 kernel-livepatch-MICRO-6-0-RT_Update_6 11-3.1

Vulnerabilities 7

  • Critical 9.8
    CVE-2025-39682 Exploited Public exploit

    tls: fix handling of zero-length records on the rx_list

    In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - one non-DATA record If the next record ha…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
    KEV Sep 18, 2026
  • Critical 9.8
    CVE-2025-38476

    rpl: Fix use-after-free in rpl_do_srh_inline().

    In the Linux kernel, the following vulnerability has been resolved: rpl: Fix use-after-free in rpl_do_srh_inline(). Running lwt_dst_cache_ref_loop.sh in selftest with KASAN triggers the splat below [0]. rpl_do_srh_inline() fetches ipv6_hdr(skb) and accesses i…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.8
    CVE-2023-53676

    scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()

    In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() The function lio_target_nacl_info_show() uses sprintf() in a loop to print details for every iSCSI connection in a sess…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.6
    CVE-2025-38608

    bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls

    In the Linux kernel, the following vulnerability has been resolved: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls When sending plaintext data, we initially calculated the corresponding ciphertext length. However, if we later reduced the…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.1
    CVE-2025-40204

    sctp: Fix MAC comparison to be constant-time

    In the Linux kernel, the following vulnerability has been resolved: sctp: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-38572

    ipv6: reject malicious packets in ipv6_gso_segment()

    In the Linux kernel, the following vulnerability has been resolved: ipv6: reject malicious packets in ipv6_gso_segment() syzbot was able to craft a packet with very long IPv6 extension headers leading to an overflow of skb->transport_header. This 16bit field …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-38588

    ipv6: prevent infinite loop in rt6_nlmsg_size()

    In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent infinite loop in rt6_nlmsg_size() While testing prior patch, I was able to trigger an infinite loop in rt6_nlmsg_size() in the following place: list_for_each_entry_rcu(sibling, …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • report
    https://bugzilla.suse.com/1248400
  • report
    https://bugzilla.suse.com/1248670
  • report
    https://bugzilla.suse.com/1249241
  • report
    https://bugzilla.suse.com/1250192
  • report
    https://bugzilla.suse.com/1251203
  • report
    https://bugzilla.suse.com/1251787
  • report
    https://bugzilla.suse.com/1253437
  • web
    https://www.suse.com/security/cve/CVE-2023-53676
  • web
    https://www.suse.com/security/cve/CVE-2025-38476
  • web
    https://www.suse.com/security/cve/CVE-2025-38572
  • web
    https://www.suse.com/security/cve/CVE-2025-38588
  • web
    https://www.suse.com/security/cve/CVE-2025-38608
  • web
    https://www.suse.com/security/cve/CVE-2025-39682
  • web
    https://www.suse.com/security/cve/CVE-2025-40204