{"schema_version":"1.7.5","id":"SUSE-SU-2026:1668-1","published":"2026-05-01T08:37:51Z","modified":"2026-05-02T08:00:32.468496Z","related":["CVE-2024-26584","CVE-2025-38234","CVE-2025-39759","CVE-2025-71268","CVE-2025-71269","CVE-2026-22990","CVE-2026-23103","CVE-2026-23120","CVE-2026-23243","CVE-2026-23262","CVE-2026-23272","CVE-2026-23277","CVE-2026-23318","CVE-2026-23362","CVE-2026-23382","CVE-2026-23386","CVE-2026-23398"],"upstream":["CVE-2024-26584","CVE-2025-38234","CVE-2025-39759","CVE-2025-71268","CVE-2025-71269","CVE-2026-22990","CVE-2026-23103","CVE-2026-23120","CVE-2026-23243","CVE-2026-23262","CVE-2026-23272","CVE-2026-23277","CVE-2026-23318","CVE-2026-23362","CVE-2026-23382","CVE-2026-23386","CVE-2026-23398"],"summary":"Security update for the Linux Kernel","details":"\nThe SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues\n\nThe following security issues were fixed:\n\n- CVE-2024-26584: net/tls: return ENOTSUPP on tls_init() (bsc#1220186).\n- CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).\n- CVE-2025-39759: btrfs: qgroup: fix race between quota disable and quota rescan ioctl (bsc#1249522).\n- CVE-2025-71268: btrfs: fix reservation leak in some error paths when inserting inline extent (bsc#1259865).\n- CVE-2025-71269: btrfs: do not free data reservation in fallback from inline due to -ENOSPC (bsc#1259889).\n- CVE-2026-22990: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (bsc#1257221).\n- CVE-2026-23103: ipvlan: Make the addrs_lock be per port (bsc#1257773).\n- CVE-2026-23120: l2tp: avoid one data-race in l2tp_tunnel_del_work() (bsc#1258280).\n- CVE-2026-23243: RDMA/umad: Reject negative data_len in ib_umad_write (bsc#1259797).\n- CVE-2026-23262: gve: Fix stats report corruption on queue count change (bsc#1259870).\n- CVE-2026-23272: netfilter: nf_tables: unconditionally bump set-nelems before insertion (bsc#1260009).\n- CVE-2026-23277: net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit (bsc#1259997).\n- CVE-2026-23318: ALSA: usb-audio: Use correct version for UAC3 header validation (bsc#1260536).\n- CVE-2026-23362: can: bcm: fix locking for bcm_op runtime updates (bsc#1260489).\n- CVE-2026-23382: HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them (bsc#1260551).\n- CVE-2026-23386: gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL (bsc#1260799).\n- CVE-2026-23398: icmp: fix NULL pointer dereference in icmp_tag_validation() (bsc#1260730).\n\nThe following non security issues were fixed:\n\n- btrfs: fix processing of delayed data refs during backref walking (bsc#1228031).\n- fs: skip superblock shrink on frozen xfs filesystems (bsc#1259770).\n","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261668-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220186"},{"type":"REPORT","url":"https://bugzilla.suse.com/1228031"},{"type":"REPORT","url":"https://bugzilla.suse.com/1246057"},{"type":"REPORT","url":"https://bugzilla.suse.com/1249522"},{"type":"REPORT","url":"https://bugzilla.suse.com/1257221"},{"type":"REPORT","url":"https://bugzilla.suse.com/1257773"},{"type":"REPORT","url":"https://bugzilla.suse.com/1258280"},{"type":"REPORT","url":"https://bugzilla.suse.com/1259770"},{"type":"REPORT","url":"https://bugzilla.suse.com/1259797"},{"type":"REPORT","url":"https://bugzilla.suse.com/1259865"},{"type":"REPORT","url":"https://bugzilla.suse.com/1259870"},{"type":"REPORT","url":"https://bugzilla.suse.com/1259889"},{"type":"REPORT","url":"https://bugzilla.suse.com/1259997"},{"type":"REPORT","url":"https://bugzilla.suse.com/1260009"},{"type":"REPORT","url":"https://bugzilla.suse.com/1260489"},{"type":"REPORT","url":"https://bugzilla.suse.com/1260536"},{"type":"REPORT","url":"https://bugzilla.suse.com/1260551"},{"type":"REPORT","url":"https://bugzilla.suse.com/1260730"},{"type":"REPORT","url":"https://bugzilla.suse.com/1260799"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-26584"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38234"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-39759"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-71268"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-71269"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-22990"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-23103"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-23120"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-23243"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-23262"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-23272"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-23277"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-23318"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-23362"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-23382"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-23386"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-23398"}]}