{"schema_version":"1.7.5","id":"SUSE-SU-2026:21558-1","published":"2026-05-05T22:37:56Z","modified":"2026-05-12T18:27:31.447204Z","related":["CVE-2026-23204","CVE-2026-23437","CVE-2026-31406","CVE-2026-31431"],"upstream":["CVE-2026-23204","CVE-2026-23437","CVE-2026-31406","CVE-2026-31431"],"summary":"Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16)","details":"\nThis update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues\n\nThe following security issues were fixed:\n\n- CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1259126).\n- CVE-2026-23437: net: shaper: protect late read accesses to the hierarchy (bsc#1261845).\n- CVE-2026-31406: xfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini() (bsc#1261630).\n- CVE-2026-31431: crypto: algif_aead - Revert to operating out-of-place (bsc#1263689).\n\n","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621558-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1259126"},{"type":"REPORT","url":"https://bugzilla.suse.com/1261630"},{"type":"REPORT","url":"https://bugzilla.suse.com/1261845"},{"type":"REPORT","url":"https://bugzilla.suse.com/1263689"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-23204"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-23437"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-31406"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-31431"}]}