Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP6)

Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP6)

Security update for the Linux Kernel (Live Patch 34 for SUSE Linux Enterprise 15 SP5)

Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP6)

Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP5)

Security update for the Linux Kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP5)

Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP6)

Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 15 SP6)

Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP6)

Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP5)

Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 15 SP7)

Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 15 SP7)

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN The shadow MMU computes GFNs for direct shadow pages using sp->gfn plus the SPTE index. This assumption breaks for shadow paging if the guest page tables are modified between VM entries (similar to commit aad885e77496, "KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE", 2026-03-27). The flow is as follows: - a PDE is installed for a 2MB mapping, and a page in that area is accessed. KVM creates a kvm_mmu_page consisting of 512 4KB pages; the kvm_mmu_page is marked by FNAME(fetch) as direct-mapped because the guest's mapping is a huge page (and thus contiguous). - the PDE mapping is changed from outside the guest. - the guest accesses another page in the same 2MB area. KVM installs a new leaf SPTE and rmap entry; the SPTE uses the "correct" GFN (i.e. based on the new mapping, as changed in the previous step) ...

Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5)