# OPENSUSE-SU-2026:20416-1: Security update for 13 packages

OPENSUSE-SU-2026:20416-1, released March 25, 2026, fixes 175 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/opensuse-su-2026-20416-1
- Platform: Linux
- Released: Mar 25, 2026
- Priority: Urgent (Closes CVE-2025-68745, rated Critical)
- CVEs: 175, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/openSUSE-SU-2026:20416-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [dtb-aarch64](https://patchblox.com/security/data/product/linux/dtb-aarch64.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1 |
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1 |
| [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1.160000.2.8 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1 |
| [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1 |
| [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1 |
| [kernel-rt](https://patchblox.com/security/data/product/linux/kernel-rt.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-68745](https://patchblox.com/security/data/cve/CVE-2025-68745.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: qla2xxx: Clear cmds after chip reset  Comm... | 9.8 | 0.0050 |  |
| [CVE-2026-23112](https://patchblox.com/security/data/cve/CVE-2026-23112.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  nvmet-tcp: add bounds checks in nvmet_tcp_build_... | 9.8 | 0.0048 |  |
| [CVE-2026-23111](https://patchblox.com/security/data/cve/CVE-2026-23111.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.   The following security bu... | 7.8 | 0.0113 |  |
| [CVE-2026-22998](https://patchblox.com/security/data/cve/CVE-2026-22998.md) | High | kernel-core: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: v... | 7.5 | 0.0078 |  |
| [CVE-2026-23003](https://patchblox.com/security/data/cve/CVE-2026-23003.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: k... | 8.8 | 0.0055 |  |
| [CVE-2025-40099](https://patchblox.com/security/data/cve/CVE-2025-40099.md) | High | cifs: parse_dfs_referrals: prevent oob on malformed input | 9.4 | 0.0041 |  |
| [CVE-2026-23139](https://patchblox.com/security/data/cve/CVE-2026-23139.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nf_conncount: update last_gc only whe... | 7.6 | 0.0039 |  |
| [CVE-2025-71236](https://patchblox.com/security/data/cve/CVE-2025-71236.md) | High | scsi: qla2xxx: Validate sp before freeing associated memory | 7.8 | 0.0038 |  |
| [CVE-2025-68818](https://patchblox.com/security/data/cve/CVE-2025-68818.md) | High | scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" | 8.8 | 0.0033 |  |
| [CVE-2026-23230](https://patchblox.com/security/data/cve/CVE-2026-23230.md) | High | smb: client: split cached_fid bitfields to avoid shared-byte RMW races | 8.4 | 0.0028 |  |
| [CVE-2025-71197](https://patchblox.com/security/data/cve/CVE-2025-71197.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  w1: therm: Fix off-by-one buffer overflow in ala... | n/a | 0.0026 |  |
| [CVE-2026-23136](https://patchblox.com/security/data/cve/CVE-2026-23136.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  libceph: reset sparse-read state in osd_fault()... | 8.1 | 0.0025 |  |
| [CVE-2026-23030](https://patchblox.com/security/data/cve/CVE-2026-23030.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  phy: rockchip: inno-usb2: Fix a double free bug... | n/a | 0.0024 |  |
| [CVE-2025-71234](https://patchblox.com/security/data/cve/CVE-2025-71234.md) | High | wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add | 7.8 | 0.0024 |  |
| [CVE-2026-23056](https://patchblox.com/security/data/cve/CVE-2026-23056.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  uacce: implement mremap in uacce_vm_ops to retur... | n/a | 0.0021 |  |
| [CVE-2026-23054](https://patchblox.com/security/data/cve/CVE-2026-23054.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.   The following security bu... | 7.0 | 0.0021 |  |
| [CVE-2026-23049](https://patchblox.com/security/data/cve/CVE-2026-23049.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/panel-simple: fix connector type for DataIma... | n/a | 0.0021 |  |
| [CVE-2026-23176](https://patchblox.com/security/data/cve/CVE-2026-23176.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  platform/x86: toshiba_haps: Fix memory leaks in... | n/a | 0.0021 |  |
| [CVE-2026-23182](https://patchblox.com/security/data/cve/CVE-2026-23182.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  spi: tegra: Fix a memory leak in tegra_slink_pro... | n/a | 0.0021 |  |
| [CVE-2025-40103](https://patchblox.com/security/data/cve/CVE-2025-40103.md) | High | smb: client: Fix refcount leak for cifs_sb_tlink | 7.1 | 0.0021 |  |
| [CVE-2026-23172](https://patchblox.com/security/data/cve/CVE-2026-23172.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: fix potential skb->frags overflo... | 8.8 | 0.0020 |  |
| [CVE-2026-23050](https://patchblox.com/security/data/cve/CVE-2026-23050.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  pNFS: Fix a deadlock when returning a delegation... | 7.0 | 0.0020 |  |
| [CVE-2026-23010](https://patchblox.com/security/data/cve/CVE-2026-23010.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix use-after-free in inet6_addr_del(). syz... | 7.8 | 0.0020 |  |
| [CVE-2025-68371](https://patchblox.com/security/data/cve/CVE-2025-68371.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: smartpqi: Fix device resources accessed af... | 7.0 | 0.0020 |  |
| [CVE-2025-68186](https://patchblox.com/security/data/cve/CVE-2025-68186.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ring-buffer: Do not warn in ring_buffer_map_get_... | n/a | 0.0020 |  |
| [CVE-2026-23178](https://patchblox.com/security/data/cve/CVE-2026-23178.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  HID: i2c-hid: fix potential buffer overflow in i... | 7.8 | 0.0019 |  |
| [CVE-2026-23074](https://patchblox.com/security/data/cve/CVE-2026-23074.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: p... | 7.8 | 0.0019 |  |
| [CVE-2026-23073](https://patchblox.com/security/data/cve/CVE-2026-23073.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: rsi: Fix memory corruption due to not set... | 7.8 | 0.0018 |  |
| [CVE-2026-23208](https://patchblox.com/security/data/cve/CVE-2026-23208.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: usb-audio: Prevent excessive number of fra... | 7.8 | 0.0018 |  |
| [CVE-2026-23076](https://patchblox.com/security/data/cve/CVE-2026-23076.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: ctxfi: Fix potential OOB access in audio m... | 7.1 | 0.0018 |  |
| [CVE-2026-23213](https://patchblox.com/security/data/cve/CVE-2026-23213.md) | High | drm/amd/pm: Disable MMIO access during SMU Mode 1 reset | 8.4 | 0.0018 |  |
| [CVE-2026-23214](https://patchblox.com/security/data/cve/CVE-2026-23214.md) | High | btrfs: reject new transactions if the fs is fully read-only | 8.4 | 0.0018 |  |
| [CVE-2026-23209](https://patchblox.com/security/data/cve/CVE-2026-23209.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: L... | 7.8 | 0.0017 |  |
| [CVE-2026-23099](https://patchblox.com/security/data/cve/CVE-2026-23099.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bonding: limit BOND_MODE_8023AD to Ethernet devi... | 7.1 | 0.0017 |  |
| [CVE-2026-23078](https://patchblox.com/security/data/cve/CVE-2026-23078.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: scarlett2: Fix buffer overflow in config r... | 7.8 | 0.0017 |  |
| [CVE-2026-23171](https://patchblox.com/security/data/cve/CVE-2026-23171.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: L... | 7.8 | 0.0017 |  |
| [CVE-2026-23089](https://patchblox.com/security/data/cve/CVE-2026-23089.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.   The following security bu... | 7.8 | 0.0016 |  |
| [CVE-2025-68785](https://patchblox.com/security/data/cve/CVE-2025-68785.md) | High | net: openvswitch: fix middle attribute validation in push_nsh() action | 7.1 | 0.0016 |  |
| [CVE-2026-23083](https://patchblox.com/security/data/cve/CVE-2026-23083.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fou: Don't allow 0 for FOU_ATTR_IPPROTO | 7.8 | 0.0016 |  |
| [CVE-2026-23004](https://patchblox.com/security/data/cve/CVE-2026-23004.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.   The following security bu... | 7.0 | 0.0016 |  |
| [CVE-2026-23068](https://patchblox.com/security/data/cve/CVE-2026-23068.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  spi: spi-sprd-adi: Fix double free in probe erro... | 7.8 | 0.0016 |  |
| [CVE-2025-71071](https://patchblox.com/security/data/cve/CVE-2025-71071.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  iommu/mediatek: fix use-after-free on probe defe... | 7.8 | 0.0015 |  |
| [CVE-2025-68810](https://patchblox.com/security/data/cve/CVE-2025-68810.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an... | 7.8 | 0.0015 |  |
| [CVE-2026-22980](https://patchblox.com/security/data/cve/CVE-2026-22980.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  nfsd: provide locking for v4_end_grace  Writing... | 7.8 | 0.0015 |  |
| [CVE-2026-23144](https://patchblox.com/security/data/cve/CVE-2026-23144.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: L... | 7.3 | 0.0015 |  |
| [CVE-2026-23082](https://patchblox.com/security/data/cve/CVE-2026-23082.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues  The following security issues wer... | n/a | 0.0015 |  |
| [CVE-2026-23105](https://patchblox.com/security/data/cve/CVE-2026-23105.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net/sched: qfq: Use cl_is_active to determine wh... | 8.8 | 0.0015 |  |
| [CVE-2026-23156](https://patchblox.com/security/data/cve/CVE-2026-23156.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: efivarfs: fix error propagation in efivar_entry_g... | 7.8 | 0.0014 |  |
| [CVE-2026-23224](https://patchblox.com/security/data/cve/CVE-2026-23224.md) | High | erofs: fix UAF issue for file-backed mounts w/ directio option | 7.8 | 0.0014 |  |
| [CVE-2026-22979](https://patchblox.com/security/data/cve/CVE-2026-22979.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: fix memory leak in skb_segment_list for GRO... | 7.8 | 0.0014 |  |
| [CVE-2026-23221](https://patchblox.com/security/data/cve/CVE-2026-23221.md) | High | bus: fsl-mc: fix use-after-free in driver_override_show() | 7.8 | 0.0014 |  |
| [CVE-2026-23223](https://patchblox.com/security/data/cve/CVE-2026-23223.md) | High | xfs: fix UAF in xchk_btree_check_block_owner | 7.8 | 0.0014 |  |
| [CVE-2026-23102](https://patchblox.com/security/data/cve/CVE-2026-23102.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  arm64/fpsimd: signal: Fix restoration of SVE con... | 7.1 | 0.0014 |  |
| [CVE-2025-71233](https://patchblox.com/security/data/cve/CVE-2025-71233.md) | High | PCI: endpoint: Avoid creating sub-groups asynchronously | 8.4 | 0.0014 |  |
| [CVE-2025-71229](https://patchblox.com/security/data/cve/CVE-2025-71229.md) | High | wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() | 8.4 | 0.0014 |  |
| [CVE-2026-23158](https://patchblox.com/security/data/cve/CVE-2026-23158.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  gpio: virtuser: fix UAF in configfs release path... | 7.8 | 0.0014 |  |
| [CVE-2025-71231](https://patchblox.com/security/data/cve/CVE-2025-71231.md) | High | crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode | 8.4 | 0.0014 |  |
| [CVE-2025-71192](https://patchblox.com/security/data/cve/CVE-2025-71192.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: ac97: fix a double free in snd_ac97_contro... | 7.0 | 0.0014 |  |
| [CVE-2026-23191](https://patchblox.com/security/data/cve/CVE-2026-23191.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: L... | 7.3 | 0.0013 |  |
| [CVE-2026-23066](https://patchblox.com/security/data/cve/CVE-2026-23066.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix recvmsg() unconditional requeue If rxr... | 7.4 | 0.0012 |  |
| [CVE-2026-23110](https://patchblox.com/security/data/cve/CVE-2026-23110.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: c... | 7.8 | 0.0011 |  |
| [CVE-2026-23097](https://patchblox.com/security/data/cve/CVE-2026-23097.md) | High | kernel-core: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: L... | 7.5 | 0.0011 |  |
| [CVE-2026-23161](https://patchblox.com/security/data/cve/CVE-2026-23161.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/shmem, swap: fix race of truncate and swap en... | 7.0 | 0.0011 |  |
| [CVE-2026-23210](https://patchblox.com/security/data/cve/CVE-2026-23210.md) | High | kernel-rt-core: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: L... | 7.5 | 0.0010 |  |
| [CVE-2025-71161](https://patchblox.com/security/data/cve/CVE-2025-71161.md) | Routine | dm-verity: disable recursive forward error correction | 5.5 | 0.0047 |  |
| [CVE-2025-71183](https://patchblox.com/security/data/cve/CVE-2025-71183.md) | Routine | btrfs: always detect conflicting inodes when logging inode refs | 5.5 | 0.0032 |  |
| [CVE-2026-23095](https://patchblox.com/security/data/cve/CVE-2026-23095.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  gue: Fix skb memleak with inner IP protocol 0 | 5.5 | 0.0031 |  |
| [CVE-2026-23148](https://patchblox.com/security/data/cve/CVE-2026-23148.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  nvmet: fix race in nvmet_bio_done() leading to N... | 5.7 | 0.0030 |  |
| [CVE-2026-23038](https://patchblox.com/security/data/cve/CVE-2026-23038.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc... | 5.5 | 0.0028 |  |
| [CVE-2026-23037](https://patchblox.com/security/data/cve/CVE-2026-23037.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  can: etas_es58x: allow partial RX URB allocation... | n/a | 0.0024 |  |
| [CVE-2026-23035](https://patchblox.com/security/data/cve/CVE-2026-23035.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5e: Pass netdev to mlx5e_destroy_netdev i... | 5.1 | 0.0024 |  |
| [CVE-2025-40230](https://patchblox.com/security/data/cve/CVE-2025-40230.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mm: prevent poison consumption when splitting TH... | 5.9 | 0.0023 |  |
| [CVE-2026-23033](https://patchblox.com/security/data/cve/CVE-2026-23033.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  dmaengine: omap-dma: fix dma_pool resource leak... | n/a | 0.0023 |  |
| [CVE-2026-23031](https://patchblox.com/security/data/cve/CVE-2026-23031.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  can: gs_usb: gs_usb_receive_bulk_callback(): fix... | 5.5 | 0.0022 |  |
| [CVE-2025-71185](https://patchblox.com/security/data/cve/CVE-2025-71185.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  dmaengine: ti: dma-crossbar: fix device leak on... | 5.5 | 0.0022 |  |
| [CVE-2025-71186](https://patchblox.com/security/data/cve/CVE-2025-71186.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  dmaengine: stm32: dmamux: fix device leak on rou... | 5.5 | 0.0022 |  |
| [CVE-2025-71190](https://patchblox.com/security/data/cve/CVE-2025-71190.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  dmaengine: bcm-sba-raid: fix device leak on prob... | 5.5 | 0.0022 |  |
| [CVE-2025-71191](https://patchblox.com/security/data/cve/CVE-2025-71191.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  dmaengine: at_hdmac: fix device leak on of_dma_x... | 5.5 | 0.0022 |  |
| [CVE-2026-23026](https://patchblox.com/security/data/cve/CVE-2026-23026.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  dmaengine: qcom: gpi: Fix memory leak in gpi_per... | 5.5 | 0.0021 |  |
| [CVE-2025-68292](https://patchblox.com/security/data/cve/CVE-2025-68292.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/memfd: fix information leak in hugetlb folios... | 5.5 | 0.0021 |  |
| [CVE-2025-68295](https://patchblox.com/security/data/cve/CVE-2025-68295.md) | Routine | smb: client: fix memory leak in cifs_construct_tcon() | 5.5 | 0.0021 |  |
| [CVE-2026-23058](https://patchblox.com/security/data/cve/CVE-2026-23058.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  can: ems_usb: ems_usb_read_bulk_callback(): fix... | 5.5 | 0.0021 |  |
| [CVE-2025-71224](https://patchblox.com/security/data/cve/CVE-2025-71224.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: mac80211: ocb: skip rx_no_sta when interfa... | 3.3 | 0.0021 |  |
| [CVE-2025-71196](https://patchblox.com/security/data/cve/CVE-2025-71196.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  phy: stm32-usphyc: Fix off by one in probe()  Th... | n/a | 0.0021 |  |
| [CVE-2025-71199](https://patchblox.com/security/data/cve/CVE-2025-71199.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  iio: adc: at91-sama5d2_adc: Fix potential use-af... | n/a | 0.0021 |  |
| [CVE-2025-71188](https://patchblox.com/security/data/cve/CVE-2025-71188.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  dmaengine: lpc18xx-dmamux: fix device leak on ro... | 5.5 | 0.0021 |  |
| [CVE-2025-71189](https://patchblox.com/security/data/cve/CVE-2025-71189.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  dmaengine: dw: dmamux: fix OF node leak on route... | 5.5 | 0.0021 |  |
| [CVE-2026-23021](https://patchblox.com/security/data/cve/CVE-2026-23021.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net: usb: pegasus: fix memory leak in update_eth... | 5.5 | 0.0021 |  |
| [CVE-2026-23017](https://patchblox.com/security/data/cve/CVE-2026-23017.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  idpf: fix error handling in the init_task on loa... | 5.5 | 0.0020 |  |
| [CVE-2025-68173](https://patchblox.com/security/data/cve/CVE-2025-68173.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ftrace: Fix softlockup in ftrace_module_enable... | 5.5 | 0.0020 |  |
| [CVE-2026-23059](https://patchblox.com/security/data/cve/CVE-2026-23059.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: qla2xxx: Sanitize payload size to prevent... | 5.5 | 0.0020 |  |
| [CVE-2026-23053](https://patchblox.com/security/data/cve/CVE-2026-23053.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  NFS: Fix a deadlock involving nfs_release_folio(... | 5.3 | 0.0020 |  |
| [CVE-2025-71193](https://patchblox.com/security/data/cve/CVE-2025-71193.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  phy: qcom-qusb2: Fix NULL pointer dereference on... | n/a | 0.0020 |  |
| [CVE-2025-71195](https://patchblox.com/security/data/cve/CVE-2025-71195.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  dmaengine: xilinx: xdma: Fix regmap max_register... | n/a | 0.0020 |  |
| [CVE-2025-71198](https://patchblox.com/security/data/cve/CVE-2025-71198.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  iio: imu: st_lsm6dsx: fix iio_chan_spec for sens... | n/a | 0.0020 |  |
| [CVE-2026-23179](https://patchblox.com/security/data/cve/CVE-2026-23179.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  nvmet-tcp: fixup hang in nvmet_tcp_listen_data_r... | 6.5 | 0.0020 |  |
| [CVE-2026-23057](https://patchblox.com/security/data/cve/CVE-2026-23057.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  vsock/virtio: Coalesce only linear skb  vsock/vi... | 5.5 | 0.0020 |  |
| [CVE-2026-23055](https://patchblox.com/security/data/cve/CVE-2026-23055.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  i2c: riic: Move suspend handling to NOIRQ phase... | n/a | 0.0020 |  |
| [CVE-2026-23177](https://patchblox.com/security/data/cve/CVE-2026-23177.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mm, shmem: prevent infinite loop on truncate rac... | 5.5 | 0.0020 |  |
| [CVE-2026-23047](https://patchblox.com/security/data/cve/CVE-2026-23047.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  libceph: make calc_target() set t->paused, not j... | 5.5 | 0.0019 |  |
| [CVE-2025-68329](https://patchblox.com/security/data/cve/CVE-2025-68329.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  tracing: Fix WARN_ON in tracing_buffers_mmap_clo... | 5.5 | 0.0018 |  |
| [CVE-2025-71232](https://patchblox.com/security/data/cve/CVE-2025-71232.md) | Routine | scsi: qla2xxx: Free sp in error path to fix system crash | 5.5 | 0.0018 |  |
| [CVE-2026-23154](https://patchblox.com/security/data/cve/CVE-2026-23154.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net: fix segmentation of forwarding fraglist GRO... | 5.5 | 0.0018 |  |
| [CVE-2026-23069](https://patchblox.com/security/data/cve/CVE-2026-23069.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  vsock/virtio: fix potential underflow in virtio_... | 5.5 | 0.0018 |  |
| [CVE-2026-23060](https://patchblox.com/security/data/cve/CVE-2026-23060.md) | Routine | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.   The following security bu... | 6.5 | 0.0018 |  |
| [CVE-2026-23023](https://patchblox.com/security/data/cve/CVE-2026-23023.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  idpf: fix memory leak in idpf_vport_rel()  Free... | 5.5 | 0.0018 |  |
| [CVE-2025-71194](https://patchblox.com/security/data/cve/CVE-2025-71194.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: fix deadlock in wait_current_trans() due... | 5.5 | 0.0018 |  |
| [CVE-2026-23061](https://patchblox.com/security/data/cve/CVE-2026-23061.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  can: kvaser_usb: kvaser_usb_read_bulk_callback()... | 5.5 | 0.0017 |  |
| [CVE-2026-23128](https://patchblox.com/security/data/cve/CVE-2026-23128.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  arm64: Set __nocfi on swsusp_arch_resume()  A DA... | 5.5 | 0.0017 |  |
| [CVE-2026-23042](https://patchblox.com/security/data/cve/CVE-2026-23042.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  idpf: fix aux device unplugging when rdma is not... | n/a | 0.0017 |  |
| [CVE-2026-23137](https://patchblox.com/security/data/cve/CVE-2026-23137.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  of: unittest: Fix memory leak in unittest_data_a... | 5.5 | 0.0017 |  |
| [CVE-2026-23086](https://patchblox.com/security/data/cve/CVE-2026-23086.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  vsock/virtio: cap TX credit to local buffer size... | 6.2 | 0.0017 |  |
| [CVE-2025-71125](https://patchblox.com/security/data/cve/CVE-2025-71125.md) | Routine | tracing: Do not register unsupported perf events | 5.5 | 0.0016 |  |
| [CVE-2025-39753](https://patchblox.com/security/data/cve/CVE-2025-39753.md) | Routine | gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops | 5.5 | 0.0016 |  |
| [CVE-2026-23024](https://patchblox.com/security/data/cve/CVE-2026-23024.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  idpf: fix memory leak of flow steer list on rmmo... | 5.5 | 0.0016 |  |
| [CVE-2025-71222](https://patchblox.com/security/data/cve/CVE-2025-71222.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: wlcore: ensure skb headroom before skb_pus... | 5.5 | 0.0015 |  |
| [CVE-2026-23022](https://patchblox.com/security/data/cve/CVE-2026-23022.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  idpf: fix memory leak in idpf_vc_core_deinit()... | 5.5 | 0.0015 |  |
| [CVE-2026-23108](https://patchblox.com/security/data/cve/CVE-2026-23108.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  can: usb_8dev: usb_8dev_read_bulk_callback(): fi... | 5.5 | 0.0015 |  |
| [CVE-2026-23107](https://patchblox.com/security/data/cve/CVE-2026-23107.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  arm64/fpsimd: signal: Allocate SSVE storage when... | 6.2 | 0.0015 |  |
| [CVE-2026-23084](https://patchblox.com/security/data/cve/CVE-2026-23084.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  be2net: Fix NULL pointer dereference in be_cmd_g... | 5.5 | 0.0015 |  |
| [CVE-2026-23198](https://patchblox.com/security/data/cve/CVE-2026-23198.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: Don't clobber irqfd routing type when deass... | 5.5 | 0.0015 |  |
| [CVE-2026-23222](https://patchblox.com/security/data/cve/CVE-2026-23222.md) | Routine | crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly | 5.5 | 0.0015 |  |
| [CVE-2026-23063](https://patchblox.com/security/data/cve/CVE-2026-23063.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  uacce: ensure safe queue release with state mana... | 5.5 | 0.0015 |  |
| [CVE-2026-23064](https://patchblox.com/security/data/cve/CVE-2026-23064.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net/sched: act_ife: avoid possible NULL deref  t... | 5.5 | 0.0015 |  |
| [CVE-2026-23080](https://patchblox.com/security/data/cve/CVE-2026-23080.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  can: mcba_usb: mcba_usb_read_bulk_callback(): fi... | 5.5 | 0.0015 |  |
| [CVE-2026-23085](https://patchblox.com/security/data/cve/CVE-2026-23085.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  irqchip/gic-v3-its: Avoid truncating memory addr... | 5.5 | 0.0015 |  |
| [CVE-2026-23090](https://patchblox.com/security/data/cve/CVE-2026-23090.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  slimbus: core: fix device reference leak on repo... | 5.5 | 0.0015 |  |
| [CVE-2026-23091](https://patchblox.com/security/data/cve/CVE-2026-23091.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  intel_th: fix device leak on output open()  Make... | 5.5 | 0.0015 |  |
| [CVE-2026-23100](https://patchblox.com/security/data/cve/CVE-2026-23100.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/hugetlb: fix hugetlb_pmd_shared()  Patch seri... | 5.5 | 0.0015 |  |
| [CVE-2026-23133](https://patchblox.com/security/data/cve/CVE-2026-23133.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: ath10k: fix dma_free_coherent() pointer  d... | 5.5 | 0.0015 |  |
| [CVE-2026-23141](https://patchblox.com/security/data/cve/CVE-2026-23141.md) | Routine | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.   The following security bu... | 5.5 | 0.0015 |  |
| [CVE-2026-23145](https://patchblox.com/security/data/cve/CVE-2026-23145.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ext4: fix iloc.bh leak in ext4_xattr_inode_updat... | 5.5 | 0.0015 |  |
| [CVE-2026-23135](https://patchblox.com/security/data/cve/CVE-2026-23135.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: ath12k: fix dma_free_coherent() pointer  d... | 6.1 | 0.0015 |  |
| [CVE-2026-23062](https://patchblox.com/security/data/cve/CVE-2026-23062.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  platform/x86: hp-bioscfg: Fix kernel panic in GE... | 5.5 | 0.0015 |  |
| [CVE-2026-23088](https://patchblox.com/security/data/cve/CVE-2026-23088.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  tracing: Fix crash on synthetic stacktrace field... | 5.5 | 0.0015 |  |
| [CVE-2026-23142](https://patchblox.com/security/data/cve/CVE-2026-23142.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/damon/sysfs-scheme: cleanup access_pattern su... | 5.5 | 0.0015 |  |
| [CVE-2026-23065](https://patchblox.com/security/data/cve/CVE-2026-23065.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  platform/x86/amd: Fix memory leak in wbrf_record... | 5.5 | 0.0015 |  |
| [CVE-2026-23070](https://patchblox.com/security/data/cve/CVE-2026-23070.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  Octeontx2-af: Add proper checks for fwdata  firm... | 5.5 | 0.0015 |  |
| [CVE-2025-71235](https://patchblox.com/security/data/cve/CVE-2025-71235.md) | Routine | scsi: qla2xxx: Delay module unload while fabric scan in progress | 5.5 | 0.0014 |  |
| [CVE-2026-23169](https://patchblox.com/security/data/cve/CVE-2026-23169.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mptcp: fix race in mptcp_pm_nl_flush_addrs_doit(... | 5.6 | 0.0014 |  |
| [CVE-2026-23123](https://patchblox.com/security/data/cve/CVE-2026-23123.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  interconnect: debugfs: initialize src_node and d... | 5.5 | 0.0014 |  |
| [CVE-2026-23229](https://patchblox.com/security/data/cve/CVE-2026-23229.md) | Routine | crypto: virtio - Add spinlock protection with virtqueue notification | 5.5 | 0.0014 |  |
| [CVE-2025-71184](https://patchblox.com/security/data/cve/CVE-2025-71184.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: fix NULL dereference on root when tracing... | 5.5 | 0.0014 |  |
| [CVE-2026-23129](https://patchblox.com/security/data/cve/CVE-2026-23129.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  dpll: Prevent duplicate registrations  Modify th... | 5.6 | 0.0014 |  |
| [CVE-2026-23071](https://patchblox.com/security/data/cve/CVE-2026-23071.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  regmap: Fix race condition in hwspinlock irqsave... | 5.5 | 0.0014 |  |
| [CVE-2026-23151](https://patchblox.com/security/data/cve/CVE-2026-23151.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: MGMT: Fix memory leak in set_ssp_comp... | 6.1 | 0.0014 |  |
| [CVE-2025-71182](https://patchblox.com/security/data/cve/CVE-2025-71182.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  can: j1939: make j1939_session_activate() fail i... | 5.5 | 0.0014 |  |
| [CVE-2026-23096](https://patchblox.com/security/data/cve/CVE-2026-23096.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  uacce: fix cdev handling in the cleanup path  Wh... | 5.5 | 0.0014 |  |
| [CVE-2026-23119](https://patchblox.com/security/data/cve/CVE-2026-23119.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  bonding: provide a net pointer to __skb_flow_dis... | 5.5 | 0.0014 |  |
| [CVE-2026-23150](https://patchblox.com/security/data/cve/CVE-2026-23150.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame() | 5.5 | 0.0014 |  |
| [CVE-2026-23155](https://patchblox.com/security/data/cve/CVE-2026-23155.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  can: gs_usb: gs_usb_receive_bulk_callback(): fix... | 5.5 | 0.0014 |  |
| [CVE-2026-23157](https://patchblox.com/security/data/cve/CVE-2026-23157.md) | Routine | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.   The following security bu... | 5.5 | 0.0014 |  |
| [CVE-2026-23163](https://patchblox.com/security/data/cve/CVE-2026-23163.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/amdgpu: fix NULL pointer dereference in amdg... | 5.5 | 0.0014 |  |
| [CVE-2026-23170](https://patchblox.com/security/data/cve/CVE-2026-23170.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/imx/tve: fix probe device leak  Make sure to... | 5.5 | 0.0014 |  |
| [CVE-2026-23173](https://patchblox.com/security/data/cve/CVE-2026-23173.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5e: TC, delete flows only for existing pe... | 5.5 | 0.0014 |  |
| [CVE-2026-23190](https://patchblox.com/security/data/cve/CVE-2026-23190.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ASoC: amd: fix memory leak in acp3x pdm dma ops | 5.5 | 0.0014 |  |
| [CVE-2025-71200](https://patchblox.com/security/data/cve/CVE-2025-71200.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mmc: sdhci-of-dwcmshc: Prevent illegal clock red... | 5.5 | 0.0014 |  |
| [CVE-2026-23094](https://patchblox.com/security/data/cve/CVE-2026-23094.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  uacce: fix isolate sysfs check condition  uacce... | 5.5 | 0.0014 |  |
| [CVE-2026-23116](https://patchblox.com/security/data/cve/CVE-2026-23116.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  pmdomain: imx8m-blk-ctrl: Remove separate rst an... | 5.5 | 0.0014 |  |
| [CVE-2026-23131](https://patchblox.com/security/data/cve/CVE-2026-23131.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  platform/x86: hp-bioscfg: Fix kobject warnings f... | 5.5 | 0.0014 |  |
| [CVE-2026-23166](https://patchblox.com/security/data/cve/CVE-2026-23166.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ice: Fix NULL pointer dereference in ice_vsi_set... | 6.2 | 0.0014 |  |
| [CVE-2025-71134](https://patchblox.com/security/data/cve/CVE-2025-71134.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/page_alloc: change all pageblocks migrate typ... | 5.5 | 0.0014 |  |
| [CVE-2026-23104](https://patchblox.com/security/data/cve/CVE-2026-23104.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ice: fix devlink reload call trace  Commit 4da71... | 5.5 | 0.0014 |  |
| [CVE-2026-23189](https://patchblox.com/security/data/cve/CVE-2026-23189.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ceph: fix NULL pointer dereference in ceph_mds_a... | 5.5 | 0.0014 |  |
| [CVE-2026-23207](https://patchblox.com/security/data/cve/CVE-2026-23207.md) | Routine | spi: tegra210-quad: Protect curr_xfer check in IRQ handler | 5.5 | 0.0013 |  |
| [CVE-2026-23146](https://patchblox.com/security/data/cve/CVE-2026-23146.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: c... | 5.5 | 0.0013 |  |
| [CVE-2025-71225](https://patchblox.com/security/data/cve/CVE-2025-71225.md) | Routine | md: suspend array while updating raid_disks via sysfs | 5.3 | 0.0013 |  |
| [CVE-2026-23018](https://patchblox.com/security/data/cve/CVE-2026-23018.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: release path before initializing extent t... | 5.5 | 0.0012 |  |
| [CVE-2026-23152](https://patchblox.com/security/data/cve/CVE-2026-23152.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: mac80211: correctly decode TTLM with defau... | 5.5 | 0.0012 |  |
| [CVE-2025-71104](https://patchblox.com/security/data/cve/CVE-2025-71104.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: x86: Fix VM hard lockup after prolonged ina... | 5.5 | 0.0011 |  |
| [CVE-2026-23101](https://patchblox.com/security/data/cve/CVE-2026-23101.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  leds: led-class: Only Add LED to leds_list when... | 4.7 | 0.0011 |  |
| [CVE-2026-23121](https://patchblox.com/security/data/cve/CVE-2026-23121.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mISDN: annotate data-race around dev->work  dev-... | 5.5 | 0.0011 |  |
| [CVE-2026-23188](https://patchblox.com/security/data/cve/CVE-2026-23188.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net: usb: r8152: fix resume reset deadlock  rtl8... | 5.5 | 0.0011 |  |
| [CVE-2026-23202](https://patchblox.com/security/data/cve/CVE-2026-23202.md) | Routine | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.   The following security bu... | 5.5 | 0.0010 |  |
| [CVE-2026-23167](https://patchblox.com/security/data/cve/CVE-2026-23167.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  nfc: nci: Fix race between rfkill and nci_unregi... | 4.7 | 0.0010 |  |

---

Data as of 2026-11-10T20:03:11Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.
