# OPENSUSE-SU-2026:20965-1: Security update for 13 packages

OPENSUSE-SU-2026:20965-1, released June 15, 2026, fixes 60 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/opensuse-su-2026-20965-1
- Platform: Linux
- Released: Jun 15, 2026
- Priority: Urgent (Closes CVE-2026-45898, rated Critical)
- CVEs: 60, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/openSUSE-SU-2026:20965-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [dtb-aarch64](https://patchblox.com/security/data/product/linux/dtb-aarch64.md) | opensuse-leap 16.0 | 6.12.0-160000.35.1 |
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | opensuse-leap 16.0 | 6.12.0-160000.35.1 |
| [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | opensuse-leap 16.0 | 6.12.0-160000.35.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | opensuse-leap 16.0 | 6.12.0-160000.35.1 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | opensuse-leap 16.0 | 6.12.0-160000.35.1.160000.2.16 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | opensuse-leap 16.0 | 6.12.0-160000.35.1 |
| [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | opensuse-leap 16.0 | 6.12.0-160000.35.1 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | opensuse-leap 16.0 | 6.12.0-160000.35.1 |
| [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | opensuse-leap 16.0 | 6.12.0-160000.35.1 |
| [kernel-rt](https://patchblox.com/security/data/product/linux/kernel-rt.md) | opensuse-leap 16.0 | 6.12.0-160000.35.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | opensuse-leap 16.0 | 6.12.0-160000.35.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | opensuse-leap 16.0 | 6.12.0-160000.35.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | opensuse-leap 16.0 | 6.12.0-160000.35.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-45898](https://patchblox.com/security/data/cve/CVE-2026-45898.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/iwcm: Fix workqueue list corruption by remo... | 9.8 | 0.0053 |  |
| [CVE-2026-46316](https://patchblox.com/security/data/cve/CVE-2026-46316.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: arm64: vgic-its: Drop the translation cache... | 9.3 | 0.0034 |  |
| [CVE-2026-43197](https://patchblox.com/security/data/cve/CVE-2026-43197.md) | High | netconsole: avoid OOB reads, msg is not nul-terminated | 9.1 | 0.0058 |  |
| [CVE-2026-46043](https://patchblox.com/security/data/cve/CVE-2026-46043.md) | High | RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv | 9.1 | 0.0051 |  |
| [CVE-2026-31448](https://patchblox.com/security/data/cve/CVE-2026-31448.md) | High | ext4: avoid infinite loops caused by residual data | 9.4 | 0.0050 |  |
| [CVE-2026-46114](https://patchblox.com/security/data/cve/CVE-2026-46114.md) | High | RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads | 8.8 | 0.0047 |  |
| [CVE-2026-43184](https://patchblox.com/security/data/cve/CVE-2026-43184.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  rnbd-srv: Zero the rsp buffer before using it  B... | 7.5 | 0.0044 |  |
| [CVE-2026-45852](https://patchblox.com/security/data/cve/CVE-2026-45852.md) | High | kernel-uek-modules: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli)  [Orabug: 39853924]  [5.1... | 8.8 | 0.0020 |  |
| [CVE-2026-45856](https://patchblox.com/security/data/cve/CVE-2026-45856.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/uverbs: Validate wqe_size before using it i... | 8.8 | 0.0019 |  |
| [CVE-2026-45984](https://patchblox.com/security/data/cve/CVE-2026-45984.md) | High | kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... | 7.8 | 0.0018 |  |
| [CVE-2026-45932](https://patchblox.com/security/data/cve/CVE-2026-45932.md) | High | bpf: Fix tcx/netkit detach permissions when prog fd isn't given | 7.3 | 0.0017 |  |
| [CVE-2026-23327](https://patchblox.com/security/data/cve/CVE-2026-23327.md) | High | cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() | 7.1 | 0.0017 |  |
| [CVE-2026-43332](https://patchblox.com/security/data/cve/CVE-2026-43332.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: t... | 7.8 | 0.0016 |  |
| [CVE-2026-45886](https://patchblox.com/security/data/cve/CVE-2026-45886.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix bpf_xdp_store_bytes proto for read-only... | 7.0 | 0.0016 |  |
| [CVE-2026-46181](https://patchblox.com/security/data/cve/CVE-2026-46181.md) | High | RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() | 8.8 | 0.0014 |  |
| [CVE-2026-46176](https://patchblox.com/security/data/cve/CVE-2026-46176.md) | High | RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() | 7.8 | 0.0014 |  |
| [CVE-2026-46021](https://patchblox.com/security/data/cve/CVE-2026-46021.md) | High | thermal: core: Fix thermal zone governor cleanup issues | 7.0 | 0.0014 |  |
| [CVE-2026-31446](https://patchblox.com/security/data/cve/CVE-2026-31446.md) | High | ext4: fix use-after-free in update_super_work when racing with umount | 7.8 | 0.0014 |  |
| [CVE-2026-43150](https://patchblox.com/security/data/cve/CVE-2026-43150.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  perf/arm-cmn: Reject unsupported hardware config... | 7.8 | 0.0014 |  |
| [CVE-2026-31401](https://patchblox.com/security/data/cve/CVE-2026-31401.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  HID: bpf: prevent buffer overflow in hid_hw_requ... | 7.8 | 0.0014 |  |
| [CVE-2026-43030](https://patchblox.com/security/data/cve/CVE-2026-43030.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix regsafe() for pointers to packet  In ca... | 7.8 | 0.0014 |  |
| [CVE-2026-31518](https://patchblox.com/security/data/cve/CVE-2026-31518.md) | High | esp: fix skb leak with espintcp and async crypto | 7.1 | 0.0013 |  |
| [CVE-2026-43040](https://patchblox.com/security/data/cve/CVE-2026-43040.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: ipv6: ndisc: fix ndisc_ra_useropt to initia... | 7.1 | 0.0013 |  |
| [CVE-2026-45942](https://patchblox.com/security/data/cve/CVE-2026-45942.md) | High | ext4: fix e4b bitmap inconsistency reports | 8.8 | 0.0013 |  |
| [CVE-2026-31396](https://patchblox.com/security/data/cve/CVE-2026-31396.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: macb: fix use-after-free access to PTP cloc... | 7.8 | 0.0013 |  |
| [CVE-2026-45970](https://patchblox.com/security/data/cve/CVE-2026-45970.md) | High | kernel-rt-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0013 |  |
| [CVE-2026-46317](https://patchblox.com/security/data/cve/CVE-2026-46317.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: t... | 8.8 | 0.0013 |  |
| [CVE-2026-31454](https://patchblox.com/security/data/cve/CVE-2026-31454.md) | High | xfs: save ailp before dropping the AIL lock in push callbacks | 7.8 | 0.0013 |  |
| [CVE-2026-31455](https://patchblox.com/security/data/cve/CVE-2026-31455.md) | High | xfs: stop reclaim before pushing AIL during unmount | 7.8 | 0.0013 |  |
| [CVE-2026-31584](https://patchblox.com/security/data/cve/CVE-2026-31584.md) | High | media: mediatek: vcodec: fix use-after-free in encoder release path | 7.8 | 0.0013 |  |
| [CVE-2026-43063](https://patchblox.com/security/data/cve/CVE-2026-43063.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  xfs: don't irele after failing to iget in xfs_at... | 7.8 | 0.0013 |  |
| [CVE-2026-31774](https://patchblox.com/security/data/cve/CVE-2026-31774.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/net: fix slab-out-of-bounds read in io_... | 7.1 | 0.0013 |  |
| [CVE-2026-45910](https://patchblox.com/security/data/cve/CVE-2026-45910.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: L... | 8.8 | 0.0013 |  |
| [CVE-2026-46094](https://patchblox.com/security/data/cve/CVE-2026-46094.md) | High | ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access | 7.1 | 0.0013 |  |
| [CVE-2026-31683](https://patchblox.com/security/data/cve/CVE-2026-31683.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  batman-adv: avoid OGM aggregation when skb tailr... | 7.8 | 0.0012 |  |
| [CVE-2026-31648](https://patchblox.com/security/data/cve/CVE-2026-31648.md) | High | mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() | 7.8 | 0.0012 |  |
| [CVE-2026-31703](https://patchblox.com/security/data/cve/CVE-2026-31703.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  writeback: Fix use after free in inode_switch_wb... | 7.8 | 0.0012 |  |
| [CVE-2026-43109](https://patchblox.com/security/data/cve/CVE-2026-43109.md) | High | x86: shadow stacks: proper error handling for mmap lock | 7.1 | 0.0011 |  |
| [CVE-2026-46090](https://patchblox.com/security/data/cve/CVE-2026-46090.md) | High | ALSA: aloop: Fix peer runtime UAF during format-change stop | 7.8 | 0.0010 |  |
| [CVE-2026-31562](https://patchblox.com/security/data/cve/CVE-2026-31562.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/mediatek: dsi: Store driver data before invo... | 5.5 | 0.0016 |  |
| [CVE-2026-31645](https://patchblox.com/security/data/cve/CVE-2026-31645.md) | Routine | net: lan966x: fix page pool leak in error paths | 5.5 | 0.0016 |  |
| [CVE-2026-23438](https://patchblox.com/security/data/cve/CVE-2026-23438.md) | Routine | net: mvpp2: guard flow control update with global_tx_fc in buffer switching | 5.5 | 0.0013 |  |
| [CVE-2026-23303](https://patchblox.com/security/data/cve/CVE-2026-23303.md) | Routine | smb: client: Don't log plaintext credentials in cifs_set_cifscreds | 5.5 | 0.0013 |  |
| [CVE-2026-43026](https://patchblox.com/security/data/cve/CVE-2026-43026.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: ctnetlink: zero expect NAT fields whe... | 6.1 | 0.0013 |  |
| [CVE-2026-31546](https://patchblox.com/security/data/cve/CVE-2026-31546.md) | Routine | net: bonding: fix NULL deref in bond_debug_rlb_hash_show | 5.5 | 0.0013 |  |
| [CVE-2026-45842](https://patchblox.com/security/data/cve/CVE-2026-45842.md) | Routine | slip: reject VJ receive packets on instances with no rstate array | 5.5 | 0.0013 |  |
| [CVE-2026-45846](https://patchblox.com/security/data/cve/CVE-2026-45846.md) | Routine | bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() | 5.5 | 0.0013 |  |
| [CVE-2026-43411](https://patchblox.com/security/data/cve/CVE-2026-43411.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  tipc: fix divide-by-zero in tipc_sk_filter_conne... | 5.5 | 0.0012 |  |
| [CVE-2026-46083](https://patchblox.com/security/data/cve/CVE-2026-46083.md) | Routine | spi: fix resource leaks on device setup failure | 5.5 | 0.0012 |  |
| [CVE-2026-31556](https://patchblox.com/security/data/cve/CVE-2026-31556.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  xfs: scrub: unlock dquot before early return in... | 5.5 | 0.0012 |  |
| [CVE-2026-43393](https://patchblox.com/security/data/cve/CVE-2026-43393.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: fix chunk map leak in btrfs_map_block() a... | 5.5 | 0.0012 |  |
| [CVE-2026-43394](https://patchblox.com/security/data/cve/CVE-2026-43394.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  nfsd: Fix cred ref leak in nfsd_nl_listener_set_... | 5.5 | 0.0012 |  |
| [CVE-2026-23254](https://patchblox.com/security/data/cve/CVE-2026-23254.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net: gro: fix outer network offset  The udp GRO... | 5.5 | 0.0012 |  |
| [CVE-2026-31671](https://patchblox.com/security/data/cve/CVE-2026-31671.md) | Routine | xfrm_user: fix info leak in build_report() | 5.5 | 0.0012 |  |
| [CVE-2026-43065](https://patchblox.com/security/data/cve/CVE-2026-43065.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ext4: always drain queued discard work in ext4_m... | 5.5 | 0.0012 |  |
| [CVE-2026-43066](https://patchblox.com/security/data/cve/CVE-2026-43066.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ext4: fix iloc.bh leak in ext4_fc_replay_inode()... | 5.5 | 0.0012 |  |
| [CVE-2026-43068](https://patchblox.com/security/data/cve/CVE-2026-43068.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ext4: avoid allocate block from corrupted group... | 5.5 | 0.0012 |  |
| [CVE-2026-31655](https://patchblox.com/security/data/cve/CVE-2026-31655.md) | Routine | pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled | 5.5 | 0.0011 |  |
| [CVE-2026-43455](https://patchblox.com/security/data/cve/CVE-2026-43455.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mctp: route: hold key->lock in mctp_flow_prepare... | 5.5 | 0.0011 |  |
| [CVE-2026-46159](https://patchblox.com/security/data/cve/CVE-2026-46159.md) | Routine | btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak | 5.5 | 0.0010 |  |

---

Data as of 2026-11-10T07:50:38Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.