{
  "fix": "SUSE-SU-2026:0471-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0471-1",
  "summary": "SUSE-SU-2026:0471-1, released February 12, 2026, fixes 38 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 13 packages",
  "released": "2026-02-12T11:25:44Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2025-68819, rated Critical",
  "supported": true,
  "cveCount": 38,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00588,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2026:0471-1",
  "appliesTo": [
    {
      "product": "dtb-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/dtb-aarch64",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.87.1",
      "supported": true
    },
    {
      "product": "kernel-64kb",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-64kb",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.87.1",
      "supported": true
    },
    {
      "product": "kernel-debug",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-debug",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.87.1",
      "supported": true
    },
    {
      "product": "kernel-default",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.87.1",
      "supported": true
    },
    {
      "product": "kernel-default",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.87.1",
      "supported": true
    },
    {
      "product": "kernel-default-base",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.87.1.150600.12.40.1",
      "supported": true
    },
    {
      "product": "kernel-default-base",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.87.1.150600.12.40.1",
      "supported": true
    },
    {
      "product": "kernel-docs",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-docs",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.87.1",
      "supported": true
    },
    {
      "product": "kernel-docs",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-docs",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.87.1",
      "supported": true
    },
    {
      "product": "kernel-kvmsmall",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-kvmsmall",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.87.1",
      "supported": true
    },
    {
      "product": "kernel-livepatch-SLE15-SP6_Update_20",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-sle15-sp6-update-20",
      "release": "sles 15.6",
      "fixedVersion": "1-150600.13.3.1",
      "supported": true
    },
    {
      "product": "kernel-obs-build",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-build",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.87.1",
      "supported": true
    },
    {
      "product": "kernel-obs-build",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-build",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.87.1",
      "supported": true
    },
    {
      "product": "kernel-obs-qa",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-qa",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.87.1",
      "supported": true
    },
    {
      "product": "kernel-source",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-source",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.87.1",
      "supported": true
    },
    {
      "product": "kernel-source",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-source",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.87.1",
      "supported": true
    },
    {
      "product": "kernel-syms",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-syms",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.87.1",
      "supported": true
    },
    {
      "product": "kernel-syms",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-syms",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.87.1",
      "supported": true
    },
    {
      "product": "kernel-zfcpdump",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-zfcpdump",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.87.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-68819",
      "url": "https://patchblox.com/security/cve/CVE-2025-68819",
      "title": "media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68284",
      "url": "https://patchblox.com/security/cve/CVE-2025-68284",
      "title": "libceph: prevent potential out-of-bounds writes in handle_auth_session_key()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00588,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68285",
      "url": "https://patchblox.com/security/cve/CVE-2025-68285",
      "title": "libceph: fix potential use-after-free in have_mon_and_osd_map()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00585,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68775",
      "url": "https://patchblox.com/security/cve/CVE-2025-68775",
      "title": "net/handshake: duplicate handshake cancellations leak socket",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00548,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71120",
      "url": "https://patchblox.com/security/cve/CVE-2025-71120",
      "title": "SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00529,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40257",
      "url": "https://patchblox.com/security/cve/CVE-2025-40257",
      "title": "mptcp: fix a race in mptcp_pm_del_add_timer()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00498,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38379",
      "url": "https://patchblox.com/security/cve/CVE-2025-38379",
      "title": "smb: client: fix warning when reconnecting channel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00411,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71085",
      "url": "https://patchblox.com/security/cve/CVE-2025-71085",
      "title": "kernel-64kb: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00305,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40259",
      "url": "https://patchblox.com/security/cve/CVE-2025-40259",
      "title": "scsi: sg: Do not sleep in atomic context",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23001",
      "url": "https://patchblox.com/security/cve/CVE-2026-23001",
      "title": "kernel-64kb: macvlan: fix possible UAF in macvlan_forward_source() (bsc#1257232).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23010",
      "url": "https://patchblox.com/security/cve/CVE-2026-23010",
      "title": "kernel-64kb: ipv6: Fix use-after-free in inet6_addr_del() (bsc#1257332).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.002,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38322",
      "url": "https://patchblox.com/security/cve/CVE-2025-38322",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39689",
      "url": "https://patchblox.com/security/cve/CVE-2025-39689",
      "title": "ftrace: Also allocate and copy hash for reading of filter files",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39913",
      "url": "https://patchblox.com/security/cve/CVE-2025-39913",
      "title": "tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock-\u003Ecork.",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71089",
      "url": "https://patchblox.com/security/cve/CVE-2025-71089",
      "title": "iommu: disable SVA when CONFIG_X86 is set",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71112",
      "url": "https://patchblox.com/security/cve/CVE-2025-71112",
      "title": "net: hns3: add VLAN id validation before using",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00158,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68808",
      "url": "https://patchblox.com/security/cve/CVE-2025-68808",
      "title": "media: vidtv: initialize local pointers upon transfer of memory ownership",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40202",
      "url": "https://patchblox.com/security/cve/CVE-2025-40202",
      "title": "ipmi: Rework user message limit handling",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71147",
      "url": "https://patchblox.com/security/cve/CVE-2025-71147",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nKEYS: trusted: Fix a memory leak in tpm2_load_cmd...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.8,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71136",
      "url": "https://patchblox.com/security/cve/CVE-2025-71136",
      "title": "media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.0014,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71081",
      "url": "https://patchblox.com/security/cve/CVE-2025-71081",
      "title": "ASoC: stm32: sai: fix OF node leak on probe",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71078",
      "url": "https://patchblox.com/security/cve/CVE-2025-71078",
      "title": "powerpc/64s/slb: Fix SLB multihit issue during SLB preload",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00113,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-53149",
      "url": "https://patchblox.com/security/cve/CVE-2024-53149",
      "title": "kernel-syms: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 4.6,
      "epss": 0.00316,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-42103",
      "url": "https://patchblox.com/security/cve/CVE-2024-42103",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00249,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-53070",
      "url": "https://patchblox.com/security/cve/CVE-2024-53070",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00239,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-22999",
      "url": "https://patchblox.com/security/cve/CVE-2026-22999",
      "title": "kernel-64kb: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257236).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00235,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-22047",
      "url": "https://patchblox.com/security/cve/CVE-2025-22047",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68813",
      "url": "https://patchblox.com/security/cve/CVE-2025-68813",
      "title": "kernel-livepatch-SLE15-SP6_Update_10: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256644).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00207,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68804",
      "url": "https://patchblox.com/security/cve/CVE-2025-68804",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "epss": 0.00207,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-53714",
      "url": "https://patchblox.com/security/cve/CVE-2023-53714",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "Routine",
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37813",
      "url": "https://patchblox.com/security/cve/CVE-2025-37813",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.7,
      "epss": 0.002,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40097",
      "url": "https://patchblox.com/security/cve/CVE-2025-40097",
      "title": "ALSA: hda: Fix missing pointer check in hda_component_manager_init function",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38539",
      "url": "https://patchblox.com/security/cve/CVE-2025-38539",
      "title": "tracing: Add down_write(trace_event_sem) when adding trace event",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39829",
      "url": "https://patchblox.com/security/cve/CVE-2025-39829",
      "title": "trace/fgraph: Fix the warning caused by missing unregister notifier",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00189,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38243",
      "url": "https://patchblox.com/security/cve/CVE-2025-38243",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71083",
      "url": "https://patchblox.com/security/cve/CVE-2025-71083",
      "title": "drm/ttm: Avoid NULL pointer deref for evicted BOs",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39813",
      "url": "https://patchblox.com/security/cve/CVE-2025-39813",
      "title": "ftrace: Fix potential warning in trace_printk_seq during ftrace_dump",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71111",
      "url": "https://patchblox.com/security/cve/CVE-2025-71111",
      "title": "hwmon: (w83791d) Convert macros to functions to avoid TOCTOU",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.3,
      "epss": 0.00105,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T01:20:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}