# SUSE-SU-2026:1081-1: Security update for 10 packages

SUSE-SU-2026:1081-1, released March 26, 2026, fixes 155 CVEs across 10 products. One of them is being exploited (CVE-2025-39964); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2026-1081-1
- Platform: Linux
- Released: Mar 26, 2026
- Priority: Patch now (Closes CVE-2025-39964, exploited (CISA KEV))
- CVEs: 155, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:1081-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | sles 15.7 | 6.4.0-150700.53.34.1 |
| [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | sles 15.7 | 6.4.0-150700.53.34.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 15.7 | 6.4.0-150700.53.34.1 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 15.7 | 6.4.0-150700.53.34.1.150700.17.23.1 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 15.7 | 6.4.0-150700.53.34.1 |
| [kernel-livepatch-SLE15-SP7_Update_10](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp7-update-10.md) | sles 15.7 | 1-150700.15.3.1 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | sles 15.7 | 6.4.0-150700.53.34.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 15.7 | 6.4.0-150700.53.34.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 15.7 | 6.4.0-150700.53.34.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | sles 15.7 | 6.4.0-150700.53.34.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-39964](https://patchblox.com/security/data/cve/CVE-2025-39964.md) | Patch now | crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg | 8.8 | 0.0161 | CISA KEV |
| [CVE-2026-23111](https://patchblox.com/security/data/cve/CVE-2026-23111.md) | High | kernel-64kb: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258181). | 7.8 | 0.0113 |  |
| [CVE-2026-22998](https://patchblox.com/security/data/cve/CVE-2026-22998.md) | High | kernel-64kb: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (bsc#1257209). | 7.5 | 0.0078 |  |
| [CVE-2026-23003](https://patchblox.com/security/data/cve/CVE-2026-23003.md) | High | kernel-64kb: geneve: Fix incorrect inner network header offset when innerprotoinherit is set (bsc#1257246). | 8.8 | 0.0055 |  |
| [CVE-2023-53817](https://patchblox.com/security/data/cve/CVE-2023-53817.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: lib/mpi - avoid null pointer deref in mp... | 7.5 | 0.0054 |  |
| [CVE-2025-68283](https://patchblox.com/security/data/cve/CVE-2025-68283.md) | High | libceph: replace BUG_ON with bounds check for map->max_osd | 7.5 | 0.0053 |  |
| [CVE-2026-23112](https://patchblox.com/security/data/cve/CVE-2026-23112.md) | High | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0048 |  |
| [CVE-2025-40099](https://patchblox.com/security/data/cve/CVE-2025-40099.md) | High | cifs: parse_dfs_referrals: prevent oob on malformed input | 9.4 | 0.0041 |  |
| [CVE-2026-23139](https://patchblox.com/security/data/cve/CVE-2026-23139.md) | High | kernel-64kb: netfilter: nf_conncount: update last_gc only when GC has been performed (bsc#1258304). | 7.6 | 0.0039 |  |
| [CVE-2025-71236](https://patchblox.com/security/data/cve/CVE-2025-71236.md) | High | scsi: qla2xxx: Validate sp before freeing associated memory | 7.8 | 0.0038 |  |
| [CVE-2025-37861](https://patchblox.com/security/data/cve/CVE-2025-37861.md) | High | scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue | 7.8 | 0.0033 |  |
| [CVE-2025-40253](https://patchblox.com/security/data/cve/CVE-2025-40253.md) | High | s390/ctcm: Fix double-kfree | 8.8 | 0.0032 |  |
| [CVE-2025-71197](https://patchblox.com/security/data/cve/CVE-2025-71197.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0026 |  |
| [CVE-2025-71234](https://patchblox.com/security/data/cve/CVE-2025-71234.md) | High | wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add | 7.8 | 0.0024 |  |
| [CVE-2025-68735](https://patchblox.com/security/data/cve/CVE-2025-68735.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/panthor: Prevent potential UAF in group crea... | 7.8 | 0.0021 |  |
| [CVE-2026-23056](https://patchblox.com/security/data/cve/CVE-2026-23056.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2026-23054](https://patchblox.com/security/data/cve/CVE-2026-23054.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0021 |  |
| [CVE-2026-23049](https://patchblox.com/security/data/cve/CVE-2026-23049.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2026-23176](https://patchblox.com/security/data/cve/CVE-2026-23176.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2026-23182](https://patchblox.com/security/data/cve/CVE-2026-23182.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2025-40103](https://patchblox.com/security/data/cve/CVE-2025-40103.md) | High | smb: client: Fix refcount leak for cifs_sb_tlink | 7.1 | 0.0021 |  |
| [CVE-2026-23172](https://patchblox.com/security/data/cve/CVE-2026-23172.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0020 |  |
| [CVE-2026-23010](https://patchblox.com/security/data/cve/CVE-2026-23010.md) | High | kernel-64kb: ipv6: Fix use-after-free in inet6_addr_del() (bsc#1257332). | 7.8 | 0.0020 |  |
| [CVE-2026-23178](https://patchblox.com/security/data/cve/CVE-2026-23178.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0019 |  |
| [CVE-2026-23074](https://patchblox.com/security/data/cve/CVE-2026-23074.md) | High | kernel-64kb: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749). | 7.8 | 0.0019 |  |
| [CVE-2026-23073](https://patchblox.com/security/data/cve/CVE-2026-23073.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2026-23208](https://patchblox.com/security/data/cve/CVE-2026-23208.md) | High | kernel-64kb: ALSA: usb-audio: Prevent excessive number of frames (bsc#1258468). | 7.8 | 0.0018 |  |
| [CVE-2026-23076](https://patchblox.com/security/data/cve/CVE-2026-23076.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0018 |  |
| [CVE-2026-23213](https://patchblox.com/security/data/cve/CVE-2026-23213.md) | High | drm/amd/pm: Disable MMIO access during SMU Mode 1 reset | 8.4 | 0.0018 |  |
| [CVE-2026-23214](https://patchblox.com/security/data/cve/CVE-2026-23214.md) | High | btrfs: reject new transactions if the fs is fully read-only | 8.4 | 0.0018 |  |
| [CVE-2025-71066](https://patchblox.com/security/data/cve/CVE-2025-71066.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net/sched: ets: Always remove class from active... | 7.8 | 0.0017 |  |
| [CVE-2026-23209](https://patchblox.com/security/data/cve/CVE-2026-23209.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2026-23099](https://patchblox.com/security/data/cve/CVE-2026-23099.md) | High | kernel-64kb: bonding: limit BOND_MODE_8023AD to Ethernet devices (bsc#1257816). | 7.1 | 0.0017 |  |
| [CVE-2026-23078](https://patchblox.com/security/data/cve/CVE-2026-23078.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2026-23171](https://patchblox.com/security/data/cve/CVE-2026-23171.md) | High | kernel-64kb: net: bonding: update the slave array for broadcast mode (bsc#1258349). | 7.8 | 0.0017 |  |
| [CVE-2025-39817](https://patchblox.com/security/data/cve/CVE-2025-39817.md) | High | efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare | 7.6 | 0.0017 |  |
| [CVE-2026-23089](https://patchblox.com/security/data/cve/CVE-2026-23089.md) | High | kernel-64kb: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (bsc#1257790). | 7.8 | 0.0016 |  |
| [CVE-2025-68785](https://patchblox.com/security/data/cve/CVE-2025-68785.md) | High | net: openvswitch: fix middle attribute validation in push_nsh() action | 7.1 | 0.0016 |  |
| [CVE-2026-23083](https://patchblox.com/security/data/cve/CVE-2026-23083.md) | High | kernel-64kb: fou: Don't allow 0 for FOU_ATTR_IPPROTO (bsc#1257745). | 7.8 | 0.0016 |  |
| [CVE-2026-23204](https://patchblox.com/security/data/cve/CVE-2026-23204.md) | High | kernel-64kb: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1258340). | 8.1 | 0.0016 |  |
| [CVE-2026-23004](https://patchblox.com/security/data/cve/CVE-2026-23004.md) | High | kernel-64kb: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231). | 7.0 | 0.0016 |  |
| [CVE-2026-23068](https://patchblox.com/security/data/cve/CVE-2026-23068.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2025-40201](https://patchblox.com/security/data/cve/CVE-2025-40201.md) | High | kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths | 7.8 | 0.0015 |  |
| [CVE-2025-71113](https://patchblox.com/security/data/cve/CVE-2025-71113.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - zero initialize memory allocated... | 7.8 | 0.0015 |  |
| [CVE-2025-71071](https://patchblox.com/security/data/cve/CVE-2025-71071.md) | High | kernel-64kb: iommu/mediatek: fix use-after-free on probe deferral (bsc#1256802). | 7.8 | 0.0015 |  |
| [CVE-2025-68810](https://patchblox.com/security/data/cve/CVE-2025-68810.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an... | 7.8 | 0.0015 |  |
| [CVE-2026-23268](https://patchblox.com/security/data/cve/CVE-2026-23268.md) | High | apparmor: fix unprivileged local user can do privileged policy management | 7.8 | 0.0015 |  |
| [CVE-2026-23082](https://patchblox.com/security/data/cve/CVE-2026-23082.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0015 |  |
| [CVE-2026-23105](https://patchblox.com/security/data/cve/CVE-2026-23105.md) | High | kernel-64kb: net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (bsc#1257775). | 8.8 | 0.0015 |  |
| [CVE-2025-68736](https://patchblox.com/security/data/cve/CVE-2025-68736.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  landlock: Fix handling of disconnected directori... | 8.8 | 0.0014 |  |
| [CVE-2026-23156](https://patchblox.com/security/data/cve/CVE-2026-23156.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 |  |
| [CVE-2026-22979](https://patchblox.com/security/data/cve/CVE-2026-22979.md) | High | kernel-64kb: net: fix memory leak in skb_segment_list for GRO packets (bsc#1257228). | 7.8 | 0.0014 |  |
| [CVE-2026-23221](https://patchblox.com/security/data/cve/CVE-2026-23221.md) | High | bus: fsl-mc: fix use-after-free in driver_override_show() | 7.8 | 0.0014 |  |
| [CVE-2026-23102](https://patchblox.com/security/data/cve/CVE-2026-23102.md) | High | kernel-64kb: arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state (bsc#1257772). | 7.1 | 0.0014 |  |
| [CVE-2026-23269](https://patchblox.com/security/data/cve/CVE-2026-23269.md) | High | apparmor: validate DFA start states are in bounds in unpack_pdb | 7.1 | 0.0014 |  |
| [CVE-2025-71229](https://patchblox.com/security/data/cve/CVE-2025-71229.md) | High | wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() | 8.4 | 0.0014 |  |
| [CVE-2025-71231](https://patchblox.com/security/data/cve/CVE-2025-71231.md) | High | crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode | 8.4 | 0.0014 |  |
| [CVE-2025-71192](https://patchblox.com/security/data/cve/CVE-2025-71192.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: ac97: fix a double free in snd_ac97_contro... | 7.0 | 0.0014 |  |
| [CVE-2026-23191](https://patchblox.com/security/data/cve/CVE-2026-23191.md) | High | kernel-64kb: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258395). | 7.3 | 0.0013 |  |
| [CVE-2026-23110](https://patchblox.com/security/data/cve/CVE-2026-23110.md) | High | kernel-64k: kernel: scsi: core: Wake up the error handler when final completions race against each other | 7.8 | 0.0011 |  |
| [CVE-2026-23210](https://patchblox.com/security/data/cve/CVE-2026-23210.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.5 | 0.0010 |  |
| [CVE-2026-23095](https://patchblox.com/security/data/cve/CVE-2026-23095.md) | Routine | kernel-64kb: gue: Fix skb memleak with inner IP protocol 0 (bsc#1257808). | 5.5 | 0.0031 |  |
| [CVE-2026-23038](https://patchblox.com/security/data/cve/CVE-2026-23038.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2025-71126](https://patchblox.com/security/data/cve/CVE-2025-71126.md) | Routine | kernel-64kb: mptcp: reset fallback status gracefully at disconnect() time (bsc#1256755). | 5.5 | 0.0027 |  |
| [CVE-2026-23037](https://patchblox.com/security/data/cve/CVE-2026-23037.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0024 |  |
| [CVE-2026-23035](https://patchblox.com/security/data/cve/CVE-2026-23035.md) | Routine | kernel-64kb: net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (bsc#1257559). | 5.1 | 0.0024 |  |
| [CVE-2026-23033](https://patchblox.com/security/data/cve/CVE-2026-23033.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0023 |  |
| [CVE-2025-71185](https://patchblox.com/security/data/cve/CVE-2025-71185.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-71190](https://patchblox.com/security/data/cve/CVE-2025-71190.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-71191](https://patchblox.com/security/data/cve/CVE-2025-71191.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-68374](https://patchblox.com/security/data/cve/CVE-2025-68374.md) | Routine | kernel-64kb: md: fix rcu protection in md_wakeup_thread (bsc#1255530). | 5.5 | 0.0021 |  |
| [CVE-2026-23026](https://patchblox.com/security/data/cve/CVE-2026-23026.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-68295](https://patchblox.com/security/data/cve/CVE-2025-68295.md) | Routine | smb: client: fix memory leak in cifs_construct_tcon() | 5.5 | 0.0021 |  |
| [CVE-2026-23058](https://patchblox.com/security/data/cve/CVE-2026-23058.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-71224](https://patchblox.com/security/data/cve/CVE-2025-71224.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 3.3 | 0.0021 |  |
| [CVE-2025-71196](https://patchblox.com/security/data/cve/CVE-2025-71196.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2025-71199](https://patchblox.com/security/data/cve/CVE-2025-71199.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2025-71188](https://patchblox.com/security/data/cve/CVE-2025-71188.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-71189](https://patchblox.com/security/data/cve/CVE-2025-71189.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2026-23021](https://patchblox.com/security/data/cve/CVE-2026-23021.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-68778](https://patchblox.com/security/data/cve/CVE-2025-68778.md) | Routine | btrfs: don't log conflicting inode if it's a dir moved in the current transaction | 6.1 | 0.0020 |  |
| [CVE-2026-23017](https://patchblox.com/security/data/cve/CVE-2026-23017.md) | Routine | kernel-64kb: idpf: fix error handling in the init_task on load (bsc#1257552). | 5.5 | 0.0020 |  |
| [CVE-2026-23053](https://patchblox.com/security/data/cve/CVE-2026-23053.md) | Routine | kernel-64kb: NFS: Fix a deadlock involving nfs_release_folio() (bsc#1257718). | 5.3 | 0.0020 |  |
| [CVE-2025-71195](https://patchblox.com/security/data/cve/CVE-2025-71195.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 |  |
| [CVE-2025-71198](https://patchblox.com/security/data/cve/CVE-2025-71198.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 |  |
| [CVE-2026-23179](https://patchblox.com/security/data/cve/CVE-2026-23179.md) | Routine | kernel-64kb: nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() (bsc#1258394). | 6.5 | 0.0020 |  |
| [CVE-2026-23057](https://patchblox.com/security/data/cve/CVE-2026-23057.md) | Routine | kernel-64kb: vsock/virtio: Coalesce only linear skb (bsc#1257740). | 5.5 | 0.0020 |  |
| [CVE-2025-71232](https://patchblox.com/security/data/cve/CVE-2025-71232.md) | Routine | scsi: qla2xxx: Free sp in error path to fix system crash | 5.5 | 0.0018 |  |
| [CVE-2026-23154](https://patchblox.com/security/data/cve/CVE-2026-23154.md) | Routine | kernel-64kb: net: fix segmentation of forwarding fraglist GRO (bsc#1258286). | 5.5 | 0.0018 |  |
| [CVE-2026-23069](https://patchblox.com/security/data/cve/CVE-2026-23069.md) | Routine | kernel-64kb: vsock/virtio: fix potential underflow in virtio_transport_get_credit() (bsc#1257755). | 5.5 | 0.0018 |  |
| [CVE-2026-23060](https://patchblox.com/security/data/cve/CVE-2026-23060.md) | Routine | kernel-64kb: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735). | 6.5 | 0.0018 |  |
| [CVE-2026-23023](https://patchblox.com/security/data/cve/CVE-2026-23023.md) | Routine | kernel-64kb: idpf: fix memory leak in idpf_vport_rel() (bsc#1257556). | 5.5 | 0.0018 |  |
| [CVE-2025-71194](https://patchblox.com/security/data/cve/CVE-2025-71194.md) | Routine | bpftool: In the Linux kernel, the following vulnerability has been resolved | 5.5 | 0.0018 |  |
| [CVE-2026-23061](https://patchblox.com/security/data/cve/CVE-2026-23061.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2026-23128](https://patchblox.com/security/data/cve/CVE-2026-23128.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2025-39748](https://patchblox.com/security/data/cve/CVE-2025-39748.md) | Routine | bpf: Forget ranges when refining tnum after JSET | 5.5 | 0.0017 |  |
| [CVE-2026-23086](https://patchblox.com/security/data/cve/CVE-2026-23086.md) | Routine | kernel-64kb: vsock/virtio: cap TX credit to local buffer size (bsc#1257757). | 6.2 | 0.0017 |  |
| [CVE-2025-71125](https://patchblox.com/security/data/cve/CVE-2025-71125.md) | Routine | tracing: Do not register unsupported perf events | 5.5 | 0.0016 |  |
| [CVE-2025-71222](https://patchblox.com/security/data/cve/CVE-2025-71222.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2026-23108](https://patchblox.com/security/data/cve/CVE-2026-23108.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2026-23107](https://patchblox.com/security/data/cve/CVE-2026-23107.md) | Routine | kernel-64kb: arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA (bsc#1257762). | 6.2 | 0.0015 |  |
| [CVE-2026-23084](https://patchblox.com/security/data/cve/CVE-2026-23084.md) | Routine | kernel-64kb: be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list (bsc#1257830). | 5.5 | 0.0015 |  |
| [CVE-2026-23198](https://patchblox.com/security/data/cve/CVE-2026-23198.md) | Routine | kernel-64kb: KVM: Don't clobber irqfd routing type when deassigning irqfd (bsc#1258321). | 5.5 | 0.0015 |  |
| [CVE-2026-23222](https://patchblox.com/security/data/cve/CVE-2026-23222.md) | Routine | crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly | 5.5 | 0.0015 |  |
| [CVE-2026-23113](https://patchblox.com/security/data/cve/CVE-2026-23113.md) | Routine | kernel-64kb: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278). | 5.5 | 0.0015 |  |
| [CVE-2026-23063](https://patchblox.com/security/data/cve/CVE-2026-23063.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2026-23064](https://patchblox.com/security/data/cve/CVE-2026-23064.md) | Routine | kernel-64kb: net/sched: act_ife: avoid possible NULL deref (bsc#1257765). | 5.5 | 0.0015 |  |
| [CVE-2026-23080](https://patchblox.com/security/data/cve/CVE-2026-23080.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2026-23085](https://patchblox.com/security/data/cve/CVE-2026-23085.md) | Routine | kernel-64kb: irqchip/gic-v3-its: Avoid truncating memory addresses (bsc#1257758). | 5.5 | 0.0015 |  |
| [CVE-2026-23090](https://patchblox.com/security/data/cve/CVE-2026-23090.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2026-23091](https://patchblox.com/security/data/cve/CVE-2026-23091.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2026-23133](https://patchblox.com/security/data/cve/CVE-2026-23133.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2026-23141](https://patchblox.com/security/data/cve/CVE-2026-23141.md) | Routine | kernel-64kb: btrfs: send: check for inline extents in range_is_hole_in_parent() (bsc#1258377). | 5.5 | 0.0015 |  |
| [CVE-2026-23145](https://patchblox.com/security/data/cve/CVE-2026-23145.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2026-23135](https://patchblox.com/security/data/cve/CVE-2026-23135.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0015 |  |
| [CVE-2026-23062](https://patchblox.com/security/data/cve/CVE-2026-23062.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2026-23088](https://patchblox.com/security/data/cve/CVE-2026-23088.md) | Routine | kernel-64kb: tracing: Fix crash on synthetic stacktrace field usage (bsc#1257814). | 5.5 | 0.0015 |  |
| [CVE-2026-23065](https://patchblox.com/security/data/cve/CVE-2026-23065.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2026-23070](https://patchblox.com/security/data/cve/CVE-2026-23070.md) | Routine | kernel-64kb: Octeontx2-af: Add proper checks for fwdata (bsc#1257709). | 5.5 | 0.0015 |  |
| [CVE-2025-71235](https://patchblox.com/security/data/cve/CVE-2025-71235.md) | Routine | scsi: qla2xxx: Delay module unload while fabric scan in progress | 5.5 | 0.0014 |  |
| [CVE-2026-23169](https://patchblox.com/security/data/cve/CVE-2026-23169.md) | Routine | kernel-64kb: mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() (bsc#1258389). | 5.6 | 0.0014 |  |
| [CVE-2026-22982](https://patchblox.com/security/data/cve/CVE-2026-22982.md) | Routine | kernel-64kb: net: mscc: ocelot: Fix crash when adding interface under a lag (bsc#1257179). | 5.5 | 0.0014 |  |
| [CVE-2026-23229](https://patchblox.com/security/data/cve/CVE-2026-23229.md) | Routine | crypto: virtio - Add spinlock protection with virtqueue notification | 5.5 | 0.0014 |  |
| [CVE-2025-71184](https://patchblox.com/security/data/cve/CVE-2025-71184.md) | Routine | bpftool6.12: In the Linux kernel, the following vulnerability has been resolved | 5.5 | 0.0014 |  |
| [CVE-2026-23129](https://patchblox.com/security/data/cve/CVE-2026-23129.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.6 | 0.0014 |  |
| [CVE-2026-23071](https://patchblox.com/security/data/cve/CVE-2026-23071.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-23151](https://patchblox.com/security/data/cve/CVE-2026-23151.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0014 |  |
| [CVE-2025-71182](https://patchblox.com/security/data/cve/CVE-2025-71182.md) | Routine | bpftool6.12: In the Linux kernel, the following vulnerability has been resolved | 5.5 | 0.0014 |  |
| [CVE-2026-23096](https://patchblox.com/security/data/cve/CVE-2026-23096.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-23119](https://patchblox.com/security/data/cve/CVE-2026-23119.md) | Routine | kernel-64kb: bonding: provide a net pointer to __skb_flow_dissect() (bsc#1258273). | 5.5 | 0.0014 |  |
| [CVE-2026-23125](https://patchblox.com/security/data/cve/CVE-2026-23125.md) | Routine | kernel-64kb: sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT (bsc#1258293). | 5.5 | 0.0014 |  |
| [CVE-2026-23150](https://patchblox.com/security/data/cve/CVE-2026-23150.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-23155](https://patchblox.com/security/data/cve/CVE-2026-23155.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-23157](https://patchblox.com/security/data/cve/CVE-2026-23157.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-23163](https://patchblox.com/security/data/cve/CVE-2026-23163.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-23170](https://patchblox.com/security/data/cve/CVE-2026-23170.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-23173](https://patchblox.com/security/data/cve/CVE-2026-23173.md) | Routine | kernel-64kb: net/mlx5e: TC, delete flows only for existing peers (bsc#1258520). | 5.5 | 0.0014 |  |
| [CVE-2026-23190](https://patchblox.com/security/data/cve/CVE-2026-23190.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2025-71200](https://patchblox.com/security/data/cve/CVE-2025-71200.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-23094](https://patchblox.com/security/data/cve/CVE-2026-23094.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-23116](https://patchblox.com/security/data/cve/CVE-2026-23116.md) | Routine | kernel-64kb: pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu (bsc#1258277). | 5.5 | 0.0014 |  |
| [CVE-2026-23131](https://patchblox.com/security/data/cve/CVE-2026-23131.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-23166](https://patchblox.com/security/data/cve/CVE-2026-23166.md) | Routine | kernel-64kb: ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (bsc#1258272). | 6.2 | 0.0014 |  |
| [CVE-2026-22989](https://patchblox.com/security/data/cve/CVE-2026-22989.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-23104](https://patchblox.com/security/data/cve/CVE-2026-23104.md) | Routine | kernel-64kb: ice: fix devlink reload call trace (bsc#1257763). | 5.5 | 0.0014 |  |
| [CVE-2026-23207](https://patchblox.com/security/data/cve/CVE-2026-23207.md) | Routine | spi: tegra210-quad: Protect curr_xfer check in IRQ handler | 5.5 | 0.0013 |  |
| [CVE-2025-71148](https://patchblox.com/security/data/cve/CVE-2025-71148.md) | Routine | bpftool6.12: In the Linux kernel, the following vulnerability has been resolved | 5.5 | 0.0013 |  |
| [CVE-2026-23146](https://patchblox.com/security/data/cve/CVE-2026-23146.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2025-71225](https://patchblox.com/security/data/cve/CVE-2025-71225.md) | Routine | md: suspend array while updating raid_disks via sysfs | 5.3 | 0.0013 |  |
| [CVE-2026-23152](https://patchblox.com/security/data/cve/CVE-2026-23152.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2025-71104](https://patchblox.com/security/data/cve/CVE-2025-71104.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-23101](https://patchblox.com/security/data/cve/CVE-2026-23101.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0011 |  |
| [CVE-2026-23121](https://patchblox.com/security/data/cve/CVE-2026-23121.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-23202](https://patchblox.com/security/data/cve/CVE-2026-23202.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0010 |  |
| [CVE-2026-23167](https://patchblox.com/security/data/cve/CVE-2026-23167.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0010 |  |

---

Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.