{
  "fix": "SUSE-SU-2026:1573-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2026-1573-1",
  "summary": "SUSE-SU-2026:1573-1, released April 23, 2026, fixes 40 CVEs in kernel-livepatch-SLE15-SP7-RT_Update_11 (version 1-150700.1.3.1). None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "linux",
  "type": "advisory",
  "title": "kernel-livepatch-SLE15-SP7-RT_Update_11 security update",
  "released": "2026-04-23T15:52:40Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2026-23231, high severity",
  "supported": true,
  "cveCount": 40,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.01045,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2026:1573-1",
  "appliesTo": [
    {
      "product": "kernel-livepatch-SLE15-SP7-RT_Update_11",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-sle15-sp7-rt-update-11",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.1.3.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-23231",
      "url": "https://patchblox.com/security/cve/CVE-2026-23231",
      "title": "netfilter: nf_tables: fix use-after-free in nf_tables_addchain()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.01045,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68794",
      "url": "https://patchblox.com/security/cve/CVE-2025-68794",
      "title": "iomap: adjust read range correctly for non-block-aligned positions",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00686,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23242",
      "url": "https://patchblox.com/security/cve/CVE-2026-23242",
      "title": "RDMA/siw: Fix potential NULL pointer dereference in header processing",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00628,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23193",
      "url": "https://patchblox.com/security/cve/CVE-2026-23193",
      "title": "kernel-livepatch-SLE15-SP7-RT_Update_11: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (bsc#1258414).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00358,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23136",
      "url": "https://patchblox.com/security/cve/CVE-2026-23136",
      "title": "kernel-livepatch-SLE15-SP7-RT_Update_11: libceph: reset sparse-read state in osd_fault() (bsc#1258303).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00254,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-38542",
      "url": "https://patchblox.com/security/cve/CVE-2024-38542",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/mana_ib: boundary check before installing c...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00247,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23030",
      "url": "https://patchblox.com/security/cve/CVE-2026-23030",
      "title": "kernel-livepatch-SLE15-SP7-RT_Update_11: phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() (bsc#1257561).",
      "priority": "High",
      "severity": "IMPORTANT",
      "epss": 0.00243,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23278",
      "url": "https://patchblox.com/security/cve/CVE-2026-23278",
      "title": "netfilter: nf_tables: always walk all pending catchall elements",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00225,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31788",
      "url": "https://patchblox.com/security/cve/CVE-2026-31788",
      "title": "kernel-livepatch-SLE15-SP7-RT_Update_11: xen/privcmd: restrict usage in unprivileged domU (bsc#1259707).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.2,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23274",
      "url": "https://patchblox.com/security/cve/CVE-2026-23274",
      "title": "netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23243",
      "url": "https://patchblox.com/security/cve/CVE-2026-23243",
      "title": "RDMA/umad: Reject negative data_len in ib_umad_write",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23272",
      "url": "https://patchblox.com/security/cve/CVE-2026-23272",
      "title": "netfilter: nf_tables: unconditionally bump set-\u003Enelems before insertion",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39998",
      "url": "https://patchblox.com/security/cve/CVE-2025-39998",
      "title": "scsi: target: target_core_configfs: Add length check to avoid buffer overflow",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23361",
      "url": "https://patchblox.com/security/cve/CVE-2026-23361",
      "title": "PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0017,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23413",
      "url": "https://patchblox.com/security/cve/CVE-2026-23413",
      "title": "kernel-uek64k-modules-deprecated: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00161,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23216",
      "url": "https://patchblox.com/security/cve/CVE-2026-23216",
      "title": "scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23317",
      "url": "https://patchblox.com/security/cve/CVE-2026-23317",
      "title": "drm/vmwgfx: Return the correct value in vmw_translate_ptr functions",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23187",
      "url": "https://patchblox.com/security/cve/CVE-2026-23187",
      "title": "kernel-livepatch-SLE15-SP7-RT_Update_11: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc-\u003Edomains (bsc#1258330).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71231",
      "url": "https://patchblox.com/security/cve/CVE-2025-71231",
      "title": "crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.4,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23270",
      "url": "https://patchblox.com/security/cve/CVE-2026-23270",
      "title": "kernel-livepatch-SLE15-SP7-RT_Update_11: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (bsc#1259886).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23319",
      "url": "https://patchblox.com/security/cve/CVE-2026-23319",
      "title": "bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23293",
      "url": "https://patchblox.com/security/cve/CVE-2026-23293",
      "title": "net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23281",
      "url": "https://patchblox.com/security/cve/CVE-2026-23281",
      "title": "wifi: libertas: fix use-after-free in lbs_free_adapter()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23215",
      "url": "https://patchblox.com/security/cve/CVE-2026-23215",
      "title": "x86/vmware: Fix hypercall clobbers",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.4,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23103",
      "url": "https://patchblox.com/security/cve/CVE-2026-23103",
      "title": "kernel: kernel: ipvlan: Make the addrs_lock be per port",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23386",
      "url": "https://patchblox.com/security/cve/CVE-2026-23386",
      "title": "gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23414",
      "url": "https://patchblox.com/security/cve/CVE-2026-23414",
      "title": "tls: Purge async_hold in tls_decrypt_async_wait()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0037,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71268",
      "url": "https://patchblox.com/security/cve/CVE-2025-71268",
      "title": "kernel-livepatch-SLE15-SP7-RT_Update_11: btrfs: fix reservation leak in some error paths when inserting inline extent (bsc#1259865).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00326,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71269",
      "url": "https://patchblox.com/security/cve/CVE-2025-71269",
      "title": "btrfs: do not free data reservation in fallback from inline due to -ENOSPC",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23047",
      "url": "https://patchblox.com/security/cve/CVE-2026-23047",
      "title": "kernel-livepatch-SLE15-SP7-RT_Update_11: libceph: make calc_target() set t-\u003Epaused, not just clear it (bsc#1257682).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23259",
      "url": "https://patchblox.com/security/cve/CVE-2026-23259",
      "title": "io_uring/rw: free potentially allocated iovec on cache put failure",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23140",
      "url": "https://patchblox.com/security/cve/CVE-2026-23140",
      "title": "kernel-livepatch-SLE15-SP7-RT_Update_11: bpf, test_run: Subtract size of xdp_frame from allowed metadata size (bsc#1258305).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00146,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23201",
      "url": "https://patchblox.com/security/cve/CVE-2026-23201",
      "title": "cephfs: ceph: fix oops due to invalid pointer for kfree() in parse_longname() (bsc#1258337).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23379",
      "url": "https://patchblox.com/security/cve/CVE-2026-23379",
      "title": "kernel-livepatch-SLE15-SP7-RT_Update_11: net/sched: ets: fix divide by zero in the offload path (bsc#1260481).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23398",
      "url": "https://patchblox.com/security/cve/CVE-2026-23398",
      "title": "icmp: fix NULL pointer dereference in icmp_tag_validation()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23277",
      "url": "https://patchblox.com/security/cve/CVE-2026-23277",
      "title": "net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.9,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23292",
      "url": "https://patchblox.com/security/cve/CVE-2026-23292",
      "title": "scsi: target: Fix recursive locking in __configfs_open_file()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23381",
      "url": "https://patchblox.com/security/cve/CVE-2026-23381",
      "title": "net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23255",
      "url": "https://patchblox.com/security/cve/CVE-2026-23255",
      "title": "net: add proper RCU protection to /proc/net/ptype",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23120",
      "url": "https://patchblox.com/security/cve/CVE-2026-23120",
      "title": "kernel-livepatch-SLE15-SP7-RT_Update_11: l2tp: avoid one data-race in l2tp_tunnel_del_work() (bsc#1258280).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.8,
      "epss": 0.00107,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T01:43:54Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}