# SUSE-SU-2026:1573-1: kernel-livepatch-SLE15-SP7-RT_Update_11 security update

SUSE-SU-2026:1573-1, released April 23, 2026, fixes 40 CVEs in kernel-livepatch-SLE15-SP7-RT_Update_11 (version 1-150700.1.3.1). None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2026-1573-1
- Platform: Linux
- Released: Apr 23, 2026
- Priority: High (Closes CVE-2026-23231, high severity)
- CVEs: 40, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:1573-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-livepatch-SLE15-SP7-RT_Update_11](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp7-rt-update-11.md) | sles 15.7 | 1-150700.1.3.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-23231](https://patchblox.com/security/data/cve/CVE-2026-23231.md) | High | netfilter: nf_tables: fix use-after-free in nf_tables_addchain() | 7.8 | 0.0105 |  |
| [CVE-2025-68794](https://patchblox.com/security/data/cve/CVE-2025-68794.md) | High | iomap: adjust read range correctly for non-block-aligned positions | 9.8 | 0.0069 |  |
| [CVE-2026-23242](https://patchblox.com/security/data/cve/CVE-2026-23242.md) | High | RDMA/siw: Fix potential NULL pointer dereference in header processing | 7.5 | 0.0063 |  |
| [CVE-2026-23193](https://patchblox.com/security/data/cve/CVE-2026-23193.md) | High | kernel-livepatch-SLE15-SP7-RT_Update_11: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (bsc#1258414). | 7.8 | 0.0036 |  |
| [CVE-2026-23136](https://patchblox.com/security/data/cve/CVE-2026-23136.md) | High | kernel-livepatch-SLE15-SP7-RT_Update_11: libceph: reset sparse-read state in osd_fault() (bsc#1258303). | 8.1 | 0.0025 |  |
| [CVE-2024-38542](https://patchblox.com/security/data/cve/CVE-2024-38542.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/mana_ib: boundary check before installing c... | 7.8 | 0.0025 |  |
| [CVE-2026-23030](https://patchblox.com/security/data/cve/CVE-2026-23030.md) | High | kernel-livepatch-SLE15-SP7-RT_Update_11: phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() (bsc#1257561). | n/a | 0.0024 |  |
| [CVE-2026-23278](https://patchblox.com/security/data/cve/CVE-2026-23278.md) | High | netfilter: nf_tables: always walk all pending catchall elements | 7.8 | 0.0023 |  |
| [CVE-2026-31788](https://patchblox.com/security/data/cve/CVE-2026-31788.md) | High | kernel-livepatch-SLE15-SP7-RT_Update_11: xen/privcmd: restrict usage in unprivileged domU (bsc#1259707). | 8.2 | 0.0019 |  |
| [CVE-2026-23274](https://patchblox.com/security/data/cve/CVE-2026-23274.md) | High | netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels | 7.8 | 0.0018 |  |
| [CVE-2026-23243](https://patchblox.com/security/data/cve/CVE-2026-23243.md) | High | RDMA/umad: Reject negative data_len in ib_umad_write | 7.8 | 0.0018 |  |
| [CVE-2026-23272](https://patchblox.com/security/data/cve/CVE-2026-23272.md) | High | netfilter: nf_tables: unconditionally bump set->nelems before insertion | 7.8 | 0.0018 |  |
| [CVE-2025-39998](https://patchblox.com/security/data/cve/CVE-2025-39998.md) | High | scsi: target: target_core_configfs: Add length check to avoid buffer overflow | 7.8 | 0.0018 |  |
| [CVE-2026-23361](https://patchblox.com/security/data/cve/CVE-2026-23361.md) | High | PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry | 7.8 | 0.0017 |  |
| [CVE-2026-23413](https://patchblox.com/security/data/cve/CVE-2026-23413.md) | High | kernel-uek64k-modules-deprecated: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0016 |  |
| [CVE-2026-23216](https://patchblox.com/security/data/cve/CVE-2026-23216.md) | High | scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() | 8.8 | 0.0014 |  |
| [CVE-2026-23317](https://patchblox.com/security/data/cve/CVE-2026-23317.md) | High | drm/vmwgfx: Return the correct value in vmw_translate_ptr functions | 7.8 | 0.0014 |  |
| [CVE-2026-23187](https://patchblox.com/security/data/cve/CVE-2026-23187.md) | High | kernel-livepatch-SLE15-SP7-RT_Update_11: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains (bsc#1258330). | 7.1 | 0.0014 |  |
| [CVE-2025-71231](https://patchblox.com/security/data/cve/CVE-2025-71231.md) | High | crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode | 8.4 | 0.0014 |  |
| [CVE-2026-23270](https://patchblox.com/security/data/cve/CVE-2026-23270.md) | High | kernel-livepatch-SLE15-SP7-RT_Update_11: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (bsc#1259886). | 8.1 | 0.0014 |  |
| [CVE-2026-23319](https://patchblox.com/security/data/cve/CVE-2026-23319.md) | High | bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim | 7.8 | 0.0014 |  |
| [CVE-2026-23293](https://patchblox.com/security/data/cve/CVE-2026-23293.md) | High | net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled | 7.5 | 0.0013 |  |
| [CVE-2026-23281](https://patchblox.com/security/data/cve/CVE-2026-23281.md) | High | wifi: libertas: fix use-after-free in lbs_free_adapter() | 7.8 | 0.0013 |  |
| [CVE-2026-23215](https://patchblox.com/security/data/cve/CVE-2026-23215.md) | High | x86/vmware: Fix hypercall clobbers | 8.4 | 0.0013 |  |
| [CVE-2026-23103](https://patchblox.com/security/data/cve/CVE-2026-23103.md) | High | kernel: kernel: ipvlan: Make the addrs_lock be per port | 8.8 | 0.0013 |  |
| [CVE-2026-23386](https://patchblox.com/security/data/cve/CVE-2026-23386.md) | High | gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL | 7.1 | 0.0012 |  |
| [CVE-2026-23414](https://patchblox.com/security/data/cve/CVE-2026-23414.md) | Routine | tls: Purge async_hold in tls_decrypt_async_wait() | 5.5 | 0.0037 |  |
| [CVE-2025-71268](https://patchblox.com/security/data/cve/CVE-2025-71268.md) | Routine | kernel-livepatch-SLE15-SP7-RT_Update_11: btrfs: fix reservation leak in some error paths when inserting inline extent (bsc#1259865). | 5.5 | 0.0033 |  |
| [CVE-2025-71269](https://patchblox.com/security/data/cve/CVE-2025-71269.md) | Routine | btrfs: do not free data reservation in fallback from inline due to -ENOSPC | 5.5 | 0.0023 |  |
| [CVE-2026-23047](https://patchblox.com/security/data/cve/CVE-2026-23047.md) | Routine | kernel-livepatch-SLE15-SP7-RT_Update_11: libceph: make calc_target() set t->paused, not just clear it (bsc#1257682). | 5.5 | 0.0019 |  |
| [CVE-2026-23259](https://patchblox.com/security/data/cve/CVE-2026-23259.md) | Routine | io_uring/rw: free potentially allocated iovec on cache put failure | 5.5 | 0.0017 |  |
| [CVE-2026-23140](https://patchblox.com/security/data/cve/CVE-2026-23140.md) | Routine | kernel-livepatch-SLE15-SP7-RT_Update_11: bpf, test_run: Subtract size of xdp_frame from allowed metadata size (bsc#1258305). | 5.5 | 0.0015 |  |
| [CVE-2026-23201](https://patchblox.com/security/data/cve/CVE-2026-23201.md) | Routine | cephfs: ceph: fix oops due to invalid pointer for kfree() in parse_longname() (bsc#1258337). | 5.5 | 0.0014 |  |
| [CVE-2026-23379](https://patchblox.com/security/data/cve/CVE-2026-23379.md) | Routine | kernel-livepatch-SLE15-SP7-RT_Update_11: net/sched: ets: fix divide by zero in the offload path (bsc#1260481). | 5.5 | 0.0013 |  |
| [CVE-2026-23398](https://patchblox.com/security/data/cve/CVE-2026-23398.md) | Routine | icmp: fix NULL pointer dereference in icmp_tag_validation() | 6.5 | 0.0013 |  |
| [CVE-2026-23277](https://patchblox.com/security/data/cve/CVE-2026-23277.md) | Routine | net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit | 5.9 | 0.0013 |  |
| [CVE-2026-23292](https://patchblox.com/security/data/cve/CVE-2026-23292.md) | Routine | scsi: target: Fix recursive locking in __configfs_open_file() | 5.5 | 0.0013 |  |
| [CVE-2026-23381](https://patchblox.com/security/data/cve/CVE-2026-23381.md) | Routine | net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled | 5.5 | 0.0013 |  |
| [CVE-2026-23255](https://patchblox.com/security/data/cve/CVE-2026-23255.md) | Routine | net: add proper RCU protection to /proc/net/ptype | 5.5 | 0.0012 |  |
| [CVE-2026-23120](https://patchblox.com/security/data/cve/CVE-2026-23120.md) | Routine | kernel-livepatch-SLE15-SP7-RT_Update_11: l2tp: avoid one data-race in l2tp_tunnel_del_work() (bsc#1258280). | 5.8 | 0.0011 |  |

---

Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.