# SUSE-SU-2026:20599-1: Security update for 10 packages

SUSE-SU-2026:20599-1, released February 27, 2026, fixes 205 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2026-20599-1
- Platform: Linux
- Released: Feb 27, 2026
- Priority: Urgent (Closes CVE-2025-68359, rated Critical)
- CVEs: 205, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:20599-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | sles 16.0 | 6.12.0-160000.26.1 |
| [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | sles 16.0 | 6.12.0-160000.26.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 16.0 | 6.12.0-160000.26.1 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 16.0 | 6.12.0-160000.26.1.160000.2.7 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 16.0 | 6.12.0-160000.26.1 |
| [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | sles 16.0 | 6.12.0-160000.26.1 |
| [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | sles 16.0 | 6.12.0-160000.26.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 16.0 | 6.12.0-160000.26.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 16.0 | 6.12.0-160000.26.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | sles 16.0 | 6.12.0-160000.26.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-68359](https://patchblox.com/security/data/cve/CVE-2025-68359.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: fix double free of qgroup record after fa... | 9.8 | 0.0063 |  |
| [CVE-2025-68811](https://patchblox.com/security/data/cve/CVE-2025-68811.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  svcrdma: use rc_pageoff for memcpy byte offset... | 9.8 | 0.0053 |  |
| [CVE-2025-68341](https://patchblox.com/security/data/cve/CVE-2025-68341.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  veth: reduce XDP no_direct return section to fix... | 9.8 | 0.0044 |  |
| [CVE-2025-68741](https://patchblox.com/security/data/cve/CVE-2025-68741.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: qla2xxx: Fix improper freeing of purex ite... | 9.8 | 0.0043 |  |
| [CVE-2025-71064](https://patchblox.com/security/data/cve/CVE-2025-71064.md) | Urgent | net: hns3: using the num_tqps in the vf driver to apply for resources | 9.8 | 0.0023 |  |
| [CVE-2025-68814](https://patchblox.com/security/data/cve/CVE-2025-68814.md) | Urgent | io_uring: fix filename leak in __io_openat_prep() | 9.8 | 0.0022 |  |
| [CVE-2025-68822](https://patchblox.com/security/data/cve/CVE-2025-68822.md) | Urgent | Input: alps - fix use-after-free bugs caused by dev3_register_work | 9.8 | 0.0018 |  |
| [CVE-2025-71073](https://patchblox.com/security/data/cve/CVE-2025-71073.md) | Urgent | Input: lkkbd - disable pending work before freeing device | 9.8 | 0.0018 |  |
| [CVE-2025-68819](https://patchblox.com/security/data/cve/CVE-2025-68819.md) | Urgent | media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() | 9.8 | 0.0016 |  |
| [CVE-2025-71098](https://patchblox.com/security/data/cve/CVE-2025-71098.md) | Urgent | ip6_gre: make ip6gre_header() robust | 9.8 | 0.0014 |  |
| [CVE-2025-68789](https://patchblox.com/security/data/cve/CVE-2025-68789.md) | Urgent | hwmon: (ibmpex) fix use-after-free in high/low store | 9.8 | n/a |  |
| [CVE-2025-68349](https://patchblox.com/security/data/cve/CVE-2025-68349.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_m... | 7.5 | 0.0071 |  |
| [CVE-2025-40261](https://patchblox.com/security/data/cve/CVE-2025-40261.md) | High | nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() | 9.8 | 0.0060 |  |
| [CVE-2025-68261](https://patchblox.com/security/data/cve/CVE-2025-68261.md) | High | ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() | 7.5 | 0.0055 |  |
| [CVE-2025-68337](https://patchblox.com/security/data/cve/CVE-2025-68337.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  jbd2: avoid bug_on in jbd2_journal_get_create_ac... | 7.5 | 0.0055 |  |
| [CVE-2025-68775](https://patchblox.com/security/data/cve/CVE-2025-68775.md) | High | net/handshake: duplicate handshake cancellations leak socket | 9.8 | 0.0055 |  |
| [CVE-2025-68360](https://patchblox.com/security/data/cve/CVE-2025-68360.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: mt76: wed: use proper wed reference in mt7... | 8.2 | 0.0054 |  |
| [CVE-2025-71120](https://patchblox.com/security/data/cve/CVE-2025-71120.md) | High | SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf | 7.5 | 0.0053 |  |
| [CVE-2025-68218](https://patchblox.com/security/data/cve/CVE-2025-68218.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  nvme-multipath: fix lockdep WARN due to partitio... | 7.5 | 0.0053 |  |
| [CVE-2025-40257](https://patchblox.com/security/data/cve/CVE-2025-40257.md) | High | mptcp: fix a race in mptcp_pm_del_add_timer() | 9.8 | 0.0050 |  |
| [CVE-2025-68241](https://patchblox.com/security/data/cve/CVE-2025-68241.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ipv4: route: Prevent rt_bind_exception() from re... | 7.5 | 0.0047 |  |
| [CVE-2025-71116](https://patchblox.com/security/data/cve/CVE-2025-71116.md) | High | libceph: make decode_pool() more resilient against corrupted osdmaps | 8.1 | 0.0046 |  |
| [CVE-2025-68803](https://patchblox.com/security/data/cve/CVE-2025-68803.md) | High | NFSD: NFSv4 file creation neglects setting ACL | 8.0 | 0.0045 |  |
| [CVE-2025-38590](https://patchblox.com/security/data/cve/CVE-2025-38590.md) | High | net/mlx5e: Remove skb secpath if xfrm state is not found | 7.5 | 0.0044 |  |
| [CVE-2025-68320](https://patchblox.com/security/data/cve/CVE-2025-68320.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  lan966x: Fix sleeping in atomic context  The fol... | 7.5 | 0.0041 |  |
| [CVE-2025-38379](https://patchblox.com/security/data/cve/CVE-2025-38379.md) | High | smb: client: fix warning when reconnecting channel | 7.1 | 0.0041 |  |
| [CVE-2026-22984](https://patchblox.com/security/data/cve/CVE-2026-22984.md) | High | kernel-64kb: libceph: prevent potential out-of-bounds reads in handle_auth_done() (bsc#1257217). | 8.8 | 0.0041 |  |
| [CVE-2026-22990](https://patchblox.com/security/data/cve/CVE-2026-22990.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: libceph: replace overzealous BUG_ON in osdmap_app... | 8.8 | 0.0040 |  |
| [CVE-2025-68770](https://patchblox.com/security/data/cve/CVE-2025-68770.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bnxt_en: Fix XDP_TX path  For XDP_TX action in b... | 7.5 | 0.0039 |  |
| [CVE-2025-39880](https://patchblox.com/security/data/cve/CVE-2025-39880.md) | High | libceph: fix invalid accesses to ceph_connection_v1_info | 7.8 | 0.0033 |  |
| [CVE-2025-68799](https://patchblox.com/security/data/cve/CVE-2025-68799.md) | High | caif: fix integer underflow in cffrml_receive() | 8.1 | 0.0031 |  |
| [CVE-2025-71085](https://patchblox.com/security/data/cve/CVE-2025-71085.md) | High | kernel-64kb: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623). | 7.8 | 0.0031 |  |
| [CVE-2025-71093](https://patchblox.com/security/data/cve/CVE-2025-71093.md) | High | e1000: fix OOB in e1000_tbi_should_accept() | 7.1 | 0.0029 |  |
| [CVE-2025-37845](https://patchblox.com/security/data/cve/CVE-2025-37845.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0027 |  |
| [CVE-2025-38512](https://patchblox.com/security/data/cve/CVE-2025-38512.md) | High | wifi: prevent A-MSDU attacks in mesh networks | 7.8 | 0.0025 |  |
| [CVE-2025-68361](https://patchblox.com/security/data/cve/CVE-2025-68361.md) | High | kernel-64kb: erofs: limit the level of fs stacking for file-backed mounts (bsc#1255526). | n/a | 0.0023 |  |
| [CVE-2025-38298](https://patchblox.com/security/data/cve/CVE-2025-38298.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2024-54031](https://patchblox.com/security/data/cve/CVE-2024-54031.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0023 |  |
| [CVE-2025-68188](https://patchblox.com/security/data/cve/CVE-2025-68188.md) | High | tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() | 7.8 | 0.0022 |  |
| [CVE-2025-71132](https://patchblox.com/security/data/cve/CVE-2025-71132.md) | High | smc91x: fix broken irq-context in PREEMPT_RT | 8.8 | 0.0022 |  |
| [CVE-2025-68227](https://patchblox.com/security/data/cve/CVE-2025-68227.md) | High | mptcp: Fix proto fallback detection with BPF | 7.8 | 0.0022 |  |
| [CVE-2025-40259](https://patchblox.com/security/data/cve/CVE-2025-40259.md) | High | scsi: sg: Do not sleep in atomic context | 7.0 | 0.0022 |  |
| [CVE-2025-68735](https://patchblox.com/security/data/cve/CVE-2025-68735.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/panthor: Prevent potential UAF in group crea... | 7.8 | 0.0021 |  |
| [CVE-2025-68297](https://patchblox.com/security/data/cve/CVE-2025-68297.md) | High | ceph: fix crash in process_v2_sparse_read() for encrypted directories | 7.0 | 0.0021 |  |
| [CVE-2025-71162](https://patchblox.com/security/data/cve/CVE-2025-71162.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-68771](https://patchblox.com/security/data/cve/CVE-2025-68771.md) | High | ocfs2: fix kernel BUG in ocfs2_find_victim_chain | 7.1 | 0.0021 |  |
| [CVE-2026-23001](https://patchblox.com/security/data/cve/CVE-2026-23001.md) | High | kernel-64kb: macvlan: fix possible UAF in macvlan_forward_source() (bsc#1257232). | 7.8 | 0.0021 |  |
| [CVE-2025-68366](https://patchblox.com/security/data/cve/CVE-2025-68366.md) | High | kernel-64kb: nbd: defer config unlock in nbd_genl_connect (bsc#1255622). | 8.8 | 0.0020 |  |
| [CVE-2025-68325](https://patchblox.com/security/data/cve/CVE-2025-68325.md) | High | kernel-64kb: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417). | n/a | 0.0020 |  |
| [CVE-2025-38423](https://patchblox.com/security/data/cve/CVE-2025-38423.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0020 |  |
| [CVE-2025-38529](https://patchblox.com/security/data/cve/CVE-2025-38529.md) | High | comedi: aio_iiro_16: Fix bit shift out of bounds | 7.1 | 0.0020 |  |
| [CVE-2025-38530](https://patchblox.com/security/data/cve/CVE-2025-38530.md) | High | comedi: pcl812: Fix bit shift out of bounds | 7.1 | 0.0020 |  |
| [CVE-2026-22977](https://patchblox.com/security/data/cve/CVE-2026-22977.md) | High | kernel-64kb: net: sock: fix hardened usercopy panic in sock_recv_errqueue (bsc#1257053). | 9.8 | 0.0019 |  |
| [CVE-2025-71100](https://patchblox.com/security/data/cve/CVE-2025-71100.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0019 |  |
| [CVE-2025-38569](https://patchblox.com/security/data/cve/CVE-2025-38569.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0019 |  |
| [CVE-2025-39689](https://patchblox.com/security/data/cve/CVE-2025-39689.md) | High | ftrace: Also allocate and copy hash for reading of filter files | 7.8 | 0.0019 |  |
| [CVE-2025-38538](https://patchblox.com/security/data/cve/CVE-2025-38538.md) | High | dmaengine: nbpfaxi: Fix memory corruption in probe() | 7.8 | 0.0019 |  |
| [CVE-2025-71137](https://patchblox.com/security/data/cve/CVE-2025-71137.md) | High | octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" | 7.8 | 0.0019 |  |
| [CVE-2025-39913](https://patchblox.com/security/data/cve/CVE-2025-39913.md) | High | tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. | 7.8 | 0.0019 |  |
| [CVE-2025-37955](https://patchblox.com/security/data/cve/CVE-2025-37955.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0019 |  |
| [CVE-2025-38535](https://patchblox.com/security/data/cve/CVE-2025-38535.md) | High | phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode | 7.8 | 0.0019 |  |
| [CVE-2025-71133](https://patchblox.com/security/data/cve/CVE-2025-71133.md) | High | RDMA/irdma: avoid invalid read in irdma_net_event | 7.1 | 0.0018 |  |
| [CVE-2025-38548](https://patchblox.com/security/data/cve/CVE-2025-38548.md) | High | hwmon: (corsair-cpro) Validate the size of the received input buffer | 7.8 | 0.0018 |  |
| [CVE-2025-68174](https://patchblox.com/security/data/cve/CVE-2025-68174.md) | High | amd/amdkfd: enhance kfd process check in switch partition | 7.8 | 0.0018 |  |
| [CVE-2025-71114](https://patchblox.com/security/data/cve/CVE-2025-71114.md) | High | via_wdt: fix critical boot hang due to unnamed resource allocation | 7.1 | 0.0018 |  |
| [CVE-2026-23002](https://patchblox.com/security/data/cve/CVE-2026-23002.md) | High | kernel-64k-debug-modules: kernel: lib/buildid: use __kernel_read() for sleepable context | 7.0 | 0.0018 |  |
| [CVE-2025-71066](https://patchblox.com/security/data/cve/CVE-2025-71066.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net/sched: ets: Always remove class from active... | 7.8 | 0.0017 |  |
| [CVE-2025-38550](https://patchblox.com/security/data/cve/CVE-2025-38550.md) | High | ipv6: mcast: Delay put pmc->idev in mld_del_delrec() | 7.8 | 0.0017 |  |
| [CVE-2025-68795](https://patchblox.com/security/data/cve/CVE-2025-68795.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ethtool: Avoid overflowing userspace buffer on s... | 7.8 | 0.0017 |  |
| [CVE-2025-71123](https://patchblox.com/security/data/cve/CVE-2025-71123.md) | High | kernel-64kb: ext4: fix string copying in parse_apply_sb_mount_options() (bsc#1256757). | 7.8 | 0.0017 |  |
| [CVE-2025-68764](https://patchblox.com/security/data/cve/CVE-2025-68764.md) | High | NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags | 7.8 | 0.0017 |  |
| [CVE-2025-39817](https://patchblox.com/security/data/cve/CVE-2025-39817.md) | High | efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare | 7.6 | 0.0017 |  |
| [CVE-2025-38521](https://patchblox.com/security/data/cve/CVE-2025-38521.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0017 |  |
| [CVE-2025-38543](https://patchblox.com/security/data/cve/CVE-2025-38543.md) | High | drm/tegra: nvdec: Fix dma_alloc_coherent error check | 7.1 | 0.0017 |  |
| [CVE-2025-40045](https://patchblox.com/security/data/cve/CVE-2025-40045.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ASoC: codecs: wcd937x: set the comp soundwire po... | 7.8 | 0.0016 |  |
| [CVE-2025-71089](https://patchblox.com/security/data/cve/CVE-2025-71089.md) | High | iommu: disable SVA when CONFIG_X86 is set | 7.8 | 0.0016 |  |
| [CVE-2025-71112](https://patchblox.com/security/data/cve/CVE-2025-71112.md) | High | net: hns3: add VLAN id validation before using | 7.1 | 0.0016 |  |
| [CVE-2025-68815](https://patchblox.com/security/data/cve/CVE-2025-68815.md) | High | net/sched: ets: Remove drr class from the active list if it changes to strict | 7.8 | 0.0016 |  |
| [CVE-2025-68792](https://patchblox.com/security/data/cve/CVE-2025-68792.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  tpm2-sessions: Fix out of range indexing in name... | 7.8 | 0.0015 |  |
| [CVE-2025-71130](https://patchblox.com/security/data/cve/CVE-2025-71130.md) | High | drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer | 7.1 | 0.0015 |  |
| [CVE-2025-68800](https://patchblox.com/security/data/cve/CVE-2025-68800.md) | High | mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats | 7.8 | 0.0015 |  |
| [CVE-2025-68801](https://patchblox.com/security/data/cve/CVE-2025-68801.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  mlxsw: spectrum_router: Fix neighbour use-after-... | 7.8 | 0.0015 |  |
| [CVE-2025-71113](https://patchblox.com/security/data/cve/CVE-2025-71113.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - zero initialize memory allocated... | 7.8 | 0.0015 |  |
| [CVE-2025-68808](https://patchblox.com/security/data/cve/CVE-2025-68808.md) | High | media: vidtv: initialize local pointers upon transfer of memory ownership | 7.8 | 0.0015 |  |
| [CVE-2025-68211](https://patchblox.com/security/data/cve/CVE-2025-68211.md) | High | ksm: use range-walk function to jump over holes in scan_get_next_rmap_item | 8.1 | 0.0015 |  |
| [CVE-2025-71086](https://patchblox.com/security/data/cve/CVE-2025-71086.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2025-68379](https://patchblox.com/security/data/cve/CVE-2025-68379.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/rxe: Fix null deref on srq->rq.queue after... | 7.8 | 0.0015 |  |
| [CVE-2025-71082](https://patchblox.com/security/data/cve/CVE-2025-71082.md) | High | Bluetooth: btusb: revert use of devm_kzalloc in btusb | 7.8 | 0.0015 |  |
| [CVE-2025-71091](https://patchblox.com/security/data/cve/CVE-2025-71091.md) | High | team: fix check for port enabled in team_queue_override_port_prio_changed() | 7.8 | 0.0015 |  |
| [CVE-2025-71143](https://patchblox.com/security/data/cve/CVE-2025-71143.md) | High | clk: samsung: exynos-clkout: Assign .num before accessing .hws | 7.8 | 0.0014 |  |
| [CVE-2025-71147](https://patchblox.com/security/data/cve/CVE-2025-71147.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix a memory leak in tpm2_load_cmd... | 8.8 | 0.0014 |  |
| [CVE-2025-71156](https://patchblox.com/security/data/cve/CVE-2025-71156.md) | High | kernel-64kb: gve: defer interrupt enabling until NAPI registration (bsc#1257167). | 7.8 | 0.0014 |  |
| [CVE-2025-71157](https://patchblox.com/security/data/cve/CVE-2025-71157.md) | High | bpftool6.12: In the Linux kernel, the following vulnerability has been resolved | 7.8 | 0.0014 |  |
| [CVE-2025-71101](https://patchblox.com/security/data/cve/CVE-2025-71101.md) | High | platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing | 7.8 | 0.0014 |  |
| [CVE-2025-71136](https://patchblox.com/security/data/cve/CVE-2025-71136.md) | High | media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() | 7.1 | 0.0014 |  |
| [CVE-2025-71099](https://patchblox.com/security/data/cve/CVE-2025-71099.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 |  |
| [CVE-2025-71087](https://patchblox.com/security/data/cve/CVE-2025-71087.md) | High | iavf: fix off-by-one issues in iavf_config_rss_reg() | 7.1 | 0.0014 |  |
| [CVE-2025-71081](https://patchblox.com/security/data/cve/CVE-2025-71081.md) | High | ASoC: stm32: sai: fix OF node leak on probe | 7.1 | 0.0013 |  |
| [CVE-2025-71078](https://patchblox.com/security/data/cve/CVE-2025-71078.md) | High | powerpc/64s/slb: Fix SLB multihit issue during SLB preload | 7.8 | 0.0011 |  |
| [CVE-2026-22991](https://patchblox.com/security/data/cve/CVE-2026-22991.md) | Routine | kernel-64kb: libceph: make free_choose_arg_map() resilient to partial allocation (bsc#1257220). | 5.5 | 0.0047 |  |
| [CVE-2026-22997](https://patchblox.com/security/data/cve/CVE-2026-22997.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0047 |  |
| [CVE-2026-22992](https://patchblox.com/security/data/cve/CVE-2026-22992.md) | Routine | kernel-64kb: libceph: return the handler error from mon_handle_auth_done() (bsc#1257218). | 6.5 | 0.0045 |  |
| [CVE-2025-71131](https://patchblox.com/security/data/cve/CVE-2025-71131.md) | Routine | kernel: In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Do not use req->iv after crypto_a... | 5.5 | 0.0031 |  |
| [CVE-2025-71080](https://patchblox.com/security/data/cve/CVE-2025-71080.md) | Routine | kernel-64kb: ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT (bsc#1256608). | 5.5 | 0.0030 |  |
| [CVE-2025-37841](https://patchblox.com/security/data/cve/CVE-2025-37841.md) | Routine | pm: cpupower: bench: Prevent NULL dereference on malloc failure | 5.5 | 0.0030 |  |
| [CVE-2025-71095](https://patchblox.com/security/data/cve/CVE-2025-71095.md) | Routine | net: stmmac: fix the crash issue for zero copy XDP_TX action | 5.5 | 0.0029 |  |
| [CVE-2025-68788](https://patchblox.com/security/data/cve/CVE-2025-68788.md) | Routine | fsnotify: do not generate ACCESS/MODIFY events on child for special files | 5.5 | 0.0028 |  |
| [CVE-2025-71126](https://patchblox.com/security/data/cve/CVE-2025-71126.md) | Routine | kernel-64kb: mptcp: reset fallback status gracefully at disconnect() time (bsc#1256755). | 5.5 | 0.0027 |  |
| [CVE-2025-40147](https://patchblox.com/security/data/cve/CVE-2025-40147.md) | Routine | kernel-uek64k-core: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 6.2 | 0.0026 |  |
| [CVE-2025-68816](https://patchblox.com/security/data/cve/CVE-2025-68816.md) | Routine | net/mlx5: fw_tracer, Validate format string parameters | 6.6 | 0.0024 |  |
| [CVE-2025-68820](https://patchblox.com/security/data/cve/CVE-2025-68820.md) | Routine | kernel-64kb: ext4: xattr: fix null pointer deref in ext4_raw_inode() (bsc#1256754). | 5.5 | 0.0024 |  |
| [CVE-2026-22999](https://patchblox.com/security/data/cve/CVE-2026-22999.md) | Routine | kernel-64kb: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257236). | 5.5 | 0.0024 |  |
| [CVE-2025-68776](https://patchblox.com/security/data/cve/CVE-2025-68776.md) | Routine | net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() | 5.5 | 0.0023 |  |
| [CVE-2025-68773](https://patchblox.com/security/data/cve/CVE-2025-68773.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0023 |  |
| [CVE-2025-40030](https://patchblox.com/security/data/cve/CVE-2025-40030.md) | Routine | pinctrl: check the return value of pinmux_ops::get_function_name() | 5.5 | 0.0023 |  |
| [CVE-2025-68356](https://patchblox.com/security/data/cve/CVE-2025-68356.md) | Routine | kernel-64kb: gfs2: Prevent recursive memory reclaim (bsc#1255593). | 5.5 | 0.0022 |  |
| [CVE-2026-23005](https://patchblox.com/security/data/cve/CVE-2026-23005.md) | Routine | kernel-64kb: x86/fpu: Clear XSTATE_BV in guest XSAVE state whenever XFD[i]=1 (bsc#1257245). | 5.5 | 0.0022 |  |
| [CVE-2025-38507](https://patchblox.com/security/data/cve/CVE-2025-38507.md) | Routine | HID: nintendo: avoid bluetooth suspend/resume stalls | 5.5 | 0.0022 |  |
| [CVE-2025-68374](https://patchblox.com/security/data/cve/CVE-2025-68374.md) | Routine | kernel-64kb: md: fix rcu protection in md_wakeup_thread (bsc#1255530). | 5.5 | 0.0021 |  |
| [CVE-2025-68376](https://patchblox.com/security/data/cve/CVE-2025-68376.md) | Routine | kernel-64kb: coresight: ETR: Fix ETR buffer use-after-free issue (bsc#1255529). | n/a | 0.0021 |  |
| [CVE-2025-40363](https://patchblox.com/security/data/cve/CVE-2025-40363.md) | Routine | kernel-64kb: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102). | 5.5 | 0.0021 |  |
| [CVE-2025-71163](https://patchblox.com/security/data/cve/CVE-2025-71163.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-68368](https://patchblox.com/security/data/cve/CVE-2025-68368.md) | Routine | kernel-64kb: md: init bioset in mddev_init (bsc#1255527). | n/a | 0.0021 |  |
| [CVE-2026-22996](https://patchblox.com/security/data/cve/CVE-2026-22996.md) | Routine | kernel-64kb: net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv. | 5.5 | 0.0021 |  |
| [CVE-2026-23011](https://patchblox.com/security/data/cve/CVE-2026-23011.md) | Routine | kernel-64kb: ipv4: ip_gre: make ipgre_header() robust (bsc#1257207). | 6.6 | 0.0021 |  |
| [CVE-2025-40106](https://patchblox.com/security/data/cve/CVE-2025-40106.md) | Routine | comedi: fix divide-by-zero in comedi_buf_munge() | 5.5 | 0.0021 |  |
| [CVE-2025-68798](https://patchblox.com/security/data/cve/CVE-2025-68798.md) | Routine | perf/x86/amd: Check event before enable to avoid GPF | 5.8 | 0.0021 |  |
| [CVE-2025-68200](https://patchblox.com/security/data/cve/CVE-2025-68200.md) | Routine | kernel-64kb: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241). | 5.5 | 0.0021 |  |
| [CVE-2025-68777](https://patchblox.com/security/data/cve/CVE-2025-68777.md) | Routine | Input: ti_am335x_tsc - fix off-by-one error in wire_order validation | 5.5 | 0.0021 |  |
| [CVE-2025-68783](https://patchblox.com/security/data/cve/CVE-2025-68783.md) | Routine | ALSA: usb-mixer: us16x08: validate meter packet indices | 5.5 | 0.0021 |  |
| [CVE-2025-68797](https://patchblox.com/security/data/cve/CVE-2025-68797.md) | Routine | char: applicom: fix NULL pointer dereference in ac_ioctl | 5.5 | 0.0021 |  |
| [CVE-2025-68813](https://patchblox.com/security/data/cve/CVE-2025-68813.md) | Routine | kernel-livepatch-SLE15-SP6_Update_10: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256644). | 5.5 | 0.0021 |  |
| [CVE-2025-68821](https://patchblox.com/security/data/cve/CVE-2025-68821.md) | Routine | kernel-64kb: fuse: fix readahead reclaim deadlock (bsc#1256667). | 5.5 | 0.0021 |  |
| [CVE-2025-68804](https://patchblox.com/security/data/cve/CVE-2025-68804.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2025-68296](https://patchblox.com/security/data/cve/CVE-2025-68296.md) | Routine | drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup | 5.5 | 0.0021 |  |
| [CVE-2025-38505](https://patchblox.com/security/data/cve/CVE-2025-38505.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2026-23006](https://patchblox.com/security/data/cve/CVE-2026-23006.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-68778](https://patchblox.com/security/data/cve/CVE-2025-68778.md) | Routine | btrfs: don't log conflicting inode if it's a dir moved in the current transaction | 6.1 | 0.0020 |  |
| [CVE-2025-68348](https://patchblox.com/security/data/cve/CVE-2025-68348.md) | Routine | kernel-64kb: block: fix memory leak in __blkdev_issue_zero_pages (bsc#1255694). | 5.5 | 0.0020 |  |
| [CVE-2025-68245](https://patchblox.com/security/data/cve/CVE-2025-68245.md) | Routine | kernel-64kb: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268). | 6.1 | 0.0020 |  |
| [CVE-2025-68178](https://patchblox.com/security/data/cve/CVE-2025-68178.md) | Routine | kernel-64kb: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266). | 5.5 | 0.0020 |  |
| [CVE-2025-68768](https://patchblox.com/security/data/cve/CVE-2025-68768.md) | Routine | inet: frags: flush pending skbs in fqdir_pre_exit() | 5.5 | 0.0020 |  |
| [CVE-2025-40097](https://patchblox.com/security/data/cve/CVE-2025-40097.md) | Routine | ALSA: hda: Fix missing pointer check in hda_component_manager_init function | 5.5 | 0.0020 |  |
| [CVE-2025-68784](https://patchblox.com/security/data/cve/CVE-2025-68784.md) | Routine | kernel-64kb: xfs: fix a UAF problem in xattr repair (bsc#1256793). | 5.5 | 0.0020 |  |
| [CVE-2025-68802](https://patchblox.com/security/data/cve/CVE-2025-68802.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 |  |
| [CVE-2025-68372](https://patchblox.com/security/data/cve/CVE-2025-68372.md) | Routine | kernel-64kb: nbd: defer config put in recv_work (bsc#1255537). | 5.5 | 0.0020 |  |
| [CVE-2025-68367](https://patchblox.com/security/data/cve/CVE-2025-68367.md) | Routine | kernel-64kb: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547). | 5.3 | 0.0020 |  |
| [CVE-2025-40195](https://patchblox.com/security/data/cve/CVE-2025-40195.md) | Routine | mount: handle NULL values in mnt_ns_release() | 5.5 | 0.0020 |  |
| [CVE-2025-38539](https://patchblox.com/security/data/cve/CVE-2025-38539.md) | Routine | tracing: Add down_write(trace_event_sem) when adding trace event | 6.1 | 0.0019 |  |
| [CVE-2025-39829](https://patchblox.com/security/data/cve/CVE-2025-39829.md) | Routine | trace/fgraph: Fix the warning caused by missing unregister notifier | 5.5 | 0.0019 |  |
| [CVE-2025-38262](https://patchblox.com/security/data/cve/CVE-2025-38262.md) | Routine | tty: serial: uartlite: register uart driver in init | 5.5 | 0.0019 |  |
| [CVE-2025-68725](https://patchblox.com/security/data/cve/CVE-2025-68725.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-68743](https://patchblox.com/security/data/cve/CVE-2025-68743.md) | Routine | kernel-64kb: mshv: Fix create memory region overlap check (bsc#1255708). | n/a | 0.0019 |  |
| [CVE-2025-38513](https://patchblox.com/security/data/cve/CVE-2025-38513.md) | Routine | wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() | 5.5 | 0.0018 |  |
| [CVE-2025-38516](https://patchblox.com/security/data/cve/CVE-2025-38516.md) | Routine | pinctrl: qcom: msm: mark certain pins as invalid for interrupts | 5.5 | 0.0018 |  |
| [CVE-2025-38540](https://patchblox.com/security/data/cve/CVE-2025-38540.md) | Routine | HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras | 5.5 | 0.0018 |  |
| [CVE-2026-22976](https://patchblox.com/security/data/cve/CVE-2026-22976.md) | Routine | kernel-64kb: net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset (bsc#1257035). | 5.5 | 0.0018 |  |
| [CVE-2025-71141](https://patchblox.com/security/data/cve/CVE-2025-71141.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-71135](https://patchblox.com/security/data/cve/CVE-2025-71135.md) | Routine | python3-perf6.12-debuginfo: In the Linux kernel, the following vulnerability has been resolved | 5.5 | 0.0018 |  |
| [CVE-2026-23000](https://patchblox.com/security/data/cve/CVE-2026-23000.md) | Routine | kernel-64kb: net/mlx5e: Fix crash on profile change rollback failure (bsc#1257234). | 5.5 | 0.0018 |  |
| [CVE-2025-38297](https://patchblox.com/security/data/cve/CVE-2025-38297.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2025-71118](https://patchblox.com/security/data/cve/CVE-2025-71118.md) | Routine | ACPICA: Avoid walking the Namespace if start_node is NULL | 5.5 | 0.0017 |  |
| [CVE-2025-38589](https://patchblox.com/security/data/cve/CVE-2025-38589.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0017 |  |
| [CVE-2025-37904](https://patchblox.com/security/data/cve/CVE-2025-37904.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0017 |  |
| [CVE-2025-38511](https://patchblox.com/security/data/cve/CVE-2025-38511.md) | Routine | kernel-livepatch-SLE15-SP7-RT_Update_0: drm/xe/pf: Clear all LMTT pages on alloc (bsc#1248176). | 5.5 | 0.0017 |  |
| [CVE-2025-38515](https://patchblox.com/security/data/cve/CVE-2025-38515.md) | Routine | drm/sched: Increment job count before swapping tail spsc queue | 5.5 | 0.0017 |  |
| [CVE-2025-39795](https://patchblox.com/security/data/cve/CVE-2025-39795.md) | Routine | block: avoid possible overflow for chunk_sectors check in blk_stack_limits() | 5.5 | 0.0017 |  |
| [CVE-2025-71145](https://patchblox.com/security/data/cve/CVE-2025-71145.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0017 |  |
| [CVE-2025-38547](https://patchblox.com/security/data/cve/CVE-2025-38547.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2025-38510](https://patchblox.com/security/data/cve/CVE-2025-38510.md) | Routine | kasan: remove kasan_find_vm_area() to prevent possible deadlock | 5.5 | 0.0017 |  |
| [CVE-2025-38645](https://patchblox.com/security/data/cve/CVE-2025-38645.md) | Routine | net/mlx5: Check device memory pointer before usage | 5.5 | 0.0017 |  |
| [CVE-2025-38243](https://patchblox.com/security/data/cve/CVE-2025-38243.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2025-38537](https://patchblox.com/security/data/cve/CVE-2025-38537.md) | Routine | net: phy: Don't register LEDs for genphy | 5.5 | 0.0016 |  |
| [CVE-2025-37751](https://patchblox.com/security/data/cve/CVE-2025-37751.md) | Routine | kernel-default-base: Security update for the Linux Kernel | n/a | 0.0016 |  |
| [CVE-2025-38541](https://patchblox.com/security/data/cve/CVE-2025-38541.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2025-37744](https://patchblox.com/security/data/cve/CVE-2025-37744.md) | Routine | wifi: ath12k: fix memory leak in ath12k_pci_remove() | 5.5 | 0.0016 |  |
| [CVE-2025-39927](https://patchblox.com/security/data/cve/CVE-2025-39927.md) | Routine | ceph: fix race condition validating r_parent before applying state | 6.4 | 0.0015 |  |
| [CVE-2025-71077](https://patchblox.com/security/data/cve/CVE-2025-71077.md) | Routine | tpm: Cap the number of PCR banks | 6.1 | 0.0015 |  |
| [CVE-2025-71108](https://patchblox.com/security/data/cve/CVE-2025-71108.md) | Routine | usb: typec: ucsi: Handle incorrect num_connectors capability | 5.5 | 0.0015 |  |
| [CVE-2025-71119](https://patchblox.com/security/data/cve/CVE-2025-71119.md) | Routine | powerpc/kexec: Enable SMT before waking offline CPUs | 5.5 | 0.0015 |  |
| [CVE-2025-71076](https://patchblox.com/security/data/cve/CVE-2025-71076.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2025-71088](https://patchblox.com/security/data/cve/CVE-2025-71088.md) | Routine | mptcp: fallback earlier on simult connection | 5.5 | 0.0015 |  |
| [CVE-2026-22988](https://patchblox.com/security/data/cve/CVE-2026-22988.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2025-71154](https://patchblox.com/security/data/cve/CVE-2025-71154.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-22982](https://patchblox.com/security/data/cve/CVE-2026-22982.md) | Routine | kernel-64kb: net: mscc: ocelot: Fix crash when adding interface under a lag (bsc#1257179). | 5.5 | 0.0014 |  |
| [CVE-2025-71097](https://patchblox.com/security/data/cve/CVE-2025-71097.md) | Routine | ipv4: Fix reference count leak when using error routes with nexthop objects | 6.5 | 0.0014 |  |
| [CVE-2026-22978](https://patchblox.com/security/data/cve/CVE-2026-22978.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2025-71083](https://patchblox.com/security/data/cve/CVE-2025-71083.md) | Routine | drm/ttm: Avoid NULL pointer deref for evicted BOs | 5.5 | 0.0014 |  |
| [CVE-2025-71084](https://patchblox.com/security/data/cve/CVE-2025-71084.md) | Routine | RDMA/cm: Fix leaking the multicast GID table reference | 5.5 | 0.0014 |  |
| [CVE-2025-71094](https://patchblox.com/security/data/cve/CVE-2025-71094.md) | Routine | net: usb: asix: validate PHY address before use | 5.5 | 0.0014 |  |
| [CVE-2025-71138](https://patchblox.com/security/data/cve/CVE-2025-71138.md) | Routine | drm/msm/dpu: Add missing NULL pointer check for pingpong interface | 5.5 | 0.0014 |  |
| [CVE-2026-22985](https://patchblox.com/security/data/cve/CVE-2026-22985.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.2 | 0.0014 |  |
| [CVE-2025-71142](https://patchblox.com/security/data/cve/CVE-2025-71142.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-22981](https://patchblox.com/security/data/cve/CVE-2026-22981.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0014 |  |
| [CVE-2026-22989](https://patchblox.com/security/data/cve/CVE-2026-22989.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-22993](https://patchblox.com/security/data/cve/CVE-2026-22993.md) | Routine | kernel-64kb: idpf: Fix RSS LUT NULL pointer crash on early ethtool operations (bsc#1257180). | 5.5 | 0.0014 |  |
| [CVE-2025-71148](https://patchblox.com/security/data/cve/CVE-2025-71148.md) | Routine | bpftool6.12: In the Linux kernel, the following vulnerability has been resolved | 5.5 | 0.0013 |  |
| [CVE-2025-39814](https://patchblox.com/security/data/cve/CVE-2025-39814.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2025-38520](https://patchblox.com/security/data/cve/CVE-2025-38520.md) | Routine | drm/amdkfd: Don't call mmput from MMU notifier callback | 5.5 | 0.0013 |  |
| [CVE-2025-38551](https://patchblox.com/security/data/cve/CVE-2025-38551.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2025-39813](https://patchblox.com/security/data/cve/CVE-2025-39813.md) | Routine | ftrace: Fix potential warning in trace_printk_seq during ftrace_dump | 5.5 | 0.0012 |  |
| [CVE-2025-71079](https://patchblox.com/security/data/cve/CVE-2025-71079.md) | Routine | net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write | 5.5 | 0.0011 |  |
| [CVE-2025-71111](https://patchblox.com/security/data/cve/CVE-2025-71111.md) | Routine | hwmon: (w83791d) Convert macros to functions to avoid TOCTOU | 6.3 | 0.0011 |  |
| [CVE-2026-22986](https://patchblox.com/security/data/cve/CVE-2026-22986.md) | Routine | kernel-uek: gpiolib: fix race condition for gdev->srcu (Pawel Narewski) [Orabug: 38887677] | 5.3 | 0.0010 |  |
| [CVE-2025-71149](https://patchblox.com/security/data/cve/CVE-2025-71149.md) | Routine | bpftool: In the Linux kernel, the following vulnerability has been resolved | 5.5 | n/a |  |

---

Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.