{
  "fix": "SUSE-SU-2026:22087-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2026-22087-1",
  "summary": "SUSE-SU-2026:22087-1, released June 5, 2026, fixes 37 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 10 packages",
  "released": "2026-06-05T17:10:52Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2026-43499, high severity",
  "supported": true,
  "cveCount": 37,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.05372,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2026:22087-1",
  "appliesTo": [
    {
      "product": "kernel-64kb",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-64kb",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.34.1",
      "supported": true
    },
    {
      "product": "kernel-azure",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-azure",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.34.1",
      "supported": true
    },
    {
      "product": "kernel-default",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.34.1",
      "supported": true
    },
    {
      "product": "kernel-default-base",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.34.1.160000.2.15",
      "supported": true
    },
    {
      "product": "kernel-docs",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-docs",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.34.1",
      "supported": true
    },
    {
      "product": "kernel-kvmsmall",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-kvmsmall",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.34.1",
      "supported": true
    },
    {
      "product": "kernel-obs-qa",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-qa",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.34.1",
      "supported": true
    },
    {
      "product": "kernel-source",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-source",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.34.1",
      "supported": true
    },
    {
      "product": "kernel-syms",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-syms",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.34.1",
      "supported": true
    },
    {
      "product": "kernel-zfcpdump",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-zfcpdump",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.34.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-43499",
      "url": "https://patchblox.com/security/cve/CVE-2026-43499",
      "title": "rtmutex: Use waiter::task instead of current in remove_waiter()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.05372,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43414",
      "url": "https://patchblox.com/security/cve/CVE-2026-43414",
      "title": "scsi: qla2xxx: Completely fix fcport double free",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.006,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43341",
      "url": "https://patchblox.com/security/cve/CVE-2026-43341",
      "title": "kernel-64kb: net/ipv6: ioam6: prevent schema length wraparound in trace fill (bsc#1265044).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00512,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46110",
      "url": "https://patchblox.com/security/cve/CVE-2026-46110",
      "title": "kernel-64kb: net: stmmac: rename STMMAC_GET_ENTRY() -\u003E STMMAC_NEXT_ENTRY() (bsc#1266759).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00511,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46243",
      "url": "https://patchblox.com/security/cve/CVE-2026-46243",
      "title": "smb: client: reject userspace cifs.spnego descriptions",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00413,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45843",
      "url": "https://patchblox.com/security/cve/CVE-2026-45843",
      "title": "slip: bound decode() reads against the compressed packet length",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.2,
      "epss": 0.00398,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31613",
      "url": "https://patchblox.com/security/cve/CVE-2026-31613",
      "title": "smb: client: fix OOB reads parsing symlink error response",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00387,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43112",
      "url": "https://patchblox.com/security/cve/CVE-2026-43112",
      "title": "kernel-64kb: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (bsc#1264437).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00352,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31464",
      "url": "https://patchblox.com/security/cve/CVE-2026-31464",
      "title": "scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00275,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43362",
      "url": "https://patchblox.com/security/cve/CVE-2026-43362",
      "title": "kernel-64kb: smb: client: fix in-place encryption corruption in SMB2_write() (bsc#1264989).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00258,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43009",
      "url": "https://patchblox.com/security/cve/CVE-2026-43009",
      "title": "bpf: Fix incorrect pruning due to atomic fetch precision tracking",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31493",
      "url": "https://patchblox.com/security/cve/CVE-2026-31493",
      "title": "RDMA/efa: Fix use of completion ctx after free",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31568",
      "url": "https://patchblox.com/security/cve/CVE-2026-31568",
      "title": "s390/mm: Add missing secure storage access fixups for donated memory",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23444",
      "url": "https://patchblox.com/security/cve/CVE-2026-23444",
      "title": "wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00141,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23359",
      "url": "https://patchblox.com/security/cve/CVE-2026-23359",
      "title": "bpf: Fix stack-out-of-bounds write in devmap",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0014,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31729",
      "url": "https://patchblox.com/security/cve/CVE-2026-31729",
      "title": "usb: typec: ucsi: validate connector number in ucsi_notify_common()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43328",
      "url": "https://patchblox.com/security/cve/CVE-2026-43328",
      "title": "kernel-64kb: cpufreq: governor: Free dbs_data directly when gov-\u003Einit() fails (bsc#1264832).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31521",
      "url": "https://patchblox.com/security/cve/CVE-2026-31521",
      "title": "module: Fix kernel panic when a symbol st_shndx is out of bounds",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31614",
      "url": "https://patchblox.com/security/cve/CVE-2026-31614",
      "title": "kernel-64kb: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31516",
      "url": "https://patchblox.com/security/cve/CVE-2026-31516",
      "title": "xfrm: prevent policy_hthresh.work from racing with netns teardown",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.001,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-3150",
      "url": "https://patchblox.com/security/cve/CVE-2026-3150",
      "title": "kernel-64kb: bcache: fix cached_dev.sb_bio use-after-free and crash (bsc#1263169).",
      "priority": "Routine",
      "epss": 0.00304,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43360",
      "url": "https://patchblox.com/security/cve/CVE-2026-43360",
      "title": "kernel-64kb: btrfs: fix transaction abort on file creation due to name hash collision (bsc#1264720).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43234",
      "url": "https://patchblox.com/security/cve/CVE-2026-43234",
      "title": "team: avoid NETDEV_CHANGEMTU event when unregistering slave",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43013",
      "url": "https://patchblox.com/security/cve/CVE-2026-43013",
      "title": "kernel-64kb: net/mlx5: lag: Check for LAG device before creating debugfs (bsc#1264011).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43333",
      "url": "https://patchblox.com/security/cve/CVE-2026-43333",
      "title": "kernel-64kb: bpf: reject direct access to nullable PTR_TO_BUF pointers (bsc#1264726).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43359",
      "url": "https://patchblox.com/security/cve/CVE-2026-43359",
      "title": "kernel-64kb: btrfs: fix transaction abort on set received ioctl due to item overflow (bsc#1264719).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43361",
      "url": "https://patchblox.com/security/cve/CVE-2026-43361",
      "title": "kernel-64kb: btrfs: fix transaction abort when snapshotting received subvolumes (bsc#1264722).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31575",
      "url": "https://patchblox.com/security/cve/CVE-2026-31575",
      "title": "mm/userfaultfd: fix hugetlb fault mutex hash calculation",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31736",
      "url": "https://patchblox.com/security/cve/CVE-2026-31736",
      "title": "kernel-64kb: net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled (bsc#1263908).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43012",
      "url": "https://patchblox.com/security/cve/CVE-2026-43012",
      "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43325",
      "url": "https://patchblox.com/security/cve/CVE-2026-43325",
      "title": "kernel-64kb: wifi: iwlwifi: mvm: don\u0027t send a 6E related command when not supported (bsc#1265110).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23380",
      "url": "https://patchblox.com/security/cve/CVE-2026-23380",
      "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00118,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43338",
      "url": "https://patchblox.com/security/cve/CVE-2026-43338",
      "title": "btrfs: reserve enough transaction items for qgroup ioctls",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00115,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43054",
      "url": "https://patchblox.com/security/cve/CVE-2026-43054",
      "title": "kernel-64kb: scsi: target: tcm_loop: Drain commands in target_reset handler (bsc#1264063).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-20585",
      "url": "https://patchblox.com/security/cve/CVE-2023-20585",
      "title": "AMD: CVE-2023-20585 IOMMU Write Buffer Vulnerability",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.3,
      "epss": 0.00098,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31480",
      "url": "https://patchblox.com/security/cve/CVE-2026-31480",
      "title": "tracing: Fix potential deadlock in cpu hotplug with osnoise",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43252",
      "url": "https://patchblox.com/security/cve/CVE-2026-43252",
      "title": "kernel-64kb: mptcp: pm: in-kernel: always set ID as avail when rm endp (bsc#1264300).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T01:43:54Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}