# SUSE-SU-2026:22087-1: Security update for 10 packages

SUSE-SU-2026:22087-1, released June 5, 2026, fixes 37 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2026-22087-1
- Platform: Linux
- Released: Jun 5, 2026
- Priority: High (Closes CVE-2026-43499, high severity)
- CVEs: 37, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:22087-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | sles 16.0 | 6.12.0-160000.34.1 |
| [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | sles 16.0 | 6.12.0-160000.34.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 16.0 | 6.12.0-160000.34.1 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 16.0 | 6.12.0-160000.34.1.160000.2.15 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 16.0 | 6.12.0-160000.34.1 |
| [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | sles 16.0 | 6.12.0-160000.34.1 |
| [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | sles 16.0 | 6.12.0-160000.34.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 16.0 | 6.12.0-160000.34.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 16.0 | 6.12.0-160000.34.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | sles 16.0 | 6.12.0-160000.34.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-43499](https://patchblox.com/security/data/cve/CVE-2026-43499.md) | High | rtmutex: Use waiter::task instead of current in remove_waiter() | 7.8 | 0.0537 |  |
| [CVE-2026-43414](https://patchblox.com/security/data/cve/CVE-2026-43414.md) | High | scsi: qla2xxx: Completely fix fcport double free | 9.8 | 0.0060 |  |
| [CVE-2026-43341](https://patchblox.com/security/data/cve/CVE-2026-43341.md) | High | kernel-64kb: net/ipv6: ioam6: prevent schema length wraparound in trace fill (bsc#1265044). | 9.8 | 0.0051 |  |
| [CVE-2026-46110](https://patchblox.com/security/data/cve/CVE-2026-46110.md) | High | kernel-64kb: net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY() (bsc#1266759). | 7.5 | 0.0051 |  |
| [CVE-2026-46243](https://patchblox.com/security/data/cve/CVE-2026-46243.md) | High | smb: client: reject userspace cifs.spnego descriptions | 7.8 | 0.0041 |  |
| [CVE-2026-45843](https://patchblox.com/security/data/cve/CVE-2026-45843.md) | High | slip: bound decode() reads against the compressed packet length | 8.2 | 0.0040 |  |
| [CVE-2026-31613](https://patchblox.com/security/data/cve/CVE-2026-31613.md) | High | smb: client: fix OOB reads parsing symlink error response | 8.8 | 0.0039 |  |
| [CVE-2026-43112](https://patchblox.com/security/data/cve/CVE-2026-43112.md) | High | kernel-64kb: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (bsc#1264437). | 8.8 | 0.0035 |  |
| [CVE-2026-31464](https://patchblox.com/security/data/cve/CVE-2026-31464.md) | High | scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() | 8.1 | 0.0028 |  |
| [CVE-2026-43362](https://patchblox.com/security/data/cve/CVE-2026-43362.md) | High | kernel-64kb: smb: client: fix in-place encryption corruption in SMB2_write() (bsc#1264989). | 8.1 | 0.0026 |  |
| [CVE-2026-43009](https://patchblox.com/security/data/cve/CVE-2026-43009.md) | High | bpf: Fix incorrect pruning due to atomic fetch precision tracking | 7.8 | 0.0016 |  |
| [CVE-2026-31493](https://patchblox.com/security/data/cve/CVE-2026-31493.md) | High | RDMA/efa: Fix use of completion ctx after free | 7.8 | 0.0016 |  |
| [CVE-2026-31568](https://patchblox.com/security/data/cve/CVE-2026-31568.md) | High | s390/mm: Add missing secure storage access fixups for donated memory | 7.1 | 0.0016 |  |
| [CVE-2026-23444](https://patchblox.com/security/data/cve/CVE-2026-23444.md) | High | wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure | 7.1 | 0.0014 |  |
| [CVE-2026-23359](https://patchblox.com/security/data/cve/CVE-2026-23359.md) | High | bpf: Fix stack-out-of-bounds write in devmap | 7.8 | 0.0014 |  |
| [CVE-2026-31729](https://patchblox.com/security/data/cve/CVE-2026-31729.md) | High | usb: typec: ucsi: validate connector number in ucsi_notify_common() | 7.8 | 0.0013 |  |
| [CVE-2026-43328](https://patchblox.com/security/data/cve/CVE-2026-43328.md) | High | kernel-64kb: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832). | 7.8 | 0.0013 |  |
| [CVE-2026-31521](https://patchblox.com/security/data/cve/CVE-2026-31521.md) | High | module: Fix kernel panic when a symbol st_shndx is out of bounds | 7.0 | 0.0013 |  |
| [CVE-2026-31614](https://patchblox.com/security/data/cve/CVE-2026-31614.md) | High | kernel-64kb: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774). | 7.1 | 0.0013 |  |
| [CVE-2026-31516](https://patchblox.com/security/data/cve/CVE-2026-31516.md) | High | xfrm: prevent policy_hthresh.work from racing with netns teardown | 7.8 | 0.0010 |  |
| [CVE-2026-3150](https://patchblox.com/security/data/cve/CVE-2026-3150.md) | Routine | kernel-64kb: bcache: fix cached_dev.sb_bio use-after-free and crash (bsc#1263169). | n/a | 0.0030 |  |
| [CVE-2026-43360](https://patchblox.com/security/data/cve/CVE-2026-43360.md) | Routine | kernel-64kb: btrfs: fix transaction abort on file creation due to name hash collision (bsc#1264720). | 5.5 | 0.0016 |  |
| [CVE-2026-43234](https://patchblox.com/security/data/cve/CVE-2026-43234.md) | Routine | team: avoid NETDEV_CHANGEMTU event when unregistering slave | 5.5 | 0.0016 |  |
| [CVE-2026-43013](https://patchblox.com/security/data/cve/CVE-2026-43013.md) | Routine | kernel-64kb: net/mlx5: lag: Check for LAG device before creating debugfs (bsc#1264011). | 5.5 | 0.0012 |  |
| [CVE-2026-43333](https://patchblox.com/security/data/cve/CVE-2026-43333.md) | Routine | kernel-64kb: bpf: reject direct access to nullable PTR_TO_BUF pointers (bsc#1264726). | 5.5 | 0.0012 |  |
| [CVE-2026-43359](https://patchblox.com/security/data/cve/CVE-2026-43359.md) | Routine | kernel-64kb: btrfs: fix transaction abort on set received ioctl due to item overflow (bsc#1264719). | 5.5 | 0.0012 |  |
| [CVE-2026-43361](https://patchblox.com/security/data/cve/CVE-2026-43361.md) | Routine | kernel-64kb: btrfs: fix transaction abort when snapshotting received subvolumes (bsc#1264722). | 5.5 | 0.0012 |  |
| [CVE-2026-31575](https://patchblox.com/security/data/cve/CVE-2026-31575.md) | Routine | mm/userfaultfd: fix hugetlb fault mutex hash calculation | 5.5 | 0.0012 |  |
| [CVE-2026-31736](https://patchblox.com/security/data/cve/CVE-2026-31736.md) | Routine | kernel-64kb: net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled (bsc#1263908). | 5.5 | 0.0012 |  |
| [CVE-2026-43012](https://patchblox.com/security/data/cve/CVE-2026-43012.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 |  |
| [CVE-2026-43325](https://patchblox.com/security/data/cve/CVE-2026-43325.md) | Routine | kernel-64kb: wifi: iwlwifi: mvm: don't send a 6E related command when not supported (bsc#1265110). | 5.5 | 0.0012 |  |
| [CVE-2026-23380](https://patchblox.com/security/data/cve/CVE-2026-23380.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 |  |
| [CVE-2026-43338](https://patchblox.com/security/data/cve/CVE-2026-43338.md) | Routine | btrfs: reserve enough transaction items for qgroup ioctls | 5.5 | 0.0012 |  |
| [CVE-2026-43054](https://patchblox.com/security/data/cve/CVE-2026-43054.md) | Routine | kernel-64kb: scsi: target: tcm_loop: Drain commands in target_reset handler (bsc#1264063). | 5.5 | 0.0011 |  |
| [CVE-2023-20585](https://patchblox.com/security/data/cve/CVE-2023-20585.md) | Routine | AMD: CVE-2023-20585 IOMMU Write Buffer Vulnerability | 5.3 | 0.0010 |  |
| [CVE-2026-31480](https://patchblox.com/security/data/cve/CVE-2026-31480.md) | Routine | tracing: Fix potential deadlock in cpu hotplug with osnoise | 5.5 | 0.0010 |  |
| [CVE-2026-43252](https://patchblox.com/security/data/cve/CVE-2026-43252.md) | Routine | kernel-64kb: mptcp: pm: in-kernel: always set ID as avail when rm endp (bsc#1264300). | 5.5 | 0.0010 |  |

---

Data as of 2026-11-11T07:45:43Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.