# SUSE-SU-2026:22127-1: Security update for 10 packages

SUSE-SU-2026:22127-1, released June 15, 2026, fixes 60 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2026-22127-1
- Platform: Linux
- Released: Jun 15, 2026
- Priority: High (Closes CVE-2026-43197, high severity)
- CVEs: 60, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:22127-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | sles 16.0 | 6.12.0-160000.35.1 |
| [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | sles 16.0 | 6.12.0-160000.35.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 16.0 | 6.12.0-160000.35.1 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 16.0 | 6.12.0-160000.35.1.160000.2.16 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 16.0 | 6.12.0-160000.35.1 |
| [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | sles 16.0 | 6.12.0-160000.35.1 |
| [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | sles 16.0 | 6.12.0-160000.35.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 16.0 | 6.12.0-160000.35.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 16.0 | 6.12.0-160000.35.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | sles 16.0 | 6.12.0-160000.35.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-43197](https://patchblox.com/security/data/cve/CVE-2026-43197.md) | High | netconsole: avoid OOB reads, msg is not nul-terminated | 9.1 | 0.0058 |  |
| [CVE-2026-45898](https://patchblox.com/security/data/cve/CVE-2026-45898.md) | High | kernel-64kb: RDMA/iwcm: Fix workqueue list corruption by removing work_list (bsc#1266888). | 9.8 | 0.0053 |  |
| [CVE-2026-46043](https://patchblox.com/security/data/cve/CVE-2026-46043.md) | High | RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv | 9.1 | 0.0051 |  |
| [CVE-2026-31448](https://patchblox.com/security/data/cve/CVE-2026-31448.md) | High | ext4: avoid infinite loops caused by residual data | 9.4 | 0.0050 |  |
| [CVE-2026-46114](https://patchblox.com/security/data/cve/CVE-2026-46114.md) | High | RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads | 8.8 | 0.0047 |  |
| [CVE-2026-43184](https://patchblox.com/security/data/cve/CVE-2026-43184.md) | High | kernel-64kb: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622). | 7.5 | 0.0044 |  |
| [CVE-2026-46316](https://patchblox.com/security/data/cve/CVE-2026-46316.md) | High | kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] | 9.3 | 0.0034 |  |
| [CVE-2026-45852](https://patchblox.com/security/data/cve/CVE-2026-45852.md) | High | kernel-default: RDMA/rxe: Fix double free in rxe_srq_from_init (bsc#1266711). | 8.8 | 0.0020 |  |
| [CVE-2026-45856](https://patchblox.com/security/data/cve/CVE-2026-45856.md) | High | kernel-64kb: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (bsc#1266720). | 8.8 | 0.0019 |  |
| [CVE-2026-45984](https://patchblox.com/security/data/cve/CVE-2026-45984.md) | High | kernel-default: gfs2: Move the inode glock locking to gfs2_file_buffered_write (bsc#1267214). | 7.8 | 0.0018 |  |
| [CVE-2026-45932](https://patchblox.com/security/data/cve/CVE-2026-45932.md) | High | bpf: Fix tcx/netkit detach permissions when prog fd isn't given | 7.3 | 0.0017 |  |
| [CVE-2026-23327](https://patchblox.com/security/data/cve/CVE-2026-23327.md) | High | cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() | 7.1 | 0.0017 |  |
| [CVE-2026-43332](https://patchblox.com/security/data/cve/CVE-2026-43332.md) | High | kernel-doc: kernel: thermal: core: Fix thermal zone device registration error path | 7.8 | 0.0016 |  |
| [CVE-2026-45886](https://patchblox.com/security/data/cve/CVE-2026-45886.md) | High | kernel-default: bpf: Fix bpf_xdp_store_bytes proto for read-only arg (bsc#1266810). | 7.0 | 0.0016 |  |
| [CVE-2026-46181](https://patchblox.com/security/data/cve/CVE-2026-46181.md) | High | RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() | 8.8 | 0.0014 |  |
| [CVE-2026-46176](https://patchblox.com/security/data/cve/CVE-2026-46176.md) | High | RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() | 7.8 | 0.0014 |  |
| [CVE-2026-46021](https://patchblox.com/security/data/cve/CVE-2026-46021.md) | High | thermal: core: Fix thermal zone governor cleanup issues | 7.0 | 0.0014 |  |
| [CVE-2026-31446](https://patchblox.com/security/data/cve/CVE-2026-31446.md) | High | ext4: fix use-after-free in update_super_work when racing with umount | 7.8 | 0.0014 |  |
| [CVE-2026-43150](https://patchblox.com/security/data/cve/CVE-2026-43150.md) | High | kernel-64kb: perf/arm-cmn: Ensure dtm_idx is big enough (bsc#1264415). | 7.8 | 0.0014 |  |
| [CVE-2026-31401](https://patchblox.com/security/data/cve/CVE-2026-31401.md) | High | kernel-64kb: HID: bpf: prevent buffer overflow in hid_hw_request (bsc#1261603). | 7.8 | 0.0014 |  |
| [CVE-2026-43030](https://patchblox.com/security/data/cve/CVE-2026-43030.md) | High | kernel-64kb: bpf: Fix regsafe() for pointers to packet (bsc#1264000). | 7.8 | 0.0014 |  |
| [CVE-2026-31518](https://patchblox.com/security/data/cve/CVE-2026-31518.md) | High | esp: fix skb leak with espintcp and async crypto | 7.1 | 0.0013 |  |
| [CVE-2026-43040](https://patchblox.com/security/data/cve/CVE-2026-43040.md) | High | kernel-64kb: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info- | 7.1 | 0.0013 |  |
| [CVE-2026-45942](https://patchblox.com/security/data/cve/CVE-2026-45942.md) | High | ext4: fix e4b bitmap inconsistency reports | 8.8 | 0.0013 |  |
| [CVE-2026-31396](https://patchblox.com/security/data/cve/CVE-2026-31396.md) | High | kernel-64kb: net: macb: fix use-after-free access to PTP clock (bsc#1261791). | 7.8 | 0.0013 |  |
| [CVE-2026-45970](https://patchblox.com/security/data/cve/CVE-2026-45970.md) | High | kernel-livepatch-SLE15-SP6_Update_12: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206). | 8.8 | 0.0013 |  |
| [CVE-2026-46317](https://patchblox.com/security/data/cve/CVE-2026-46317.md) | High | kernel: kernel: KVM: arm64: Reassign nested_mmus array behind mmu_lock | 8.8 | 0.0013 |  |
| [CVE-2026-31454](https://patchblox.com/security/data/cve/CVE-2026-31454.md) | High | xfs: save ailp before dropping the AIL lock in push callbacks | 7.8 | 0.0013 |  |
| [CVE-2026-31455](https://patchblox.com/security/data/cve/CVE-2026-31455.md) | High | xfs: stop reclaim before pushing AIL during unmount | 7.8 | 0.0013 |  |
| [CVE-2026-31584](https://patchblox.com/security/data/cve/CVE-2026-31584.md) | High | media: mediatek: vcodec: fix use-after-free in encoder release path | 7.8 | 0.0013 |  |
| [CVE-2026-43063](https://patchblox.com/security/data/cve/CVE-2026-43063.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 |  |
| [CVE-2026-31774](https://patchblox.com/security/data/cve/CVE-2026-31774.md) | High | kernel-64kb: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() (bsc#1264040). | 7.1 | 0.0013 |  |
| [CVE-2026-45910](https://patchblox.com/security/data/cve/CVE-2026-45910.md) | High | kernel-default: RDMA/rxe: Fix race condition in QP timer handlers (bsc#1266889). | 8.8 | 0.0013 |  |
| [CVE-2026-46094](https://patchblox.com/security/data/cve/CVE-2026-46094.md) | High | ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access | 7.1 | 0.0013 |  |
| [CVE-2026-31683](https://patchblox.com/security/data/cve/CVE-2026-31683.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0012 |  |
| [CVE-2026-31648](https://patchblox.com/security/data/cve/CVE-2026-31648.md) | High | mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() | 7.8 | 0.0012 |  |
| [CVE-2026-31703](https://patchblox.com/security/data/cve/CVE-2026-31703.md) | High | kernel-64kb: writeback: Fix use after free in inode_switch_wbs_work_fn() (bsc#1263883). | 7.8 | 0.0012 |  |
| [CVE-2026-43109](https://patchblox.com/security/data/cve/CVE-2026-43109.md) | High | x86: shadow stacks: proper error handling for mmap lock | 7.1 | 0.0011 |  |
| [CVE-2026-46090](https://patchblox.com/security/data/cve/CVE-2026-46090.md) | High | ALSA: aloop: Fix peer runtime UAF during format-change stop | 7.8 | 0.0010 |  |
| [CVE-2026-31562](https://patchblox.com/security/data/cve/CVE-2026-31562.md) | Routine | kernel-64kb: drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register (bsc#1263058). | 5.5 | 0.0016 |  |
| [CVE-2026-31645](https://patchblox.com/security/data/cve/CVE-2026-31645.md) | Routine | net: lan966x: fix page pool leak in error paths | 5.5 | 0.0016 |  |
| [CVE-2026-23438](https://patchblox.com/security/data/cve/CVE-2026-23438.md) | Routine | net: mvpp2: guard flow control update with global_tx_fc in buffer switching | 5.5 | 0.0013 |  |
| [CVE-2026-23303](https://patchblox.com/security/data/cve/CVE-2026-23303.md) | Routine | smb: client: Don't log plaintext credentials in cifs_set_cifscreds | 5.5 | 0.0013 |  |
| [CVE-2026-43026](https://patchblox.com/security/data/cve/CVE-2026-43026.md) | Routine | kernel-64kb: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932). | 6.1 | 0.0013 |  |
| [CVE-2026-31546](https://patchblox.com/security/data/cve/CVE-2026-31546.md) | Routine | net: bonding: fix NULL deref in bond_debug_rlb_hash_show | 5.5 | 0.0013 |  |
| [CVE-2026-45842](https://patchblox.com/security/data/cve/CVE-2026-45842.md) | Routine | slip: reject VJ receive packets on instances with no rstate array | 5.5 | 0.0013 |  |
| [CVE-2026-45846](https://patchblox.com/security/data/cve/CVE-2026-45846.md) | Routine | bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() | 5.5 | 0.0013 |  |
| [CVE-2026-43411](https://patchblox.com/security/data/cve/CVE-2026-43411.md) | Routine | kernel-64kb: tipc: fix divide-by-zero in tipc_sk_filter_connect() (bsc#1264672). | 5.5 | 0.0012 |  |
| [CVE-2026-46083](https://patchblox.com/security/data/cve/CVE-2026-46083.md) | Routine | spi: fix resource leaks on device setup failure | 5.5 | 0.0012 |  |
| [CVE-2026-31556](https://patchblox.com/security/data/cve/CVE-2026-31556.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 |  |
| [CVE-2026-43393](https://patchblox.com/security/data/cve/CVE-2026-43393.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 |  |
| [CVE-2026-43394](https://patchblox.com/security/data/cve/CVE-2026-43394.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 |  |
| [CVE-2026-23254](https://patchblox.com/security/data/cve/CVE-2026-23254.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 |  |
| [CVE-2026-31671](https://patchblox.com/security/data/cve/CVE-2026-31671.md) | Routine | xfrm_user: fix info leak in build_report() | 5.5 | 0.0012 |  |
| [CVE-2026-43065](https://patchblox.com/security/data/cve/CVE-2026-43065.md) | Routine | kernel-64kb: ext4: always drain queued discard work in ext4_mb_release() (bsc#1264243). | 5.5 | 0.0012 |  |
| [CVE-2026-43066](https://patchblox.com/security/data/cve/CVE-2026-43066.md) | Routine | kernel-64kb: ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (bsc#1264245). | 5.5 | 0.0012 |  |
| [CVE-2026-43068](https://patchblox.com/security/data/cve/CVE-2026-43068.md) | Routine | kernel-64kb: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (bsc#1264255). | 5.5 | 0.0012 |  |
| [CVE-2026-31655](https://patchblox.com/security/data/cve/CVE-2026-31655.md) | Routine | pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled | 5.5 | 0.0011 |  |
| [CVE-2026-43455](https://patchblox.com/security/data/cve/CVE-2026-43455.md) | Routine | kernel-64kb: net: mctp: Ensure keys maintain only one ref to corresponding dev (bsc#1264765). | 5.5 | 0.0011 |  |
| [CVE-2026-46159](https://patchblox.com/security/data/cve/CVE-2026-46159.md) | Routine | btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak | 5.5 | 0.0010 |  |

---

Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.