# SUSE-SU-2026:2482-1: Security update for 10 packages

SUSE-SU-2026:2482-1, released June 22, 2026, fixes 103 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2026-2482-1
- Platform: Linux
- Released: Jun 22, 2026
- Priority: High (Closes CVE-2026-43284, high severity)
- CVEs: 103, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:2482-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | sles 15.7 | 6.4.0-150700.53.60.1 |
| [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | sles 15.7 | 6.4.0-150700.53.60.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 15.7 | 6.4.0-150700.53.60.1 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 15.7 | 6.4.0-150700.53.60.1.150700.17.35.4 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 15.7 | 6.4.0-150700.53.60.1 |
| [kernel-livepatch-SLE15-SP7_Update_16](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp7-update-16.md) | sles 15.7 | 1-150700.15.3.2 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | sles 15.7 | 6.4.0-150700.53.60.2 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 15.7 | 6.4.0-150700.53.60.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 15.7 | 6.4.0-150700.53.60.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | sles 15.7 | 6.4.0-150700.53.60.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-43284](https://patchblox.com/security/data/cve/CVE-2026-43284.md) | High | xfrm: esp: avoid in-place decrypt on shared skb frags | 8.8 | 0.9419 |  |
| [CVE-2026-43499](https://patchblox.com/security/data/cve/CVE-2026-43499.md) | High | rtmutex: Use waiter::task instead of current in remove_waiter() | 7.8 | 0.0537 |  |
| [CVE-2026-43501](https://patchblox.com/security/data/cve/CVE-2026-43501.md) | High | ipv6: rpl: reserve mac_len headroom when recompressed SRH grows | 9.8 | 0.0073 |  |
| [CVE-2026-43407](https://patchblox.com/security/data/cve/CVE-2026-43407.md) | High | kernel-64kb: libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() (bsc#1265020). | 9.1 | 0.0066 |  |
| [CVE-2026-43406](https://patchblox.com/security/data/cve/CVE-2026-43406.md) | High | kernel-64kb: libceph: prevent potential out-of-bounds reads in process_message_header() (bsc#1265073). | 9.1 | 0.0061 |  |
| [CVE-2026-43414](https://patchblox.com/security/data/cve/CVE-2026-43414.md) | High | scsi: qla2xxx: Completely fix fcport double free | 9.8 | 0.0060 |  |
| [CVE-2026-45898](https://patchblox.com/security/data/cve/CVE-2026-45898.md) | High | kernel-64kb: RDMA/iwcm: Fix workqueue list corruption by removing work_list (bsc#1266888). | 9.8 | 0.0053 |  |
| [CVE-2026-46043](https://patchblox.com/security/data/cve/CVE-2026-46043.md) | High | RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv | 9.1 | 0.0051 |  |
| [CVE-2026-43341](https://patchblox.com/security/data/cve/CVE-2026-43341.md) | High | kernel-64kb: net/ipv6: ioam6: prevent schema length wraparound in trace fill (bsc#1265044). | 9.8 | 0.0051 |  |
| [CVE-2026-46110](https://patchblox.com/security/data/cve/CVE-2026-46110.md) | High | kernel-64kb: net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY() (bsc#1266759). | 7.5 | 0.0051 |  |
| [CVE-2026-31448](https://patchblox.com/security/data/cve/CVE-2026-31448.md) | High | ext4: avoid infinite loops caused by residual data | 9.4 | 0.0050 |  |
| [CVE-2026-46024](https://patchblox.com/security/data/cve/CVE-2026-46024.md) | High | libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() | 7.5 | 0.0049 |  |
| [CVE-2026-46114](https://patchblox.com/security/data/cve/CVE-2026-46114.md) | High | RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads | 8.8 | 0.0047 |  |
| [CVE-2026-46243](https://patchblox.com/security/data/cve/CVE-2026-46243.md) | High | smb: client: reject userspace cifs.spnego descriptions | 7.8 | 0.0041 |  |
| [CVE-2026-45843](https://patchblox.com/security/data/cve/CVE-2026-45843.md) | High | slip: bound decode() reads against the compressed packet length | 8.2 | 0.0040 |  |
| [CVE-2026-31613](https://patchblox.com/security/data/cve/CVE-2026-31613.md) | High | smb: client: fix OOB reads parsing symlink error response | 8.8 | 0.0039 |  |
| [CVE-2026-43296](https://patchblox.com/security/data/cve/CVE-2026-43296.md) | High | kernel-64kb: octeontx2-af: Workaround SQM/PSE stalls by disabling sticky (bsc#1264805). | 7.5 | 0.0039 |  |
| [CVE-2026-43249](https://patchblox.com/security/data/cve/CVE-2026-43249.md) | High | 9p/xen: protect xen_9pfs_front_free against concurrent calls | 8.8 | 0.0032 |  |
| [CVE-2026-31464](https://patchblox.com/security/data/cve/CVE-2026-31464.md) | High | scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() | 8.1 | 0.0028 |  |
| [CVE-2026-43362](https://patchblox.com/security/data/cve/CVE-2026-43362.md) | High | kernel-64kb: smb: client: fix in-place encryption corruption in SMB2_write() (bsc#1264989). | 8.1 | 0.0026 |  |
| [CVE-2026-31629](https://patchblox.com/security/data/cve/CVE-2026-31629.md) | High | nfc: llcp: add missing return after LLCP_CLOSED checks | 8.8 | 0.0025 |  |
| [CVE-2025-68324](https://patchblox.com/security/data/cve/CVE-2025-68324.md) | High | scsi: imm: Fix use-after-free bug caused by unfinished delayed work | 7.1 | 0.0023 |  |
| [CVE-2026-45878](https://patchblox.com/security/data/cve/CVE-2026-45878.md) | High | kernel-debug-devel: kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 | 7.8 | 0.0021 |  |
| [CVE-2026-45852](https://patchblox.com/security/data/cve/CVE-2026-45852.md) | High | kernel-default: RDMA/rxe: Fix double free in rxe_srq_from_init (bsc#1266711). | 8.8 | 0.0020 |  |
| [CVE-2026-46113](https://patchblox.com/security/data/cve/CVE-2026-46113.md) | High | kernel-zfcpdump-modules-extra: kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN | 8.8 | 0.0020 |  |
| [CVE-2026-45856](https://patchblox.com/security/data/cve/CVE-2026-45856.md) | High | kernel-64kb: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (bsc#1266720). | 8.8 | 0.0019 |  |
| [CVE-2026-45984](https://patchblox.com/security/data/cve/CVE-2026-45984.md) | High | kernel-default: gfs2: Move the inode glock locking to gfs2_file_buffered_write (bsc#1267214). | 7.8 | 0.0018 |  |
| [CVE-2026-45932](https://patchblox.com/security/data/cve/CVE-2026-45932.md) | High | bpf: Fix tcx/netkit detach permissions when prog fd isn't given | 7.3 | 0.0017 |  |
| [CVE-2026-23327](https://patchblox.com/security/data/cve/CVE-2026-23327.md) | High | cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() | 7.1 | 0.0017 |  |
| [CVE-2026-43059](https://patchblox.com/security/data/cve/CVE-2026-43059.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2026-43009](https://patchblox.com/security/data/cve/CVE-2026-43009.md) | High | bpf: Fix incorrect pruning due to atomic fetch precision tracking | 7.8 | 0.0016 |  |
| [CVE-2026-31493](https://patchblox.com/security/data/cve/CVE-2026-31493.md) | High | RDMA/efa: Fix use of completion ctx after free | 7.8 | 0.0016 |  |
| [CVE-2026-45886](https://patchblox.com/security/data/cve/CVE-2026-45886.md) | High | kernel-default: bpf: Fix bpf_xdp_store_bytes proto for read-only arg (bsc#1266810). | 7.0 | 0.0016 |  |
| [CVE-2026-46111](https://patchblox.com/security/data/cve/CVE-2026-46111.md) | High | Bluetooth: hci_conn: fix potential UAF in create_big_sync | 7.8 | 0.0016 |  |
| [CVE-2026-46181](https://patchblox.com/security/data/cve/CVE-2026-46181.md) | High | RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() | 8.8 | 0.0014 |  |
| [CVE-2026-46209](https://patchblox.com/security/data/cve/CVE-2026-46209.md) | High | kernel-uek-debug: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (Ashutosh Desai) [Orabug: 39460... | 8.4 | 0.0014 |  |
| [CVE-2026-46176](https://patchblox.com/security/data/cve/CVE-2026-46176.md) | High | RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() | 7.8 | 0.0014 |  |
| [CVE-2026-46021](https://patchblox.com/security/data/cve/CVE-2026-46021.md) | High | thermal: core: Fix thermal zone governor cleanup issues | 7.0 | 0.0014 |  |
| [CVE-2026-23444](https://patchblox.com/security/data/cve/CVE-2026-23444.md) | High | wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure | 7.1 | 0.0014 |  |
| [CVE-2026-23359](https://patchblox.com/security/data/cve/CVE-2026-23359.md) | High | bpf: Fix stack-out-of-bounds write in devmap | 7.8 | 0.0014 |  |
| [CVE-2026-31446](https://patchblox.com/security/data/cve/CVE-2026-31446.md) | High | ext4: fix use-after-free in update_super_work when racing with umount | 7.8 | 0.0014 |  |
| [CVE-2026-43150](https://patchblox.com/security/data/cve/CVE-2026-43150.md) | High | kernel-64kb: perf/arm-cmn: Ensure dtm_idx is big enough (bsc#1264415). | 7.8 | 0.0014 |  |
| [CVE-2026-43206](https://patchblox.com/security/data/cve/CVE-2026-43206.md) | High | kernel-core: kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() | 7.8 | 0.0014 |  |
| [CVE-2026-43030](https://patchblox.com/security/data/cve/CVE-2026-43030.md) | High | kernel-64kb: bpf: Fix regsafe() for pointers to packet (bsc#1264000). | 7.8 | 0.0014 |  |
| [CVE-2026-31678](https://patchblox.com/security/data/cve/CVE-2026-31678.md) | High | openvswitch: defer tunnel netdev_put to RCU release | 8.8 | 0.0013 |  |
| [CVE-2026-31673](https://patchblox.com/security/data/cve/CVE-2026-31673.md) | High | af_unix: read UNIX_DIAG_VFS data under unix_state_lock | 7.8 | 0.0013 |  |
| [CVE-2026-46004](https://patchblox.com/security/data/cve/CVE-2026-46004.md) | High | ALSA: caiaq: Handle probe errors properly | 7.8 | 0.0013 |  |
| [CVE-2026-31518](https://patchblox.com/security/data/cve/CVE-2026-31518.md) | High | esp: fix skb leak with espintcp and async crypto | 7.1 | 0.0013 |  |
| [CVE-2026-43040](https://patchblox.com/security/data/cve/CVE-2026-43040.md) | High | kernel-64kb: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info- | 7.1 | 0.0013 |  |
| [CVE-2026-31396](https://patchblox.com/security/data/cve/CVE-2026-31396.md) | High | kernel-64kb: net: macb: fix use-after-free access to PTP clock (bsc#1261791). | 7.8 | 0.0013 |  |
| [CVE-2026-45970](https://patchblox.com/security/data/cve/CVE-2026-45970.md) | High | kernel-livepatch-SLE15-SP6_Update_12: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206). | 8.8 | 0.0013 |  |
| [CVE-2026-31454](https://patchblox.com/security/data/cve/CVE-2026-31454.md) | High | xfs: save ailp before dropping the AIL lock in push callbacks | 7.8 | 0.0013 |  |
| [CVE-2026-31455](https://patchblox.com/security/data/cve/CVE-2026-31455.md) | High | xfs: stop reclaim before pushing AIL during unmount | 7.8 | 0.0013 |  |
| [CVE-2026-31758](https://patchblox.com/security/data/cve/CVE-2026-31758.md) | High | kernel-default-base: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264093). | 7.8 | 0.0013 |  |
| [CVE-2026-31614](https://patchblox.com/security/data/cve/CVE-2026-31614.md) | High | kernel-64kb: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774). | 7.1 | 0.0013 |  |
| [CVE-2026-31774](https://patchblox.com/security/data/cve/CVE-2026-31774.md) | High | kernel-64kb: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() (bsc#1264040). | 7.1 | 0.0013 |  |
| [CVE-2026-45910](https://patchblox.com/security/data/cve/CVE-2026-45910.md) | High | kernel-default: RDMA/rxe: Fix race condition in QP timer handlers (bsc#1266889). | 8.8 | 0.0013 |  |
| [CVE-2026-46094](https://patchblox.com/security/data/cve/CVE-2026-46094.md) | High | ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access | 7.1 | 0.0013 |  |
| [CVE-2026-43052](https://patchblox.com/security/data/cve/CVE-2026-43052.md) | High | wifi: mac80211: check tdls flag in ieee80211_tdls_oper | 7.1 | 0.0012 |  |
| [CVE-2026-45983](https://patchblox.com/security/data/cve/CVE-2026-45983.md) | High | kernel-64kb: nfsd: never defer requests during idmap lookup (bsc#1266697). | 7.0 | 0.0012 |  |
| [CVE-2026-31591](https://patchblox.com/security/data/cve/CVE-2026-31591.md) | High | KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish | 7.0 | 0.0012 |  |
| [CVE-2026-31703](https://patchblox.com/security/data/cve/CVE-2026-31703.md) | High | kernel-64kb: writeback: Fix use after free in inode_switch_wbs_work_fn() (bsc#1263883). | 7.8 | 0.0012 |  |
| [CVE-2026-43109](https://patchblox.com/security/data/cve/CVE-2026-43109.md) | High | x86: shadow stacks: proper error handling for mmap lock | 7.1 | 0.0011 |  |
| [CVE-2026-46090](https://patchblox.com/security/data/cve/CVE-2026-46090.md) | High | ALSA: aloop: Fix peer runtime UAF during format-change stop | 7.8 | 0.0010 |  |
| [CVE-2026-31516](https://patchblox.com/security/data/cve/CVE-2026-31516.md) | High | xfrm: prevent policy_hthresh.work from racing with netns teardown | 7.8 | 0.0010 |  |
| [CVE-2026-46157](https://patchblox.com/security/data/cve/CVE-2026-46157.md) | High | ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger | 7.8 | 0.0010 |  |
| [CVE-2026-31473](https://patchblox.com/security/data/cve/CVE-2026-31473.md) | High | media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex | 7.8 | 0.0010 |  |
| [CVE-2026-3150](https://patchblox.com/security/data/cve/CVE-2026-3150.md) | Routine | kernel-64kb: bcache: fix cached_dev.sb_bio use-after-free and crash (bsc#1263169). | n/a | 0.0030 |  |
| [CVE-2025-38549](https://patchblox.com/security/data/cve/CVE-2025-38549.md) | Routine | kernel-64kb: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235). | 5.5 | 0.0016 |  |
| [CVE-2026-43360](https://patchblox.com/security/data/cve/CVE-2026-43360.md) | Routine | kernel-64kb: btrfs: fix transaction abort on file creation due to name hash collision (bsc#1264720). | 5.5 | 0.0016 |  |
| [CVE-2026-31767](https://patchblox.com/security/data/cve/CVE-2026-31767.md) | Routine | drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode | 5.5 | 0.0016 |  |
| [CVE-2026-43234](https://patchblox.com/security/data/cve/CVE-2026-43234.md) | Routine | team: avoid NETDEV_CHANGEMTU event when unregistering slave | 5.5 | 0.0016 |  |
| [CVE-2026-46079](https://patchblox.com/security/data/cve/CVE-2026-46079.md) | Routine | rbd: fix null-ptr-deref when device_add_disk() fails | 5.5 | 0.0014 |  |
| [CVE-2026-23438](https://patchblox.com/security/data/cve/CVE-2026-23438.md) | Routine | net: mvpp2: guard flow control update with global_tx_fc in buffer switching | 5.5 | 0.0013 |  |
| [CVE-2026-31596](https://patchblox.com/security/data/cve/CVE-2026-31596.md) | Routine | ocfs2: handle invalid dinode in ocfs2_group_extend | 6.6 | 0.0013 |  |
| [CVE-2026-23303](https://patchblox.com/security/data/cve/CVE-2026-23303.md) | Routine | smb: client: Don't log plaintext credentials in cifs_set_cifscreds | 5.5 | 0.0013 |  |
| [CVE-2026-43026](https://patchblox.com/security/data/cve/CVE-2026-43026.md) | Routine | kernel-64kb: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932). | 6.1 | 0.0013 |  |
| [CVE-2026-31546](https://patchblox.com/security/data/cve/CVE-2026-31546.md) | Routine | net: bonding: fix NULL deref in bond_debug_rlb_hash_show | 5.5 | 0.0013 |  |
| [CVE-2026-45842](https://patchblox.com/security/data/cve/CVE-2026-45842.md) | Routine | slip: reject VJ receive packets on instances with no rstate array | 5.5 | 0.0013 |  |
| [CVE-2026-43261](https://patchblox.com/security/data/cve/CVE-2026-43261.md) | Routine | kernel-64kb: arm64: Add support for TSV110 Spectre-BHB mitigation (bsc#1264430). | 5.5 | 0.0013 |  |
| [CVE-2026-45846](https://patchblox.com/security/data/cve/CVE-2026-45846.md) | Routine | bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() | 5.5 | 0.0013 |  |
| [CVE-2026-31590](https://patchblox.com/security/data/cve/CVE-2026-31590.md) | Routine | KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION | 5.5 | 0.0013 |  |
| [CVE-2026-43013](https://patchblox.com/security/data/cve/CVE-2026-43013.md) | Routine | kernel-64kb: net/mlx5: lag: Check for LAG device before creating debugfs (bsc#1264011). | 5.5 | 0.0012 |  |
| [CVE-2026-43333](https://patchblox.com/security/data/cve/CVE-2026-43333.md) | Routine | kernel-64kb: bpf: reject direct access to nullable PTR_TO_BUF pointers (bsc#1264726). | 5.5 | 0.0012 |  |
| [CVE-2026-43359](https://patchblox.com/security/data/cve/CVE-2026-43359.md) | Routine | kernel-64kb: btrfs: fix transaction abort on set received ioctl due to item overflow (bsc#1264719). | 5.5 | 0.0012 |  |
| [CVE-2026-43361](https://patchblox.com/security/data/cve/CVE-2026-43361.md) | Routine | kernel-64kb: btrfs: fix transaction abort when snapshotting received subvolumes (bsc#1264722). | 5.5 | 0.0012 |  |
| [CVE-2026-43411](https://patchblox.com/security/data/cve/CVE-2026-43411.md) | Routine | kernel-64kb: tipc: fix divide-by-zero in tipc_sk_filter_connect() (bsc#1264672). | 5.5 | 0.0012 |  |
| [CVE-2026-43413](https://patchblox.com/security/data/cve/CVE-2026-43413.md) | Routine | kernel-64kb: scsi: hisi_sas: Fix NULL pointer exception during user_scan() (bsc#1264671). | 5.5 | 0.0012 |  |
| [CVE-2026-46083](https://patchblox.com/security/data/cve/CVE-2026-46083.md) | Routine | spi: fix resource leaks on device setup failure | 5.5 | 0.0012 |  |
| [CVE-2026-43325](https://patchblox.com/security/data/cve/CVE-2026-43325.md) | Routine | kernel-64kb: wifi: iwlwifi: mvm: don't send a 6E related command when not supported (bsc#1265110). | 5.5 | 0.0012 |  |
| [CVE-2026-31671](https://patchblox.com/security/data/cve/CVE-2026-31671.md) | Routine | xfrm_user: fix info leak in build_report() | 5.5 | 0.0012 |  |
| [CVE-2026-43065](https://patchblox.com/security/data/cve/CVE-2026-43065.md) | Routine | kernel-64kb: ext4: always drain queued discard work in ext4_mb_release() (bsc#1264243). | 5.5 | 0.0012 |  |
| [CVE-2026-43066](https://patchblox.com/security/data/cve/CVE-2026-43066.md) | Routine | kernel-64kb: ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (bsc#1264245). | 5.5 | 0.0012 |  |
| [CVE-2026-43068](https://patchblox.com/security/data/cve/CVE-2026-43068.md) | Routine | kernel-64kb: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (bsc#1264255). | 5.5 | 0.0012 |  |
| [CVE-2026-43470](https://patchblox.com/security/data/cve/CVE-2026-43470.md) | Routine | kernel-64kb: nfs: return EISDIR on nfs3_proc_create if d_alias is a dir (bsc#1265128). | 5.5 | 0.0012 |  |
| [CVE-2026-43338](https://patchblox.com/security/data/cve/CVE-2026-43338.md) | Routine | btrfs: reserve enough transaction items for qgroup ioctls | 5.5 | 0.0012 |  |
| [CVE-2026-31655](https://patchblox.com/security/data/cve/CVE-2026-31655.md) | Routine | pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled | 5.5 | 0.0011 |  |
| [CVE-2026-43054](https://patchblox.com/security/data/cve/CVE-2026-43054.md) | Routine | kernel-64kb: scsi: target: tcm_loop: Drain commands in target_reset handler (bsc#1264063). | 5.5 | 0.0011 |  |
| [CVE-2026-43455](https://patchblox.com/security/data/cve/CVE-2026-43455.md) | Routine | kernel-64kb: net: mctp: Ensure keys maintain only one ref to corresponding dev (bsc#1264765). | 5.5 | 0.0011 |  |
| [CVE-2026-43483](https://patchblox.com/security/data/cve/CVE-2026-43483.md) | Routine | kernel-64kb: KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (bsc#1265240). | 5.5 | 0.0011 |  |
| [CVE-2026-46159](https://patchblox.com/security/data/cve/CVE-2026-46159.md) | Routine | btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak | 5.5 | 0.0010 |  |
| [CVE-2026-31480](https://patchblox.com/security/data/cve/CVE-2026-31480.md) | Routine | tracing: Fix potential deadlock in cpu hotplug with osnoise | 5.5 | 0.0010 |  |
| [CVE-2026-43252](https://patchblox.com/security/data/cve/CVE-2026-43252.md) | Routine | kernel-64kb: mptcp: pm: in-kernel: always set ID as avail when rm endp (bsc#1264300). | 5.5 | 0.0010 |  |

---

Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.