{
  "fix": "SUSE-SU-2026:2632-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2026-2632-1",
  "summary": "SUSE-SU-2026:2632-1, released June 25, 2026, fixes 27 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 7 packages",
  "released": "2026-06-25T12:36:07Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2025-10263, rated Critical",
  "supported": true,
  "cveCount": 27,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00544,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2026:2632-1",
  "appliesTo": [
    {
      "product": "kernel-default",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.118.1",
      "supported": true
    },
    {
      "product": "kernel-default-base",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.118.1.150600.12.56.1",
      "supported": true
    },
    {
      "product": "kernel-docs",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-docs",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.118.1",
      "supported": true
    },
    {
      "product": "kernel-livepatch-SLE15-SP6_Update_28",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-sle15-sp6-update-28",
      "release": "sles 15.6",
      "fixedVersion": "1-150600.13.3.1",
      "supported": true
    },
    {
      "product": "kernel-obs-build",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-build",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.118.1",
      "supported": true
    },
    {
      "product": "kernel-source",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-source",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.118.1",
      "supported": true
    },
    {
      "product": "kernel-syms",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-syms",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.118.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-10263",
      "url": "https://patchblox.com/security/cve/CVE-2025-10263",
      "title": "ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel]",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.3,
      "epss": 0.00544,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46037",
      "url": "https://patchblox.com/security/cve/CVE-2026-46037",
      "title": "ipv4: icmp: validate reply type before using icmp_pointers",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.2,
      "epss": 0.00512,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43074",
      "url": "https://patchblox.com/security/cve/CVE-2026-43074",
      "title": "kernel-source: eventpoll: defer struct eventpoll free to RCU grace period (bsc#1264263).",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.8,
      "epss": 0.00482,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46273",
      "url": "https://patchblox.com/security/cve/CVE-2026-46273",
      "title": "ibmveth: Disable GSO for packets with small MSS",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.6,
      "epss": 0.00389,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31771",
      "url": "https://patchblox.com/security/cve/CVE-2026-31771",
      "title": "Bluetooth: hci_event: move wake reason storage into validated event handlers",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.0032,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43198",
      "url": "https://patchblox.com/security/cve/CVE-2026-43198",
      "title": "tcp: fix potential race in tcp_v6_syn_recv_sock()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00298,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68324",
      "url": "https://patchblox.com/security/cve/CVE-2025-68324",
      "title": "scsi: imm: Fix use-after-free bug caused by unfinished delayed work",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00228,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45878",
      "url": "https://patchblox.com/security/cve/CVE-2026-45878",
      "title": "kernel-debug-devel: kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00207,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45984",
      "url": "https://patchblox.com/security/cve/CVE-2026-45984",
      "title": "kernel-default: gfs2: Move the inode glock locking to gfs2_file_buffered_write (bsc#1267214).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45932",
      "url": "https://patchblox.com/security/cve/CVE-2026-45932",
      "title": "bpf: Fix tcx/netkit detach permissions when prog fd isn\u0027t given",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.3,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23392",
      "url": "https://patchblox.com/security/cve/CVE-2026-23392",
      "title": "netfilter: nf_tables: release flowtable after rcu grace period on error",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45886",
      "url": "https://patchblox.com/security/cve/CVE-2026-45886",
      "title": "kernel-default: bpf: Fix bpf_xdp_store_bytes proto for read-only arg (bsc#1266810).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46209",
      "url": "https://patchblox.com/security/cve/CVE-2026-46209",
      "title": "kernel-uek-debug: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (Ashutosh Desai) [Orabug: 39460...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 8.4,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46123",
      "url": "https://patchblox.com/security/cve/CVE-2026-46123",
      "title": "kernel-default: Bluetooth: virtio_bt: clamp rx length before skb_put (bsc#1267621).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46197",
      "url": "https://patchblox.com/security/cve/CVE-2026-46197",
      "title": "drm/amdkfd: validate SVM ioctl nattr against buffer size",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31697",
      "url": "https://patchblox.com/security/cve/CVE-2026-31697",
      "title": "crypto: ccp: Don\u0027t attempt to copy ID to userspace if PSP command failed",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31698",
      "url": "https://patchblox.com/security/cve/CVE-2026-31698",
      "title": "crypto: ccp: Don\u0027t attempt to copy PDH cert to userspace if PSP command failed",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31699",
      "url": "https://patchblox.com/security/cve/CVE-2026-31699",
      "title": "crypto: ccp: Don\u0027t attempt to copy CSR to userspace if PSP command failed",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46150",
      "url": "https://patchblox.com/security/cve/CVE-2026-46150",
      "title": "fanotify: fix false positive on permission events",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31759",
      "url": "https://patchblox.com/security/cve/CVE-2026-31759",
      "title": "kernel-default: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264076).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46120",
      "url": "https://patchblox.com/security/cve/CVE-2026-46120",
      "title": "kernel: kernel: ip6_gre: Use cached t-\u003Enet in ip6erspan_changelink()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31500",
      "url": "https://patchblox.com/security/cve/CVE-2026-31500",
      "title": "Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43077",
      "url": "https://patchblox.com/security/cve/CVE-2026-43077",
      "title": "kernel-default: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1264470).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46227",
      "url": "https://patchblox.com/security/cve/CVE-2026-46227",
      "title": "sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.4,
      "epss": 0.00104,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46090",
      "url": "https://patchblox.com/security/cve/CVE-2026-46090",
      "title": "ALSA: aloop: Fix peer runtime UAF during format-change stop",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00104,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43023",
      "url": "https://patchblox.com/security/cve/CVE-2026-43023",
      "title": "kernel-default: Bluetooth: SCO: fix race conditions in sco_sock_connect() (bsc#1264137).",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00097,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46159",
      "url": "https://patchblox.com/security/cve/CVE-2026-46159",
      "title": "btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00098,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T01:43:54Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}