# SUSE-SU-2026:2632-1: Security update for 7 packages SUSE-SU-2026:2632-1, released June 25, 2026, fixes 27 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/suse-su-2026-2632-1 - Platform: Linux - Released: Jun 25, 2026 - Priority: Urgent (Closes CVE-2025-10263, rated Critical) - CVEs: 27, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:2632-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 15.6 | 6.4.0-150600.23.118.1 | | [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 15.6 | 6.4.0-150600.23.118.1.150600.12.56.1 | | [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 15.6 | 6.4.0-150600.23.118.1 | | [kernel-livepatch-SLE15-SP6_Update_28](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp6-update-28.md) | sles 15.6 | 1-150600.13.3.1 | | [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | sles 15.6 | 6.4.0-150600.23.118.1 | | [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 15.6 | 6.4.0-150600.23.118.1 | | [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 15.6 | 6.4.0-150600.23.118.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-10263](https://patchblox.com/security/data/cve/CVE-2025-10263.md) | Urgent | ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel] | 9.3 | 0.0054 | | | [CVE-2026-46037](https://patchblox.com/security/data/cve/CVE-2026-46037.md) | High | ipv4: icmp: validate reply type before using icmp_pointers | 8.2 | 0.0051 | | | [CVE-2026-43074](https://patchblox.com/security/data/cve/CVE-2026-43074.md) | High | kernel-source: eventpoll: defer struct eventpoll free to RCU grace period (bsc#1264263). | 7.8 | 0.0048 | | | [CVE-2026-46273](https://patchblox.com/security/data/cve/CVE-2026-46273.md) | High | ibmveth: Disable GSO for packets with small MSS | 8.6 | 0.0039 | | | [CVE-2026-31771](https://patchblox.com/security/data/cve/CVE-2026-31771.md) | High | Bluetooth: hci_event: move wake reason storage into validated event handlers | 8.1 | 0.0032 | | | [CVE-2026-43198](https://patchblox.com/security/data/cve/CVE-2026-43198.md) | High | tcp: fix potential race in tcp_v6_syn_recv_sock() | 9.8 | 0.0030 | | | [CVE-2025-68324](https://patchblox.com/security/data/cve/CVE-2025-68324.md) | High | scsi: imm: Fix use-after-free bug caused by unfinished delayed work | 7.1 | 0.0023 | | | [CVE-2026-45878](https://patchblox.com/security/data/cve/CVE-2026-45878.md) | High | kernel-debug-devel: kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 | 7.8 | 0.0021 | | | [CVE-2026-45984](https://patchblox.com/security/data/cve/CVE-2026-45984.md) | High | kernel-default: gfs2: Move the inode glock locking to gfs2_file_buffered_write (bsc#1267214). | 7.8 | 0.0018 | | | [CVE-2026-45932](https://patchblox.com/security/data/cve/CVE-2026-45932.md) | High | bpf: Fix tcx/netkit detach permissions when prog fd isn't given | 7.3 | 0.0017 | | | [CVE-2026-23392](https://patchblox.com/security/data/cve/CVE-2026-23392.md) | High | netfilter: nf_tables: release flowtable after rcu grace period on error | 8.8 | 0.0017 | | | [CVE-2026-45886](https://patchblox.com/security/data/cve/CVE-2026-45886.md) | High | kernel-default: bpf: Fix bpf_xdp_store_bytes proto for read-only arg (bsc#1266810). | 7.0 | 0.0016 | | | [CVE-2026-46209](https://patchblox.com/security/data/cve/CVE-2026-46209.md) | High | kernel-uek-debug: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (Ashutosh Desai) [Orabug: 39460... | 8.4 | 0.0014 | | | [CVE-2026-46123](https://patchblox.com/security/data/cve/CVE-2026-46123.md) | High | kernel-default: Bluetooth: virtio_bt: clamp rx length before skb_put (bsc#1267621). | 8.1 | 0.0014 | | | [CVE-2026-46197](https://patchblox.com/security/data/cve/CVE-2026-46197.md) | High | drm/amdkfd: validate SVM ioctl nattr against buffer size | 7.8 | 0.0014 | | | [CVE-2026-31697](https://patchblox.com/security/data/cve/CVE-2026-31697.md) | High | crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed | 7.1 | 0.0013 | | | [CVE-2026-31698](https://patchblox.com/security/data/cve/CVE-2026-31698.md) | High | crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed | 7.1 | 0.0013 | | | [CVE-2026-31699](https://patchblox.com/security/data/cve/CVE-2026-31699.md) | High | crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed | 7.1 | 0.0013 | | | [CVE-2026-46150](https://patchblox.com/security/data/cve/CVE-2026-46150.md) | High | fanotify: fix false positive on permission events | 7.8 | 0.0013 | | | [CVE-2026-31759](https://patchblox.com/security/data/cve/CVE-2026-31759.md) | High | kernel-default: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264076). | 7.8 | 0.0013 | | | [CVE-2026-46120](https://patchblox.com/security/data/cve/CVE-2026-46120.md) | High | kernel: kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() | 8.8 | 0.0013 | | | [CVE-2026-31500](https://patchblox.com/security/data/cve/CVE-2026-31500.md) | High | Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock | 7.8 | 0.0013 | | | [CVE-2026-43077](https://patchblox.com/security/data/cve/CVE-2026-43077.md) | High | kernel-default: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1264470). | 8.1 | 0.0012 | | | [CVE-2026-46227](https://patchblox.com/security/data/cve/CVE-2026-46227.md) | High | sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL | 8.4 | 0.0010 | | | [CVE-2026-46090](https://patchblox.com/security/data/cve/CVE-2026-46090.md) | High | ALSA: aloop: Fix peer runtime UAF during format-change stop | 7.8 | 0.0010 | | | [CVE-2026-43023](https://patchblox.com/security/data/cve/CVE-2026-43023.md) | High | kernel-default: Bluetooth: SCO: fix race conditions in sco_sock_connect() (bsc#1264137). | 7.8 | 0.0010 | | | [CVE-2026-46159](https://patchblox.com/security/data/cve/CVE-2026-46159.md) | Routine | btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak | 5.5 | 0.0010 | | --- Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.