# SUSE-SU-2026:2799-1: kernel-livepatch-SLE15-SP7-RT_Update_17 security update

SUSE-SU-2026:2799-1, released July 8, 2026, fixes 168 CVEs in kernel-livepatch-SLE15-SP7-RT_Update_17 (version 1-150700.1.3.1). 2 of them are being exploited (CVE-2026-53266); 2 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2026-2799-1
- Platform: Linux
- Released: Jul 8, 2026
- Priority: Patch now (Closes CVE-2026-53266, exploited (CISA KEV))
- CVEs: 168, exploited: 2, on CISA KEV: 2
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:2799-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-livepatch-SLE15-SP7-RT_Update_17](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp7-rt-update-17.md) | sles 15.7 | 1-150700.1.3.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-53266](https://patchblox.com/security/data/cve/CVE-2026-53266.md) | Patch now | netfilter: bridge: make ebt_snat ARP rewrite writable | 8.8 | 0.0093 | CISA KEV |
| [CVE-2026-53362](https://patchblox.com/security/data/cve/CVE-2026-53362.md) | Patch now | ipv6: account for fraggap on the paged allocation path | 7.8 | 0.0071 | CISA KEV |
| [CVE-2025-10263](https://patchblox.com/security/data/cve/CVE-2025-10263.md) | Urgent | ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel] | 9.3 | 0.0054 |  |
| [CVE-2026-46266](https://patchblox.com/security/data/cve/CVE-2026-46266.md) | Urgent | kernel-default: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (bsc#1267684). | 9.1 | 0.0047 |  |
| [CVE-2025-68822](https://patchblox.com/security/data/cve/CVE-2025-68822.md) | Urgent | Input: alps - fix use-after-free bugs caused by dev3_register_work | 9.8 | 0.0018 |  |
| [CVE-2026-53053](https://patchblox.com/security/data/cve/CVE-2026-53053.md) | Urgent | iommu/amd: Fix clone_alias() to use the original device's devid | 9.8 | 0.0013 |  |
| [CVE-2026-43284](https://patchblox.com/security/data/cve/CVE-2026-43284.md) | High | xfrm: esp: avoid in-place decrypt on shared skb frags | 8.8 | 0.9419 |  |
| [CVE-2026-53359](https://patchblox.com/security/data/cve/CVE-2026-53359.md) | High | kpatch-patch: A flaw was found in the Linux kernel's Kernel-based Virtual Machine (KVM) x86 shadow paging mechanism | 8.8 | 0.0137 |  |
| [CVE-2026-46331](https://patchblox.com/security/data/cve/CVE-2026-46331.md) | High | net/sched: fix pedit partial COW leading to page cache corruption | 8.1 | 0.0064 |  |
| [CVE-2026-43083](https://patchblox.com/security/data/cve/CVE-2026-43083.md) | High | net: ioam6: fix OOB and missing lock | 9.1 | 0.0060 |  |
| [CVE-2026-43405](https://patchblox.com/security/data/cve/CVE-2026-43405.md) | High | kernel-64kb: libceph: Use u32 for non-negative values in ceph_monmap_decode() (bsc#1264741). | 7.5 | 0.0060 |  |
| [CVE-2026-43101](https://patchblox.com/security/data/cve/CVE-2026-43101.md) | High | ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() | 7.5 | 0.0059 |  |
| [CVE-2026-31414](https://patchblox.com/security/data/cve/CVE-2026-31414.md) | High | netfilter: nf_conntrack_expect: use expect->helper | 9.8 | 0.0058 |  |
| [CVE-2026-46133](https://patchblox.com/security/data/cve/CVE-2026-46133.md) | High | RDMA/rxe: Reject unknown opcodes before ICRC processing | 8.8 | 0.0057 |  |
| [CVE-2026-46119](https://patchblox.com/security/data/cve/CVE-2026-46119.md) | High | libceph: Fix slab-out-of-bounds access in auth message processing | 9.1 | 0.0053 |  |
| [CVE-2026-46185](https://patchblox.com/security/data/cve/CVE-2026-46185.md) | High | smb/client: fix out-of-bounds read in symlink_data() | 9.1 | 0.0053 |  |
| [CVE-2026-52954](https://patchblox.com/security/data/cve/CVE-2026-52954.md) | High | libceph: handle rbtree insertion error in decode_choose_args() | 7.5 | 0.0052 |  |
| [CVE-2026-52957](https://patchblox.com/security/data/cve/CVE-2026-52957.md) | High | libceph: Fix potential null-ptr-deref in decode_choose_args() | 7.5 | 0.0052 |  |
| [CVE-2026-46037](https://patchblox.com/security/data/cve/CVE-2026-46037.md) | High | ipv4: icmp: validate reply type before using icmp_pointers | 8.2 | 0.0051 |  |
| [CVE-2026-43074](https://patchblox.com/security/data/cve/CVE-2026-43074.md) | High | kernel-source: eventpoll: defer struct eventpoll free to RCU grace period (bsc#1264263). | 7.8 | 0.0048 |  |
| [CVE-2026-46124](https://patchblox.com/security/data/cve/CVE-2026-46124.md) | High | kernel-64kb: isofs: validate block number from NFS file handle in isofs_export_iget (bsc#1266847). | 7.5 | 0.0048 |  |
| [CVE-2026-43158](https://patchblox.com/security/data/cve/CVE-2026-43158.md) | High | kernel-64kb: xfs: fix freemap adjustments when adding xattrs to leaf blocks (bsc#1264595). | 8.8 | 0.0047 |  |
| [CVE-2026-43187](https://patchblox.com/security/data/cve/CVE-2026-43187.md) | High | kernel-64kb: xfs: delete attr leaf freemap entries when empty (bsc#1264603). | 8.8 | 0.0047 |  |
| [CVE-2026-43233](https://patchblox.com/security/data/cve/CVE-2026-43233.md) | High | kernel-64kb: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337). | 8.2 | 0.0046 |  |
| [CVE-2026-46289](https://patchblox.com/security/data/cve/CVE-2026-46289.md) | High | lib/scatterlist: fix length calculations in extract_kvec_to_sg | 9.8 | 0.0046 |  |
| [CVE-2026-53071](https://patchblox.com/security/data/cve/CVE-2026-53071.md) | High | Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp | 8.8 | 0.0043 |  |
| [CVE-2026-43336](https://patchblox.com/security/data/cve/CVE-2026-43336.md) | High | kernel-64kb: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113). | 7.5 | 0.0043 |  |
| [CVE-2026-46244](https://patchblox.com/security/data/cve/CVE-2026-46244.md) | High | netfilter: nft_inner: Fix IPv6 inner_thoff desync | 9.1 | 0.0042 |  |
| [CVE-2026-31450](https://patchblox.com/security/data/cve/CVE-2026-31450.md) | High | ext4: publish jinode after initialization | 8.8 | 0.0041 |  |
| [CVE-2026-43469](https://patchblox.com/security/data/cve/CVE-2026-43469.md) | High | kernel-64kb: xprtrdma: Decrement re_receiving on the early exit paths (bsc#1265143). | 7.5 | 0.0040 |  |
| [CVE-2026-46273](https://patchblox.com/security/data/cve/CVE-2026-46273.md) | High | ibmveth: Disable GSO for packets with small MSS | 8.6 | 0.0039 |  |
| [CVE-2026-43139](https://patchblox.com/security/data/cve/CVE-2026-43139.md) | High | kernel-64kb: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294). | 8.6 | 0.0038 |  |
| [CVE-2026-43345](https://patchblox.com/security/data/cve/CVE-2026-43345.md) | High | kernel-64kb: net: ipa: fix event ring index not programmed for IPA v5.0+ (bsc#1265103). | 7.5 | 0.0035 |  |
| [CVE-2026-43112](https://patchblox.com/security/data/cve/CVE-2026-43112.md) | High | kernel-64kb: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (bsc#1264437). | 8.8 | 0.0035 |  |
| [CVE-2026-43502](https://patchblox.com/security/data/cve/CVE-2026-43502.md) | High | net/rds: handle zerocopy send cleanup before the message is queued | 7.8 | 0.0032 |  |
| [CVE-2026-31771](https://patchblox.com/security/data/cve/CVE-2026-31771.md) | High | Bluetooth: hci_event: move wake reason storage into validated event handlers | 8.1 | 0.0032 |  |
| [CVE-2026-52943](https://patchblox.com/security/data/cve/CVE-2026-52943.md) | High | net: skbuff: fix missing zerocopy reference in pskb_carve helpers | 7.8 | 0.0030 |  |
| [CVE-2026-43198](https://patchblox.com/security/data/cve/CVE-2026-43198.md) | High | tcp: fix potential race in tcp_v6_syn_recv_sock() | 9.8 | 0.0030 |  |
| [CVE-2026-43239](https://patchblox.com/security/data/cve/CVE-2026-43239.md) | High | kernel-64kb: smb: client: prevent races in ->query_interfaces() (bsc#1264444). | 8.8 | 0.0029 |  |
| [CVE-2026-53253](https://patchblox.com/security/data/cve/CVE-2026-53253.md) | High | Bluetooth: bnep: reject short frames before parsing | 7.1 | 0.0027 |  |
| [CVE-2026-46320](https://patchblox.com/security/data/cve/CVE-2026-46320.md) | High | tap: free page on error paths in tap_get_user_xdp() | 7.4 | 0.0025 |  |
| [CVE-2026-52918](https://patchblox.com/security/data/cve/CVE-2026-52918.md) | High | Bluetooth: serialize accept_q access | 8.8 | 0.0022 |  |
| [CVE-2026-52923](https://patchblox.com/security/data/cve/CVE-2026-52923.md) | High | ipc: limit next_id allocation to the valid ID range | 7.8 | 0.0022 |  |
| [CVE-2026-53072](https://patchblox.com/security/data/cve/CVE-2026-53072.md) | High | Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER | 8.8 | 0.0020 |  |
| [CVE-2026-52969](https://patchblox.com/security/data/cve/CVE-2026-52969.md) | High | KVM: Reject wrapped offset in kvm_reset_dirty_gfn() | 7.8 | 0.0020 |  |
| [CVE-2026-43456](https://patchblox.com/security/data/cve/CVE-2026-43456.md) | High | kernel-64kb: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734). | 7.8 | 0.0019 |  |
| [CVE-2026-45940](https://patchblox.com/security/data/cve/CVE-2026-45940.md) | High | net: stmmac: fix oops when split header is enabled | 7.0 | 0.0018 |  |
| [CVE-2026-43303](https://patchblox.com/security/data/cve/CVE-2026-43303.md) | High | mm/page_alloc: clear page->private in free_pages_prepare() | 7.8 | 0.0017 |  |
| [CVE-2026-46253](https://patchblox.com/security/data/cve/CVE-2026-46253.md) | High | kernel-default: pstore/ram: fix buffer overflow in persistent_ram_save_old() (bsc#1267635). | 7.8 | 0.0017 |  |
| [CVE-2026-31693](https://patchblox.com/security/data/cve/CVE-2026-31693.md) | High | kernel-64kb: cifs: some missing initializations on replay (bsc#1267744). | 7.8 | 0.0017 |  |
| [CVE-2026-31674](https://patchblox.com/security/data/cve/CVE-2026-31674.md) | High | netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() | 7.1 | 0.0017 |  |
| [CVE-2026-31680](https://patchblox.com/security/data/cve/CVE-2026-31680.md) | High | net: ipv6: flowlabel: defer exclusive option free until RCU teardown | 7.8 | 0.0016 |  |
| [CVE-2026-43339](https://patchblox.com/security/data/cve/CVE-2026-43339.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible UaF in addrconf_permanent_... | 8.1 | 0.0016 |  |
| [CVE-2025-40216](https://patchblox.com/security/data/cve/CVE-2025-40216.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/rsrc: don't rely on user vaddr alignmen... | 7.8 | 0.0015 |  |
| [CVE-2026-43049](https://patchblox.com/security/data/cve/CVE-2026-43049.md) | High | HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure | 7.8 | 0.0015 |  |
| [CVE-2026-43491](https://patchblox.com/security/data/cve/CVE-2026-43491.md) | High | net: qrtr: ns: Limit the maximum server registration per node | 7.0 | 0.0015 |  |
| [CVE-2026-52972](https://patchblox.com/security/data/cve/CVE-2026-52972.md) | High | crypto: af_alg - Cap AEAD AD length to 0x80000000 | 8.8 | 0.0014 |  |
| [CVE-2026-46123](https://patchblox.com/security/data/cve/CVE-2026-46123.md) | High | kernel-default: Bluetooth: virtio_bt: clamp rx length before skb_put (bsc#1267621). | 8.1 | 0.0014 |  |
| [CVE-2026-46069](https://patchblox.com/security/data/cve/CVE-2026-46069.md) | High | kernel-uek64k-modules-extra: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (Daniel Hodges) [Orabug: 39452344] | 7.8 | 0.0014 |  |
| [CVE-2026-46076](https://patchblox.com/security/data/cve/CVE-2026-46076.md) | High | KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 | 8.8 | 0.0014 |  |
| [CVE-2026-53016](https://patchblox.com/security/data/cve/CVE-2026-53016.md) | High | crypto: ccp - copy IV using skcipher ivsize | 7.8 | 0.0014 |  |
| [CVE-2026-43128](https://patchblox.com/security/data/cve/CVE-2026-43128.md) | High | kernel-64kb: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612). | 8.1 | 0.0014 |  |
| [CVE-2026-46197](https://patchblox.com/security/data/cve/CVE-2026-46197.md) | High | drm/amdkfd: validate SVM ioctl nattr against buffer size | 7.8 | 0.0014 |  |
| [CVE-2026-52962](https://patchblox.com/security/data/cve/CVE-2026-52962.md) | High | ceph: fix a buffer leak in __ceph_setxattr() | 7.8 | 0.0014 |  |
| [CVE-2026-46162](https://patchblox.com/security/data/cve/CVE-2026-46162.md) | High | kernel-64kb: ice: fix double free in ice_sf_eth_activate() error path (bsc#1266840). | 7.8 | 0.0014 |  |
| [CVE-2026-46274](https://patchblox.com/security/data/cve/CVE-2026-46274.md) | High | io-wq: check that the predecessor is hashed in io_wq_remove_pending() | 7.8 | 0.0014 |  |
| [CVE-2026-53281](https://patchblox.com/security/data/cve/CVE-2026-53281.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid NULL pointer dereference or ref... | 8.8 | 0.0014 |  |
| [CVE-2026-31452](https://patchblox.com/security/data/cve/CVE-2026-31452.md) | High | ext4: convert inline data to extents when truncate exceeds inline size | 7.8 | 0.0014 |  |
| [CVE-2026-31469](https://patchblox.com/security/data/cve/CVE-2026-31469.md) | High | virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false | 7.8 | 0.0014 |  |
| [CVE-2026-43093](https://patchblox.com/security/data/cve/CVE-2026-43093.md) | High | kernel-64kb: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254). | 7.8 | 0.0014 |  |
| [CVE-2026-46172](https://patchblox.com/security/data/cve/CVE-2026-46172.md) | High | kernel-64kb: ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() (bsc#1266903). | 7.0 | 0.0013 |  |
| [CVE-2026-46173](https://patchblox.com/security/data/cve/CVE-2026-46173.md) | High | exit: prevent preemption of oopsing TASK_DEAD task | 7.8 | 0.0013 |  |
| [CVE-2026-31697](https://patchblox.com/security/data/cve/CVE-2026-31697.md) | High | crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed | 7.1 | 0.0013 |  |
| [CVE-2026-31698](https://patchblox.com/security/data/cve/CVE-2026-31698.md) | High | crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed | 7.1 | 0.0013 |  |
| [CVE-2026-31699](https://patchblox.com/security/data/cve/CVE-2026-31699.md) | High | crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed | 7.1 | 0.0013 |  |
| [CVE-2026-43028](https://patchblox.com/security/data/cve/CVE-2026-43028.md) | High | kernel-64kb: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934). | 7.1 | 0.0013 |  |
| [CVE-2026-45840](https://patchblox.com/security/data/cve/CVE-2026-45840.md) | High | kernel-uek-debug-modules-extra: openvswitch: cap upcall PID array size and pre-size vport replies (Weiming Shi) [Orabug: 39451479] | 7.0 | 0.0013 |  |
| [CVE-2026-45894](https://patchblox.com/security/data/cve/CVE-2026-45894.md) | High | iommu/vt-d: Clear Present bit before tearing down PASID entry | 8.8 | 0.0013 |  |
| [CVE-2026-45862](https://patchblox.com/security/data/cve/CVE-2026-45862.md) | High | kernel-64kb: iommu/vt-d: Flush cache for PASID table before using it (bsc#1266705). | 7.8 | 0.0013 |  |
| [CVE-2026-46116](https://patchblox.com/security/data/cve/CVE-2026-46116.md) | High | xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete | 8.4 | 0.0013 |  |
| [CVE-2026-53182](https://patchblox.com/security/data/cve/CVE-2026-53182.md) | High | wifi: nl80211: reject oversized EMA RNR lists | 8.1 | 0.0013 |  |
| [CVE-2026-31453](https://patchblox.com/security/data/cve/CVE-2026-31453.md) | High | xfs: avoid dereferencing log items after push callbacks | 7.8 | 0.0013 |  |
| [CVE-2026-31502](https://patchblox.com/security/data/cve/CVE-2026-31502.md) | High | team: fix header_ops type confusion with non-Ethernet ports | 7.8 | 0.0013 |  |
| [CVE-2026-45891](https://patchblox.com/security/data/cve/CVE-2026-45891.md) | High | kernel-64kb: net: hns3: fix double free issue for tx spare buffer (bsc#1266717). | 7.8 | 0.0013 |  |
| [CVE-2026-46065](https://patchblox.com/security/data/cve/CVE-2026-46065.md) | High | fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info | 7.8 | 0.0013 |  |
| [CVE-2026-46150](https://patchblox.com/security/data/cve/CVE-2026-46150.md) | High | fanotify: fix false positive on permission events | 7.8 | 0.0013 |  |
| [CVE-2026-53133](https://patchblox.com/security/data/cve/CVE-2026-53133.md) | High | RDMA/umem: Fix truncation for block sizes >= 4G | 7.8 | 0.0013 |  |
| [CVE-2026-31759](https://patchblox.com/security/data/cve/CVE-2026-31759.md) | High | kernel-default: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264076). | 7.8 | 0.0013 |  |
| [CVE-2026-46053](https://patchblox.com/security/data/cve/CVE-2026-46053.md) | High | net: rds: fix MR cleanup on copy error | 7.8 | 0.0013 |  |
| [CVE-2026-31555](https://patchblox.com/security/data/cve/CVE-2026-31555.md) | High | futex: Clear stale exiting pointer in futex_lock_pi() retry path | 7.0 | 0.0013 |  |
| [CVE-2026-46120](https://patchblox.com/security/data/cve/CVE-2026-46120.md) | High | kernel: kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() | 8.8 | 0.0013 |  |
| [CVE-2026-46160](https://patchblox.com/security/data/cve/CVE-2026-46160.md) | High | btrfs: fix missing last_unlink_trans update when removing a directory | 7.0 | 0.0013 |  |
| [CVE-2026-31500](https://patchblox.com/security/data/cve/CVE-2026-31500.md) | High | Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock | 7.8 | 0.0013 |  |
| [CVE-2026-53041](https://patchblox.com/security/data/cve/CVE-2026-53041.md) | High | ocfs2: fix listxattr handling when the buffer is full | 7.1 | 0.0013 |  |
| [CVE-2026-53138](https://patchblox.com/security/data/cve/CVE-2026-53138.md) | High | drm/amd/display: Bound VBIOS record-chain walk loops | 7.1 | 0.0013 |  |
| [CVE-2026-43077](https://patchblox.com/security/data/cve/CVE-2026-43077.md) | High | kernel-default: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1264470). | 8.1 | 0.0012 |  |
| [CVE-2026-31665](https://patchblox.com/security/data/cve/CVE-2026-31665.md) | High | netfilter: nft_ct: fix use-after-free in timeout object destroy | 7.8 | 0.0012 |  |
| [CVE-2026-31492](https://patchblox.com/security/data/cve/CVE-2026-31492.md) | High | RDMA/irdma: Initialize free_qp completion before using it | 7.1 | 0.0012 |  |
| [CVE-2026-45912](https://patchblox.com/security/data/cve/CVE-2026-45912.md) | High | ext4: don't cache extent during splitting extent | 7.1 | 0.0012 |  |
| [CVE-2026-45985](https://patchblox.com/security/data/cve/CVE-2026-45985.md) | High | kernel-64kb: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700). | 7.0 | 0.0012 |  |
| [CVE-2026-46028](https://patchblox.com/security/data/cve/CVE-2026-46028.md) | High | kernel-64kb: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430). | 7.0 | 0.0012 |  |
| [CVE-2026-31593](https://patchblox.com/security/data/cve/CVE-2026-31593.md) | High | KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU | 8.8 | 0.0012 |  |
| [CVE-2026-53040](https://patchblox.com/security/data/cve/CVE-2026-53040.md) | High | bpftool: ocfs2: validate bg_bits during freefrag scan (Zhengyuan Huang) [Orabug: 39621868] | 7.1 | 0.0012 |  |
| [CVE-2026-46259](https://patchblox.com/security/data/cve/CVE-2026-46259.md) | High | kernel-64kb: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (bsc#1267685). | 8.4 | 0.0012 |  |
| [CVE-2026-52908](https://patchblox.com/security/data/cve/CVE-2026-52908.md) | High | RDMA: During rereg_mr ensure that REREG_ACCESS is compatible | 7.8 | 0.0012 |  |
| [CVE-2026-46328](https://patchblox.com/security/data/cve/CVE-2026-46328.md) | High | kernel-64kb: apparmor: fix rlimit for posix cpu timers (bsc#1268037). | 7.3 | 0.0011 |  |
| [CVE-2026-52909](https://patchblox.com/security/data/cve/CVE-2026-52909.md) | High | ip6_vti: set netns_immutable on the fallback device. | 7.8 | 0.0011 |  |
| [CVE-2026-46319](https://patchblox.com/security/data/cve/CVE-2026-46319.md) | High | net/sched: act_ct: Only release RCU read lock after ct_ft | 8.8 | 0.0011 |  |
| [CVE-2026-46227](https://patchblox.com/security/data/cve/CVE-2026-46227.md) | High | sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL | 8.4 | 0.0010 |  |
| [CVE-2026-46112](https://patchblox.com/security/data/cve/CVE-2026-46112.md) | High | RDMA/hns: Fix unlocked call to hns_roce_qp_remove() | 7.8 | 0.0010 |  |
| [CVE-2026-43023](https://patchblox.com/security/data/cve/CVE-2026-43023.md) | High | kernel-default: Bluetooth: SCO: fix race conditions in sco_sock_connect() (bsc#1264137). | 7.8 | 0.0010 |  |
| [CVE-2026-23451](https://patchblox.com/security/data/cve/CVE-2026-23451.md) | Routine | kernel-default: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604). | n/a | 0.0046 |  |
| [CVE-2026-31429](https://patchblox.com/security/data/cve/CVE-2026-31429.md) | Routine | net: skb: fix cross-cache free of KFENCE-allocated skb head | 6.6 | 0.0026 |  |
| [CVE-2025-40341](https://patchblox.com/security/data/cve/CVE-2025-40341.md) | Routine | futex: Don't leak robust_list pointer on exec race | 5.5 | 0.0025 |  |
| [CVE-2026-45961](https://patchblox.com/security/data/cve/CVE-2026-45961.md) | Routine | kernel-64kb: gfs2: fix memory leaks in gfs2_fill_super error path (bsc#1266933). | 5.5 | 0.0016 |  |
| [CVE-2026-53052](https://patchblox.com/security/data/cve/CVE-2026-53052.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ASoC: qcom: qdsp6: topology: check widget type b... | 5.5 | 0.0016 |  |
| [CVE-2026-45848](https://patchblox.com/security/data/cve/CVE-2026-45848.md) | Routine | kernel-64kb: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734). | 5.5 | 0.0016 |  |
| [CVE-2026-45870](https://patchblox.com/security/data/cve/CVE-2026-45870.md) | Routine | kernel-64kb: SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths (bsc#1266704). | 5.5 | 0.0016 |  |
| [CVE-2026-45948](https://patchblox.com/security/data/cve/CVE-2026-45948.md) | Routine | kernel-64kb: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929). | 5.5 | 0.0016 |  |
| [CVE-2026-45964](https://patchblox.com/security/data/cve/CVE-2026-45964.md) | Routine | kernel-64kb: SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path (bsc#1266698). | 5.5 | 0.0016 |  |
| [CVE-2026-45965](https://patchblox.com/security/data/cve/CVE-2026-45965.md) | Routine | kernel-64kb: apparmor: fix invalid deref of rawdata when export_binary is unset (bsc#1267208). | 5.5 | 0.0016 |  |
| [CVE-2026-31592](https://patchblox.com/security/data/cve/CVE-2026-31592.md) | Routine | KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock | 6.6 | 0.0016 |  |
| [CVE-2026-31462](https://patchblox.com/security/data/cve/CVE-2026-31462.md) | Routine | drm/amdgpu: prevent immediate PASID reuse case | 5.5 | 0.0016 |  |
| [CVE-2026-31560](https://patchblox.com/security/data/cve/CVE-2026-31560.md) | Routine | spi: spi-dw-dma: fix print error log when wait finish transaction | 5.5 | 0.0016 |  |
| [CVE-2026-31677](https://patchblox.com/security/data/cve/CVE-2026-31677.md) | Routine | crypto: af_alg - limit RX SG extraction by receive buffer budget | 5.5 | 0.0016 |  |
| [CVE-2026-43022](https://patchblox.com/security/data/cve/CVE-2026-43022.md) | Routine | Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists | 5.5 | 0.0016 |  |
| [CVE-2026-43036](https://patchblox.com/security/data/cve/CVE-2026-43036.md) | Routine | net: use skb_header_pointer() for TCPv4 GSO frag_off check | 5.5 | 0.0016 |  |
| [CVE-2026-43107](https://patchblox.com/security/data/cve/CVE-2026-43107.md) | Routine | xfrm: account XFRMA_IF_ID in aevent size calculation | 5.5 | 0.0016 |  |
| [CVE-2026-43492](https://patchblox.com/security/data/cve/CVE-2026-43492.md) | Routine | lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() | 5.5 | 0.0016 |  |
| [CVE-2026-46254](https://patchblox.com/security/data/cve/CVE-2026-46254.md) | Routine | AppArmor: Allow apparmor to handle unaligned dfa tables | 5.5 | 0.0016 |  |
| [CVE-2026-43034](https://patchblox.com/security/data/cve/CVE-2026-43034.md) | Routine | kernel-64kb: bnxt_en: set backing store type from query type (bsc#1263998). | 5.5 | 0.0016 |  |
| [CVE-2026-45841](https://patchblox.com/security/data/cve/CVE-2026-45841.md) | Routine | netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO | 5.5 | 0.0013 |  |
| [CVE-2026-43089](https://patchblox.com/security/data/cve/CVE-2026-43089.md) | Routine | kernel-64kb: xfrm_user: fix info leak in build_mapping() (bsc#1264261). | 5.5 | 0.0013 |  |
| [CVE-2026-46214](https://patchblox.com/security/data/cve/CVE-2026-46214.md) | Routine | kernel-uek-debug-modules-extra: vsock/virtio: fix accept queue count leak on transport mismatch (Dudu Lu) [Orabug: 39460646] | 5.5 | 0.0013 |  |
| [CVE-2026-31495](https://patchblox.com/security/data/cve/CVE-2026-31495.md) | Routine | netfilter: ctnetlink: use netlink policy range checks | 5.5 | 0.0013 |  |
| [CVE-2026-31752](https://patchblox.com/security/data/cve/CVE-2026-31752.md) | Routine | kernel-64kb: bridge: br_nd_send: validate ND option lengths (bsc#1264045). | 5.5 | 0.0013 |  |
| [CVE-2026-43024](https://patchblox.com/security/data/cve/CVE-2026-43024.md) | Routine | kernel-64kb: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930). | 5.5 | 0.0013 |  |
| [CVE-2026-43035](https://patchblox.com/security/data/cve/CVE-2026-43035.md) | Routine | kernel-64kb: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak (bsc#1263996). | 5.5 | 0.0013 |  |
| [CVE-2026-43085](https://patchblox.com/security/data/cve/CVE-2026-43085.md) | Routine | kernel-64kb: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230). | 5.5 | 0.0013 |  |
| [CVE-2026-45838](https://patchblox.com/security/data/cve/CVE-2026-45838.md) | Routine | bpf: fix end-of-list detection in cgroup_storage_get_next_key() | 5.5 | 0.0013 |  |
| [CVE-2026-46101](https://patchblox.com/security/data/cve/CVE-2026-46101.md) | Routine | bpftool: netfilter: reject zero shift in nft_bitwise (Kai Ma) [Orabug: 39452465] | 5.5 | 0.0013 |  |
| [CVE-2026-43238](https://patchblox.com/security/data/cve/CVE-2026-43238.md) | Routine | kernel-64kb: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320). | 5.5 | 0.0013 |  |
| [CVE-2026-45974](https://patchblox.com/security/data/cve/CVE-2026-45974.md) | Routine | kernel-64kb: btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found (bsc#1266922). | 5.5 | 0.0013 |  |
| [CVE-2026-46005](https://patchblox.com/security/data/cve/CVE-2026-46005.md) | Routine | xfs: fix a resource leak in xfs_alloc_buftarg() | 5.5 | 0.0013 |  |
| [CVE-2025-71294](https://patchblox.com/security/data/cve/CVE-2025-71294.md) | Routine | drm/amdgpu: fix NULL pointer issue buffer funcs | 5.5 | 0.0013 |  |
| [CVE-2026-43080](https://patchblox.com/security/data/cve/CVE-2026-43080.md) | Routine | kernel-64kb: l2tp: Drop large packets with UDP encap (bsc#1264236). | 5.5 | 0.0013 |  |
| [CVE-2026-53122](https://patchblox.com/security/data/cve/CVE-2026-53122.md) | Routine | btrfs: fix deadlock between reflink and transaction commit when using flushoncommit | 5.5 | 0.0013 |  |
| [CVE-2026-43010](https://patchblox.com/security/data/cve/CVE-2026-43010.md) | Routine | bpf: Reject sleepable kprobe_multi programs at attach time | 5.5 | 0.0012 |  |
| [CVE-2026-43079](https://patchblox.com/security/data/cve/CVE-2026-43079.md) | Routine | kernel-64kb: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228). | 5.5 | 0.0012 |  |
| [CVE-2026-43094](https://patchblox.com/security/data/cve/CVE-2026-43094.md) | Routine | kernel-64kb: ixgbevf: add missing negotiate_features op to Hyper-V ops table (bsc#1264231). | 5.5 | 0.0012 |  |
| [CVE-2026-43171](https://patchblox.com/security/data/cve/CVE-2026-43171.md) | Routine | kernel-64kb: EFI/CPER: do not dump the entire memory region (bsc#1264549). | 5.5 | 0.0012 |  |
| [CVE-2026-46071](https://patchblox.com/security/data/cve/CVE-2026-46071.md) | Routine | KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 | 5.5 | 0.0012 |  |
| [CVE-2026-46291](https://patchblox.com/security/data/cve/CVE-2026-46291.md) | Routine | crypto: caam - guard HMAC key hex dumps in hash_digest_key | 5.5 | 0.0012 |  |
| [CVE-2026-53287](https://patchblox.com/security/data/cve/CVE-2026-53287.md) | Routine | audit: fix incorrect inheritable capability in CAPSET records | 5.5 | 0.0012 |  |
| [CVE-2026-31647](https://patchblox.com/security/data/cve/CVE-2026-31647.md) | Routine | kernel-64kb: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581). | 5.5 | 0.0012 |  |
| [CVE-2026-43081](https://patchblox.com/security/data/cve/CVE-2026-43081.md) | Routine | kernel-64kb: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241). | 5.5 | 0.0012 |  |
| [CVE-2026-43086](https://patchblox.com/security/data/cve/CVE-2026-43086.md) | Routine | kernel-64kb: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286). | 5.5 | 0.0012 |  |
| [CVE-2026-31664](https://patchblox.com/security/data/cve/CVE-2026-31664.md) | Routine | xfrm: clear trailing padding in build_polexpire() | 5.5 | 0.0012 |  |
| [CVE-2026-31670](https://patchblox.com/security/data/cve/CVE-2026-31670.md) | Routine | net: rfkill: prevent unlimited numbers of rfkill events from being created | 5.5 | 0.0012 |  |
| [CVE-2026-46229](https://patchblox.com/security/data/cve/CVE-2026-46229.md) | Routine | kernel-default: drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure (bsc#1267567). | 5.5 | 0.0012 |  |
| [CVE-2026-43053](https://patchblox.com/security/data/cve/CVE-2026-43053.md) | Routine | xfs: close crash window in attr dabtree inactivation | 5.5 | 0.0012 |  |
| [CVE-2026-43119](https://patchblox.com/security/data/cve/CVE-2026-43119.md) | Routine | Bluetooth: hci_sync: annotate data-races around hdev->req_status | 5.5 | 0.0011 |  |
| [CVE-2026-43472](https://patchblox.com/security/data/cve/CVE-2026-43472.md) | Routine | kernel-64kb: unshare: fix unshare_fs() handling (bsc#1264748). | 5.5 | 0.0011 |  |
| [CVE-2026-46315](https://patchblox.com/security/data/cve/CVE-2026-46315.md) | Routine | kernel-64kb: io_uring/waitid: clear waitid info before copying it to userspace (bsc#1267953). | 5.5 | 0.0011 |  |
| [CVE-2026-31466](https://patchblox.com/security/data/cve/CVE-2026-31466.md) | Routine | kernel-64kb: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825). | 5.5 | 0.0009 |  |
| [CVE-2026-31499](https://patchblox.com/security/data/cve/CVE-2026-31499.md) | Routine | kernel-64kb: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674). | 5.5 | 0.0009 |  |
| [CVE-2026-43420](https://patchblox.com/security/data/cve/CVE-2026-43420.md) | Routine | cephfs: ceph: fix i_nlink underrun during async unlink (bsc#1264814). | 5.5 | 0.0009 |  |
| [CVE-2026-46063](https://patchblox.com/security/data/cve/CVE-2026-46063.md) | Routine | x86/shstk: Prevent deadlock during shstk sigreturn | 5.5 | 0.0009 |  |

---

Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.