# SUSE-SU-2026:2800-1: Security update for 10 packages

SUSE-SU-2026:2800-1, released July 8, 2026, fixes 105 CVEs across 10 products. 2 of them are being exploited (CVE-2026-53266); 2 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2026-2800-1
- Platform: Linux
- Released: Jul 8, 2026
- Priority: Patch now (Closes CVE-2026-53266, exploited (CISA KEV))
- CVEs: 105, exploited: 2, on CISA KEV: 2
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:2800-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | sles 15.7 | 6.4.0-150700.53.66.1 |
| [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | sles 15.7 | 6.4.0-150700.53.66.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 15.7 | 6.4.0-150700.53.66.1 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 15.7 | 6.4.0-150700.53.66.1.150700.17.39.1 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 15.7 | 6.4.0-150700.53.66.2 |
| [kernel-livepatch-SLE15-SP7_Update_18](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp7-update-18.md) | sles 15.7 | 1-150700.15.3.1 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | sles 15.7 | 6.4.0-150700.53.66.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 15.7 | 6.4.0-150700.53.66.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 15.7 | 6.4.0-150700.53.66.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | sles 15.7 | 6.4.0-150700.53.66.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-53266](https://patchblox.com/security/data/cve/CVE-2026-53266.md) | Patch now | netfilter: bridge: make ebt_snat ARP rewrite writable | 8.8 | 0.0093 | CISA KEV |
| [CVE-2026-53362](https://patchblox.com/security/data/cve/CVE-2026-53362.md) | Patch now | ipv6: account for fraggap on the paged allocation path | 7.8 | 0.0071 | CISA KEV |
| [CVE-2026-46266](https://patchblox.com/security/data/cve/CVE-2026-46266.md) | Urgent | kernel-default: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (bsc#1267684). | 9.1 | 0.0047 |  |
| [CVE-2026-53053](https://patchblox.com/security/data/cve/CVE-2026-53053.md) | Urgent | iommu/amd: Fix clone_alias() to use the original device's devid | 9.8 | 0.0013 |  |
| [CVE-2026-43284](https://patchblox.com/security/data/cve/CVE-2026-43284.md) | High | xfrm: esp: avoid in-place decrypt on shared skb frags | 8.8 | 0.9419 |  |
| [CVE-2026-53359](https://patchblox.com/security/data/cve/CVE-2026-53359.md) | High | kpatch-patch: A flaw was found in the Linux kernel's Kernel-based Virtual Machine (KVM) x86 shadow paging mechanism | 8.8 | 0.0137 |  |
| [CVE-2026-46331](https://patchblox.com/security/data/cve/CVE-2026-46331.md) | High | net/sched: fix pedit partial COW leading to page cache corruption | 8.1 | 0.0064 |  |
| [CVE-2026-46133](https://patchblox.com/security/data/cve/CVE-2026-46133.md) | High | RDMA/rxe: Reject unknown opcodes before ICRC processing | 8.8 | 0.0057 |  |
| [CVE-2026-46185](https://patchblox.com/security/data/cve/CVE-2026-46185.md) | High | smb/client: fix out-of-bounds read in symlink_data() | 9.1 | 0.0053 |  |
| [CVE-2026-52954](https://patchblox.com/security/data/cve/CVE-2026-52954.md) | High | libceph: handle rbtree insertion error in decode_choose_args() | 7.5 | 0.0052 |  |
| [CVE-2026-52957](https://patchblox.com/security/data/cve/CVE-2026-52957.md) | High | libceph: Fix potential null-ptr-deref in decode_choose_args() | 7.5 | 0.0052 |  |
| [CVE-2026-43074](https://patchblox.com/security/data/cve/CVE-2026-43074.md) | High | kernel-source: eventpoll: defer struct eventpoll free to RCU grace period (bsc#1264263). | 7.8 | 0.0048 |  |
| [CVE-2026-46124](https://patchblox.com/security/data/cve/CVE-2026-46124.md) | High | kernel-64kb: isofs: validate block number from NFS file handle in isofs_export_iget (bsc#1266847). | 7.5 | 0.0048 |  |
| [CVE-2026-43233](https://patchblox.com/security/data/cve/CVE-2026-43233.md) | High | kernel-64kb: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337). | 8.2 | 0.0046 |  |
| [CVE-2026-46289](https://patchblox.com/security/data/cve/CVE-2026-46289.md) | High | lib/scatterlist: fix length calculations in extract_kvec_to_sg | 9.8 | 0.0046 |  |
| [CVE-2026-53071](https://patchblox.com/security/data/cve/CVE-2026-53071.md) | High | Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp | 8.8 | 0.0043 |  |
| [CVE-2026-43336](https://patchblox.com/security/data/cve/CVE-2026-43336.md) | High | kernel-64kb: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113). | 7.5 | 0.0043 |  |
| [CVE-2026-31450](https://patchblox.com/security/data/cve/CVE-2026-31450.md) | High | ext4: publish jinode after initialization | 8.8 | 0.0041 |  |
| [CVE-2026-43139](https://patchblox.com/security/data/cve/CVE-2026-43139.md) | High | kernel-64kb: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294). | 8.6 | 0.0038 |  |
| [CVE-2026-43502](https://patchblox.com/security/data/cve/CVE-2026-43502.md) | High | net/rds: handle zerocopy send cleanup before the message is queued | 7.8 | 0.0032 |  |
| [CVE-2026-31771](https://patchblox.com/security/data/cve/CVE-2026-31771.md) | High | Bluetooth: hci_event: move wake reason storage into validated event handlers | 8.1 | 0.0032 |  |
| [CVE-2026-52943](https://patchblox.com/security/data/cve/CVE-2026-52943.md) | High | net: skbuff: fix missing zerocopy reference in pskb_carve helpers | 7.8 | 0.0030 |  |
| [CVE-2026-53253](https://patchblox.com/security/data/cve/CVE-2026-53253.md) | High | Bluetooth: bnep: reject short frames before parsing | 7.1 | 0.0027 |  |
| [CVE-2026-46320](https://patchblox.com/security/data/cve/CVE-2026-46320.md) | High | tap: free page on error paths in tap_get_user_xdp() | 7.4 | 0.0025 |  |
| [CVE-2026-52918](https://patchblox.com/security/data/cve/CVE-2026-52918.md) | High | Bluetooth: serialize accept_q access | 8.8 | 0.0022 |  |
| [CVE-2026-52923](https://patchblox.com/security/data/cve/CVE-2026-52923.md) | High | ipc: limit next_id allocation to the valid ID range | 7.8 | 0.0022 |  |
| [CVE-2026-53072](https://patchblox.com/security/data/cve/CVE-2026-53072.md) | High | Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER | 8.8 | 0.0020 |  |
| [CVE-2026-52969](https://patchblox.com/security/data/cve/CVE-2026-52969.md) | High | KVM: Reject wrapped offset in kvm_reset_dirty_gfn() | 7.8 | 0.0020 |  |
| [CVE-2026-43456](https://patchblox.com/security/data/cve/CVE-2026-43456.md) | High | kernel-64kb: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734). | 7.8 | 0.0019 |  |
| [CVE-2026-43303](https://patchblox.com/security/data/cve/CVE-2026-43303.md) | High | mm/page_alloc: clear page->private in free_pages_prepare() | 7.8 | 0.0017 |  |
| [CVE-2026-46253](https://patchblox.com/security/data/cve/CVE-2026-46253.md) | High | kernel-default: pstore/ram: fix buffer overflow in persistent_ram_save_old() (bsc#1267635). | 7.8 | 0.0017 |  |
| [CVE-2026-46330](https://patchblox.com/security/data/cve/CVE-2026-46330.md) | High | Revert "net/smc: Introduce TCP ULP support" | 8.1 | 0.0015 |  |
| [CVE-2025-40216](https://patchblox.com/security/data/cve/CVE-2025-40216.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/rsrc: don't rely on user vaddr alignmen... | 7.8 | 0.0015 |  |
| [CVE-2026-52972](https://patchblox.com/security/data/cve/CVE-2026-52972.md) | High | crypto: af_alg - Cap AEAD AD length to 0x80000000 | 8.8 | 0.0014 |  |
| [CVE-2026-46069](https://patchblox.com/security/data/cve/CVE-2026-46069.md) | High | kernel-uek64k-modules-extra: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (Daniel Hodges) [Orabug: 39452344] | 7.8 | 0.0014 |  |
| [CVE-2026-46076](https://patchblox.com/security/data/cve/CVE-2026-46076.md) | High | KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 | 8.8 | 0.0014 |  |
| [CVE-2026-53016](https://patchblox.com/security/data/cve/CVE-2026-53016.md) | High | crypto: ccp - copy IV using skcipher ivsize | 7.8 | 0.0014 |  |
| [CVE-2026-43128](https://patchblox.com/security/data/cve/CVE-2026-43128.md) | High | kernel-64kb: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612). | 8.1 | 0.0014 |  |
| [CVE-2026-46197](https://patchblox.com/security/data/cve/CVE-2026-46197.md) | High | drm/amdkfd: validate SVM ioctl nattr against buffer size | 7.8 | 0.0014 |  |
| [CVE-2026-52962](https://patchblox.com/security/data/cve/CVE-2026-52962.md) | High | ceph: fix a buffer leak in __ceph_setxattr() | 7.8 | 0.0014 |  |
| [CVE-2026-46274](https://patchblox.com/security/data/cve/CVE-2026-46274.md) | High | io-wq: check that the predecessor is hashed in io_wq_remove_pending() | 7.8 | 0.0014 |  |
| [CVE-2026-53281](https://patchblox.com/security/data/cve/CVE-2026-53281.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid NULL pointer dereference or ref... | 8.8 | 0.0014 |  |
| [CVE-2026-43093](https://patchblox.com/security/data/cve/CVE-2026-43093.md) | High | kernel-64kb: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254). | 7.8 | 0.0014 |  |
| [CVE-2026-46173](https://patchblox.com/security/data/cve/CVE-2026-46173.md) | High | exit: prevent preemption of oopsing TASK_DEAD task | 7.8 | 0.0013 |  |
| [CVE-2026-31697](https://patchblox.com/security/data/cve/CVE-2026-31697.md) | High | crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed | 7.1 | 0.0013 |  |
| [CVE-2026-31698](https://patchblox.com/security/data/cve/CVE-2026-31698.md) | High | crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed | 7.1 | 0.0013 |  |
| [CVE-2026-31699](https://patchblox.com/security/data/cve/CVE-2026-31699.md) | High | crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed | 7.1 | 0.0013 |  |
| [CVE-2026-46116](https://patchblox.com/security/data/cve/CVE-2026-46116.md) | High | xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete | 8.4 | 0.0013 |  |
| [CVE-2026-53182](https://patchblox.com/security/data/cve/CVE-2026-53182.md) | High | wifi: nl80211: reject oversized EMA RNR lists | 8.1 | 0.0013 |  |
| [CVE-2026-31502](https://patchblox.com/security/data/cve/CVE-2026-31502.md) | High | team: fix header_ops type confusion with non-Ethernet ports | 7.8 | 0.0013 |  |
| [CVE-2026-45891](https://patchblox.com/security/data/cve/CVE-2026-45891.md) | High | kernel-64kb: net: hns3: fix double free issue for tx spare buffer (bsc#1266717). | 7.8 | 0.0013 |  |
| [CVE-2026-46065](https://patchblox.com/security/data/cve/CVE-2026-46065.md) | High | fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info | 7.8 | 0.0013 |  |
| [CVE-2026-53133](https://patchblox.com/security/data/cve/CVE-2026-53133.md) | High | RDMA/umem: Fix truncation for block sizes >= 4G | 7.8 | 0.0013 |  |
| [CVE-2026-46053](https://patchblox.com/security/data/cve/CVE-2026-46053.md) | High | net: rds: fix MR cleanup on copy error | 7.8 | 0.0013 |  |
| [CVE-2026-46120](https://patchblox.com/security/data/cve/CVE-2026-46120.md) | High | kernel: kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() | 8.8 | 0.0013 |  |
| [CVE-2026-53041](https://patchblox.com/security/data/cve/CVE-2026-53041.md) | High | ocfs2: fix listxattr handling when the buffer is full | 7.1 | 0.0013 |  |
| [CVE-2026-53138](https://patchblox.com/security/data/cve/CVE-2026-53138.md) | High | drm/amd/display: Bound VBIOS record-chain walk loops | 7.1 | 0.0013 |  |
| [CVE-2026-45912](https://patchblox.com/security/data/cve/CVE-2026-45912.md) | High | ext4: don't cache extent during splitting extent | 7.1 | 0.0012 |  |
| [CVE-2026-45985](https://patchblox.com/security/data/cve/CVE-2026-45985.md) | High | kernel-64kb: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700). | 7.0 | 0.0012 |  |
| [CVE-2026-46028](https://patchblox.com/security/data/cve/CVE-2026-46028.md) | High | kernel-64kb: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430). | 7.0 | 0.0012 |  |
| [CVE-2026-53040](https://patchblox.com/security/data/cve/CVE-2026-53040.md) | High | bpftool: ocfs2: validate bg_bits during freefrag scan (Zhengyuan Huang) [Orabug: 39621868] | 7.1 | 0.0012 |  |
| [CVE-2026-52908](https://patchblox.com/security/data/cve/CVE-2026-52908.md) | High | RDMA: During rereg_mr ensure that REREG_ACCESS is compatible | 7.8 | 0.0012 |  |
| [CVE-2026-46328](https://patchblox.com/security/data/cve/CVE-2026-46328.md) | High | kernel-64kb: apparmor: fix rlimit for posix cpu timers (bsc#1268037). | 7.3 | 0.0011 |  |
| [CVE-2026-43109](https://patchblox.com/security/data/cve/CVE-2026-43109.md) | High | x86: shadow stacks: proper error handling for mmap lock | 7.1 | 0.0011 |  |
| [CVE-2026-52909](https://patchblox.com/security/data/cve/CVE-2026-52909.md) | High | ip6_vti: set netns_immutable on the fallback device. | 7.8 | 0.0011 |  |
| [CVE-2026-46319](https://patchblox.com/security/data/cve/CVE-2026-46319.md) | High | net/sched: act_ct: Only release RCU read lock after ct_ft | 8.8 | 0.0011 |  |
| [CVE-2026-46227](https://patchblox.com/security/data/cve/CVE-2026-46227.md) | High | sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL | 8.4 | 0.0010 |  |
| [CVE-2026-46112](https://patchblox.com/security/data/cve/CVE-2026-46112.md) | High | RDMA/hns: Fix unlocked call to hns_roce_qp_remove() | 7.8 | 0.0010 |  |
| [CVE-2026-23451](https://patchblox.com/security/data/cve/CVE-2026-23451.md) | Routine | kernel-default: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604). | n/a | 0.0046 |  |
| [CVE-2025-40341](https://patchblox.com/security/data/cve/CVE-2025-40341.md) | Routine | futex: Don't leak robust_list pointer on exec race | 5.5 | 0.0025 |  |
| [CVE-2026-53052](https://patchblox.com/security/data/cve/CVE-2026-53052.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ASoC: qcom: qdsp6: topology: check widget type b... | 5.5 | 0.0016 |  |
| [CVE-2026-45848](https://patchblox.com/security/data/cve/CVE-2026-45848.md) | Routine | kernel-64kb: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734). | 5.5 | 0.0016 |  |
| [CVE-2026-45948](https://patchblox.com/security/data/cve/CVE-2026-45948.md) | Routine | kernel-64kb: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929). | 5.5 | 0.0016 |  |
| [CVE-2026-31462](https://patchblox.com/security/data/cve/CVE-2026-31462.md) | Routine | drm/amdgpu: prevent immediate PASID reuse case | 5.5 | 0.0016 |  |
| [CVE-2026-31677](https://patchblox.com/security/data/cve/CVE-2026-31677.md) | Routine | crypto: af_alg - limit RX SG extraction by receive buffer budget | 5.5 | 0.0016 |  |
| [CVE-2026-43022](https://patchblox.com/security/data/cve/CVE-2026-43022.md) | Routine | Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists | 5.5 | 0.0016 |  |
| [CVE-2026-43107](https://patchblox.com/security/data/cve/CVE-2026-43107.md) | Routine | xfrm: account XFRMA_IF_ID in aevent size calculation | 5.5 | 0.0016 |  |
| [CVE-2026-43492](https://patchblox.com/security/data/cve/CVE-2026-43492.md) | Routine | lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() | 5.5 | 0.0016 |  |
| [CVE-2026-46254](https://patchblox.com/security/data/cve/CVE-2026-46254.md) | Routine | AppArmor: Allow apparmor to handle unaligned dfa tables | 5.5 | 0.0016 |  |
| [CVE-2026-43034](https://patchblox.com/security/data/cve/CVE-2026-43034.md) | Routine | kernel-64kb: bnxt_en: set backing store type from query type (bsc#1263998). | 5.5 | 0.0016 |  |
| [CVE-2026-43089](https://patchblox.com/security/data/cve/CVE-2026-43089.md) | Routine | kernel-64kb: xfrm_user: fix info leak in build_mapping() (bsc#1264261). | 5.5 | 0.0013 |  |
| [CVE-2026-46214](https://patchblox.com/security/data/cve/CVE-2026-46214.md) | Routine | kernel-uek-debug-modules-extra: vsock/virtio: fix accept queue count leak on transport mismatch (Dudu Lu) [Orabug: 39460646] | 5.5 | 0.0013 |  |
| [CVE-2026-43085](https://patchblox.com/security/data/cve/CVE-2026-43085.md) | Routine | kernel-64kb: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230). | 5.5 | 0.0013 |  |
| [CVE-2026-45838](https://patchblox.com/security/data/cve/CVE-2026-45838.md) | Routine | bpf: fix end-of-list detection in cgroup_storage_get_next_key() | 5.5 | 0.0013 |  |
| [CVE-2026-43238](https://patchblox.com/security/data/cve/CVE-2026-43238.md) | Routine | kernel-64kb: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320). | 5.5 | 0.0013 |  |
| [CVE-2025-71294](https://patchblox.com/security/data/cve/CVE-2025-71294.md) | Routine | drm/amdgpu: fix NULL pointer issue buffer funcs | 5.5 | 0.0013 |  |
| [CVE-2026-43080](https://patchblox.com/security/data/cve/CVE-2026-43080.md) | Routine | kernel-64kb: l2tp: Drop large packets with UDP encap (bsc#1264236). | 5.5 | 0.0013 |  |
| [CVE-2026-53122](https://patchblox.com/security/data/cve/CVE-2026-53122.md) | Routine | btrfs: fix deadlock between reflink and transaction commit when using flushoncommit | 5.5 | 0.0013 |  |
| [CVE-2026-43010](https://patchblox.com/security/data/cve/CVE-2026-43010.md) | Routine | bpf: Reject sleepable kprobe_multi programs at attach time | 5.5 | 0.0012 |  |
| [CVE-2026-43079](https://patchblox.com/security/data/cve/CVE-2026-43079.md) | Routine | kernel-64kb: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228). | 5.5 | 0.0012 |  |
| [CVE-2026-43094](https://patchblox.com/security/data/cve/CVE-2026-43094.md) | Routine | kernel-64kb: ixgbevf: add missing negotiate_features op to Hyper-V ops table (bsc#1264231). | 5.5 | 0.0012 |  |
| [CVE-2026-46071](https://patchblox.com/security/data/cve/CVE-2026-46071.md) | Routine | KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 | 5.5 | 0.0012 |  |
| [CVE-2026-46291](https://patchblox.com/security/data/cve/CVE-2026-46291.md) | Routine | crypto: caam - guard HMAC key hex dumps in hash_digest_key | 5.5 | 0.0012 |  |
| [CVE-2026-53287](https://patchblox.com/security/data/cve/CVE-2026-53287.md) | Routine | audit: fix incorrect inheritable capability in CAPSET records | 5.5 | 0.0012 |  |
| [CVE-2026-31647](https://patchblox.com/security/data/cve/CVE-2026-31647.md) | Routine | kernel-64kb: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581). | 5.5 | 0.0012 |  |
| [CVE-2026-43081](https://patchblox.com/security/data/cve/CVE-2026-43081.md) | Routine | kernel-64kb: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241). | 5.5 | 0.0012 |  |
| [CVE-2026-43086](https://patchblox.com/security/data/cve/CVE-2026-43086.md) | Routine | kernel-64kb: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286). | 5.5 | 0.0012 |  |
| [CVE-2026-31670](https://patchblox.com/security/data/cve/CVE-2026-31670.md) | Routine | net: rfkill: prevent unlimited numbers of rfkill events from being created | 5.5 | 0.0012 |  |
| [CVE-2026-46229](https://patchblox.com/security/data/cve/CVE-2026-46229.md) | Routine | kernel-default: drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure (bsc#1267567). | 5.5 | 0.0012 |  |
| [CVE-2026-43053](https://patchblox.com/security/data/cve/CVE-2026-43053.md) | Routine | xfs: close crash window in attr dabtree inactivation | 5.5 | 0.0012 |  |
| [CVE-2026-43472](https://patchblox.com/security/data/cve/CVE-2026-43472.md) | Routine | kernel-64kb: unshare: fix unshare_fs() handling (bsc#1264748). | 5.5 | 0.0011 |  |
| [CVE-2026-46315](https://patchblox.com/security/data/cve/CVE-2026-46315.md) | Routine | kernel-64kb: io_uring/waitid: clear waitid info before copying it to userspace (bsc#1267953). | 5.5 | 0.0011 |  |
| [CVE-2026-31466](https://patchblox.com/security/data/cve/CVE-2026-31466.md) | Routine | kernel-64kb: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825). | 5.5 | 0.0009 |  |
| [CVE-2026-43420](https://patchblox.com/security/data/cve/CVE-2026-43420.md) | Routine | cephfs: ceph: fix i_nlink underrun during async unlink (bsc#1264814). | 5.5 | 0.0009 |  |
| [CVE-2026-46063](https://patchblox.com/security/data/cve/CVE-2026-46063.md) | Routine | x86/shstk: Prevent deadlock during shstk sigreturn | 5.5 | 0.0009 |  |

---

Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.