# SUSE-SU-2026:2943-1: kernel-livepatch-SLE15-SP7_Update_14 security update SUSE-SU-2026:2943-1, released July 14, 2026, fixes 22 CVEs in kernel-livepatch-SLE15-SP7_Update_14 (version 3-150700.2.2). One of them is being exploited (CVE-2026-53362); 1 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/linux/suse-su-2026-2943-1 - Platform: Linux - Released: Jul 14, 2026 - Priority: Patch now (Closes CVE-2026-53362, exploited (CISA KEV)) - CVEs: 22, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:2943-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-livepatch-SLE15-SP7_Update_14](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp7-update-14.md) | sles 15.7 | 3-150700.2.2 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-53362](https://patchblox.com/security/data/cve/CVE-2026-53362.md) | Patch now | ipv6: account for fraggap on the paged allocation path | 7.8 | 0.0071 | CISA KEV | | [CVE-2026-31533](https://patchblox.com/security/data/cve/CVE-2026-31533.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net/tls: fix use-after-free in -EBUSY error path... | 9.8 | 0.0040 | | | [CVE-2026-43501](https://patchblox.com/security/data/cve/CVE-2026-43501.md) | High | ipv6: rpl: reserve mac_len headroom when recompressed SRH grows | 9.8 | 0.0073 | | | [CVE-2026-43037](https://patchblox.com/security/data/cve/CVE-2026-43037.md) | High | ip6_tunnel: clear skb2->cb[] in ip4ip6_err() | 9.8 | 0.0069 | | | [CVE-2026-31685](https://patchblox.com/security/data/cve/CVE-2026-31685.md) | High | netfilter: ip6t_eui64: reject invalid MAC header for all packets | 9.4 | 0.0049 | | | [CVE-2026-43190](https://patchblox.com/security/data/cve/CVE-2026-43190.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_tcpmss: check remaining length befo... | 8.2 | 0.0046 | | | [CVE-2026-46243](https://patchblox.com/security/data/cve/CVE-2026-46243.md) | High | smb: client: reject userspace cifs.spnego descriptions | 7.8 | 0.0041 | | | [CVE-2026-43494](https://patchblox.com/security/data/cve/CVE-2026-43494.md) | High | net/rds: reset op_nents when zerocopy page pin fails | 7.8 | 0.0041 | | | [CVE-2026-52943](https://patchblox.com/security/data/cve/CVE-2026-52943.md) | High | net: skbuff: fix missing zerocopy reference in pskb_carve helpers | 7.8 | 0.0030 | | | [CVE-2026-31570](https://patchblox.com/security/data/cve/CVE-2026-31570.md) | High | can: gw: fix OOB heap access in cgw_csum_crc8_rel() | 8.8 | 0.0026 | | | [CVE-2026-31505](https://patchblox.com/security/data/cve/CVE-2026-31505.md) | High | iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() | 7.8 | 0.0016 | | | [CVE-2026-31586](https://patchblox.com/security/data/cve/CVE-2026-31586.md) | High | mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() | 7.8 | 0.0013 | | | [CVE-2026-46173](https://patchblox.com/security/data/cve/CVE-2026-46173.md) | High | exit: prevent preemption of oopsing TASK_DEAD task | 7.8 | 0.0013 | | | [CVE-2026-43027](https://patchblox.com/security/data/cve/CVE-2026-43027.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_helper: pass helper to e... | 7.8 | 0.0013 | | | [CVE-2026-46120](https://patchblox.com/security/data/cve/CVE-2026-46120.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 8.8 | 0.0013 | | | [CVE-2026-43025](https://patchblox.com/security/data/cve/CVE-2026-43025.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ignore explicit helper on... | 7.3 | 0.0013 | | | [CVE-2026-43366](https://patchblox.com/security/data/cve/CVE-2026-43366.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 7.8 | 0.0013 | | | [CVE-2026-45970](https://patchblox.com/security/data/cve/CVE-2026-45970.md) | High | kernel-rt-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0013 | | | [CVE-2026-43120](https://patchblox.com/security/data/cve/CVE-2026-43120.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix double free related to rereg_use... | 7.8 | 0.0012 | | | [CVE-2026-52909](https://patchblox.com/security/data/cve/CVE-2026-52909.md) | High | ip6_vti: set netns_immutable on the fallback device. | 7.8 | 0.0011 | | | [CVE-2026-46227](https://patchblox.com/security/data/cve/CVE-2026-46227.md) | High | sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL | 8.4 | 0.0010 | | | [CVE-2026-23393](https://patchblox.com/security/data/cve/CVE-2026-23393.md) | High | bridge: cfm: Fix race condition in peer_mep deletion | 7.8 | 0.0010 | | --- Data as of 2026-11-10T20:03:11Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.