{
  "fix": "SUSE-SU-2026:3156-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3156-1",
  "summary": "SUSE-SU-2026:3156-1, released July 21, 2026, fixes 44 CVEs across 7 products. One of them is being exploited (CVE-2026-53362); 1 on CISA KEV. Patch Radar priority: Patch now.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 7 packages",
  "released": "2026-07-21T13:34:53Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2026-53362, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 44,
  "exploitedCveCount": 1,
  "kevCveCount": 1,
  "ransomwareCveCount": 0,
  "maxEpss": 0.04576,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2026:3156-1",
  "appliesTo": [
    {
      "product": "kernel-default",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.125.1",
      "supported": true
    },
    {
      "product": "kernel-default-base",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.125.1.150600.12.58.3",
      "supported": true
    },
    {
      "product": "kernel-docs",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-docs",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.125.1",
      "supported": true
    },
    {
      "product": "kernel-livepatch-SLE15-SP6_Update_29",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-sle15-sp6-update-29",
      "release": "sles 15.6",
      "fixedVersion": "1-150600.13.7.1",
      "supported": true
    },
    {
      "product": "kernel-obs-build",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-build",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.125.1",
      "supported": true
    },
    {
      "product": "kernel-source",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-source",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.125.1",
      "supported": true
    },
    {
      "product": "kernel-syms",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-syms",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.125.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-53362",
      "url": "https://patchblox.com/security/cve/CVE-2026-53362",
      "title": "ipv6: account for fraggap on the paged allocation path",
      "priority": "Patch now",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00709,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46266",
      "url": "https://patchblox.com/security/cve/CVE-2026-46266",
      "title": "kernel-default: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (bsc#1267684).",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.1,
      "epss": 0.00465,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52993",
      "url": "https://patchblox.com/security/cve/CVE-2026-52993",
      "title": "tipc: fix double-free in tipc_buf_append()",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00404,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52955",
      "url": "https://patchblox.com/security/cve/CVE-2026-52955",
      "title": "kernel-default: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159).",
      "priority": "Urgent",
      "severity": "N/A",
      "cvss": 9.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53053",
      "url": "https://patchblox.com/security/cve/CVE-2026-53053",
      "title": "iommu/amd: Fix clone_alias() to use the original device\u0027s devid",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46242",
      "url": "https://patchblox.com/security/cve/CVE-2026-46242",
      "title": "kernel-default: eventpoll: Fix integer overflow in ep_loop_check_proc() (bsc#1267618).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.04576,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53359",
      "url": "https://patchblox.com/security/cve/CVE-2026-53359",
      "title": "kpatch-patch: A flaw was found in the Linux kernel\u0027s Kernel-based Virtual Machine (KVM) x86 shadow paging mechanism",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.01368,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52958",
      "url": "https://patchblox.com/security/cve/CVE-2026-52958",
      "title": "libceph: Fix potential out-of-bounds access in osdmap_decode()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00735,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52924",
      "url": "https://patchblox.com/security/cve/CVE-2026-52924",
      "title": "sctp: purge outqueue on stale COOKIE-ECHO handling",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00659,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46331",
      "url": "https://patchblox.com/security/cve/CVE-2026-46331",
      "title": "net/sched: fix pedit partial COW leading to page cache corruption",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00639,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52956",
      "url": "https://patchblox.com/security/cve/CVE-2026-52956",
      "title": "kernel-default: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00611,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46052",
      "url": "https://patchblox.com/security/cve/CVE-2026-46052",
      "title": "ceph: only d_add() negative dentries when they are unhashed",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00501,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46289",
      "url": "https://patchblox.com/security/cve/CVE-2026-46289",
      "title": "lib/scatterlist: fix length calculations in extract_kvec_to_sg",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00457,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53071",
      "url": "https://patchblox.com/security/cve/CVE-2026-53071",
      "title": "Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00429,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53178",
      "url": "https://patchblox.com/security/cve/CVE-2026-53178",
      "title": "staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00405,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53357",
      "url": "https://patchblox.com/security/cve/CVE-2026-53357",
      "title": "Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8,
      "epss": 0.00332,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52943",
      "url": "https://patchblox.com/security/cve/CVE-2026-52943",
      "title": "net: skbuff: fix missing zerocopy reference in pskb_carve helpers",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00302,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53196",
      "url": "https://patchblox.com/security/cve/CVE-2026-53196",
      "title": "USB: serial: io_ti: fix heap overflow in get_manuf_info()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00271,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53253",
      "url": "https://patchblox.com/security/cve/CVE-2026-53253",
      "title": "Bluetooth: bnep: reject short frames before parsing",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00266,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53256",
      "url": "https://patchblox.com/security/cve/CVE-2026-53256",
      "title": "kernel-rt-devel: kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()",
      "priority": "High",
      "severity": "important",
      "cvss": 8.1,
      "epss": 0.00264,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46320",
      "url": "https://patchblox.com/security/cve/CVE-2026-46320",
      "title": "tap: free page on error paths in tap_get_user_xdp()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.4,
      "epss": 0.00254,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52918",
      "url": "https://patchblox.com/security/cve/CVE-2026-52918",
      "title": "Bluetooth: serialize accept_q access",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00218,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52923",
      "url": "https://patchblox.com/security/cve/CVE-2026-52923",
      "title": "ipc: limit next_id allocation to the valid ID range",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00215,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53072",
      "url": "https://patchblox.com/security/cve/CVE-2026-53072",
      "title": "Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52969",
      "url": "https://patchblox.com/security/cve/CVE-2026-52969",
      "title": "KVM: Reject wrapped offset in kvm_reset_dirty_gfn()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46253",
      "url": "https://patchblox.com/security/cve/CVE-2026-46253",
      "title": "kernel-default: pstore/ram: fix buffer overflow in persistent_ram_save_old() (bsc#1267635).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53366",
      "url": "https://patchblox.com/security/cve/CVE-2026-53366",
      "title": "ipv4: account for fraggap on the paged allocation path",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.5,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46330",
      "url": "https://patchblox.com/security/cve/CVE-2026-46330",
      "title": "Revert \u0022net/smc: Introduce TCP ULP support\u0022",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00152,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52933",
      "url": "https://patchblox.com/security/cve/CVE-2026-52933",
      "title": "io_uring/poll: fix signed comparison in io_poll_get_ownership()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52972",
      "url": "https://patchblox.com/security/cve/CVE-2026-52972",
      "title": "crypto: af_alg - Cap AEAD AD length to 0x80000000",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00144,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46076",
      "url": "https://patchblox.com/security/cve/CVE-2026-46076",
      "title": "KVM: nSVM: Raise #UD if unhandled VMMCALL isn\u0027t intercepted by L1",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00141,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53016",
      "url": "https://patchblox.com/security/cve/CVE-2026-53016",
      "title": "crypto: ccp - copy IV using skcipher ivsize",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00141,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46274",
      "url": "https://patchblox.com/security/cve/CVE-2026-46274",
      "title": "io-wq: check that the predecessor is hashed in io_wq_remove_pending()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46173",
      "url": "https://patchblox.com/security/cve/CVE-2026-46173",
      "title": "exit: prevent preemption of oopsing TASK_DEAD task",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46116",
      "url": "https://patchblox.com/security/cve/CVE-2026-46116",
      "title": "xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.4,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53182",
      "url": "https://patchblox.com/security/cve/CVE-2026-53182",
      "title": "wifi: nl80211: reject oversized EMA RNR lists",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53133",
      "url": "https://patchblox.com/security/cve/CVE-2026-53133",
      "title": "RDMA/umem: Fix truncation for block sizes \u003E= 4G",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53041",
      "url": "https://patchblox.com/security/cve/CVE-2026-53041",
      "title": "ocfs2: fix listxattr handling when the buffer is full",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43109",
      "url": "https://patchblox.com/security/cve/CVE-2026-43109",
      "title": "x86: shadow stacks: proper error handling for mmap lock",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52909",
      "url": "https://patchblox.com/security/cve/CVE-2026-52909",
      "title": "ip6_vti: set netns_immutable on the fallback device.",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00113,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46319",
      "url": "https://patchblox.com/security/cve/CVE-2026-46319",
      "title": "net/sched: act_ct: Only release RCU read lock after ct_ft",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00105,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53052",
      "url": "https://patchblox.com/security/cve/CVE-2026-53052",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ASoC: qcom: qdsp6: topology: check widget type b...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46071",
      "url": "https://patchblox.com/security/cve/CVE-2026-46071",
      "title": "KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46229",
      "url": "https://patchblox.com/security/cve/CVE-2026-46229",
      "title": "kernel-default: drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure (bsc#1267567).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T01:43:54Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}