# SUSE-SU-2026:3156-1: Security update for 7 packages

SUSE-SU-2026:3156-1, released July 21, 2026, fixes 44 CVEs across 7 products. One of them is being exploited (CVE-2026-53362); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2026-3156-1
- Platform: Linux
- Released: Jul 21, 2026
- Priority: Patch now (Closes CVE-2026-53362, exploited (CISA KEV))
- CVEs: 44, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:3156-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 15.6 | 6.4.0-150600.23.125.1 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 15.6 | 6.4.0-150600.23.125.1.150600.12.58.3 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 15.6 | 6.4.0-150600.23.125.1 |
| [kernel-livepatch-SLE15-SP6_Update_29](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp6-update-29.md) | sles 15.6 | 1-150600.13.7.1 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | sles 15.6 | 6.4.0-150600.23.125.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 15.6 | 6.4.0-150600.23.125.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 15.6 | 6.4.0-150600.23.125.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-53362](https://patchblox.com/security/data/cve/CVE-2026-53362.md) | Patch now | ipv6: account for fraggap on the paged allocation path | 7.8 | 0.0071 | CISA KEV |
| [CVE-2026-46266](https://patchblox.com/security/data/cve/CVE-2026-46266.md) | Urgent | kernel-default: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (bsc#1267684). | 9.1 | 0.0047 |  |
| [CVE-2026-52993](https://patchblox.com/security/data/cve/CVE-2026-52993.md) | Urgent | tipc: fix double-free in tipc_buf_append() | 9.8 | 0.0040 |  |
| [CVE-2026-52955](https://patchblox.com/security/data/cve/CVE-2026-52955.md) | Urgent | kernel-default: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159). | 9.8 | 0.0038 |  |
| [CVE-2026-53053](https://patchblox.com/security/data/cve/CVE-2026-53053.md) | Urgent | iommu/amd: Fix clone_alias() to use the original device's devid | 9.8 | 0.0013 |  |
| [CVE-2026-46242](https://patchblox.com/security/data/cve/CVE-2026-46242.md) | High | kernel-default: eventpoll: Fix integer overflow in ep_loop_check_proc() (bsc#1267618). | 7.8 | 0.0458 |  |
| [CVE-2026-53359](https://patchblox.com/security/data/cve/CVE-2026-53359.md) | High | kpatch-patch: A flaw was found in the Linux kernel's Kernel-based Virtual Machine (KVM) x86 shadow paging mechanism | 8.8 | 0.0137 |  |
| [CVE-2026-52958](https://patchblox.com/security/data/cve/CVE-2026-52958.md) | High | libceph: Fix potential out-of-bounds access in osdmap_decode() | 9.1 | 0.0074 |  |
| [CVE-2026-52924](https://patchblox.com/security/data/cve/CVE-2026-52924.md) | High | sctp: purge outqueue on stale COOKIE-ECHO handling | 9.8 | 0.0066 |  |
| [CVE-2026-46331](https://patchblox.com/security/data/cve/CVE-2026-46331.md) | High | net/sched: fix pedit partial COW leading to page cache corruption | 8.1 | 0.0064 |  |
| [CVE-2026-52956](https://patchblox.com/security/data/cve/CVE-2026-52956.md) | High | kernel-default: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172). | 7.5 | 0.0061 |  |
| [CVE-2026-46052](https://patchblox.com/security/data/cve/CVE-2026-46052.md) | High | ceph: only d_add() negative dentries when they are unhashed | 7.5 | 0.0050 |  |
| [CVE-2026-46289](https://patchblox.com/security/data/cve/CVE-2026-46289.md) | High | lib/scatterlist: fix length calculations in extract_kvec_to_sg | 9.8 | 0.0046 |  |
| [CVE-2026-53071](https://patchblox.com/security/data/cve/CVE-2026-53071.md) | High | Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp | 8.8 | 0.0043 |  |
| [CVE-2026-53178](https://patchblox.com/security/data/cve/CVE-2026-53178.md) | High | staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction | 8.1 | 0.0041 |  |
| [CVE-2026-53357](https://patchblox.com/security/data/cve/CVE-2026-53357.md) | High | Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() | 8.0 | 0.0033 |  |
| [CVE-2026-52943](https://patchblox.com/security/data/cve/CVE-2026-52943.md) | High | net: skbuff: fix missing zerocopy reference in pskb_carve helpers | 7.8 | 0.0030 |  |
| [CVE-2026-53196](https://patchblox.com/security/data/cve/CVE-2026-53196.md) | High | USB: serial: io_ti: fix heap overflow in get_manuf_info() | 8.8 | 0.0027 |  |
| [CVE-2026-53253](https://patchblox.com/security/data/cve/CVE-2026-53253.md) | High | Bluetooth: bnep: reject short frames before parsing | 7.1 | 0.0027 |  |
| [CVE-2026-53256](https://patchblox.com/security/data/cve/CVE-2026-53256.md) | High | kernel-rt-devel: kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() | 8.1 | 0.0026 |  |
| [CVE-2026-46320](https://patchblox.com/security/data/cve/CVE-2026-46320.md) | High | tap: free page on error paths in tap_get_user_xdp() | 7.4 | 0.0025 |  |
| [CVE-2026-52918](https://patchblox.com/security/data/cve/CVE-2026-52918.md) | High | Bluetooth: serialize accept_q access | 8.8 | 0.0022 |  |
| [CVE-2026-52923](https://patchblox.com/security/data/cve/CVE-2026-52923.md) | High | ipc: limit next_id allocation to the valid ID range | 7.8 | 0.0022 |  |
| [CVE-2026-53072](https://patchblox.com/security/data/cve/CVE-2026-53072.md) | High | Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER | 8.8 | 0.0020 |  |
| [CVE-2026-52969](https://patchblox.com/security/data/cve/CVE-2026-52969.md) | High | KVM: Reject wrapped offset in kvm_reset_dirty_gfn() | 7.8 | 0.0020 |  |
| [CVE-2026-46253](https://patchblox.com/security/data/cve/CVE-2026-46253.md) | High | kernel-default: pstore/ram: fix buffer overflow in persistent_ram_save_old() (bsc#1267635). | 7.8 | 0.0017 |  |
| [CVE-2026-53366](https://patchblox.com/security/data/cve/CVE-2026-53366.md) | High | ipv4: account for fraggap on the paged allocation path | 8.5 | 0.0017 |  |
| [CVE-2026-46330](https://patchblox.com/security/data/cve/CVE-2026-46330.md) | High | Revert "net/smc: Introduce TCP ULP support" | 8.1 | 0.0015 |  |
| [CVE-2026-52933](https://patchblox.com/security/data/cve/CVE-2026-52933.md) | High | io_uring/poll: fix signed comparison in io_poll_get_ownership() | 7.8 | 0.0015 |  |
| [CVE-2026-52972](https://patchblox.com/security/data/cve/CVE-2026-52972.md) | High | crypto: af_alg - Cap AEAD AD length to 0x80000000 | 8.8 | 0.0014 |  |
| [CVE-2026-46076](https://patchblox.com/security/data/cve/CVE-2026-46076.md) | High | KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 | 8.8 | 0.0014 |  |
| [CVE-2026-53016](https://patchblox.com/security/data/cve/CVE-2026-53016.md) | High | crypto: ccp - copy IV using skcipher ivsize | 7.8 | 0.0014 |  |
| [CVE-2026-46274](https://patchblox.com/security/data/cve/CVE-2026-46274.md) | High | io-wq: check that the predecessor is hashed in io_wq_remove_pending() | 7.8 | 0.0014 |  |
| [CVE-2026-46173](https://patchblox.com/security/data/cve/CVE-2026-46173.md) | High | exit: prevent preemption of oopsing TASK_DEAD task | 7.8 | 0.0013 |  |
| [CVE-2026-46116](https://patchblox.com/security/data/cve/CVE-2026-46116.md) | High | xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete | 8.4 | 0.0013 |  |
| [CVE-2026-53182](https://patchblox.com/security/data/cve/CVE-2026-53182.md) | High | wifi: nl80211: reject oversized EMA RNR lists | 8.1 | 0.0013 |  |
| [CVE-2026-53133](https://patchblox.com/security/data/cve/CVE-2026-53133.md) | High | RDMA/umem: Fix truncation for block sizes >= 4G | 7.8 | 0.0013 |  |
| [CVE-2026-53041](https://patchblox.com/security/data/cve/CVE-2026-53041.md) | High | ocfs2: fix listxattr handling when the buffer is full | 7.1 | 0.0013 |  |
| [CVE-2026-43109](https://patchblox.com/security/data/cve/CVE-2026-43109.md) | High | x86: shadow stacks: proper error handling for mmap lock | 7.1 | 0.0011 |  |
| [CVE-2026-52909](https://patchblox.com/security/data/cve/CVE-2026-52909.md) | High | ip6_vti: set netns_immutable on the fallback device. | 7.8 | 0.0011 |  |
| [CVE-2026-46319](https://patchblox.com/security/data/cve/CVE-2026-46319.md) | High | net/sched: act_ct: Only release RCU read lock after ct_ft | 8.8 | 0.0011 |  |
| [CVE-2026-53052](https://patchblox.com/security/data/cve/CVE-2026-53052.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ASoC: qcom: qdsp6: topology: check widget type b... | 5.5 | 0.0016 |  |
| [CVE-2026-46071](https://patchblox.com/security/data/cve/CVE-2026-46071.md) | Routine | KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 | 5.5 | 0.0012 |  |
| [CVE-2026-46229](https://patchblox.com/security/data/cve/CVE-2026-46229.md) | Routine | kernel-default: drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure (bsc#1267567). | 5.5 | 0.0012 |  |

---

Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.