# SUSE-SU-2026:4369-1: Security update for 7 packages

SUSE-SU-2026:4369-1, released October 2, 2026, fixes 131 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2026-4369-1
- Platform: Linux
- Released: Oct 2, 2026
- Priority: Urgent (Closes CVE-2026-68160, rated Critical)
- CVEs: 131, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:4369-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 15.6 | 6.4.0-150600.23.135.1 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 15.6 | 6.4.0-150600.23.135.1.150600.12.62.4 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 15.6 | 6.4.0-150600.23.135.1 |
| [kernel-livepatch-SLE15-SP6_Update_31](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp6-update-31.md) | sles 15.6 | 1-150600.13.3.4 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | sles 15.6 | 6.4.0-150600.23.135.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 15.6 | 6.4.0-150600.23.135.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 15.6 | 6.4.0-150600.23.135.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-68160](https://patchblox.com/security/data/cve/CVE-2026-68160.md) | Urgent | ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() | 9.8 | 0.0077 |  |
| [CVE-2026-64541](https://patchblox.com/security/data/cve/CVE-2026-64541.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  net/smc: fix UAF in smc_cdc_rx_handler() by pinn... | 9.8 | 0.0057 |  |
| [CVE-2026-74345](https://patchblox.com/security/data/cve/CVE-2026-74345.md) | Urgent | RDMA/siw: Fix endpoint/socket association handling | 9.8 | 0.0048 |  |
| [CVE-2026-68121](https://patchblox.com/security/data/cve/CVE-2026-68121.md) | Urgent | pppoe: reload header pointer after dev_hard_header() | 9.8 | 0.0037 |  |
| [CVE-2026-53260](https://patchblox.com/security/data/cve/CVE-2026-53260.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  tcp: Add preempt_{disable,enable}_nested() in re... | 9.8 | 0.0029 |  |
| [CVE-2026-63881](https://patchblox.com/security/data/cve/CVE-2026-63881.md) | Urgent | drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger | 9.8 | 0.0019 |  |
| [CVE-2026-72288](https://patchblox.com/security/data/cve/CVE-2026-72288.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: arm64: vgic: Handle race between interrupt... | 9.3 | 0.0019 |  |
| [CVE-2026-64562](https://patchblox.com/security/data/cve/CVE-2026-64562.md) | Urgent | KVM: nVMX: Hide shadow VMCS right after VMCLEAR | 9.8 | 0.0016 |  |
| [CVE-2026-63827](https://patchblox.com/security/data/cve/CVE-2026-63827.md) | Urgent | apparmor: fix use-after-free in rawdata dedup loop | 9.8 | 0.0012 |  |
| [CVE-2026-52929](https://patchblox.com/security/data/cve/CVE-2026-52929.md) | High | sctp: stream: fully roll back denied add-stream state | 9.8 | 0.0087 |  |
| [CVE-2026-63887](https://patchblox.com/security/data/cve/CVE-2026-63887.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsi_encode_text_outp... | 9.8 | 0.0078 |  |
| [CVE-2026-63888](https://patchblox.com/security/data/cve/CVE-2026-63888.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC overread and double-... | 9.8 | 0.0078 |  |
| [CVE-2026-68159](https://patchblox.com/security/data/cve/CVE-2026-68159.md) | High | libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE | 9.8 | 0.0075 |  |
| [CVE-2026-72084](https://patchblox.com/security/data/cve/CVE-2026-72084.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0075 |  |
| [CVE-2026-72339](https://patchblox.com/security/data/cve/CVE-2026-72339.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0075 |  |
| [CVE-2026-72069](https://patchblox.com/security/data/cve/CVE-2026-72069.md) | High | kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] | 9.8 | 0.0073 |  |
| [CVE-2026-72083](https://patchblox.com/security/data/cve/CVE-2026-72083.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0072 |  |
| [CVE-2026-64268](https://patchblox.com/security/data/cve/CVE-2026-64268.md) | High | RDMA/siw: bound Read Response placement to the RREAD length | 9.8 | 0.0071 |  |
| [CVE-2026-68158](https://patchblox.com/security/data/cve/CVE-2026-68158.md) | High | libceph: Fix multiplication overflow in decode_new_up_state_weight() | 9.8 | 0.0071 |  |
| [CVE-2026-72020](https://patchblox.com/security/data/cve/CVE-2026-72020.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 |  |
| [CVE-2026-72251](https://patchblox.com/security/data/cve/CVE-2026-72251.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 |  |
| [CVE-2026-63886](https://patchblox.com/security/data/cve/CVE-2026-63886.md) | High | kernel-default: Security update for the Linux Kernel | 9.8 | 0.0071 |  |
| [CVE-2026-68155](https://patchblox.com/security/data/cve/CVE-2026-68155.md) | High | libceph: Reject monmaps advertising zero monitors | 8.8 | 0.0070 |  |
| [CVE-2026-72317](https://patchblox.com/security/data/cve/CVE-2026-72317.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0064 |  |
| [CVE-2026-72221](https://patchblox.com/security/data/cve/CVE-2026-72221.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0064 |  |
| [CVE-2026-72222](https://patchblox.com/security/data/cve/CVE-2026-72222.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0064 |  |
| [CVE-2026-63972](https://patchblox.com/security/data/cve/CVE-2026-63972.md) | High | kernel-default: Security update for the Linux Kernel | 7.5 | 0.0059 |  |
| [CVE-2026-64577](https://patchblox.com/security/data/cve/CVE-2026-64577.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  gtp: check skb_pull_data() return in gtp1u_send_... | 7.5 | 0.0058 |  |
| [CVE-2026-74394](https://patchblox.com/security/data/cve/CVE-2026-74394.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0054 |  |
| [CVE-2026-68136](https://patchblox.com/security/data/cve/CVE-2026-68136.md) | High | net: gro: fix double aggregation of flush-marked skbs | 9.8 | 0.0054 |  |
| [CVE-2026-64450](https://patchblox.com/security/data/cve/CVE-2026-64450.md) | High | tipc: fix out-of-bounds read in broadcast Gap ACK blocks | 9.1 | 0.0054 |  |
| [CVE-2026-64007](https://patchblox.com/security/data/cve/CVE-2026-64007.md) | High | kernel-default: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105). | 9.8 | 0.0051 |  |
| [CVE-2026-74669](https://patchblox.com/security/data/cve/CVE-2026-74669.md) | High | ipvs: clear IPv4 options after rebasing tunnel ICMP errors | 9.8 | 0.0051 |  |
| [CVE-2026-63992](https://patchblox.com/security/data/cve/CVE-2026-63992.md) | High | kernel-default: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868). | 9.1 | 0.0051 |  |
| [CVE-2026-64355](https://patchblox.com/security/data/cve/CVE-2026-64355.md) | High | bpf: Reject fragmented frames in devmap | 9.8 | 0.0051 |  |
| [CVE-2026-63801](https://patchblox.com/security/data/cve/CVE-2026-63801.md) | High | tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done | 8.8 | 0.0051 |  |
| [CVE-2026-64048](https://patchblox.com/security/data/cve/CVE-2026-64048.md) | High | kernel-default: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484). | 7.8 | 0.0050 |  |
| [CVE-2026-64312](https://patchblox.com/security/data/cve/CVE-2026-64312.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: pcrypt - restore callback for non-parall... | 7.5 | 0.0050 |  |
| [CVE-2026-68426](https://patchblox.com/security/data/cve/CVE-2026-68426.md) | High | xfrm: fix stale skb->prev after async crypto steals a GSO segment | 9.8 | 0.0050 |  |
| [CVE-2026-74612](https://patchblox.com/security/data/cve/CVE-2026-74612.md) | High | veth: fix skb length accounting after XDP frag adjustment | 10.0 | 0.0049 |  |
| [CVE-2026-64000](https://patchblox.com/security/data/cve/CVE-2026-64000.md) | High | kernel-default: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273030). | 9.8 | 0.0049 |  |
| [CVE-2026-53264](https://patchblox.com/security/data/cve/CVE-2026-53264.md) | High | net/sched: act_api: use RCU with deferred freeing for action lifecycle | 7.8 | 0.0049 |  |
| [CVE-2026-74695](https://patchblox.com/security/data/cve/CVE-2026-74695.md) | High | netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() | 7.5 | 0.0048 |  |
| [CVE-2026-64383](https://patchblox.com/security/data/cve/CVE-2026-64383.md) | High | smb: client: fix double-free in SMB2_flush() replay | 9.8 | 0.0046 |  |
| [CVE-2026-64384](https://patchblox.com/security/data/cve/CVE-2026-64384.md) | High | smb: client: fix change notify replay double-free | 9.8 | 0.0046 |  |
| [CVE-2026-64385](https://patchblox.com/security/data/cve/CVE-2026-64385.md) | High | smb: client: fix double-free in SMB2_ioctl() replay | 9.8 | 0.0046 |  |
| [CVE-2026-64386](https://patchblox.com/security/data/cve/CVE-2026-64386.md) | High | smb: client: fix query_info() replay double-free | 9.8 | 0.0046 |  |
| [CVE-2026-64387](https://patchblox.com/security/data/cve/CVE-2026-64387.md) | High | smb: client: fix query directory replay double-free | 9.8 | 0.0046 |  |
| [CVE-2026-74581](https://patchblox.com/security/data/cve/CVE-2026-74581.md) | High | net: ipv6: clear suppressed fib6 rule result | 9.8 | 0.0042 |  |
| [CVE-2026-74556](https://patchblox.com/security/data/cve/CVE-2026-74556.md) | High | scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer | 9.8 | 0.0040 |  |
| [CVE-2026-63944](https://patchblox.com/security/data/cve/CVE-2026-63944.md) | High | kernel-default: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1272662). | 8.8 | 0.0033 |  |
| [CVE-2026-23230](https://patchblox.com/security/data/cve/CVE-2026-23230.md) | High | smb: client: split cached_fid bitfields to avoid shared-byte RMW races | 8.4 | 0.0028 |  |
| [CVE-2026-68397](https://patchblox.com/security/data/cve/CVE-2026-68397.md) | High | net/iucv: take a reference on the socket found in afiucv_hs_rcv() | 8.8 | 0.0026 |  |
| [CVE-2026-74537](https://patchblox.com/security/data/cve/CVE-2026-74537.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: ISO: hold sk properly in iso_conn_rea... | 8.8 | 0.0026 |  |
| [CVE-2026-74488](https://patchblox.com/security/data/cve/CVE-2026-74488.md) | High | wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames | 8.8 | 0.0026 |  |
| [CVE-2026-80722](https://patchblox.com/security/data/cve/CVE-2026-80722.md) | High | wifi: mac80211: validate individual TWT params before driver setup | 9.8 | 0.0024 |  |
| [CVE-2025-40022](https://patchblox.com/security/data/cve/CVE-2025-40022.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0024 |  |
| [CVE-2026-68480](https://patchblox.com/security/data/cve/CVE-2026-68480.md) | High | x86/bugs: Make Safe-RET robust against interrupt injection | 8.8 | 0.0023 |  |
| [CVE-2026-68398](https://patchblox.com/security/data/cve/CVE-2026-68398.md) | High | ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF | 9.8 | 0.0023 |  |
| [CVE-2026-68138](https://patchblox.com/security/data/cve/CVE-2026-68138.md) | High | net/sched: serialize qdisc_rtab_list against concurrent get/put | 8.8 | 0.0022 |  |
| [CVE-2026-64572](https://patchblox.com/security/data/cve/CVE-2026-64572.md) | High | ipv4: fib: free fib_alias with kfree_rcu() on insert error path | 8.8 | 0.0020 |  |
| [CVE-2026-53365](https://patchblox.com/security/data/cve/CVE-2026-53365.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  vsock/virtio: fix zerocopy completion for multi-... | 8.8 | 0.0020 |  |
| [CVE-2026-64010](https://patchblox.com/security/data/cve/CVE-2026-64010.md) | High | kernel-default: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882). | 8.8 | 0.0020 |  |
| [CVE-2026-43456](https://patchblox.com/security/data/cve/CVE-2026-43456.md) | High | kernel-64kb: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734). | 7.8 | 0.0019 |  |
| [CVE-2026-72289](https://patchblox.com/security/data/cve/CVE-2026-72289.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.3 | 0.0019 |  |
| [CVE-2026-72262](https://patchblox.com/security/data/cve/CVE-2026-72262.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0018 |  |
| [CVE-2026-68202](https://patchblox.com/security/data/cve/CVE-2026-68202.md) | High | ALSA: seq: close a re-opened queue timer in the destructor | 7.8 | 0.0018 |  |
| [CVE-2026-63970](https://patchblox.com/security/data/cve/CVE-2026-63970.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  vsock/virtio: bind uarg before filling zerocopy... | 8.8 | 0.0018 |  |
| [CVE-2026-64481](https://patchblox.com/security/data/cve/CVE-2026-64481.md) | High | ALSA: hda/cs35l41: Fix firmware load work teardown | 7.8 | 0.0018 |  |
| [CVE-2026-63920](https://patchblox.com/security/data/cve/CVE-2026-63920.md) | High | kernel-default: ipv6: validate extension header length before copying to cmsg (bsc#1272877). | 8.1 | 0.0017 |  |
| [CVE-2026-72072](https://patchblox.com/security/data/cve/CVE-2026-72072.md) | High | kernel: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] | 7.8 | 0.0017 |  |
| [CVE-2026-53366](https://patchblox.com/security/data/cve/CVE-2026-53366.md) | High | ipv4: account for fraggap on the paged allocation path | 8.5 | 0.0017 |  |
| [CVE-2026-64304](https://patchblox.com/security/data/cve/CVE-2026-64304.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: qat - validate RSA CRT component lengths... | 8.8 | 0.0017 |  |
| [CVE-2026-72123](https://patchblox.com/security/data/cve/CVE-2026-72123.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 |  |
| [CVE-2026-72135](https://patchblox.com/security/data/cve/CVE-2026-72135.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 |  |
| [CVE-2026-64563](https://patchblox.com/security/data/cve/CVE-2026-64563.md) | High | rhashtable: clear stale iter->p on table restart | 8.1 | 0.0017 |  |
| [CVE-2026-64593](https://patchblox.com/security/data/cve/CVE-2026-64593.md) | High | btrfs: do not trim a device which is not writeable | 9.8 | 0.0017 |  |
| [CVE-2026-72389](https://patchblox.com/security/data/cve/CVE-2026-72389.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0016 |  |
| [CVE-2026-63823](https://patchblox.com/security/data/cve/CVE-2026-63823.md) | High | keys: Pin request_key_auth payload in instantiate paths | 8.8 | 0.0016 |  |
| [CVE-2026-64527](https://patchblox.com/security/data/cve/CVE-2026-64527.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/hyperv: validate VMBus packet size in receiv... | 7.0 | 0.0016 |  |
| [CVE-2026-52912](https://patchblox.com/security/data/cve/CVE-2026-52912.md) | High | netfilter: nf_queue: hold bridge skb->dev while queued | 7.8 | 0.0016 |  |
| [CVE-2026-64247](https://patchblox.com/security/data/cve/CVE-2026-64247.md) | High | KVM: x86: hyper-v: Bound the bank index when querying sparse banks | 8.4 | 0.0016 |  |
| [CVE-2026-64015](https://patchblox.com/security/data/cve/CVE-2026-64015.md) | High | kernel-default: security/keys: fix missed RCU read section on lookup (bsc#1273762). | 8.1 | 0.0016 |  |
| [CVE-2025-68179](https://patchblox.com/security/data/cve/CVE-2025-68179.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP... | 7.8 | 0.0015 |  |
| [CVE-2026-52910](https://patchblox.com/security/data/cve/CVE-2026-52910.md) | High | bpf: Free reuseport cBPF prog after RCU grace period. | 7.8 | 0.0014 |  |
| [CVE-2026-74378](https://patchblox.com/security/data/cve/CVE-2026-74378.md) | High | bpftool: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (Bjoern Doebel) [Orabug: 40035390] | 7.8 | 0.0014 |  |
| [CVE-2026-64018](https://patchblox.com/security/data/cve/CVE-2026-64018.md) | High | kernel-default: Security update for the Linux Kernel | 9.3 | 0.0014 |  |
| [CVE-2026-63879](https://patchblox.com/security/data/cve/CVE-2026-63879.md) | High | drm/amdgpu: fix amdgpu_hmm_range_get_pages | 7.8 | 0.0014 |  |
| [CVE-2026-64524](https://patchblox.com/security/data/cve/CVE-2026-64524.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/hyperv: validate resolution_count and fix WI... | 7.7 | 0.0014 |  |
| [CVE-2026-53059](https://patchblox.com/security/data/cve/CVE-2026-53059.md) | High | dm log: fix out-of-bounds write due to region_count overflow | 7.8 | 0.0014 |  |
| [CVE-2026-53381](https://patchblox.com/security/data/cve/CVE-2026-53381.md) | High | virtiofs: fix UAF on submount umount | 8.1 | 0.0014 |  |
| [CVE-2026-64114](https://patchblox.com/security/data/cve/CVE-2026-64114.md) | High | kernel-default: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742). | 8.8 | 0.0014 |  |
| [CVE-2026-64115](https://patchblox.com/security/data/cve/CVE-2026-64115.md) | High | kernel-default: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745). | 8.8 | 0.0014 |  |
| [CVE-2026-74516](https://patchblox.com/security/data/cve/CVE-2026-74516.md) | High | KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active | 8.8 | 0.0014 |  |
| [CVE-2026-64423](https://patchblox.com/security/data/cve/CVE-2026-64423.md) | High | ipv4: igmp: remove multicast group from hash table on device destruction | 7.8 | 0.0013 |  |
| [CVE-2026-64002](https://patchblox.com/security/data/cve/CVE-2026-64002.md) | High | kernel-default: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774). | 8.8 | 0.0013 |  |
| [CVE-2026-31502](https://patchblox.com/security/data/cve/CVE-2026-31502.md) | High | team: fix header_ops type confusion with non-Ethernet ports | 7.8 | 0.0013 |  |
| [CVE-2026-74390](https://patchblox.com/security/data/cve/CVE-2026-74390.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 |  |
| [CVE-2026-64109](https://patchblox.com/security/data/cve/CVE-2026-64109.md) | High | kernel-default: af_unix: Peek the queue synchronized (bsc#1273748). | 8.8 | 0.0013 |  |
| [CVE-2026-64217](https://patchblox.com/security/data/cve/CVE-2026-64217.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix overrun check in netfs_extract_user_i... | 7.8 | 0.0013 |  |
| [CVE-2026-74377](https://patchblox.com/security/data/cve/CVE-2026-74377.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 |  |
| [CVE-2026-74454](https://patchblox.com/security/data/cve/CVE-2026-74454.md) | High | drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size | 7.8 | 0.0013 |  |
| [CVE-2026-23454](https://patchblox.com/security/data/cve/CVE-2026-23454.md) | High | kernel-default: Security update for the Linux Kernel | 7.0 | 0.0013 |  |
| [CVE-2026-64266](https://patchblox.com/security/data/cve/CVE-2026-64266.md) | High | fuse: re-lock request before returning from fuse_ref_folio() | 7.8 | 0.0013 |  |
| [CVE-2026-74496](https://patchblox.com/security/data/cve/CVE-2026-74496.md) | High | fou: Fix use-after-free in fou_create() | 9.8 | 0.0013 |  |
| [CVE-2026-74518](https://patchblox.com/security/data/cve/CVE-2026-74518.md) | High | mm/hugetlb: fix list corruption in allocate_file_region_entries() | 8.8 | 0.0013 |  |
| [CVE-2026-64011](https://patchblox.com/security/data/cve/CVE-2026-64011.md) | High | kernel-default: nfc: llcp: Fix use-after-free in llcp_sock_release() (bsc#1273891). | 7.8 | 0.0013 |  |
| [CVE-2026-64543](https://patchblox.com/security/data/cve/CVE-2026-64543.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  tipc: fix use-after-free of the discoverer in ti... | 7.8 | 0.0013 |  |
| [CVE-2026-64121](https://patchblox.com/security/data/cve/CVE-2026-64121.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: ifb: report ethtool stats over num_tx_queue... | 7.1 | 0.0013 |  |
| [CVE-2026-64581](https://patchblox.com/security/data/cve/CVE-2026-64581.md) | High | xfrm: fix sk_dst_cache double-free in xfrm_user_policy() | 7.8 | 0.0012 |  |
| [CVE-2026-74582](https://patchblox.com/security/data/cve/CVE-2026-74582.md) | High | packet: use consistent hard_header_len in non-ring send paths | 9.8 | 0.0012 |  |
| [CVE-2026-53110](https://patchblox.com/security/data/cve/CVE-2026-53110.md) | High | s390/bpf: Zero-extend bpf prog return values and kfunc arguments | 7.8 | 0.0012 |  |
| [CVE-2026-64034](https://patchblox.com/security/data/cve/CVE-2026-64034.md) | High | kernel-default: Security update for the Linux Kernel | 9.3 | 0.0012 |  |
| [CVE-2026-64098](https://patchblox.com/security/data/cve/CVE-2026-64098.md) | High | kernel-default: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488). | 7.8 | 0.0011 |  |
| [CVE-2026-23210](https://patchblox.com/security/data/cve/CVE-2026-23210.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.5 | 0.0010 |  |
| [CVE-2026-64029](https://patchblox.com/security/data/cve/CVE-2026-64029.md) | High | kernel-default: ALSA: seq: Serialize UMP output teardown with event_input (bsc#1273766). | 8.8 | 0.0010 |  |
| [CVE-2026-68417](https://patchblox.com/security/data/cve/CVE-2026-68417.md) | High | RDMA/siw: publish QP after initialization | 7.8 | 0.0010 |  |
| [CVE-2026-23451](https://patchblox.com/security/data/cve/CVE-2026-23451.md) | Routine | kernel-default: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604). | n/a | 0.0046 |  |
| [CVE-2024-57841](https://patchblox.com/security/data/cve/CVE-2024-57841.md) | Routine | kernel-default: CVE-2026-53260: net: fix memory leak in tcp_conn_request() (bsc#1235944 bsc#1269731). | 5.5 | 0.0022 |  |
| [CVE-2024-44981](https://patchblox.com/security/data/cve/CVE-2024-44981.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-38469](https://patchblox.com/security/data/cve/CVE-2025-38469.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2026-68133](https://patchblox.com/security/data/cve/CVE-2026-68133.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ice: fix PTP Call Trace during PTP release  If a... | 5.5 | 0.0018 |  |
| [CVE-2026-68428](https://patchblox.com/security/data/cve/CVE-2026-68428.md) | Routine | KVM: x86/mmu: Fix use-after-free on vendor module reload | 5.5 | 0.0017 |  |
| [CVE-2026-63973](https://patchblox.com/security/data/cve/CVE-2026-63973.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2026-45968](https://patchblox.com/security/data/cve/CVE-2026-45968.md) | Routine | kernel-64kb: cpuidle: Skip governor when only one idle state is available (bsc#1267023). | 5.5 | 0.0013 |  |
| [CVE-2025-68214](https://patchblox.com/security/data/cve/CVE-2025-68214.md) | Routine | timers: Fix NULL function pointer race in timer_shutdown_sync() | 5.5 | 0.0013 |  |
| [CVE-2026-52994](https://patchblox.com/security/data/cve/CVE-2026-52994.md) | Routine | kernel-default: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126). | 5.5 | 0.0013 |  |
| [CVE-2026-52977](https://patchblox.com/security/data/cve/CVE-2026-52977.md) | Routine | futex: Prevent lockup in requeue-PI during signal/ timeout wakeup | 5.5 | 0.0012 |  |
| [CVE-2026-53163](https://patchblox.com/security/data/cve/CVE-2026-53163.md) | Routine | locking/rtmutex: Skip remove_waiter() when waiter is not enqueued | 5.5 | 0.0012 |  |
| [CVE-2025-71104](https://patchblox.com/security/data/cve/CVE-2025-71104.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-43147](https://patchblox.com/security/data/cve/CVE-2026-43147.md) | Routine | kernel-default: Revert 'PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV' (bsc#1264642). | 5.5 | 0.0010 |  |

---

Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.