{
  "fix": "SUSE-SU-2026:4934-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2026-4934-1",
  "summary": "SUSE-SU-2026:4934-1, released November 7, 2026, fixes 29 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 7 packages",
  "released": "2026-11-07T00:42:08Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2026-99999, rated Critical",
  "supported": true,
  "cveCount": 29,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00841,
  "maxCvss": 9.9,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2026:4934-1",
  "appliesTo": [
    {
      "product": "kernel-default",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.143.1",
      "supported": true
    },
    {
      "product": "kernel-default-base",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.143.1.150600.12.66.3",
      "supported": true
    },
    {
      "product": "kernel-docs",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-docs",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.143.1",
      "supported": true
    },
    {
      "product": "kernel-livepatch-SLE15-SP6_Update_33",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-sle15-sp6-update-33",
      "release": "sles 15.6",
      "fixedVersion": "1-150600.13.5.1",
      "supported": true
    },
    {
      "product": "kernel-obs-build",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-build",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.143.1",
      "supported": true
    },
    {
      "product": "kernel-source",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-source",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.143.1",
      "supported": true
    },
    {
      "product": "kernel-syms",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-syms",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.143.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-99999",
      "url": "https://patchblox.com/security/cve/CVE-2026-99999",
      "title": "ipv4: validate checksum_start before completing checksum",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.3,
      "epss": 0.00788,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72041",
      "url": "https://patchblox.com/security/cve/CVE-2026-72041",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  espintcp: use sk_msg_free_partial to fix partial...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98323",
      "url": "https://patchblox.com/security/cve/CVE-2026-98323",
      "title": "RDMA/siw: Bound fragmented header copies by the remaining length",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98253",
      "url": "https://patchblox.com/security/cve/CVE-2026-98253",
      "title": "RDMA/ucma: Serialize join and leave on copy_to_user failure",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-90011",
      "url": "https://patchblox.com/security/cve/CVE-2026-90011",
      "title": "scsi: target: iscsi: Reserve a terminator byte for the login payload",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00841,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98432",
      "url": "https://patchblox.com/security/cve/CVE-2026-98432",
      "title": "ipv4: free inet_opt and ireq_opt after an RCU grace period",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.0076,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89528",
      "url": "https://patchblox.com/security/cve/CVE-2026-89528",
      "title": "svcrdma: Reject Read lists that exceed the page budget",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00707,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89669",
      "url": "https://patchblox.com/security/cve/CVE-2026-89669",
      "title": "nfsd: initialize copy-notify stateid before publishing it",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00694,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97555",
      "url": "https://patchblox.com/security/cve/CVE-2026-97555",
      "title": "smb: client: fix heap overflow in DACL owner/group rewrite",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00584,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74587",
      "url": "https://patchblox.com/security/cve/CVE-2026-74587",
      "title": "sctp: fix use-after-free of cached ASCONF chunk",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.005,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74611",
      "url": "https://patchblox.com/security/cve/CVE-2026-74611",
      "title": "tls: rx: restore msg_iter before TLS 1.3 optimistic retry",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00491,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74624",
      "url": "https://patchblox.com/security/cve/CVE-2026-74624",
      "title": "netfilter: nf_conntrack: defer invalid log until after unlock",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00479,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98130",
      "url": "https://patchblox.com/security/cve/CVE-2026-98130",
      "title": "sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00453,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72493",
      "url": "https://patchblox.com/security/cve/CVE-2026-72493",
      "title": "net: serialize netif_running() check in enqueue_to_backlog()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.9,
      "epss": 0.00403,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98357",
      "url": "https://patchblox.com/security/cve/CVE-2026-98357",
      "title": "IB/isert: wait for deferred control PDU completions before releasing the connection",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00354,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98173",
      "url": "https://patchblox.com/security/cve/CVE-2026-98173",
      "title": "smb: client: fix use-after-free of iface in cifs_try_adding_channels()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00345,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-93787",
      "url": "https://patchblox.com/security/cve/CVE-2026-93787",
      "title": "smb: client: bound dirent name against end of SMB response in cifs_filldir",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00344,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97564",
      "url": "https://patchblox.com/security/cve/CVE-2026-97564",
      "title": "smb: client: reject userspace cifs.idmap descriptions",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98248",
      "url": "https://patchblox.com/security/cve/CVE-2026-98248",
      "title": "arm64: percpu: Fix LSE operations on {8,16}-bit types",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98260",
      "url": "https://patchblox.com/security/cve/CVE-2026-98260",
      "title": "exec: Cleanup POSIX timers right after de_thread()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98015",
      "url": "https://patchblox.com/security/cve/CVE-2026-98015",
      "title": "net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98016",
      "url": "https://patchblox.com/security/cve/CVE-2026-98016",
      "title": "net/mlx5e: Fix use-after-free race in sample_restore_put()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74578",
      "url": "https://patchblox.com/security/cve/CVE-2026-74578",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: algif_skcipher - force synchronous proce...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00146,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80977",
      "url": "https://patchblox.com/security/cve/CVE-2026-80977",
      "title": "net: skbuff: don\u0027t touch shared zerocopy state in skb_tx_error()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98359",
      "url": "https://patchblox.com/security/cve/CVE-2026-98359",
      "title": "RDMA/core: Reject unregistering netdevs in ib_get_eth_speed",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98366",
      "url": "https://patchblox.com/security/cve/CVE-2026-98366",
      "title": "RDMA/rxe: validate access flags before swapping the MR\u0027s PD",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71183",
      "url": "https://patchblox.com/security/cve/CVE-2025-71183",
      "title": "btrfs: always detect conflicting inodes when logging inode refs",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00316,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89987",
      "url": "https://patchblox.com/security/cve/CVE-2026-89987",
      "title": "mm/huge_memory: transfer the pmd dirty bit to the folio on zap",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97945",
      "url": "https://patchblox.com/security/cve/CVE-2026-97945",
      "title": "x86/mm: Fix user-space data loss with MADV_FREE and THP",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.1,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T01:43:54Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}