# SUSE-SU-2026:4935-1: Security update for 10 packages

SUSE-SU-2026:4935-1, released November 7, 2026, fixes 108 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2026-4935-1
- Platform: Linux
- Released: Nov 7, 2026
- Priority: Urgent (Closes CVE-2026-99999, rated Critical)
- CVEs: 108, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:4935-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | sles 15.7 | 6.4.0-150700.53.87.3 |
| [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | sles 15.7 | 6.4.0-150700.53.87.3 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 15.7 | 6.4.0-150700.53.87.3 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 15.7 | 6.4.0-150700.53.87.3.150700.17.49.2 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 15.7 | 6.4.0-150700.53.87.3 |
| [kernel-livepatch-SLE15-SP7_Update_23](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp7-update-23.md) | sles 15.7 | 1-150700.15.3.2 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | sles 15.7 | 6.4.0-150700.53.87.2 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 15.7 | 6.4.0-150700.53.87.3 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 15.7 | 6.4.0-150700.53.87.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | sles 15.7 | 6.4.0-150700.53.87.3 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-99999](https://patchblox.com/security/data/cve/CVE-2026-99999.md) | Urgent | ipv4: validate checksum_start before completing checksum | 9.3 | 0.0079 |  |
| [CVE-2026-72041](https://patchblox.com/security/data/cve/CVE-2026-72041.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  espintcp: use sk_msg_free_partial to fix partial... | 9.8 | 0.0071 |  |
| [CVE-2026-89778](https://patchblox.com/security/data/cve/CVE-2026-89778.md) | Urgent | isofs: fix out-of-bounds page array access on empty zisofs block | 9.8 | 0.0070 |  |
| [CVE-2026-98323](https://patchblox.com/security/data/cve/CVE-2026-98323.md) | Urgent | RDMA/siw: Bound fragmented header copies by the remaining length | 9.8 | 0.0051 |  |
| [CVE-2026-98365](https://patchblox.com/security/data/cve/CVE-2026-98365.md) | Urgent | RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access | 9.8 | 0.0038 |  |
| [CVE-2026-63983](https://patchblox.com/security/data/cve/CVE-2026-63983.md) | Urgent | net/sched: fix packet loop on netem when duplicate is on | 9.8 | 0.0017 |  |
| [CVE-2026-98269](https://patchblox.com/security/data/cve/CVE-2026-98269.md) | Urgent | btrfs: abort transaction on failure to update inode for hole punching and reflinking | 9.8 | 0.0017 |  |
| [CVE-2026-98352](https://patchblox.com/security/data/cve/CVE-2026-98352.md) | Urgent | RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted | 9.8 | 0.0016 |  |
| [CVE-2026-98253](https://patchblox.com/security/data/cve/CVE-2026-98253.md) | Urgent | RDMA/ucma: Serialize join and leave on copy_to_user failure | 9.8 | 0.0013 |  |
| [CVE-2026-64070](https://patchblox.com/security/data/cve/CVE-2026-64070.md) | Urgent | powerpc/hv-gpci: fix preempt count leak in sysfs show paths | 9.8 | 0.0012 |  |
| [CVE-2026-98252](https://patchblox.com/security/data/cve/CVE-2026-98252.md) | Urgent | RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() | 9.8 | 0.0012 |  |
| [CVE-2026-90011](https://patchblox.com/security/data/cve/CVE-2026-90011.md) | High | scsi: target: iscsi: Reserve a terminator byte for the login payload | 9.8 | 0.0084 |  |
| [CVE-2026-72319](https://patchblox.com/security/data/cve/CVE-2026-72319.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0075 |  |
| [CVE-2026-89528](https://patchblox.com/security/data/cve/CVE-2026-89528.md) | High | svcrdma: Reject Read lists that exceed the page budget | 7.5 | 0.0071 |  |
| [CVE-2026-89669](https://patchblox.com/security/data/cve/CVE-2026-89669.md) | High | nfsd: initialize copy-notify stateid before publishing it | 9.8 | 0.0069 |  |
| [CVE-2026-89685](https://patchblox.com/security/data/cve/CVE-2026-89685.md) | High | nfsd: fix clock domain mismatch in clients_still_reclaiming() | 7.5 | 0.0061 |  |
| [CVE-2026-97555](https://patchblox.com/security/data/cve/CVE-2026-97555.md) | High | smb: client: fix heap overflow in DACL owner/group rewrite | 9.8 | 0.0058 |  |
| [CVE-2026-89706](https://patchblox.com/security/data/cve/CVE-2026-89706.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.2 | 0.0053 |  |
| [CVE-2026-64116](https://patchblox.com/security/data/cve/CVE-2026-64116.md) | High | kernel-64kb: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). | 7.5 | 0.0051 |  |
| [CVE-2026-74587](https://patchblox.com/security/data/cve/CVE-2026-74587.md) | High | sctp: fix use-after-free of cached ASCONF chunk | 9.8 | 0.0050 |  |
| [CVE-2026-74611](https://patchblox.com/security/data/cve/CVE-2026-74611.md) | High | tls: rx: restore msg_iter before TLS 1.3 optimistic retry | 9.8 | 0.0049 |  |
| [CVE-2026-74723](https://patchblox.com/security/data/cve/CVE-2026-74723.md) | High | btrfs: lzo: reject inline extents without valid headers | 9.8 | 0.0049 |  |
| [CVE-2026-98130](https://patchblox.com/security/data/cve/CVE-2026-98130.md) | High | sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START | 8.1 | 0.0045 |  |
| [CVE-2026-43184](https://patchblox.com/security/data/cve/CVE-2026-43184.md) | High | kernel-64kb: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622). | 7.5 | 0.0044 |  |
| [CVE-2026-63830](https://patchblox.com/security/data/cve/CVE-2026-63830.md) | High | net: skmsg: preserve sg.copy across SG transforms | 9.4 | 0.0044 |  |
| [CVE-2026-72493](https://patchblox.com/security/data/cve/CVE-2026-72493.md) | High | net: serialize netif_running() check in enqueue_to_backlog() | 9.9 | 0.0040 |  |
| [CVE-2026-98357](https://patchblox.com/security/data/cve/CVE-2026-98357.md) | High | IB/isert: wait for deferred control PDU completions before releasing the connection | 8.1 | 0.0035 |  |
| [CVE-2026-98173](https://patchblox.com/security/data/cve/CVE-2026-98173.md) | High | smb: client: fix use-after-free of iface in cifs_try_adding_channels() | 7.5 | 0.0035 |  |
| [CVE-2026-93787](https://patchblox.com/security/data/cve/CVE-2026-93787.md) | High | smb: client: bound dirent name against end of SMB response in cifs_filldir | 9.8 | 0.0034 |  |
| [CVE-2026-97595](https://patchblox.com/security/data/cve/CVE-2026-97595.md) | High | mac802154: fix use-after-free of sdata via queued RX frames | 9.8 | 0.0029 |  |
| [CVE-2026-93806](https://patchblox.com/security/data/cve/CVE-2026-93806.md) | High | wifi: cfg80211: validate assoc response length before status and IE access | 8.8 | 0.0025 |  |
| [CVE-2026-97564](https://patchblox.com/security/data/cve/CVE-2026-97564.md) | High | smb: client: reject userspace cifs.idmap descriptions | 7.8 | 0.0022 |  |
| [CVE-2026-93134](https://patchblox.com/security/data/cve/CVE-2026-93134.md) | High | printk: Fix possible console use-after-free | 7.8 | 0.0021 |  |
| [CVE-2026-97571](https://patchblox.com/security/data/cve/CVE-2026-97571.md) | High | bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() | 7.8 | 0.0021 |  |
| [CVE-2026-98248](https://patchblox.com/security/data/cve/CVE-2026-98248.md) | High | arm64: percpu: Fix LSE operations on {8,16}-bit types | 7.8 | 0.0021 |  |
| [CVE-2026-90101](https://patchblox.com/security/data/cve/CVE-2026-90101.md) | High | bnxt_en: Fix call to hardware monitoring event handler | 7.3 | 0.0021 |  |
| [CVE-2026-90430](https://patchblox.com/security/data/cve/CVE-2026-90430.md) | High | kernel-64kb: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized (bsc#1281991). | n/a | 0.0020 |  |
| [CVE-2026-90315](https://patchblox.com/security/data/cve/CVE-2026-90315.md) | High | kernel-64kb: PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers (bsc#1281865). | 8.8 | 0.0020 |  |
| [CVE-2026-98260](https://patchblox.com/security/data/cve/CVE-2026-98260.md) | High | exec: Cleanup POSIX timers right after de_thread() | 8.8 | 0.0019 |  |
| [CVE-2026-64461](https://patchblox.com/security/data/cve/CVE-2026-64461.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  PCI: mediatek: Fix IRQ domain leak when port fai... | n/a | 0.0018 |  |
| [CVE-2026-98015](https://patchblox.com/security/data/cve/CVE-2026-98015.md) | High | net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put | 7.8 | 0.0018 |  |
| [CVE-2026-89811](https://patchblox.com/security/data/cve/CVE-2026-89811.md) | High | drm/amdkfd: Add TLB flush after MES queue eviction/suspension | 8.8 | 0.0018 |  |
| [CVE-2026-98089](https://patchblox.com/security/data/cve/CVE-2026-98089.md) | High | bonding: alb: fix uninitialized transport header access in alb_determine_nd() | 8.1 | 0.0017 |  |
| [CVE-2026-93820](https://patchblox.com/security/data/cve/CVE-2026-93820.md) | High | PCI: rockchip: Protect root bus removal with rescan lock | 7.8 | 0.0017 |  |
| [CVE-2026-93822](https://patchblox.com/security/data/cve/CVE-2026-93822.md) | High | PCI: iproc: Protect root bus removal with rescan lock | 7.8 | 0.0017 |  |
| [CVE-2026-98016](https://patchblox.com/security/data/cve/CVE-2026-98016.md) | High | net/mlx5e: Fix use-after-free race in sample_restore_put() | 7.8 | 0.0017 |  |
| [CVE-2026-80893](https://patchblox.com/security/data/cve/CVE-2026-80893.md) | High | mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() | 7.0 | 0.0017 |  |
| [CVE-2026-64280](https://patchblox.com/security/data/cve/CVE-2026-64280.md) | High | fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() | 8.8 | 0.0017 |  |
| [CVE-2026-72172](https://patchblox.com/security/data/cve/CVE-2026-72172.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 |  |
| [CVE-2026-72301](https://patchblox.com/security/data/cve/CVE-2026-72301.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 |  |
| [CVE-2026-90289](https://patchblox.com/security/data/cve/CVE-2026-90289.md) | High | kernel-64kb: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). | 7.8 | 0.0017 |  |
| [CVE-2026-72213](https://patchblox.com/security/data/cve/CVE-2026-72213.md) | High | kernel-uek64k-modules-core: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (Deepanshu Kartikey) | 7.1 | 0.0016 |  |
| [CVE-2026-74578](https://patchblox.com/security/data/cve/CVE-2026-74578.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: algif_skcipher - force synchronous proce... | 7.1 | 0.0015 |  |
| [CVE-2026-74614](https://patchblox.com/security/data/cve/CVE-2026-74614.md) | High | vsock/virtio: read virtqueues under worker locks | 8.4 | 0.0014 |  |
| [CVE-2026-64422](https://patchblox.com/security/data/cve/CVE-2026-64422.md) | High | net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes | 7.1 | 0.0014 |  |
| [CVE-2026-97415](https://patchblox.com/security/data/cve/CVE-2026-97415.md) | High | btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF | 7.8 | 0.0013 |  |
| [CVE-2026-43091](https://patchblox.com/security/data/cve/CVE-2026-43091.md) | High | kernel-64kb: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267). | 7.8 | 0.0013 |  |
| [CVE-2026-74544](https://patchblox.com/security/data/cve/CVE-2026-74544.md) | High | net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds | 7.8 | 0.0013 |  |
| [CVE-2026-98360](https://patchblox.com/security/data/cve/CVE-2026-98360.md) | High | RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds | 7.1 | 0.0013 |  |
| [CVE-2026-74312](https://patchblox.com/security/data/cve/CVE-2026-74312.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 |  |
| [CVE-2026-80977](https://patchblox.com/security/data/cve/CVE-2026-80977.md) | High | net: skbuff: don't touch shared zerocopy state in skb_tx_error() | 7.8 | 0.0013 |  |
| [CVE-2026-64424](https://patchblox.com/security/data/cve/CVE-2026-64424.md) | High | netpoll: fix a use-after-free on shutdown path | 7.8 | 0.0013 |  |
| [CVE-2026-98216](https://patchblox.com/security/data/cve/CVE-2026-98216.md) | High | IB/hfi1: Fix the PIO_CRED credit-return mmap | 7.1 | 0.0013 |  |
| [CVE-2026-64428](https://patchblox.com/security/data/cve/CVE-2026-64428.md) | High | gpio: sch: use raw_spinlock_t in the irq startup path | 7.1 | 0.0012 |  |
| [CVE-2026-92488](https://patchblox.com/security/data/cve/CVE-2026-92488.md) | High | kernel-64kb: RDMA/erdma: complete object teardown when the destroy command fails (bsc#1281979). | 7.0 | 0.0012 |  |
| [CVE-2026-98367](https://patchblox.com/security/data/cve/CVE-2026-98367.md) | High | RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept | 7.8 | 0.0012 |  |
| [CVE-2026-43283](https://patchblox.com/security/data/cve/CVE-2026-43283.md) | High | kernel-64kb: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle (bsc#1264295). | 8.8 | 0.0012 |  |
| [CVE-2026-74583](https://patchblox.com/security/data/cve/CVE-2026-74583.md) | High | net/sched: cls_route: fix fastmap use-after-free on filter | 8.8 | 0.0012 |  |
| [CVE-2026-98359](https://patchblox.com/security/data/cve/CVE-2026-98359.md) | High | RDMA/core: Reject unregistering netdevs in ib_get_eth_speed | 7.8 | 0.0012 |  |
| [CVE-2026-98366](https://patchblox.com/security/data/cve/CVE-2026-98366.md) | High | RDMA/rxe: validate access flags before swapping the MR's PD | 7.8 | 0.0012 |  |
| [CVE-2026-80579](https://patchblox.com/security/data/cve/CVE-2026-80579.md) | High | fbdev: clear fb_info->mode before deleting a videomode | 7.8 | 0.0011 |  |
| [CVE-2026-68323](https://patchblox.com/security/data/cve/CVE-2026-68323.md) | High | tipc: serialize udp bearer replicast list updates | 7.8 | 0.0010 |  |
| [CVE-2026-90283](https://patchblox.com/security/data/cve/CVE-2026-90283.md) | Routine | kernel-uek64k-modules-core: hugetlbfs: release subpool on fill_super failure (Chenyichong) [Orabug: 40042090] | 6.7 | 0.0023 |  |
| [CVE-2026-72236](https://patchblox.com/security/data/cve/CVE-2026-72236.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  s390/perf_cpum_cf: Add missing array_index_nospe... | n/a | 0.0023 |  |
| [CVE-2026-89987](https://patchblox.com/security/data/cve/CVE-2026-89987.md) | Routine | mm/huge_memory: transfer the pmd dirty bit to the folio on zap | 5.5 | 0.0022 |  |
| [CVE-2026-72015](https://patchblox.com/security/data/cve/CVE-2026-72015.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 |  |
| [CVE-2026-98077](https://patchblox.com/security/data/cve/CVE-2026-98077.md) | Routine | netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() | 5.5 | 0.0022 |  |
| [CVE-2026-93252](https://patchblox.com/security/data/cve/CVE-2026-93252.md) | Routine | ocfs2: fix circular locking dependency in ocfs2_init_acl() | 4.7 | 0.0022 |  |
| [CVE-2026-72081](https://patchblox.com/security/data/cve/CVE-2026-72081.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: elx: efct: Fix I/O leak on unsupported add... | n/a | 0.0022 |  |
| [CVE-2026-68242](https://patchblox.com/security/data/cve/CVE-2026-68242.md) | Routine | drm/i915/gt: Fix NULL deref on sched_engine alloc failure | 5.5 | 0.0021 |  |
| [CVE-2026-72040](https://patchblox.com/security/data/cve/CVE-2026-72040.md) | Routine | kernel-uek64k-modules-core: ipmi: fix refcount leak in i_ipmi_request() (Wentao Liang) | 5.5 | 0.0021 |  |
| [CVE-2026-72305](https://patchblox.com/security/data/cve/CVE-2026-72305.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0021 |  |
| [CVE-2026-68241](https://patchblox.com/security/data/cve/CVE-2026-68241.md) | Routine | drm/i915/mst: limit DP MST ESI service loop | 4.6 | 0.0021 |  |
| [CVE-2026-97945](https://patchblox.com/security/data/cve/CVE-2026-97945.md) | Routine | x86/mm: Fix user-space data loss with MADV_FREE and THP | 6.1 | 0.0021 |  |
| [CVE-2026-72212](https://patchblox.com/security/data/cve/CVE-2026-72212.md) | Routine | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0021 |  |
| [CVE-2026-97574](https://patchblox.com/security/data/cve/CVE-2026-97574.md) | Routine | bnxt_en: Don't free the live ring's TPA state on queue restart failure | n/a | 0.0021 |  |
| [CVE-2025-68358](https://patchblox.com/security/data/cve/CVE-2025-68358.md) | Routine | kernel-64kb: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531). | 5.5 | 0.0018 |  |
| [CVE-2026-98010](https://patchblox.com/security/data/cve/CVE-2026-98010.md) | Routine | net/sched: drr: clamp quantum in change class | 6.1 | 0.0018 |  |
| [CVE-2026-98347](https://patchblox.com/security/data/cve/CVE-2026-98347.md) | Routine | IB/IPoIB: Avoid restoring OPER_UP after multicast flush | 4.7 | 0.0018 |  |
| [CVE-2026-93222](https://patchblox.com/security/data/cve/CVE-2026-93222.md) | Routine | signal: avoid shared siginfo namespace rewrites | 4.4 | 0.0018 |  |
| [CVE-2026-93800](https://patchblox.com/security/data/cve/CVE-2026-93800.md) | Routine | btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() | 6.7 | 0.0017 |  |
| [CVE-2026-97416](https://patchblox.com/security/data/cve/CVE-2026-97416.md) | Routine | btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() | 6.7 | 0.0017 |  |
| [CVE-2026-74379](https://patchblox.com/security/data/cve/CVE-2026-74379.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0017 |  |
| [CVE-2026-93821](https://patchblox.com/security/data/cve/CVE-2026-93821.md) | Routine | PCI: altera: Protect root bus removal with rescan lock | 5.2 | 0.0017 |  |
| [CVE-2026-68233](https://patchblox.com/security/data/cve/CVE-2026-68233.md) | Routine | drm/vc4: Shut down BO cache timer before teardown | 4.7 | 0.0017 |  |
| [CVE-2026-97491](https://patchblox.com/security/data/cve/CVE-2026-97491.md) | Routine | net/rds: Don't sleep inside rds_ib_conn_path_shutdown | 4.4 | 0.0017 |  |
| [CVE-2026-74653](https://patchblox.com/security/data/cve/CVE-2026-74653.md) | Routine | serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx | 5.5 | 0.0017 |  |
| [CVE-2026-98273](https://patchblox.com/security/data/cve/CVE-2026-98273.md) | Routine | x86/kprobes: Fix crash when probing CS CALL instructions | 5.5 | 0.0017 |  |
| [CVE-2026-98354](https://patchblox.com/security/data/cve/CVE-2026-98354.md) | Routine | RDMA/mad: Fix receive buffer leak when PKey enforcement fails | 5.5 | 0.0017 |  |
| [CVE-2026-98358](https://patchblox.com/security/data/cve/CVE-2026-98358.md) | Routine | IB/iser: reject a remote invalidation of an unregistered direction | 5.5 | 0.0017 |  |
| [CVE-2026-45865](https://patchblox.com/security/data/cve/CVE-2026-45865.md) | Routine | kernel-64kb: mctp i2c: initialise event handler read bytes (bsc#1266694). | 5.5 | 0.0016 |  |
| [CVE-2026-45930](https://patchblox.com/security/data/cve/CVE-2026-45930.md) | Routine | net: mctp: ensure our nlmsg responses are initialised | 6.6 | 0.0014 |  |
| [CVE-2026-46034](https://patchblox.com/security/data/cve/CVE-2026-46034.md) | Routine | kernel-64kb: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path (bsc#1266757). | 5.5 | 0.0014 |  |
| [CVE-2026-43299](https://patchblox.com/security/data/cve/CVE-2026-43299.md) | Routine | btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() | 5.5 | 0.0013 |  |
| [CVE-2026-43132](https://patchblox.com/security/data/cve/CVE-2026-43132.md) | Routine | kernel-64kb: dm-verity: correctly handle dm_bufio_client_create() failure (bsc#1264614). | 5.5 | 0.0013 |  |
| [CVE-2026-64012](https://patchblox.com/security/data/cve/CVE-2026-64012.md) | Routine | kernel-64kb: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). | 5.5 | 0.0012 |  |
| [CVE-2026-43457](https://patchblox.com/security/data/cve/CVE-2026-43457.md) | Routine | kernel-64kb: mctp: i2c: fix skb memory leak in receive path (bsc#1265000). | 5.5 | 0.0011 |  |
| [CVE-2026-53108](https://patchblox.com/security/data/cve/CVE-2026-53108.md) | Routine | powerpc/64s: Fix unmap race with PMD migration entries | 5.5 | 0.0009 |  |

---

Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.