Linux · 
openSUSE Leap · Security advisory · February 27, 2026
openSUSE Leap · Security advisory · February 27, 2026OPENSUSE-SU-2026:20287-1: Security update for 13 packages
OPENSUSE-SU-2026:20287-1, released February 27, 2026, fixes 205 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
205
12 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0071
53rd percentile
Priority of the 205 CVEs
Patch now 0
Urgent 12
High 87
Routine 106
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| dtb-aarch64 | opensuse-leap 16.0 | 6.12.0-160000.26.1 |
| kernel-64kb | opensuse-leap 16.0 | 6.12.0-160000.26.1 |
| kernel-azure | opensuse-leap 16.0 | 6.12.0-160000.26.1 |
| kernel-default | opensuse-leap 16.0 | 6.12.0-160000.26.1 |
| kernel-default-base | opensuse-leap 16.0 | 6.12.0-160000.26.1.160000.2.7 |
| kernel-docs | opensuse-leap 16.0 | 6.12.0-160000.26.1 |
| kernel-kvmsmall | opensuse-leap 16.0 | 6.12.0-160000.26.1 |
| kernel-obs-build | opensuse-leap 16.0 | 6.12.0-160000.26.1 |
| kernel-obs-qa | opensuse-leap 16.0 | 6.12.0-160000.26.1 |
| kernel-rt | opensuse-leap 16.0 | 6.12.0-160000.26.1 |
| kernel-source | opensuse-leap 16.0 | 6.12.0-160000.26.1 |
| kernel-syms | opensuse-leap 16.0 | 6.12.0-160000.26.1 |
| kernel-zfcpdump | opensuse-leap 16.0 | 6.12.0-160000.26.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2025-68359 | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free of qgroup record after fa... | 9.8 | 0.0063 | None reported |
| Urgent | CVE-2025-68811 | linux: In the Linux kernel, the following vulnerability has been resolved: svcrdma: use rc_pageoff for memcpy byte offset... | 9.8 | 0.0053 | None reported |
| Urgent | CVE-2025-68341 | linux: In the Linux kernel, the following vulnerability has been resolved: veth: reduce XDP no_direct return section to fix... | 9.8 | 0.0044 | None reported |
| Urgent | CVE-2025-68741 | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix improper freeing of purex ite... | 9.8 | 0.0043 | None reported |
| Urgent | CVE-2025-71064 | net: hns3: using the num_tqps in the vf driver to apply for resources | 9.8 | 0.0023 | None reported |
| Urgent | CVE-2025-68814 | io_uring: fix filename leak in __io_openat_prep() | 9.8 | 0.0022 | None reported |
| Urgent | CVE-2025-68366 | linux: In the Linux kernel, the following vulnerability has been resolved: nbd: defer config unlock in nbd_genl_connect Th... | 8.8 | 0.0020 | None reported |
| Urgent | CVE-2025-68822 | Input: alps - fix use-after-free bugs caused by dev3_register_work | 9.8 | 0.0018 | None reported |
| Urgent | CVE-2025-71073 | Input: lkkbd - disable pending work before freeing device | 9.8 | 0.0018 | None reported |
| Urgent | CVE-2025-68819 | media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() | 9.8 | 0.0016 | None reported |
| Urgent | CVE-2025-71098 | ip6_gre: make ip6gre_header() robust | 9.8 | 0.0014 | None reported |
| Urgent | CVE-2025-68789 | hwmon: (ibmpex) fix use-after-free in high/low store | 9.8 | n/a | None reported |
| High | CVE-2025-68349 | linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_m... | 7.5 | 0.0071 | None reported |
| High | CVE-2025-40261 | nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() | 9.8 | 0.0060 | None reported |
| High | CVE-2025-68261 | ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() | 7.5 | 0.0055 | None reported |
| High | CVE-2025-68337 | linux: In the Linux kernel, the following vulnerability has been resolved: jbd2: avoid bug_on in jbd2_journal_get_create_ac... | 7.5 | 0.0055 | None reported |
| High | CVE-2025-68775 | net/handshake: duplicate handshake cancellations leak socket | 9.8 | 0.0055 | None reported |
| High | CVE-2025-68360 | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: wed: use proper wed reference in mt7... | 8.2 | 0.0054 | None reported |
| High | CVE-2025-71120 | SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf | 7.5 | 0.0053 | None reported |
| High | CVE-2025-68218 | linux: In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix lockdep WARN due to partitio... | 7.5 | 0.0053 | None reported |
| High | CVE-2025-40257 | mptcp: fix a race in mptcp_pm_del_add_timer() | 9.8 | 0.0050 | None reported |
| High | CVE-2025-68241 | linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: route: Prevent rt_bind_exception() from re... | 7.5 | 0.0047 | None reported |
| High | CVE-2025-71116 | libceph: make decode_pool() more resilient against corrupted osdmaps | 8.1 | 0.0046 | None reported |
| High | CVE-2025-68803 | NFSD: NFSv4 file creation neglects setting ACL | 8.0 | 0.0045 | None reported |
| High | CVE-2025-38590 | net/mlx5e: Remove skb secpath if xfrm state is not found | 7.5 | 0.0044 | None reported |
Showing 1 to 25 of 205
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.