Linux · openSUSE Leap · Security advisory · March 25, 2026

OPENSUSE-SU-2026:20416-1: Security update for 13 packages

OPENSUSE-SU-2026:20416-1, released March 25, 2026, fixes 175 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
175
2 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0113
66th percentile

Priority of the 175 CVEs

Patch now 0 Urgent 2 High 62 Routine 111

Fixed package versions

ProductReleaseFixed in
dtb-aarch64opensuse-leap 16.06.12.0-160000.27.1
kernel-64kbopensuse-leap 16.06.12.0-160000.27.1
kernel-azureopensuse-leap 16.06.12.0-160000.27.1
kernel-defaultopensuse-leap 16.06.12.0-160000.27.1
kernel-default-baseopensuse-leap 16.06.12.0-160000.27.1.160000.2.8
kernel-docsopensuse-leap 16.06.12.0-160000.27.1
kernel-kvmsmallopensuse-leap 16.06.12.0-160000.27.1
kernel-obs-buildopensuse-leap 16.06.12.0-160000.27.1
kernel-obs-qaopensuse-leap 16.06.12.0-160000.27.1
kernel-rtopensuse-leap 16.06.12.0-160000.27.1
kernel-sourceopensuse-leap 16.06.12.0-160000.27.1
kernel-symsopensuse-leap 16.06.12.0-160000.27.1
kernel-zfcpdumpopensuse-leap 16.06.12.0-160000.27.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2025-68745 linux: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clear cmds after chip reset Comm...9.8 0.0050 None reported
Urgent CVE-2026-23112 linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds checks in nvmet_tcp_build_...9.8 0.0048 None reported
High CVE-2026-23111 kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0113 None reported
High CVE-2026-22998 kernel-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: v...7.5 0.0078 None reported
High CVE-2026-23003 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: k...8.8 0.0055 None reported
High CVE-2025-40099 cifs: parse_dfs_referrals: prevent oob on malformed input9.4 0.0041 None reported
High CVE-2026-23139 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: update last_gc only whe...7.6 0.0039 None reported
High CVE-2025-71236 scsi: qla2xxx: Validate sp before freeing associated memory7.8 0.0038 None reported
High CVE-2025-68818 scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path"8.8 0.0033 None reported
High CVE-2026-23230 smb: client: split cached_fid bitfields to avoid shared-byte RMW races8.4 0.0028 None reported
High CVE-2025-71197 linux: In the Linux kernel, the following vulnerability has been resolved: w1: therm: Fix off-by-one buffer overflow in ala...n/a 0.0026 None reported
High CVE-2026-23136 linux: In the Linux kernel, the following vulnerability has been resolved: libceph: reset sparse-read state in osd_fault()...8.1 0.0025 None reported
High CVE-2026-23030 linux: In the Linux kernel, the following vulnerability has been resolved: phy: rockchip: inno-usb2: Fix a double free bug...n/a 0.0024 None reported
High CVE-2025-71234 wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add7.8 0.0024 None reported
High CVE-2026-23056 linux: In the Linux kernel, the following vulnerability has been resolved: uacce: implement mremap in uacce_vm_ops to retur...n/a 0.0021 None reported
High CVE-2026-23054 kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.0 0.0021 None reported
High CVE-2026-23049 linux: In the Linux kernel, the following vulnerability has been resolved: drm/panel-simple: fix connector type for DataIma...n/a 0.0021 None reported
High CVE-2026-23176 linux: In the Linux kernel, the following vulnerability has been resolved: platform/x86: toshiba_haps: Fix memory leaks in...n/a 0.0021 None reported
High CVE-2026-23182 linux: In the Linux kernel, the following vulnerability has been resolved: spi: tegra: Fix a memory leak in tegra_slink_pro...n/a 0.0021 None reported
High CVE-2025-40103 smb: client: Fix refcount leak for cifs_sb_tlink7.1 0.0021 None reported
High CVE-2026-23172 kernel: In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: fix potential skb->frags overflo...8.8 0.0020 None reported
High CVE-2026-23050 linux: In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix a deadlock when returning a delegation...7.0 0.0020 None reported
High CVE-2026-23010 kernel: In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix use-after-free in inet6_addr_del(). syz...7.8 0.0020 None reported
High CVE-2025-68371 linux: In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix device resources accessed af...7.0 0.0020 None reported
High CVE-2025-68186 linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not warn in ring_buffer_map_get_...n/a 0.0020 None reported
Showing 1 to 25 of 175 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.