OPENSUSE-SU-2026:20572-1: Security update for 13 packages

OPENSUSE-SU-2026:20572-1, released April 20, 2026, fixes 49 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

9.8

Base score, 0 to 10

Highest EPSS

0.0105

64th percentile

Priority of the 49 CVEs

Patch now 0
                                Urgent 0
                                High 31
                                Routine 18

Fixed package versions

Product	Release	Fixed in
dtb-aarch64	opensuse-leap 16.0	6.12.0-160000.28.1
kernel-64kb	opensuse-leap 16.0	6.12.0-160000.28.1
kernel-azure	opensuse-leap 16.0	6.12.0-160000.28.1
kernel-default	opensuse-leap 16.0	6.12.0-160000.28.1
kernel-default-base	opensuse-leap 16.0	6.12.0-160000.27.1.160000.2.8
kernel-docs	opensuse-leap 16.0	6.12.0-160000.28.1
kernel-kvmsmall	opensuse-leap 16.0	6.12.0-160000.28.1
kernel-obs-build	opensuse-leap 16.0	6.12.0-160000.28.1
kernel-obs-qa	opensuse-leap 16.0	6.12.0-160000.28.1
kernel-rt	opensuse-leap 16.0	6.12.0-160000.28.1
kernel-source	opensuse-leap 16.0	6.12.0-160000.28.1
kernel-syms	opensuse-leap 16.0	6.12.0-160000.28.1
kernel-zfcpdump	opensuse-leap 16.0	6.12.0-160000.28.1

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2026-23231	netfilter: nf_tables: fix use-after-free in nf_tables_addchain()	7.8	0.0105	None reported
High	CVE-2025-68794	iomap: adjust read range correctly for non-block-aligned positions	9.8	0.0069	None reported
High	CVE-2026-23242	RDMA/siw: Fix potential NULL pointer dereference in header processing	7.5	0.0063	None reported
High	CVE-2026-23240	tls: Fix race condition in tls_sw_cancel_work_tx()	9.8	0.0056	None reported
High	CVE-2026-23193	kernel-livepatch-SLE15-SP7-RT_Update_11: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (bsc#1258414).	7.8	0.0036	None reported
High	CVE-2025-40253	s390/ctcm: Fix double-kfree	8.8	0.0032	None reported
High	CVE-2026-23278	netfilter: nf_tables: always walk all pending catchall elements	7.8	0.0023	None reported
High	CVE-2026-31788	kernel-livepatch-SLE15-SP7-RT_Update_11: xen/privcmd: restrict usage in unprivileged domU (bsc#1259707).	8.2	0.0019	None reported
High	CVE-2026-23274	netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels	7.8	0.0018	None reported
High	CVE-2026-23243	RDMA/umad: Reject negative data_len in ib_umad_write	7.8	0.0018	None reported
High	CVE-2026-23272	netfilter: nf_tables: unconditionally bump set->nelems before insertion	7.8	0.0018	None reported
High	CVE-2025-39998	scsi: target: target_core_configfs: Add length check to avoid buffer overflow	7.8	0.0018	None reported
High	CVE-2026-23383	bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing	7.8	0.0018	None reported
High	CVE-2026-23361	PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry	7.8	0.0017	None reported
High	CVE-2026-23413	kernel-uek64k-modules-deprecated: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)	7.8	0.0016	None reported
High	CVE-2026-23204	kernel-64kb: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1258340).	8.1	0.0016	None reported
High	CVE-2026-23216	scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()	8.8	0.0014	None reported
High	CVE-2026-23343	xdp: produce a warning when calculated tailroom is negative	7.8	0.0014	None reported
High	CVE-2026-23187	kernel-livepatch-SLE15-SP7-RT_Update_11: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains (bsc#1258330).	7.1	0.0014	None reported
High	CVE-2026-23270	kernel-livepatch-SLE15-SP7-RT_Update_11: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (bsc#1259886).	8.1	0.0014	None reported
High	CVE-2026-23319	bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim	7.8	0.0014	None reported
High	CVE-2026-23326	dtb-aarch64: xsk: Fix fragment node deletion to prevent buffer leak (bsc#1260606).	7.8	0.0013	None reported
High	CVE-2026-23293	net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled	7.5	0.0013	None reported
High	CVE-2026-23335	RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()	7.1	0.0013	None reported
High	CVE-2026-23239	espintcp: Fix race condition in espintcp_close()	7.8	0.0013	None reported

Also fixes CVE-2026-23231

ALAS2023-2026-1543
bpftool6.12, bpftool6.12-debuginfo, kernel-livepatch-6.12.77-99.140 and 19 more on amzn 2023
ALAS2023-2026-1544
bpftool, bpftool-debuginfo, kernel and 19 more on amzn 2023
ELSA-2026-50232
kernel-uek, kernel-uek-core, kernel-uek-debug and 32 more on ol 10, ol 9
RHSA-2026:6570
kernel, kernel-64k, kernel-64k-core and 69 more on RHEL 9
RLSA-2026:6570
kernel on rocky 9
ELSA-2026-6570
kernel, kernel-abi-stablelists, kernel-core and 26 more on ol 9
ALSA-2026:6570
kernel, kernel-64k, kernel-64k-core and 71 more on almalinux 9
SUSE-SU-2026:1573-1
kernel-livepatch-SLE15-SP7-RT_Update_11 on sles 15.7

Vendor advisory

https://osv.dev/vulnerability/openSUSE-SU-2026:20572-1

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/opensuse-su-2026-20572-1">OPENSUSE-SU-2026:20572-1 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.