Linux · 
openSUSE Leap · Security advisory · June 15, 2026
openSUSE Leap · Security advisory · June 15, 2026OPENSUSE-SU-2026:20965-1: Security update for 13 packages
OPENSUSE-SU-2026:20965-1, released June 15, 2026, fixes 60 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
60
2 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0058
48th percentile
Priority of the 60 CVEs
Patch now 0
Urgent 2
High 37
Routine 21
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| dtb-aarch64 | opensuse-leap 16.0 | 6.12.0-160000.35.1 |
| kernel-64kb | opensuse-leap 16.0 | 6.12.0-160000.35.1 |
| kernel-azure | opensuse-leap 16.0 | 6.12.0-160000.35.1 |
| kernel-default | opensuse-leap 16.0 | 6.12.0-160000.35.1 |
| kernel-default-base | opensuse-leap 16.0 | 6.12.0-160000.35.1.160000.2.16 |
| kernel-docs | opensuse-leap 16.0 | 6.12.0-160000.35.1 |
| kernel-kvmsmall | opensuse-leap 16.0 | 6.12.0-160000.35.1 |
| kernel-obs-build | opensuse-leap 16.0 | 6.12.0-160000.35.1 |
| kernel-obs-qa | opensuse-leap 16.0 | 6.12.0-160000.35.1 |
| kernel-rt | opensuse-leap 16.0 | 6.12.0-160000.35.1 |
| kernel-source | opensuse-leap 16.0 | 6.12.0-160000.35.1 |
| kernel-syms | opensuse-leap 16.0 | 6.12.0-160000.35.1 |
| kernel-zfcpdump | opensuse-leap 16.0 | 6.12.0-160000.35.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-45898 | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix workqueue list corruption by remo... | 9.8 | 0.0053 | None reported |
| Urgent | CVE-2026-46316 | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache... | 9.3 | 0.0034 | None reported |
| High | CVE-2026-43197 | netconsole: avoid OOB reads, msg is not nul-terminated | 9.1 | 0.0058 | None reported |
| High | CVE-2026-46043 | RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv | 9.1 | 0.0051 | None reported |
| High | CVE-2026-31448 | ext4: avoid infinite loops caused by residual data | 9.4 | 0.0050 | None reported |
| High | CVE-2026-46114 | RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads | 8.8 | 0.0047 | None reported |
| High | CVE-2026-43184 | linux: In the Linux kernel, the following vulnerability has been resolved: rnbd-srv: Zero the rsp buffer before using it B... | 7.5 | 0.0044 | None reported |
| High | CVE-2026-45852 | kernel-uek-modules: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.8 | 0.0020 | None reported |
| High | CVE-2026-45856 | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Validate wqe_size before using it i... | 8.8 | 0.0019 | None reported |
| High | CVE-2026-45984 | kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... | 7.8 | 0.0018 | None reported |
| High | CVE-2026-45932 | bpf: Fix tcx/netkit detach permissions when prog fd isn't given | 7.3 | 0.0017 | None reported |
| High | CVE-2026-23327 | cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() | 7.1 | 0.0017 | None reported |
| High | CVE-2026-43332 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.8 | 0.0016 | None reported |
| High | CVE-2026-45886 | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpf_xdp_store_bytes proto for read-only... | 7.0 | 0.0016 | None reported |
| High | CVE-2026-46181 | RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() | 8.8 | 0.0014 | None reported |
| High | CVE-2026-46176 | RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() | 7.8 | 0.0014 | None reported |
| High | CVE-2026-46021 | thermal: core: Fix thermal zone governor cleanup issues | 7.0 | 0.0014 | None reported |
| High | CVE-2026-31446 | ext4: fix use-after-free in update_super_work when racing with umount | 7.8 | 0.0014 | None reported |
| High | CVE-2026-43150 | linux: In the Linux kernel, the following vulnerability has been resolved: perf/arm-cmn: Reject unsupported hardware config... | 7.8 | 0.0014 | None reported |
| High | CVE-2026-31401 | linux: In the Linux kernel, the following vulnerability has been resolved: HID: bpf: prevent buffer overflow in hid_hw_requ... | 7.8 | 0.0014 | None reported |
| High | CVE-2026-43030 | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix regsafe() for pointers to packet In ca... | 7.8 | 0.0014 | None reported |
| High | CVE-2026-31518 | esp: fix skb leak with espintcp and async crypto | 7.1 | 0.0013 | None reported |
| High | CVE-2026-43040 | linux: In the Linux kernel, the following vulnerability has been resolved: net: ipv6: ndisc: fix ndisc_ra_useropt to initia... | 7.1 | 0.0013 | None reported |
| High | CVE-2026-45942 | ext4: fix e4b bitmap inconsistency reports | 8.8 | 0.0013 | None reported |
| High | CVE-2026-31396 | linux: In the Linux kernel, the following vulnerability has been resolved: net: macb: fix use-after-free access to PTP cloc... | 7.8 | 0.0013 | None reported |
Showing 1 to 25 of 60
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.