Linux · 
openSUSE Leap · Security advisory · August 12, 2026
openSUSE Leap · Security advisory · August 12, 2026OPENSUSE-SU-2026:21555-1: Security update for 13 packages
OPENSUSE-SU-2026:21555-1, released August 12, 2026, fixes 891 CVEs across 13 products. 2 of them are being exploited (CVE-2026-31431); 2 on CISA KEV. Patch Radar priority: Patch now.
Patch now2 on CISA KEV
CVEs closed
891
33 rated Critical
Exploited
2
CVE-2026-31431
Highest CVSS
10.0
Base score, 0 to 10
Highest EPSS
0.9811
99th percentile
Priority of the 891 CVEs
Patch now 2
Urgent 33
High 450
Routine 406
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| dtb-aarch64 | opensuse-leap 16.0 | 6.12.0-160000.37.1 |
| kernel-64kb | opensuse-leap 16.0 | 6.12.0-160000.37.1 |
| kernel-azure | opensuse-leap 16.0 | 6.12.0-160000.37.1 |
| kernel-default | opensuse-leap 16.0 | 6.12.0-160000.37.1 |
| kernel-default-base | opensuse-leap 16.0 | 6.12.0-160000.37.1.160000.2.19 |
| kernel-docs | opensuse-leap 16.0 | 6.12.0-160000.37.1 |
| kernel-kvmsmall | opensuse-leap 16.0 | 6.12.0-160000.37.1 |
| kernel-obs-build | opensuse-leap 16.0 | 6.12.0-160000.37.1 |
| kernel-obs-qa | opensuse-leap 16.0 | 6.12.0-160000.37.1 |
| kernel-rt | opensuse-leap 16.0 | 6.12.0-160000.37.1 |
| kernel-source | opensuse-leap 16.0 | 6.12.0-160000.37.1 |
| kernel-syms | opensuse-leap 16.0 | 6.12.0-160000.37.1 |
| kernel-zfcpdump | opensuse-leap 16.0 | 6.12.0-160000.37.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-31431 | crypto: algif_aead - Revert to operating out-of-place | 8.1 | 0.9811 | KEVExploited |
| Patch now | CVE-2025-39964 | crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg | 8.8 | 0.0161 | KEVExploited |
| Urgent | CVE-2026-64564 | sctp: don't free the ASCONF's own transport in DEL-IP processing | 9.8 | 0.0143 | None reported |
| Urgent | CVE-2026-43304 | linux: In the Linux kernel, the following vulnerability has been resolved: libceph: define and enforce CEPH_MAX_KEY_LEN Wh... | 9.8 | 0.0061 | None reported |
| Urgent | CVE-2026-43011 | linux: In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix potential double free of skb When... | 9.8 | 0.0059 | None reported |
| Urgent | CVE-2026-53224 | linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded INIT chunk and address l... | 9.1 | 0.0057 | None reported |
| Urgent | CVE-2026-52982 | linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix use-after-free in rtl8150... | 9.8 | 0.0054 | None reported |
| Urgent | CVE-2026-53045 | linux: In the Linux kernel, the following vulnerability has been resolved: memory: tegra124-emc: Fix dll_change check The... | 9.8 | 0.0051 | None reported |
| Urgent | CVE-2026-64061 | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early put of sink folio in netfs_read... | 9.8 | 0.0047 | None reported |
| Urgent | CVE-2026-43117 | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: get correct superblock from... | 9.1 | 0.0046 | None reported |
| Urgent | CVE-2026-31436 | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 9.8 | 0.0046 | None reported |
| Urgent | CVE-2026-64091 | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0043 | None reported |
| Urgent | CVE-2026-52922 | batman-adv: dat: handle forward allocation error | 9.8 | 0.0039 | None reported |
| Urgent | CVE-2026-64025 | linux: In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: fix verdict sk_data_ready racing wit... | 9.8 | 0.0037 | None reported |
| Urgent | CVE-2026-53002 | netfilter: conntrack: remove sprintf usage | 9.8 | 0.0037 | None reported |
| Urgent | CVE-2026-52989 | nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers | 9.8 | 0.0036 | None reported |
| Urgent | CVE-2026-63974 | Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close | 9.8 | 0.0035 | None reported |
| Urgent | CVE-2026-53175 | linux: In the Linux kernel, the following vulnerability has been resolved: inet: frags: fix use-after-free caused by the fq... | 9.8 | 0.0031 | None reported |
| Urgent | CVE-2026-53260 | linux: In the Linux kernel, the following vulnerability has been resolved: tcp: Add preempt_{disable,enable}_nested() in re... | 9.8 | 0.0029 | None reported |
| Urgent | CVE-2026-52934 | batman-adv: tvlv: reject oversized TVLV packets | 9.8 | 0.0024 | None reported |
| Urgent | CVE-2026-63882 | drm/amdkfd: fix NULL pointer bug in svm_range_set_attr | 9.8 | 0.0022 | None reported |
| Urgent | CVE-2026-63939 | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Compute the correct max length of the... | 9.3 | 0.0020 | None reported |
| Urgent | CVE-2026-63938 | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Check PSC request indices against the... | 9.3 | 0.0020 | None reported |
| Urgent | CVE-2026-53009 | ice: fix double-free of tx_buf skb | 9.8 | 0.0018 | None reported |
| Urgent | CVE-2026-63824 | KEYS: fix overflow in keyctl_pkey_params_get_2() | 9.8 | 0.0017 | None reported |
Showing 1 to 25 of 891
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.