Linux · SUSE Linux Enterprise · Security advisory · January 23, 2026
SUSE-SU-2026:0281-1: Security update for 3 packages
SUSE-SU-2026:0281-1, released January 23, 2026, fixes 395 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
395
13 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0071
53rd percentile
Priority of the 395 CVEs
Patch now 0
Urgent 13
High 199
Routine 183
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-azure | sles 15.7 | 6.4.0-150700.20.24.1 |
| kernel-source-azure | sles 15.7 | 6.4.0-150700.20.24.1 |
| kernel-syms-azure | sles 15.7 | 6.4.0-150700.20.24.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2025-68206 | netfilter: nft_ct: add seqadj extension for natted connections | 9.1 | 0.0071 | None reported |
| Urgent | CVE-2025-68192 | linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: initialize MAC header offset... | 9.8 | 0.0061 | None reported |
| Urgent | CVE-2023-54258 | linux: In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential oops in cifs_oplock_break W... | 9.8 | 0.0056 | None reported |
| Urgent | CVE-2023-53794 | linux: In the Linux kernel, the following vulnerability has been resolved: cifs: fix session state check in reconnect to av... | 9.8 | 0.0055 | None reported |
| Urgent | CVE-2023-54094 | linux: In the Linux kernel, the following vulnerability has been resolved: net: prevent skb corruption on frag list segment... | 9.8 | 0.0055 | None reported |
| Urgent | CVE-2023-54292 | kernel-livepatch-SLE15-SP7_Update_8: Security update for the Linux Kernel | 9.8 | 0.0055 | None reported |
| Urgent | CVE-2023-54076 | dtb-aarch64: Security update for the Linux Kernel | 9.8 | 0.0046 | None reported |
| Urgent | CVE-2025-40320 | linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential cfid UAF in smb2_quer... | 9.8 | 0.0045 | None reported |
| Urgent | CVE-2025-40244 | hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() | 9.8 | 0.0017 | None reported |
| Urgent | CVE-2025-40251 | devlink: rate: Unset parent pointer in devl_rate_nodes_destroy | 9.8 | 0.0017 | None reported |
| Urgent | CVE-2025-40242 | gfs2: Fix unlikely race in gdlm_put_lock | 9.8 | 0.0016 | None reported |
| Urgent | CVE-2025-40262 | Input: imx_sc_key - fix memory corruption on unload | 9.8 | 0.0015 | None reported |
| Urgent | CVE-2023-53996 | kernel-obs-build: Security update for the Linux Kernel | 9.3 | 0.0011 | None reported |
| High | CVE-2025-40135 | ipv6: use RCU in ip6_xmit() | 8.4 | 0.0071 | None reported |
| High | CVE-2025-40343 | nvmet-fc: avoid scheduling association deletion twice | 9.8 | 0.0070 | None reported |
| High | CVE-2023-54219 | kernel-64kb: Security update for the Linux Kernel | 7.5 | 0.0069 | None reported |
| High | CVE-2025-40252 | net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() | 9.8 | 0.0065 | None reported |
| High | CVE-2025-40240 | sctp: avoid NULL dereference when chunk data buffer is missing | 8.6 | 0.0064 | None reported |
| High | CVE-2025-40187 | net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() | 7.5 | 0.0064 | None reported |
| High | CVE-2025-40053 | net: dlink: handle copy_thresh allocation failure | 7.5 | 0.0063 | None reported |
| High | CVE-2025-40158 | ipv6: use RCU in ip6_output() | 8.1 | 0.0056 | None reported |
| High | CVE-2025-40347 | linux: In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix the deadlock of enetc_mdio_lock... | 7.5 | 0.0053 | None reported |
| High | CVE-2025-68218 | linux: In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix lockdep WARN due to partitio... | 7.5 | 0.0053 | None reported |
| High | CVE-2025-40337 | net: stmmac: Correctly handle Rx checksum offload errors | 8.2 | 0.0052 | None reported |
| High | CVE-2023-54227 | kernel-64kb: Security update for the Linux Kernel | 7.5 | 0.0051 | None reported |
Showing 1 to 25 of 395
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.