Linux · SUSE Linux Enterprise · Security advisory · January 26, 2026
SUSE-SU-2026:0293-1: Security update for 13 packages
SUSE-SU-2026:0293-1, released January 26, 2026, fixes 334 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
334
10 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0071
53rd percentile
Priority of the 334 CVEs
Patch now 0
Urgent 10
High 167
Routine 157
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| dtb-aarch64 | opensuse-leap 15.6 | 6.4.0-150600.23.84.1 |
| kernel-64kb | opensuse-leap 15.6 | 6.4.0-150600.23.84.1 |
| kernel-debug | opensuse-leap 15.6 | 6.4.0-150600.23.84.1 |
| kernel-default | opensuse-leap 15.6 | 6.4.0-150600.23.84.1 |
| kernel-default | sles 15.6 | 6.4.0-150600.23.84.1 |
| kernel-default-base | opensuse-leap 15.6 | 6.4.0-150600.23.84.1.150600.12.38.1 |
| kernel-default-base | sles 15.6 | 6.4.0-150600.23.84.1.150600.12.38.1 |
| kernel-docs | opensuse-leap 15.6 | 6.4.0-150600.23.84.1 |
| kernel-docs | sles 15.6 | 6.4.0-150600.23.84.1 |
| kernel-kvmsmall | opensuse-leap 15.6 | 6.4.0-150600.23.84.1 |
| kernel-livepatch-SLE15-SP6_Update_19 | sles 15.6 | 1-150600.13.3.1 |
| kernel-obs-build | opensuse-leap 15.6 | 6.4.0-150600.23.84.1 |
| kernel-obs-build | sles 15.6 | 6.4.0-150600.23.84.1 |
| kernel-obs-qa | opensuse-leap 15.6 | 6.4.0-150600.23.84.1 |
| kernel-source | opensuse-leap 15.6 | 6.4.0-150600.23.84.1 |
| kernel-source | sles 15.6 | 6.4.0-150600.23.84.1 |
| kernel-syms | opensuse-leap 15.6 | 6.4.0-150600.23.84.1 |
| kernel-syms | sles 15.6 | 6.4.0-150600.23.84.1 |
| kernel-zfcpdump | opensuse-leap 15.6 | 6.4.0-150600.23.84.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2025-68192 | linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: initialize MAC header offset... | 9.8 | 0.0061 | None reported |
| Urgent | CVE-2023-54258 | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 9.8 | 0.0056 | None reported |
| Urgent | CVE-2023-53794 | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 9.8 | 0.0055 | None reported |
| Urgent | CVE-2023-54094 | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 9.8 | 0.0055 | None reported |
| Urgent | CVE-2023-54292 | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 9.8 | 0.0055 | None reported |
| Urgent | CVE-2025-40320 | linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential cfid UAF in smb2_quer... | 9.8 | 0.0045 | None reported |
| Urgent | CVE-2025-40244 | hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() | 9.8 | 0.0017 | None reported |
| Urgent | CVE-2025-40242 | gfs2: Fix unlikely race in gdlm_put_lock | 9.8 | 0.0016 | None reported |
| Urgent | CVE-2025-40262 | Input: imx_sc_key - fix memory corruption on unload | 9.8 | 0.0015 | None reported |
| Urgent | CVE-2023-53996 | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 9.3 | 0.0011 | None reported |
| High | CVE-2025-40135 | ipv6: use RCU in ip6_xmit() | 8.4 | 0.0071 | None reported |
| High | CVE-2025-40343 | nvmet-fc: avoid scheduling association deletion twice | 9.8 | 0.0070 | None reported |
| High | CVE-2023-54219 | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 7.5 | 0.0069 | None reported |
| High | CVE-2025-40187 | net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() | 7.5 | 0.0064 | None reported |
| High | CVE-2025-40053 | net: dlink: handle copy_thresh allocation failure | 7.5 | 0.0063 | None reported |
| High | CVE-2025-40158 | ipv6: use RCU in ip6_output() | 8.1 | 0.0056 | None reported |
| High | CVE-2025-68218 | linux: In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix lockdep WARN due to partitio... | 7.5 | 0.0053 | None reported |
| High | CVE-2023-54227 | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 7.5 | 0.0051 | None reported |
| High | CVE-2025-40258 | mptcp: fix race condition in mptcp_schedule_work() | 9.8 | 0.0050 | None reported |
| High | CVE-2025-40328 | smb: client: fix potential UAF in smb2_close_cached_fid() | 8.8 | 0.0049 | None reported |
| High | CVE-2025-40324 | NFSD: Fix crash in nfsd4_read_release() | 7.5 | 0.0049 | None reported |
| High | CVE-2025-40273 | NFSD: free copynotify stateid in nfs4_free_ol_stateid() | 8.8 | 0.0046 | None reported |
| High | CVE-2023-54076 | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 9.8 | 0.0046 | None reported |
| High | CVE-2025-40342 | nvme-fc: use lock accessing port_state and rport state | 8.8 | 0.0039 | None reported |
| High | CVE-2025-38728 | smb3: fix for slab out of bounds on mount to ksmbd | 7.1 | 0.0036 | None reported |
Showing 1 to 25 of 334
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.