Linux · SUSE Linux Enterprise · Security advisory · February 11, 2026
SUSE-SU-2026:0447-1: Security update for 9 packages
SUSE-SU-2026:0447-1, released February 11, 2026, fixes 171 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
171
6 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0071
53rd percentile
Priority of the 171 CVEs
Patch now 0
Urgent 6
High 80
Routine 85
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-64kb | sles 15.7 | 6.4.0-150700.53.31.1 |
| kernel-default | sles 15.7 | 6.4.0-150700.53.31.1 |
| kernel-default-base | sles 15.7 | 6.4.0-150700.53.31.1.150700.17.21.1 |
| kernel-docs | sles 15.7 | 6.4.0-150700.53.31.1 |
| kernel-livepatch-SLE15-SP7_Update_9 | sles 15.7 | 1-150700.15.3.1 |
| kernel-obs-build | sles 15.7 | 6.4.0-150700.53.31.1 |
| kernel-source | sles 15.7 | 6.4.0-150700.53.31.1 |
| kernel-syms | sles 15.7 | 6.4.0-150700.53.31.1 |
| kernel-zfcpdump | sles 15.7 | 6.4.0-150700.53.31.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2025-40350 | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: RX, Fix generating skb from non-linea... | 9.8 | 0.0055 | None reported |
| Urgent | CVE-2025-71064 | net: hns3: using the num_tqps in the vf driver to apply for resources | 9.8 | 0.0023 | None reported |
| Urgent | CVE-2025-68814 | io_uring: fix filename leak in __io_openat_prep() | 9.8 | 0.0022 | None reported |
| Urgent | CVE-2025-68819 | media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() | 9.8 | 0.0016 | None reported |
| Urgent | CVE-2025-71098 | ip6_gre: make ip6gre_header() robust | 9.8 | 0.0014 | None reported |
| Urgent | CVE-2025-68789 | hwmon: (ibmpex) fix use-after-free in high/low store | 9.8 | n/a | None reported |
| High | CVE-2025-68349 | linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_m... | 7.5 | 0.0071 | None reported |
| High | CVE-2025-40261 | nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() | 9.8 | 0.0060 | None reported |
| High | CVE-2025-68284 | libceph: prevent potential out-of-bounds writes in handle_auth_session_key() | 9.8 | 0.0059 | None reported |
| High | CVE-2025-68285 | libceph: fix potential use-after-free in have_mon_and_osd_map() | 9.8 | 0.0059 | None reported |
| High | CVE-2025-68261 | ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() | 7.5 | 0.0055 | None reported |
| High | CVE-2025-68337 | linux: In the Linux kernel, the following vulnerability has been resolved: jbd2: avoid bug_on in jbd2_journal_get_create_ac... | 7.5 | 0.0055 | None reported |
| High | CVE-2025-68775 | net/handshake: duplicate handshake cancellations leak socket | 9.8 | 0.0055 | None reported |
| High | CVE-2025-71120 | SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf | 7.5 | 0.0053 | None reported |
| High | CVE-2025-40257 | mptcp: fix a race in mptcp_pm_del_add_timer() | 9.8 | 0.0050 | None reported |
| High | CVE-2025-40328 | smb: client: fix potential UAF in smb2_close_cached_fid() | 8.8 | 0.0049 | None reported |
| High | CVE-2025-68301 | net: atlantic: fix fragment overflow handling in RX path | 9.8 | 0.0047 | None reported |
| High | CVE-2025-68241 | linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: route: Prevent rt_bind_exception() from re... | 7.5 | 0.0047 | None reported |
| High | CVE-2025-71116 | libceph: make decode_pool() more resilient against corrupted osdmaps | 8.1 | 0.0046 | None reported |
| High | CVE-2025-68803 | NFSD: NFSv4 file creation neglects setting ACL | 8.0 | 0.0045 | None reported |
| High | CVE-2025-68320 | linux: In the Linux kernel, the following vulnerability has been resolved: lan966x: Fix sleeping in atomic context The fol... | 7.5 | 0.0041 | None reported |
| High | CVE-2025-38379 | smb: client: fix warning when reconnecting channel | 7.1 | 0.0041 | None reported |
| High | CVE-2026-22984 | kernel-64kb: libceph: prevent potential out-of-bounds reads in handle_auth_done() (bsc#1257217). | 8.8 | 0.0041 | None reported |
| High | CVE-2026-22990 | kernel: In the Linux kernel, the following vulnerability has been resolved: libceph: replace overzealous BUG_ON in osdmap_app... | 8.8 | 0.0040 | None reported |
| High | CVE-2025-68770 | linux: In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix XDP_TX path For XDP_TX action in b... | 7.5 | 0.0039 | None reported |
Showing 1 to 25 of 171
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.