Linux · SUSE Linux Enterprise · Security advisory · March 26, 2026
SUSE-SU-2026:1081-1: Security update for 10 packages
SUSE-SU-2026:1081-1, released March 26, 2026, fixes 155 CVEs across 10 products. One of them is being exploited (CVE-2025-39964); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
155
None rated Critical
Exploited
1
CVE-2025-39964
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0161
76th percentile
Priority of the 155 CVEs
Patch now 1
Urgent 0
High 60
Routine 94
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-64kb | sles 15.7 | 6.4.0-150700.53.34.1 |
| kernel-azure | sles 15.7 | 6.4.0-150700.53.34.1 |
| kernel-default | sles 15.7 | 6.4.0-150700.53.34.1 |
| kernel-default-base | sles 15.7 | 6.4.0-150700.53.34.1.150700.17.23.1 |
| kernel-docs | sles 15.7 | 6.4.0-150700.53.34.1 |
| kernel-livepatch-SLE15-SP7_Update_10 | sles 15.7 | 1-150700.15.3.1 |
| kernel-obs-build | sles 15.7 | 6.4.0-150700.53.34.1 |
| kernel-source | sles 15.7 | 6.4.0-150700.53.34.1 |
| kernel-syms | sles 15.7 | 6.4.0-150700.53.34.1 |
| kernel-zfcpdump | sles 15.7 | 6.4.0-150700.53.34.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2025-39964 | crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg | 8.8 | 0.0161 | KEVExploited |
| High | CVE-2026-23111 | kernel-64kb: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258181). | 7.8 | 0.0113 | None reported |
| High | CVE-2026-22998 | kernel-64kb: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (bsc#1257209). | 7.5 | 0.0078 | None reported |
| High | CVE-2026-23003 | kernel-64kb: geneve: Fix incorrect inner network header offset when innerprotoinherit is set (bsc#1257246). | 8.8 | 0.0055 | None reported |
| High | CVE-2023-53817 | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: lib/mpi - avoid null pointer deref in mp... | 7.5 | 0.0054 | None reported |
| High | CVE-2025-68283 | libceph: replace BUG_ON with bounds check for map->max_osd | 7.5 | 0.0053 | None reported |
| High | CVE-2026-23112 | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0048 | None reported |
| High | CVE-2025-40099 | cifs: parse_dfs_referrals: prevent oob on malformed input | 9.4 | 0.0041 | None reported |
| High | CVE-2026-23139 | kernel-64kb: netfilter: nf_conncount: update last_gc only when GC has been performed (bsc#1258304). | 7.6 | 0.0039 | None reported |
| High | CVE-2025-71236 | scsi: qla2xxx: Validate sp before freeing associated memory | 7.8 | 0.0038 | None reported |
| High | CVE-2025-37861 | scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue | 7.8 | 0.0033 | None reported |
| High | CVE-2025-40253 | s390/ctcm: Fix double-kfree | 8.8 | 0.0032 | None reported |
| High | CVE-2025-71197 | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0026 | None reported |
| High | CVE-2025-71234 | wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add | 7.8 | 0.0024 | None reported |
| High | CVE-2025-68735 | linux: In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Prevent potential UAF in group crea... | 7.8 | 0.0021 | None reported |
| High | CVE-2026-23056 | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 | None reported |
| High | CVE-2026-23054 | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0021 | None reported |
| High | CVE-2026-23049 | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 | None reported |
| High | CVE-2026-23176 | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 | None reported |
| High | CVE-2026-23182 | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 | None reported |
| High | CVE-2025-40103 | smb: client: Fix refcount leak for cifs_sb_tlink | 7.1 | 0.0021 | None reported |
| High | CVE-2026-23172 | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0020 | None reported |
| High | CVE-2026-23010 | kernel-64kb: ipv6: Fix use-after-free in inet6_addr_del() (bsc#1257332). | 7.8 | 0.0020 | None reported |
| High | CVE-2026-23178 | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0019 | None reported |
| High | CVE-2026-23074 | kernel-64kb: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749). | 7.8 | 0.0019 | None reported |
Showing 1 to 25 of 155
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.