Linux · SUSE Linux Enterprise · Security advisory · April 23, 2026
SUSE-SU-2026:1573-1: kernel-livepatch-SLE15-SP7-RT_Update_11 security update
SUSE-SU-2026:1573-1, released April 23, 2026, fixes 40 CVEs in kernel-livepatch-SLE15-SP7-RT_Update_11 (version 1-150700.1.3.1). None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
40
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0105
64th percentile
Priority of the 40 CVEs
Patch now 0
Urgent 0
High 26
Routine 14
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-livepatch-SLE15-SP7-RT_Update_11 | sles 15.7 | 1-150700.1.3.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2026-23231 | netfilter: nf_tables: fix use-after-free in nf_tables_addchain() | 7.8 | 0.0105 | None reported |
| High | CVE-2025-68794 | iomap: adjust read range correctly for non-block-aligned positions | 9.8 | 0.0069 | None reported |
| High | CVE-2026-23242 | RDMA/siw: Fix potential NULL pointer dereference in header processing | 7.5 | 0.0063 | None reported |
| High | CVE-2026-23193 | kernel-livepatch-SLE15-SP7-RT_Update_11: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (bsc#1258414). | 7.8 | 0.0036 | None reported |
| High | CVE-2026-23136 | kernel-livepatch-SLE15-SP7-RT_Update_11: libceph: reset sparse-read state in osd_fault() (bsc#1258303). | 8.1 | 0.0025 | None reported |
| High | CVE-2024-38542 | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mana_ib: boundary check before installing c... | 7.8 | 0.0025 | None reported |
| High | CVE-2026-23030 | kernel-livepatch-SLE15-SP7-RT_Update_11: phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() (bsc#1257561). | n/a | 0.0024 | None reported |
| High | CVE-2026-23278 | netfilter: nf_tables: always walk all pending catchall elements | 7.8 | 0.0023 | None reported |
| High | CVE-2026-31788 | kernel-livepatch-SLE15-SP7-RT_Update_11: xen/privcmd: restrict usage in unprivileged domU (bsc#1259707). | 8.2 | 0.0019 | None reported |
| High | CVE-2026-23274 | netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels | 7.8 | 0.0018 | None reported |
| High | CVE-2026-23243 | RDMA/umad: Reject negative data_len in ib_umad_write | 7.8 | 0.0018 | None reported |
| High | CVE-2026-23272 | netfilter: nf_tables: unconditionally bump set->nelems before insertion | 7.8 | 0.0018 | None reported |
| High | CVE-2025-39998 | scsi: target: target_core_configfs: Add length check to avoid buffer overflow | 7.8 | 0.0018 | None reported |
| High | CVE-2026-23361 | PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry | 7.8 | 0.0017 | None reported |
| High | CVE-2026-23413 | kernel-uek64k-modules-deprecated: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0016 | None reported |
| High | CVE-2026-23216 | scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() | 8.8 | 0.0014 | None reported |
| High | CVE-2026-23317 | drm/vmwgfx: Return the correct value in vmw_translate_ptr functions | 7.8 | 0.0014 | None reported |
| High | CVE-2026-23187 | kernel-livepatch-SLE15-SP7-RT_Update_11: pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains (bsc#1258330). | 7.1 | 0.0014 | None reported |
| High | CVE-2025-71231 | crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode | 8.4 | 0.0014 | None reported |
| High | CVE-2026-23270 | kernel-livepatch-SLE15-SP7-RT_Update_11: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (bsc#1259886). | 8.1 | 0.0014 | None reported |
| High | CVE-2026-23319 | bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim | 7.8 | 0.0014 | None reported |
| High | CVE-2026-23293 | net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled | 7.5 | 0.0013 | None reported |
| High | CVE-2026-23281 | wifi: libertas: fix use-after-free in lbs_free_adapter() | 7.8 | 0.0013 | None reported |
| High | CVE-2026-23215 | x86/vmware: Fix hypercall clobbers | 8.4 | 0.0013 | None reported |
| High | CVE-2026-23103 | kernel: kernel: ipvlan: Make the addrs_lock be per port | 8.8 | 0.0013 | None reported |
Showing 1 to 25 of 40
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.