Linux · SUSE Linux Enterprise · Security advisory · July 1, 2026
SUSE-SU-2026:2195-1: Security update for 7 packages
SUSE-SU-2026:2195-1, released July 1, 2026, fixes 69 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
69
4 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0122
68th percentile
Priority of the 69 CVEs
Patch now 0
Urgent 4
High 60
Routine 5
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-default | sles 15.6 | 6.4.0-150600.23.112.1 |
| kernel-default-base | sles 15.6 | 6.4.0-150600.23.112.1.150600.12.52.1 |
| kernel-docs | sles 15.6 | 6.4.0-150600.23.112.1 |
| kernel-livepatch-SLE15-SP6_Update_26 | sles 15.6 | 1-150600.13.3.1 |
| kernel-obs-build | sles 15.6 | 6.4.0-150600.23.112.1 |
| kernel-source | sles 15.6 | 6.4.0-150600.23.112.1 |
| kernel-syms | sles 15.6 | 6.4.0-150600.23.112.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-31402 | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 9.8 | 0.0122 | None reported |
| Urgent | CVE-2026-23450 | linux: In the Linux kernel, the following vulnerability has been resolved: net/smc: fix NULL dereference and UAF in smc_tcp... | 9.8 | 0.0046 | None reported |
| Urgent | CVE-2026-31436 | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 9.8 | 0.0046 | None reported |
| Urgent | CVE-2026-31533 | linux: In the Linux kernel, the following vulnerability has been resolved: net/tls: fix use-after-free in -EBUSY error path... | 9.8 | 0.0040 | None reported |
| High | CVE-2026-46331 | net/sched: fix pedit partial COW leading to page cache corruption | 8.1 | 0.0064 | None reported |
| High | CVE-2026-23240 | tls: Fix race condition in tls_sw_cancel_work_tx() | 9.8 | 0.0056 | None reported |
| High | CVE-2026-43365 | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 8.2 | 0.0051 | None reported |
| High | CVE-2026-31685 | netfilter: ip6t_eui64: reject invalid MAC header for all packets | 9.4 | 0.0049 | None reported |
| High | CVE-2026-31669 | mptcp: fix slab-use-after-free in __inet_lookup_established | 9.8 | 0.0047 | None reported |
| High | CVE-2026-43190 | kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_tcpmss: check remaining length befo... | 8.2 | 0.0046 | None reported |
| High | CVE-2026-31649 | net: stmmac: fix integer underflow in chain mode | 9.8 | 0.0046 | None reported |
| High | CVE-2026-43494 | net/rds: reset op_nents when zerocopy page pin fails | 7.8 | 0.0041 | None reported |
| High | CVE-2026-31662 | tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG | 7.5 | 0.0039 | None reported |
| High | CVE-2026-31408 | Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold | 8.8 | 0.0032 | None reported |
| High | CVE-2026-31607 | usbip: validate number_of_packets in usbip_pack_ret_submit() | 9.8 | 0.0031 | None reported |
| High | CVE-2026-31622 | NFC: digital: Bounds check NFC-A cascade depth in SDD response handler | 8.8 | 0.0029 | None reported |
| High | CVE-2025-54518 | AMD: CVE-2025-54518 CPU OP Cache Corruption | 7.8 | 0.0029 | Exploitation Unlikely |
| High | CVE-2026-31694 | fuse: reject oversized dirents in page cache | 7.8 | 0.0028 | None reported |
| High | CVE-2026-43334 | kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: force responder MITM requirements... | 8.8 | 0.0028 | None reported |
| High | CVE-2026-23462 | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 8.8 | 0.0028 | None reported |
| High | CVE-2026-43110 | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: validate bsscfg indices in IF ev... | 8.8 | 0.0027 | None reported |
| High | CVE-2026-31570 | can: gw: fix OOB heap access in cgw_csum_crc8_rel() | 8.8 | 0.0026 | None reported |
| High | CVE-2026-43038 | kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... | 9.8 | 0.0026 | None reported |
| High | CVE-2026-23461 | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 8.8 | 0.0024 | None reported |
| High | CVE-2026-31588 | KVM: x86: Use scratch field in MMIO fragment to hold small write values | 8.8 | 0.0019 | None reported |
Showing 1 to 25 of 69
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.