Linux · SUSE Linux Enterprise · Security advisory · June 30, 2026
SUSE-SU-2026:2238-1: Security update for 10 packages
SUSE-SU-2026:2238-1, released June 30, 2026, fixes 204 CVEs across 10 products. One of them is being exploited (CVE-2026-46300); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
204
2 rated Critical
Exploited
1
CVE-2026-46300
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.1613
96th percentile
Priority of the 204 CVEs
Patch now 1
Urgent 2
High 128
Routine 73
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-64kb | sles 15.7 | 6.4.0-150700.53.55.1 |
| kernel-azure | sles 15.7 | 6.4.0-150700.53.55.1 |
| kernel-default | sles 15.7 | 6.4.0-150700.53.55.1 |
| kernel-default-base | sles 15.7 | 6.4.0-150700.53.55.1.150700.17.33.1 |
| kernel-docs | sles 15.7 | 6.4.0-150700.53.55.1 |
| kernel-livepatch-SLE15-SP7_Update_15 | sles 15.7 | 1-150700.15.3.1 |
| kernel-obs-build | sles 15.7 | 6.4.0-150700.53.55.1 |
| kernel-source | sles 15.7 | 6.4.0-150700.53.55.1 |
| kernel-syms | sles 15.7 | 6.4.0-150700.53.55.1 |
| kernel-zfcpdump | sles 15.7 | 6.4.0-150700.53.55.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-46300 | net: skbuff: preserve shared-frag marker during coalescing | 8.1 | 0.1613 | KEVExploited |
| Urgent | CVE-2026-23450 | kernel-default: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584). | 9.8 | 0.0046 | None reported |
| Urgent | CVE-2026-23395 | Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ | 9.1 | 0.0027 | None reported |
| High | CVE-2026-43503 | net: skbuff: propagate shared-frag marker through frag-transfer helpers | 8.8 | 0.0199 | None reported |
| High | CVE-2026-23455 | kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero leng... | 9.1 | 0.0159 | None reported |
| High | CVE-2026-31402 | kernel-64kb: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638). | 9.8 | 0.0122 | None reported |
| High | CVE-2026-43037 | ip6_tunnel: clear skb2->cb[] in ip4ip6_err() | 9.8 | 0.0069 | None reported |
| High | CVE-2026-46331 | net/sched: fix pedit partial COW leading to page cache corruption | 8.1 | 0.0064 | None reported |
| High | CVE-2026-31682 | bridge: br_nd_send: linearize skb before parsing ND options | 9.1 | 0.0064 | None reported |
| High | CVE-2026-43441 | kernel-64kb: net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1264674). | 7.5 | 0.0059 | None reported |
| High | CVE-2026-23240 | tls: Fix race condition in tls_sw_cancel_work_tx() | 9.8 | 0.0056 | None reported |
| High | CVE-2026-31405 | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0056 | None reported |
| High | CVE-2026-23456 | kernel-64kb: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703). | 8.2 | 0.0054 | None reported |
| High | CVE-2026-43365 | kernel-64kb: xfs: fix undersized l_iclog_roundoff values (bsc#1265119). | 8.2 | 0.0051 | None reported |
| High | CVE-2026-31685 | netfilter: ip6t_eui64: reject invalid MAC header for all packets | 9.4 | 0.0049 | None reported |
| High | CVE-2026-31669 | mptcp: fix slab-use-after-free in __inet_lookup_established | 9.8 | 0.0047 | None reported |
| High | CVE-2026-31417 | net/x25: Fix overflow when accumulating packets | 8.1 | 0.0047 | None reported |
| High | CVE-2026-43190 | kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_tcpmss: check remaining length befo... | 8.2 | 0.0046 | None reported |
| High | CVE-2026-31649 | net: stmmac: fix integer underflow in chain mode | 9.8 | 0.0046 | None reported |
| High | CVE-2026-31436 | kernel-64kb: dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (bsc#1262602). | 9.8 | 0.0046 | None reported |
| High | CVE-2026-23457 | kernel-64kb: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686). | 8.6 | 0.0045 | None reported |
| High | CVE-2026-31668 | seg6: separate dst_cache for input and output paths in seg6 lwtunnel | 9.8 | 0.0044 | None reported |
| High | CVE-2026-43494 | net/rds: reset op_nents when zerocopy page pin fails | 7.8 | 0.0041 | None reported |
| High | CVE-2026-31533 | kernel-default: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262758). | 9.8 | 0.0040 | None reported |
| High | CVE-2026-31662 | tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG | 7.5 | 0.0039 | None reported |
Showing 1 to 25 of 204
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.