Linux · SUSE Linux Enterprise · Security advisory · July 20, 2026
SUSE-SU-2026:22876-1: kernel-livepatch-SLE16_Update_2 security update
SUSE-SU-2026:22876-1, released July 20, 2026, fixes 25 CVEs in kernel-livepatch-SLE16_Update_2 (version 11-160000.1.1). One of them is being exploited (CVE-2026-53362); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
25
None rated Critical
Exploited
1
CVE-2026-53362
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0073
54th percentile
Priority of the 25 CVEs
Patch now 1
Urgent 0
High 24
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-livepatch-SLE16_Update_2 | sles 16.0 | 11-160000.1.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-53362 | ipv6: account for fraggap on the paged allocation path | 7.8 | 0.0071 | KEVExploited |
| High | CVE-2026-43501 | ipv6: rpl: reserve mac_len headroom when recompressed SRH grows | 9.8 | 0.0073 | None reported |
| High | CVE-2026-43037 | ip6_tunnel: clear skb2->cb[] in ip4ip6_err() | 9.8 | 0.0069 | None reported |
| High | CVE-2026-31685 | netfilter: ip6t_eui64: reject invalid MAC header for all packets | 9.4 | 0.0049 | None reported |
| High | CVE-2026-43190 | kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_tcpmss: check remaining length befo... | 8.2 | 0.0046 | None reported |
| High | CVE-2026-46243 | smb: client: reject userspace cifs.spnego descriptions | 7.8 | 0.0041 | None reported |
| High | CVE-2026-43494 | net/rds: reset op_nents when zerocopy page pin fails | 7.8 | 0.0041 | None reported |
| High | CVE-2026-31533 | kernel-default: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262758). | 9.8 | 0.0040 | None reported |
| High | CVE-2026-52943 | net: skbuff: fix missing zerocopy reference in pskb_carve helpers | 7.8 | 0.0030 | None reported |
| High | CVE-2026-31570 | can: gw: fix OOB heap access in cgw_csum_crc8_rel() | 8.8 | 0.0026 | None reported |
| High | CVE-2026-31505 | iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() | 7.8 | 0.0016 | None reported |
| High | CVE-2025-71089 | iommu: disable SVA when CONFIG_X86 is set | 7.8 | 0.0016 | None reported |
| High | CVE-2026-43437 | kernel-default: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265126). | 7.8 | 0.0016 | None reported |
| High | CVE-2026-31586 | mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() | 7.8 | 0.0013 | None reported |
| High | CVE-2026-46173 | exit: prevent preemption of oopsing TASK_DEAD task | 7.8 | 0.0013 | None reported |
| High | CVE-2026-43027 | kernel-default: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1263933). | 7.8 | 0.0013 | None reported |
| High | CVE-2026-46120 | kernel: kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() | 8.8 | 0.0013 | None reported |
| High | CVE-2026-43025 | kernel-default: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1263931). | 7.3 | 0.0013 | None reported |
| High | CVE-2026-43366 | kernel-docs: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265116). | 7.8 | 0.0013 | None reported |
| High | CVE-2026-45970 | kernel-livepatch-SLE15-SP6_Update_12: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206). | 8.8 | 0.0013 | None reported |
| High | CVE-2026-31758 | kernel-default-base: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264093). | 7.8 | 0.0013 | None reported |
| High | CVE-2026-43120 | kernel-default: RDMA/irdma: Fix double free related to rereg_user_mr. | 7.8 | 0.0012 | None reported |
| High | CVE-2026-52909 | ip6_vti: set netns_immutable on the fallback device. | 7.8 | 0.0011 | None reported |
| High | CVE-2026-46227 | sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL | 8.4 | 0.0010 | None reported |
| High | CVE-2026-23393 | bridge: cfm: Fix race condition in peer_mep deletion | 7.8 | 0.0010 | None reported |
Showing 1 to 25 of 25
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.