Linux · SUSE Linux Enterprise · Security advisory · June 9, 2026
SUSE-SU-2026:2310-1: Security update for 7 packages
SUSE-SU-2026:2310-1, released June 9, 2026, fixes 22 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
22
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.9419
99th percentile
Priority of the 22 CVEs
Patch now 0
Urgent 0
High 22
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-default | sles 15.6 | 6.4.0-150600.23.115.1 |
| kernel-default-base | sles 15.6 | 6.4.0-150600.23.115.1.150600.12.54.1 |
| kernel-docs | sles 15.6 | 6.4.0-150600.23.115.1 |
| kernel-livepatch-SLE15-SP6_Update_27 | sles 15.6 | 1-150600.13.3.1 |
| kernel-obs-build | sles 15.6 | 6.4.0-150600.23.115.1 |
| kernel-source | sles 15.6 | 6.4.0-150600.23.115.1 |
| kernel-syms | sles 15.6 | 6.4.0-150600.23.115.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2026-43284 | xfrm: esp: avoid in-place decrypt on shared skb frags | 8.8 | 0.9419 | None reported |
| High | CVE-2026-43499 | rtmutex: Use waiter::task instead of current in remove_waiter() | 7.8 | 0.0537 | None reported |
| High | CVE-2026-43503 | net: skbuff: propagate shared-frag marker through frag-transfer helpers | 8.8 | 0.0199 | None reported |
| High | CVE-2026-43501 | ipv6: rpl: reserve mac_len headroom when recompressed SRH grows | 9.8 | 0.0073 | None reported |
| High | CVE-2026-43037 | ip6_tunnel: clear skb2->cb[] in ip4ip6_err() | 9.8 | 0.0069 | None reported |
| High | CVE-2026-31405 | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0056 | None reported |
| High | CVE-2026-46043 | RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv | 9.1 | 0.0051 | None reported |
| High | CVE-2026-46114 | RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads | 8.8 | 0.0047 | None reported |
| High | CVE-2026-46243 | smb: client: reject userspace cifs.spnego descriptions | 7.8 | 0.0041 | None reported |
| High | CVE-2026-31613 | smb: client: fix OOB reads parsing symlink error response | 8.8 | 0.0039 | None reported |
| High | CVE-2026-43362 | kernel-64kb: smb: client: fix in-place encryption corruption in SMB2_write() (bsc#1264989). | 8.1 | 0.0026 | None reported |
| High | CVE-2026-31629 | nfc: llcp: add missing return after LLCP_CLOSED checks | 8.8 | 0.0025 | None reported |
| High | CVE-2026-45852 | kernel-default: RDMA/rxe: Fix double free in rxe_srq_from_init (bsc#1266711). | 8.8 | 0.0020 | None reported |
| High | CVE-2026-46113 | kernel-zfcpdump-modules-extra: kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN | 8.8 | 0.0020 | None reported |
| High | CVE-2026-46021 | thermal: core: Fix thermal zone governor cleanup issues | 7.0 | 0.0014 | None reported |
| High | CVE-2026-43206 | kernel-core: kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() | 7.8 | 0.0014 | None reported |
| High | CVE-2026-46004 | ALSA: caiaq: Handle probe errors properly | 7.8 | 0.0013 | None reported |
| High | CVE-2026-45970 | kernel-livepatch-SLE15-SP6_Update_12: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206). | 8.8 | 0.0013 | None reported |
| High | CVE-2026-31758 | kernel-default-base: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264093). | 7.8 | 0.0013 | None reported |
| High | CVE-2026-31614 | kernel-64kb: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774). | 7.1 | 0.0013 | None reported |
| High | CVE-2026-45910 | kernel-default: RDMA/rxe: Fix race condition in QP timer handlers (bsc#1266889). | 8.8 | 0.0013 | None reported |
| High | CVE-2026-31473 | media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex | 7.8 | 0.0010 | None reported |
Showing 1 to 22 of 22
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.