Linux · SUSE Linux Enterprise · Security advisory · September 22, 2026

SUSE-SU-2026:23902-1: Security update for 10 packages

SUSE-SU-2026:23902-1, released September 22, 2026, fixes 885 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
885
88 rated Critical
Exploited
0
None reported
Highest CVSS
10.0
Base score, 0 to 10
Highest EPSS
0.0087
59th percentile

Priority of the 885 CVEs

Patch now 0 Urgent 88 High 515 Routine 282

Fixed package versions

ProductReleaseFixed in
kernel-64kbsles 16.06.12.0-160000.38.1
kernel-azuresles 16.06.12.0-160000.38.1
kernel-defaultsles 16.06.12.0-160000.38.1
kernel-default-basesles 16.06.12.0-160000.38.1.160000.2.23
kernel-docssles 16.06.12.0-160000.38.1
kernel-kvmsmallsles 16.06.12.0-160000.38.1
kernel-obs-qasles 16.06.12.0-160000.38.1
kernel-sourcesles 16.06.12.0-160000.38.1
kernel-symssles 16.06.12.0-160000.38.1
kernel-zfcpdumpsles 16.06.12.0-160000.38.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2026-72084 linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: Bound PR-OUT TransportID parsing t...9.8 0.0075 None reported
Urgent CVE-2026-72339 linux: In the Linux kernel, the following vulnerability has been resolved: qede: fix off-by-one in BD ring consumption on b...9.8 0.0075 None reported
Urgent CVE-2026-72466 linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix bcall rep leak and unbounded peek...9.8 0.0074 None reported
Urgent CVE-2026-80609 linux: In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe->len_list[...9.8 0.0074 None reported
Urgent CVE-2026-72296 linux: In the Linux kernel, the following vulnerability has been resolved: net: ife: require ETH_HLEN to be pullable in ife...9.1 0.0074 None reported
Urgent CVE-2026-72234 linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicast_ttvn skb->data only a...9.8 0.0073 None reported
Urgent CVE-2026-72069 linux: In the Linux kernel, the following vulnerability has been resolved: locking/rt: Fix the incorrect RCU protection in...9.8 0.0073 None reported
Urgent CVE-2026-72323 linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential UAF in igmp_gq_start_t...9.8 0.0072 None reported
Urgent CVE-2026-72473 linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Decouple req recycling from RPC comple...9.8 0.0072 None reported
Urgent CVE-2026-72020 linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reset full ip_vs_seq structs in ip_vs_conn...9.8 0.0071 None reported
Urgent CVE-2026-72251 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: reload possible stale dat...9.8 0.0071 None reported
Urgent CVE-2026-72137 linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: nat_keepalive: avoid double free on send e...9.8 0.0071 None reported
Urgent CVE-2026-72399 linux: In the Linux kernel, the following vulnerability has been resolved: net: enetc: check the number of BDs needed for x...9.8 0.0068 None reported
Urgent CVE-2026-72366 linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_create_write_req() to handle as...9.8 0.0066 None reported
Urgent CVE-2026-72317 linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: pin upper rpc_clnt across the TLS connec...9.8 0.0064 None reported
Urgent CVE-2026-72046 linux: In the Linux kernel, the following vulnerability has been resolved: gve: fix header buffer corruption with header-sp...9.8 0.0064 None reported
Urgent CVE-2026-72217 linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Bound-check xdr_buf_to_bvec() stores bef...9.8 0.0064 None reported
Urgent CVE-2026-72221 linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: wait for in-flight TLS handshake callbac...9.8 0.0064 None reported
Urgent CVE-2026-72222 linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: pin svc_xprt across the asynchronous TLS...9.8 0.0064 None reported
Urgent CVE-2026-80603 linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_irc: fix parse_dcc() off...9.1 0.0060 None reported
Urgent CVE-2026-72421 linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't ignore error route in local/mai...10.0 0.0057 None reported
Urgent CVE-2026-64541 linux: In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF in smc_cdc_rx_handler() by pinn...9.8 0.0057 None reported
Urgent CVE-2026-64319 linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: validate reply message payload bound...9.1 0.0056 None reported
Urgent CVE-2026-64056 linux: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Make RX SKB per-port Th...9.8 0.0055 None reported
Urgent CVE-2026-64089 bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1...9.8 0.0055 None reported
Showing 1 to 25 of 885 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.