Linux · SUSE Linux Enterprise · Security advisory · November 7, 2026
SUSE-SU-2026:24235-1: Security update for 9 packages
SUSE-SU-2026:24235-1, released November 7, 2026, fixes 401 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
401
20 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0147
73rd percentile
Priority of the 401 CVEs
Patch now 0
Urgent 20
High 279
Routine 102
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-64kb | sles 16.0 | 6.12.0-160000.39.1 |
| kernel-azure | sles 16.0 | 6.12.0-160000.39.1 |
| kernel-default-base | sles 16.0 | 6.12.0-160000.39.1.160000.2.26 |
| kernel-docs | sles 16.0 | 6.12.0-160000.39.1 |
| kernel-kvmsmall | sles 16.0 | 6.12.0-160000.39.1 |
| kernel-obs-qa | sles 16.0 | 6.12.0-160000.39.1 |
| kernel-source | sles 16.0 | 6.12.0-160000.39.1 |
| kernel-syms | sles 16.0 | 6.12.0-160000.39.1 |
| kernel-zfcpdump | sles 16.0 | 6.12.0-160000.39.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-89970 | nvmet-auth: Synchronize timeout work during SQ teardown | 9.8 | 0.0080 | None reported |
| Urgent | CVE-2026-89697 | linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: add fh_want_write() for early-verified SET... | 9.1 | 0.0070 | None reported |
| Urgent | CVE-2026-89526 | svcrdma: Validate Read chunk positions before reconstruction | 9.8 | 0.0068 | None reported |
| Urgent | CVE-2026-80694 | net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller | 9.8 | 0.0060 | None reported |
| Urgent | CVE-2026-89672 | kernel-64kb: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). | 9.1 | 0.0060 | None reported |
| Urgent | CVE-2026-53384 | serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails | 9.8 | 0.0052 | None reported |
| Urgent | CVE-2026-64046 | kernel-64kb: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). | 9.8 | 0.0051 | None reported |
| Urgent | CVE-2026-89542 | SUNRPC: harden gss_krb5_unwrap_v2 against short tokens | 9.8 | 0.0051 | None reported |
| Urgent | CVE-2026-89551 | SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow | 9.8 | 0.0051 | None reported |
| Urgent | CVE-2026-89479 | sctp: stop processing a packet once its association is deleted | 9.8 | 0.0050 | None reported |
| Urgent | CVE-2026-68385 | linux: In the Linux kernel, the following vulnerability has been resolved: s390/checksum: Fix csum_partial() without vector... | 9.8 | 0.0049 | None reported |
| Urgent | CVE-2026-93207 | SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry | 9.8 | 0.0047 | None reported |
| Urgent | CVE-2026-64216 | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential UAF in netfs_unlock_abandon... | 9.8 | 0.0046 | None reported |
| Urgent | CVE-2026-100075 | RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters | 9.8 | 0.0043 | None reported |
| Urgent | CVE-2026-63881 | drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger | 9.8 | 0.0019 | None reported |
| Urgent | CVE-2026-68146 | ftrace: Add global mutex to serialize trace_parser access | 9.8 | 0.0018 | None reported |
| Urgent | CVE-2026-80686 | mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE | 9.8 | 0.0017 | None reported |
| Urgent | CVE-2026-63983 | net/sched: fix packet loop on netem when duplicate is on | 9.8 | 0.0017 | None reported |
| Urgent | CVE-2026-80715 | igc: remove napi_synchronize() in igc_down() | 9.8 | 0.0016 | None reported |
| Urgent | CVE-2026-64070 | powerpc/hv-gpci: fix preempt count leak in sysfs show paths | 9.8 | 0.0012 | None reported |
| High | CVE-2026-74469 | sctp: prevent peer transport count overflow | 8.8 | 0.0147 | None reported |
| High | CVE-2026-63913 | kernel-64k-modules-core: kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check | 8.8 | 0.0097 | None reported |
| High | CVE-2026-90413 | IB/isert: reject login PDUs declaring more data than was received | 9.1 | 0.0084 | None reported |
| High | CVE-2026-89968 | nvmet-tcp: reject unsolicited H2CData PDUs | 9.8 | 0.0082 | None reported |
| High | CVE-2026-72130 | kernel: nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913] | 9.8 | 0.0080 | None reported |
Showing 1 to 25 of 401
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.