Linux · SUSE Linux Enterprise · Security advisory · June 22, 2026
SUSE-SU-2026:2482-1: Security update for 10 packages
SUSE-SU-2026:2482-1, released June 22, 2026, fixes 103 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
103
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.9419
99th percentile
Priority of the 103 CVEs
Patch now 0
Urgent 0
High 67
Routine 36
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-64kb | sles 15.7 | 6.4.0-150700.53.60.1 |
| kernel-azure | sles 15.7 | 6.4.0-150700.53.60.1 |
| kernel-default | sles 15.7 | 6.4.0-150700.53.60.1 |
| kernel-default-base | sles 15.7 | 6.4.0-150700.53.60.1.150700.17.35.4 |
| kernel-docs | sles 15.7 | 6.4.0-150700.53.60.1 |
| kernel-livepatch-SLE15-SP7_Update_16 | sles 15.7 | 1-150700.15.3.2 |
| kernel-obs-build | sles 15.7 | 6.4.0-150700.53.60.2 |
| kernel-source | sles 15.7 | 6.4.0-150700.53.60.1 |
| kernel-syms | sles 15.7 | 6.4.0-150700.53.60.1 |
| kernel-zfcpdump | sles 15.7 | 6.4.0-150700.53.60.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2026-43284 | xfrm: esp: avoid in-place decrypt on shared skb frags | 8.8 | 0.9419 | None reported |
| High | CVE-2026-43499 | rtmutex: Use waiter::task instead of current in remove_waiter() | 7.8 | 0.0537 | None reported |
| High | CVE-2026-43501 | ipv6: rpl: reserve mac_len headroom when recompressed SRH grows | 9.8 | 0.0073 | None reported |
| High | CVE-2026-43407 | kernel-64kb: libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() (bsc#1265020). | 9.1 | 0.0066 | None reported |
| High | CVE-2026-43406 | kernel-64kb: libceph: prevent potential out-of-bounds reads in process_message_header() (bsc#1265073). | 9.1 | 0.0061 | None reported |
| High | CVE-2026-43414 | scsi: qla2xxx: Completely fix fcport double free | 9.8 | 0.0060 | None reported |
| High | CVE-2026-45898 | kernel-64kb: RDMA/iwcm: Fix workqueue list corruption by removing work_list (bsc#1266888). | 9.8 | 0.0053 | None reported |
| High | CVE-2026-46043 | RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv | 9.1 | 0.0051 | None reported |
| High | CVE-2026-43341 | kernel-64kb: net/ipv6: ioam6: prevent schema length wraparound in trace fill (bsc#1265044). | 9.8 | 0.0051 | None reported |
| High | CVE-2026-46110 | kernel-64kb: net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY() (bsc#1266759). | 7.5 | 0.0051 | None reported |
| High | CVE-2026-31448 | ext4: avoid infinite loops caused by residual data | 9.4 | 0.0050 | None reported |
| High | CVE-2026-46024 | libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() | 7.5 | 0.0049 | None reported |
| High | CVE-2026-46114 | RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads | 8.8 | 0.0047 | None reported |
| High | CVE-2026-46243 | smb: client: reject userspace cifs.spnego descriptions | 7.8 | 0.0041 | None reported |
| High | CVE-2026-45843 | slip: bound decode() reads against the compressed packet length | 8.2 | 0.0040 | None reported |
| High | CVE-2026-31613 | smb: client: fix OOB reads parsing symlink error response | 8.8 | 0.0039 | None reported |
| High | CVE-2026-43296 | kernel-64kb: octeontx2-af: Workaround SQM/PSE stalls by disabling sticky (bsc#1264805). | 7.5 | 0.0039 | None reported |
| High | CVE-2026-43249 | 9p/xen: protect xen_9pfs_front_free against concurrent calls | 8.8 | 0.0032 | None reported |
| High | CVE-2026-31464 | scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() | 8.1 | 0.0028 | None reported |
| High | CVE-2026-43362 | kernel-64kb: smb: client: fix in-place encryption corruption in SMB2_write() (bsc#1264989). | 8.1 | 0.0026 | None reported |
| High | CVE-2026-31629 | nfc: llcp: add missing return after LLCP_CLOSED checks | 8.8 | 0.0025 | None reported |
| High | CVE-2025-68324 | scsi: imm: Fix use-after-free bug caused by unfinished delayed work | 7.1 | 0.0023 | None reported |
| High | CVE-2026-45878 | kernel-debug-devel: kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 | 7.8 | 0.0021 | None reported |
| High | CVE-2026-45852 | kernel-default: RDMA/rxe: Fix double free in rxe_srq_from_init (bsc#1266711). | 8.8 | 0.0020 | None reported |
| High | CVE-2026-46113 | kernel-zfcpdump-modules-extra: kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN | 8.8 | 0.0020 | None reported |
Showing 1 to 25 of 103
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.