Linux · SUSE Linux Enterprise · Security advisory · June 23, 2026
SUSE-SU-2026:2591-1: kernel-livepatch-SLE15-SP7-RT_Update_16 security update
SUSE-SU-2026:2591-1, released June 23, 2026, fixes 102 CVEs in kernel-livepatch-SLE15-SP7-RT_Update_16 (version 1-150700.1.5.2). None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
102
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.9419
99th percentile
Priority of the 102 CVEs
Patch now 0
Urgent 0
High 66
Routine 36
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-livepatch-SLE15-SP7-RT_Update_16 | sles 15.7 | 1-150700.1.5.2 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2026-43284 | xfrm: esp: avoid in-place decrypt on shared skb frags | 8.8 | 0.9419 | None reported |
| High | CVE-2026-43499 | rtmutex: Use waiter::task instead of current in remove_waiter() | 7.8 | 0.0537 | None reported |
| High | CVE-2026-43501 | ipv6: rpl: reserve mac_len headroom when recompressed SRH grows | 9.8 | 0.0073 | None reported |
| High | CVE-2026-43407 | kernel-64kb: libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() (bsc#1265020). | 9.1 | 0.0066 | None reported |
| High | CVE-2026-43406 | kernel-64kb: libceph: prevent potential out-of-bounds reads in process_message_header() (bsc#1265073). | 9.1 | 0.0061 | None reported |
| High | CVE-2026-43414 | scsi: qla2xxx: Completely fix fcport double free | 9.8 | 0.0060 | None reported |
| High | CVE-2026-45898 | kernel-64kb: RDMA/iwcm: Fix workqueue list corruption by removing work_list (bsc#1266888). | 9.8 | 0.0053 | None reported |
| High | CVE-2026-46043 | RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv | 9.1 | 0.0051 | None reported |
| High | CVE-2026-43341 | kernel-64kb: net/ipv6: ioam6: prevent schema length wraparound in trace fill (bsc#1265044). | 9.8 | 0.0051 | None reported |
| High | CVE-2026-46110 | kernel-64kb: net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY() (bsc#1266759). | 7.5 | 0.0051 | None reported |
| High | CVE-2026-31448 | ext4: avoid infinite loops caused by residual data | 9.4 | 0.0050 | None reported |
| High | CVE-2026-46024 | libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() | 7.5 | 0.0049 | None reported |
| High | CVE-2026-46114 | RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads | 8.8 | 0.0047 | None reported |
| High | CVE-2026-45843 | slip: bound decode() reads against the compressed packet length | 8.2 | 0.0040 | None reported |
| High | CVE-2026-31613 | smb: client: fix OOB reads parsing symlink error response | 8.8 | 0.0039 | None reported |
| High | CVE-2026-43296 | kernel-64kb: octeontx2-af: Workaround SQM/PSE stalls by disabling sticky (bsc#1264805). | 7.5 | 0.0039 | None reported |
| High | CVE-2026-43249 | 9p/xen: protect xen_9pfs_front_free against concurrent calls | 8.8 | 0.0032 | None reported |
| High | CVE-2026-31464 | scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() | 8.1 | 0.0028 | None reported |
| High | CVE-2026-43362 | kernel-64kb: smb: client: fix in-place encryption corruption in SMB2_write() (bsc#1264989). | 8.1 | 0.0026 | None reported |
| High | CVE-2026-31629 | nfc: llcp: add missing return after LLCP_CLOSED checks | 8.8 | 0.0025 | None reported |
| High | CVE-2025-68324 | scsi: imm: Fix use-after-free bug caused by unfinished delayed work | 7.1 | 0.0023 | None reported |
| High | CVE-2026-45878 | kernel-debug-devel: kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 | 7.8 | 0.0021 | None reported |
| High | CVE-2026-45852 | kernel-default: RDMA/rxe: Fix double free in rxe_srq_from_init (bsc#1266711). | 8.8 | 0.0020 | None reported |
| High | CVE-2026-46113 | kernel-zfcpdump-modules-extra: kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN | 8.8 | 0.0020 | None reported |
| High | CVE-2026-45856 | kernel-64kb: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (bsc#1266720). | 8.8 | 0.0019 | None reported |
Showing 1 to 25 of 102
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.