Linux · SUSE Linux Enterprise · Security advisory · June 25, 2026
SUSE-SU-2026:2632-1: Security update for 7 packages
SUSE-SU-2026:2632-1, released June 25, 2026, fixes 27 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
27
1 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0054
45th percentile
Priority of the 27 CVEs
Patch now 0
Urgent 1
High 25
Routine 1
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-default | sles 15.6 | 6.4.0-150600.23.118.1 |
| kernel-default-base | sles 15.6 | 6.4.0-150600.23.118.1.150600.12.56.1 |
| kernel-docs | sles 15.6 | 6.4.0-150600.23.118.1 |
| kernel-livepatch-SLE15-SP6_Update_28 | sles 15.6 | 1-150600.13.3.1 |
| kernel-obs-build | sles 15.6 | 6.4.0-150600.23.118.1 |
| kernel-source | sles 15.6 | 6.4.0-150600.23.118.1 |
| kernel-syms | sles 15.6 | 6.4.0-150600.23.118.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2025-10263 | ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel] | 9.3 | 0.0054 | Exploitation Less Likely |
| High | CVE-2026-46037 | ipv4: icmp: validate reply type before using icmp_pointers | 8.2 | 0.0051 | None reported |
| High | CVE-2026-43074 | kernel-source: eventpoll: defer struct eventpoll free to RCU grace period (bsc#1264263). | 7.8 | 0.0048 | None reported |
| High | CVE-2026-46273 | ibmveth: Disable GSO for packets with small MSS | 8.6 | 0.0039 | None reported |
| High | CVE-2026-31771 | Bluetooth: hci_event: move wake reason storage into validated event handlers | 8.1 | 0.0032 | None reported |
| High | CVE-2026-43198 | tcp: fix potential race in tcp_v6_syn_recv_sock() | 9.8 | 0.0030 | None reported |
| High | CVE-2025-68324 | scsi: imm: Fix use-after-free bug caused by unfinished delayed work | 7.1 | 0.0023 | None reported |
| High | CVE-2026-45878 | kernel-debug-devel: kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 | 7.8 | 0.0021 | None reported |
| High | CVE-2026-45984 | kernel-default: gfs2: Move the inode glock locking to gfs2_file_buffered_write (bsc#1267214). | 7.8 | 0.0018 | None reported |
| High | CVE-2026-45932 | bpf: Fix tcx/netkit detach permissions when prog fd isn't given | 7.3 | 0.0017 | None reported |
| High | CVE-2026-23392 | netfilter: nf_tables: release flowtable after rcu grace period on error | 8.8 | 0.0017 | None reported |
| High | CVE-2026-45886 | kernel-default: bpf: Fix bpf_xdp_store_bytes proto for read-only arg (bsc#1266810). | 7.0 | 0.0016 | None reported |
| High | CVE-2026-46209 | kernel-uek-debug: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (Ashutosh Desai) [Orabug: 39460... | 8.4 | 0.0014 | None reported |
| High | CVE-2026-46123 | kernel-default: Bluetooth: virtio_bt: clamp rx length before skb_put (bsc#1267621). | 8.1 | 0.0014 | None reported |
| High | CVE-2026-46197 | drm/amdkfd: validate SVM ioctl nattr against buffer size | 7.8 | 0.0014 | None reported |
| High | CVE-2026-31697 | crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed | 7.1 | 0.0013 | None reported |
| High | CVE-2026-31698 | crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed | 7.1 | 0.0013 | None reported |
| High | CVE-2026-31699 | crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed | 7.1 | 0.0013 | None reported |
| High | CVE-2026-46150 | fanotify: fix false positive on permission events | 7.8 | 0.0013 | None reported |
| High | CVE-2026-31759 | kernel-default: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264076). | 7.8 | 0.0013 | None reported |
| High | CVE-2026-46120 | kernel: kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() | 8.8 | 0.0013 | None reported |
| High | CVE-2026-31500 | Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock | 7.8 | 0.0013 | None reported |
| High | CVE-2026-43077 | kernel-default: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1264470). | 8.1 | 0.0012 | None reported |
| High | CVE-2026-46227 | sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL | 8.4 | 0.0010 | None reported |
| High | CVE-2026-46090 | ALSA: aloop: Fix peer runtime UAF during format-change stop | 7.8 | 0.0010 | None reported |
Showing 1 to 25 of 27
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.