Linux · SUSE Linux Enterprise · Security advisory · July 1, 2026
SUSE-SU-2026:2722-1: Security update for 10 packages
SUSE-SU-2026:2722-1, released July 1, 2026, fixes 66 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
66
2 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0060
49th percentile
Priority of the 66 CVEs
Patch now 0
Urgent 2
High 44
Routine 20
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-64kb | sles 15.7 | 6.4.0-150700.53.63.1 |
| kernel-azure | sles 15.7 | 6.4.0-150700.53.63.1 |
| kernel-default | sles 15.7 | 6.4.0-150700.53.63.1 |
| kernel-default-base | sles 15.7 | 6.4.0-150700.53.63.1.150700.17.37.1 |
| kernel-docs | sles 15.7 | 6.4.0-150700.53.63.1 |
| kernel-livepatch-SLE15-SP7_Update_17 | sles 15.7 | 1-150700.15.3.1 |
| kernel-obs-build | sles 15.7 | 6.4.0-150700.53.63.1 |
| kernel-source | sles 15.7 | 6.4.0-150700.53.63.1 |
| kernel-syms | sles 15.7 | 6.4.0-150700.53.63.1 |
| kernel-zfcpdump | sles 15.7 | 6.4.0-150700.53.63.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2025-10263 | ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel] | 9.3 | 0.0054 | Exploitation Less Likely |
| Urgent | CVE-2025-68822 | Input: alps - fix use-after-free bugs caused by dev3_register_work | 9.8 | 0.0018 | None reported |
| High | CVE-2026-43083 | net: ioam6: fix OOB and missing lock | 9.1 | 0.0060 | None reported |
| High | CVE-2026-43405 | kernel-64kb: libceph: Use u32 for non-negative values in ceph_monmap_decode() (bsc#1264741). | 7.5 | 0.0060 | None reported |
| High | CVE-2026-43101 | ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() | 7.5 | 0.0059 | None reported |
| High | CVE-2026-31414 | netfilter: nf_conntrack_expect: use expect->helper | 9.8 | 0.0058 | None reported |
| High | CVE-2026-46119 | libceph: Fix slab-out-of-bounds access in auth message processing | 9.1 | 0.0053 | None reported |
| High | CVE-2026-46037 | ipv4: icmp: validate reply type before using icmp_pointers | 8.2 | 0.0051 | None reported |
| High | CVE-2026-43158 | kernel-64kb: xfs: fix freemap adjustments when adding xattrs to leaf blocks (bsc#1264595). | 8.8 | 0.0047 | None reported |
| High | CVE-2026-43187 | kernel-64kb: xfs: delete attr leaf freemap entries when empty (bsc#1264603). | 8.8 | 0.0047 | None reported |
| High | CVE-2026-46244 | netfilter: nft_inner: Fix IPv6 inner_thoff desync | 9.1 | 0.0042 | None reported |
| High | CVE-2026-43469 | kernel-64kb: xprtrdma: Decrement re_receiving on the early exit paths (bsc#1265143). | 7.5 | 0.0040 | None reported |
| High | CVE-2026-46273 | ibmveth: Disable GSO for packets with small MSS | 8.6 | 0.0039 | None reported |
| High | CVE-2026-43345 | kernel-64kb: net: ipa: fix event ring index not programmed for IPA v5.0+ (bsc#1265103). | 7.5 | 0.0035 | None reported |
| High | CVE-2026-43112 | kernel-64kb: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (bsc#1264437). | 8.8 | 0.0035 | None reported |
| High | CVE-2026-43198 | tcp: fix potential race in tcp_v6_syn_recv_sock() | 9.8 | 0.0030 | None reported |
| High | CVE-2026-43239 | kernel-64kb: smb: client: prevent races in ->query_interfaces() (bsc#1264444). | 8.8 | 0.0029 | None reported |
| High | CVE-2026-45940 | net: stmmac: fix oops when split header is enabled | 7.0 | 0.0018 | None reported |
| High | CVE-2026-31693 | kernel-64kb: cifs: some missing initializations on replay (bsc#1267744). | 7.8 | 0.0017 | None reported |
| High | CVE-2026-31674 | netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() | 7.1 | 0.0017 | None reported |
| High | CVE-2026-23392 | netfilter: nf_tables: release flowtable after rcu grace period on error | 8.8 | 0.0017 | None reported |
| High | CVE-2026-31680 | net: ipv6: flowlabel: defer exclusive option free until RCU teardown | 7.8 | 0.0016 | None reported |
| High | CVE-2026-43339 | kernel: In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible UaF in addrconf_permanent_... | 8.1 | 0.0016 | None reported |
| High | CVE-2026-43049 | HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure | 7.8 | 0.0015 | None reported |
| High | CVE-2026-43491 | net: qrtr: ns: Limit the maximum server registration per node | 7.0 | 0.0015 | None reported |
Showing 1 to 25 of 66
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.