Linux · SUSE Linux Enterprise · Security advisory · July 8, 2026
SUSE-SU-2026:2800-1: Security update for 10 packages
SUSE-SU-2026:2800-1, released July 8, 2026, fixes 105 CVEs across 10 products. 2 of them are being exploited (CVE-2026-53266); 2 on CISA KEV. Patch Radar priority: Patch now.
Patch now2 on CISA KEV
CVEs closed
105
2 rated Critical
Exploited
2
CVE-2026-53266
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.9419
99th percentile
Priority of the 105 CVEs
Patch now 2
Urgent 2
High 64
Routine 37
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-64kb | sles 15.7 | 6.4.0-150700.53.66.1 |
| kernel-azure | sles 15.7 | 6.4.0-150700.53.66.1 |
| kernel-default | sles 15.7 | 6.4.0-150700.53.66.1 |
| kernel-default-base | sles 15.7 | 6.4.0-150700.53.66.1.150700.17.39.1 |
| kernel-docs | sles 15.7 | 6.4.0-150700.53.66.2 |
| kernel-livepatch-SLE15-SP7_Update_18 | sles 15.7 | 1-150700.15.3.1 |
| kernel-obs-build | sles 15.7 | 6.4.0-150700.53.66.1 |
| kernel-source | sles 15.7 | 6.4.0-150700.53.66.1 |
| kernel-syms | sles 15.7 | 6.4.0-150700.53.66.1 |
| kernel-zfcpdump | sles 15.7 | 6.4.0-150700.53.66.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-53266 | netfilter: bridge: make ebt_snat ARP rewrite writable | 8.8 | 0.0093 | KEVExploited |
| Patch now | CVE-2026-53362 | ipv6: account for fraggap on the paged allocation path | 7.8 | 0.0071 | KEVExploited |
| Urgent | CVE-2026-46266 | kernel-default: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (bsc#1267684). | 9.1 | 0.0047 | None reported |
| Urgent | CVE-2026-53053 | iommu/amd: Fix clone_alias() to use the original device's devid | 9.8 | 0.0013 | None reported |
| High | CVE-2026-43284 | xfrm: esp: avoid in-place decrypt on shared skb frags | 8.8 | 0.9419 | None reported |
| High | CVE-2026-53359 | kpatch-patch: A flaw was found in the Linux kernel's Kernel-based Virtual Machine (KVM) x86 shadow paging mechanism | 8.8 | 0.0137 | None reported |
| High | CVE-2026-46331 | net/sched: fix pedit partial COW leading to page cache corruption | 8.1 | 0.0064 | None reported |
| High | CVE-2026-46133 | RDMA/rxe: Reject unknown opcodes before ICRC processing | 8.8 | 0.0057 | None reported |
| High | CVE-2026-46185 | smb/client: fix out-of-bounds read in symlink_data() | 9.1 | 0.0053 | None reported |
| High | CVE-2026-52954 | libceph: handle rbtree insertion error in decode_choose_args() | 7.5 | 0.0052 | None reported |
| High | CVE-2026-52957 | libceph: Fix potential null-ptr-deref in decode_choose_args() | 7.5 | 0.0052 | None reported |
| High | CVE-2026-43074 | kernel-source: eventpoll: defer struct eventpoll free to RCU grace period (bsc#1264263). | 7.8 | 0.0048 | None reported |
| High | CVE-2026-46124 | kernel-64kb: isofs: validate block number from NFS file handle in isofs_export_iget (bsc#1266847). | 7.5 | 0.0048 | None reported |
| High | CVE-2026-43233 | kernel-64kb: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337). | 8.2 | 0.0046 | None reported |
| High | CVE-2026-46289 | lib/scatterlist: fix length calculations in extract_kvec_to_sg | 9.8 | 0.0046 | None reported |
| High | CVE-2026-53071 | Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp | 8.8 | 0.0043 | None reported |
| High | CVE-2026-43336 | kernel-64kb: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113). | 7.5 | 0.0043 | None reported |
| High | CVE-2026-31450 | ext4: publish jinode after initialization | 8.8 | 0.0041 | None reported |
| High | CVE-2026-43139 | kernel-64kb: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294). | 8.6 | 0.0038 | None reported |
| High | CVE-2026-43502 | net/rds: handle zerocopy send cleanup before the message is queued | 7.8 | 0.0032 | None reported |
| High | CVE-2026-31771 | Bluetooth: hci_event: move wake reason storage into validated event handlers | 8.1 | 0.0032 | None reported |
| High | CVE-2026-52943 | net: skbuff: fix missing zerocopy reference in pskb_carve helpers | 7.8 | 0.0030 | None reported |
| High | CVE-2026-53253 | Bluetooth: bnep: reject short frames before parsing | 7.1 | 0.0027 | None reported |
| High | CVE-2026-46320 | tap: free page on error paths in tap_get_user_xdp() | 7.4 | 0.0025 | None reported |
| High | CVE-2026-52918 | Bluetooth: serialize accept_q access | 8.8 | 0.0022 | None reported |
Showing 1 to 25 of 105
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.