Linux · SUSE Linux Enterprise · Security advisory · July 12, 2026
SUSE-SU-2026:2866-1: kernel-livepatch-SLE15-SP6_Update_22 security update
SUSE-SU-2026:2866-1, released July 12, 2026, fixes 24 CVEs in kernel-livepatch-SLE15-SP6_Update_22 (version 6-150600.2.2). One of them is being exploited (CVE-2026-53362); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
24
1 rated Critical
Exploited
1
CVE-2026-53362
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0073
54th percentile
Priority of the 24 CVEs
Patch now 1
Urgent 1
High 22
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-livepatch-SLE15-SP6_Update_22 | sles 15.6 | 6-150600.2.2 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-53362 | ipv6: account for fraggap on the paged allocation path | 7.8 | 0.0071 | KEVExploited |
| Urgent | CVE-2026-31533 | linux: In the Linux kernel, the following vulnerability has been resolved: net/tls: fix use-after-free in -EBUSY error path... | 9.8 | 0.0040 | None reported |
| High | CVE-2026-43501 | ipv6: rpl: reserve mac_len headroom when recompressed SRH grows | 9.8 | 0.0073 | None reported |
| High | CVE-2026-43037 | ip6_tunnel: clear skb2->cb[] in ip4ip6_err() | 9.8 | 0.0069 | None reported |
| High | CVE-2026-31685 | netfilter: ip6t_eui64: reject invalid MAC header for all packets | 9.4 | 0.0049 | None reported |
| High | CVE-2026-43190 | kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_tcpmss: check remaining length befo... | 8.2 | 0.0046 | None reported |
| High | CVE-2026-46243 | smb: client: reject userspace cifs.spnego descriptions | 7.8 | 0.0041 | None reported |
| High | CVE-2026-43494 | net/rds: reset op_nents when zerocopy page pin fails | 7.8 | 0.0041 | None reported |
| High | CVE-2026-52943 | net: skbuff: fix missing zerocopy reference in pskb_carve helpers | 7.8 | 0.0030 | None reported |
| High | CVE-2026-31570 | can: gw: fix OOB heap access in cgw_csum_crc8_rel() | 8.8 | 0.0026 | None reported |
| High | CVE-2026-31505 | iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() | 7.8 | 0.0016 | None reported |
| High | CVE-2026-43437 | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: fix use-after-free on linked stream r... | 7.8 | 0.0016 | None reported |
| High | CVE-2026-31586 | mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() | 7.8 | 0.0013 | None reported |
| High | CVE-2026-46173 | exit: prevent preemption of oopsing TASK_DEAD task | 7.8 | 0.0013 | None reported |
| High | CVE-2026-43027 | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_helper: pass helper to e... | 7.8 | 0.0013 | None reported |
| High | CVE-2026-46120 | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 8.8 | 0.0013 | None reported |
| High | CVE-2026-43025 | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ignore explicit helper on... | 7.3 | 0.0013 | None reported |
| High | CVE-2026-43366 | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 7.8 | 0.0013 | None reported |
| High | CVE-2026-45970 | kernel-rt-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0013 | None reported |
| High | CVE-2026-31758 | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 7.8 | 0.0013 | None reported |
| High | CVE-2026-43120 | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix double free related to rereg_use... | 7.8 | 0.0012 | None reported |
| High | CVE-2026-52909 | ip6_vti: set netns_immutable on the fallback device. | 7.8 | 0.0011 | None reported |
| High | CVE-2026-46227 | sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL | 8.4 | 0.0010 | None reported |
| High | CVE-2026-23393 | bridge: cfm: Fix race condition in peer_mep deletion | 7.8 | 0.0010 | None reported |
Showing 1 to 24 of 24
1
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.