Linux · SUSE Linux Enterprise · Security advisory · July 20, 2026
SUSE-SU-2026:3130-1: kernel-livepatch-SLE15-SP7-RT_Update_18 security update
SUSE-SU-2026:3130-1, released July 20, 2026, fixes 513 CVEs in kernel-livepatch-SLE15-SP7-RT_Update_18 (version 1-150700.1.5.1). One of them is being exploited (CVE-2026-53362); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
513
18 rated Critical
Exploited
1
CVE-2026-53362
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0458
91st percentile
Priority of the 513 CVEs
Patch now 1
Urgent 18
High 235
Routine 259
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-livepatch-SLE15-SP7-RT_Update_18 | sles 15.7 | 1-150700.1.5.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-53362 | ipv6: account for fraggap on the paged allocation path | 7.8 | 0.0071 | KEVExploited |
| Urgent | CVE-2026-52914 | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0063 | None reported |
| Urgent | CVE-2026-43011 | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0059 | None reported |
| Urgent | CVE-2026-53224 | kernel-default: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997). | 9.1 | 0.0057 | None reported |
| Urgent | CVE-2026-43465 | kernel-64kb: net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (bsc#1264997). | 9.8 | 0.0054 | None reported |
| Urgent | CVE-2026-52982 | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0054 | None reported |
| Urgent | CVE-2026-53045 | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0051 | None reported |
| Urgent | CVE-2026-52931 | batman-adv: tp_meter: avoid use of uninit sender vars | 9.8 | 0.0050 | None reported |
| Urgent | CVE-2026-52993 | tipc: fix double-free in tipc_buf_append() | 9.8 | 0.0040 | None reported |
| Urgent | CVE-2026-52922 | batman-adv: dat: handle forward allocation error | 9.8 | 0.0039 | None reported |
| Urgent | CVE-2026-52955 | kernel-default: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159). | 9.8 | 0.0038 | None reported |
| Urgent | CVE-2026-52989 | nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers | 9.8 | 0.0036 | None reported |
| Urgent | CVE-2026-53086 | net: bcmgenet: fix racing timeout handler | 9.8 | 0.0030 | None reported |
| Urgent | CVE-2026-53075 | ppp: require CAP_NET_ADMIN in target netns for unattached ioctls | 9.8 | 0.0027 | None reported |
| Urgent | CVE-2026-53009 | ice: fix double-free of tx_buf skb | 9.8 | 0.0018 | None reported |
| Urgent | CVE-2025-71305 | drm/display/dp_mst: Add protection against 0 vcpi | 9.8 | 0.0016 | None reported |
| Urgent | CVE-2026-45899 | ext4: drop extent cache when splitting extent fails | 9.8 | 0.0016 | None reported |
| Urgent | CVE-2026-53036 | bpf, arm64: Fix off-by-one in check_imm signed range check | 9.8 | 0.0014 | None reported |
| Urgent | CVE-2026-52919 | batman-adv: fix tp_meter counter underflow during shutdown | 9.8 | 0.0012 | None reported |
| High | CVE-2026-46242 | kernel-default: eventpoll: Fix integer overflow in ep_loop_check_proc() (bsc#1267618). | 7.8 | 0.0458 | None reported |
| High | CVE-2026-53359 | kpatch-patch: A flaw was found in the Linux kernel's Kernel-based Virtual Machine (KVM) x86 shadow paging mechanism | 8.8 | 0.0137 | None reported |
| High | CVE-2026-53176 | IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN | 9.8 | 0.0076 | None reported |
| High | CVE-2026-52958 | libceph: Fix potential out-of-bounds access in osdmap_decode() | 9.1 | 0.0074 | None reported |
| High | CVE-2026-53003 | pppoe: drop PFC frames | 7.5 | 0.0072 | None reported |
| High | CVE-2026-43493 | crypto: pcrypt - Fix handling of MAY_BACKLOG requests | 9.8 | 0.0068 | None reported |
Showing 1 to 25 of 513
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.