Linux · SUSE Linux Enterprise · Security advisory · July 21, 2026
SUSE-SU-2026:3156-1: Security update for 7 packages
SUSE-SU-2026:3156-1, released July 21, 2026, fixes 44 CVEs across 7 products. One of them is being exploited (CVE-2026-53362); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
44
4 rated Critical
Exploited
1
CVE-2026-53362
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0458
91st percentile
Priority of the 44 CVEs
Patch now 1
Urgent 4
High 36
Routine 3
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-default | sles 15.6 | 6.4.0-150600.23.125.1 |
| kernel-default-base | sles 15.6 | 6.4.0-150600.23.125.1.150600.12.58.3 |
| kernel-docs | sles 15.6 | 6.4.0-150600.23.125.1 |
| kernel-livepatch-SLE15-SP6_Update_29 | sles 15.6 | 1-150600.13.7.1 |
| kernel-obs-build | sles 15.6 | 6.4.0-150600.23.125.1 |
| kernel-source | sles 15.6 | 6.4.0-150600.23.125.1 |
| kernel-syms | sles 15.6 | 6.4.0-150600.23.125.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-53362 | ipv6: account for fraggap on the paged allocation path | 7.8 | 0.0071 | KEVExploited |
| Urgent | CVE-2026-46266 | kernel-default: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (bsc#1267684). | 9.1 | 0.0047 | None reported |
| Urgent | CVE-2026-52993 | tipc: fix double-free in tipc_buf_append() | 9.8 | 0.0040 | None reported |
| Urgent | CVE-2026-52955 | kernel-default: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159). | 9.8 | 0.0038 | None reported |
| Urgent | CVE-2026-53053 | iommu/amd: Fix clone_alias() to use the original device's devid | 9.8 | 0.0013 | None reported |
| High | CVE-2026-46242 | kernel-default: eventpoll: Fix integer overflow in ep_loop_check_proc() (bsc#1267618). | 7.8 | 0.0458 | None reported |
| High | CVE-2026-53359 | kpatch-patch: A flaw was found in the Linux kernel's Kernel-based Virtual Machine (KVM) x86 shadow paging mechanism | 8.8 | 0.0137 | None reported |
| High | CVE-2026-52958 | libceph: Fix potential out-of-bounds access in osdmap_decode() | 9.1 | 0.0074 | None reported |
| High | CVE-2026-52924 | sctp: purge outqueue on stale COOKIE-ECHO handling | 9.8 | 0.0066 | None reported |
| High | CVE-2026-46331 | net/sched: fix pedit partial COW leading to page cache corruption | 8.1 | 0.0064 | None reported |
| High | CVE-2026-52956 | kernel-default: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172). | 7.5 | 0.0061 | None reported |
| High | CVE-2026-46052 | ceph: only d_add() negative dentries when they are unhashed | 7.5 | 0.0050 | None reported |
| High | CVE-2026-46289 | lib/scatterlist: fix length calculations in extract_kvec_to_sg | 9.8 | 0.0046 | None reported |
| High | CVE-2026-53071 | Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp | 8.8 | 0.0043 | None reported |
| High | CVE-2026-53178 | staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction | 8.1 | 0.0041 | None reported |
| High | CVE-2026-53357 | Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() | 8.0 | 0.0033 | None reported |
| High | CVE-2026-52943 | net: skbuff: fix missing zerocopy reference in pskb_carve helpers | 7.8 | 0.0030 | None reported |
| High | CVE-2026-53196 | USB: serial: io_ti: fix heap overflow in get_manuf_info() | 8.8 | 0.0027 | None reported |
| High | CVE-2026-53253 | Bluetooth: bnep: reject short frames before parsing | 7.1 | 0.0027 | None reported |
| High | CVE-2026-53256 | kernel-rt-devel: kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() | 8.1 | 0.0026 | None reported |
| High | CVE-2026-46320 | tap: free page on error paths in tap_get_user_xdp() | 7.4 | 0.0025 | None reported |
| High | CVE-2026-52918 | Bluetooth: serialize accept_q access | 8.8 | 0.0022 | None reported |
| High | CVE-2026-52923 | ipc: limit next_id allocation to the valid ID range | 7.8 | 0.0022 | None reported |
| High | CVE-2026-53072 | Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER | 8.8 | 0.0020 | None reported |
| High | CVE-2026-52969 | KVM: Reject wrapped offset in kvm_reset_dirty_gfn() | 7.8 | 0.0020 | None reported |
Showing 1 to 25 of 44
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.