Linux · SUSE Linux Enterprise · Security advisory · July 21, 2026
SUSE-SU-2026:3166-1: Security update for 10 packages
SUSE-SU-2026:3166-1, released July 21, 2026, fixes 513 CVEs across 10 products. One of them is being exploited (CVE-2026-53362); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
513
23 rated Critical
Exploited
1
CVE-2026-53362
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0458
91st percentile
Priority of the 513 CVEs
Patch now 1
Urgent 23
High 230
Routine 259
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-64kb | sles 15.7 | 6.4.0-150700.53.73.2 |
| kernel-azure | sles 15.7 | 6.4.0-150700.53.73.2 |
| kernel-default | sles 15.7 | 6.4.0-150700.53.73.2 |
| kernel-default-base | sles 15.7 | 6.4.0-150700.53.73.2.150700.17.41.4 |
| kernel-docs | sles 15.7 | 6.4.0-150700.53.73.1 |
| kernel-livepatch-SLE15-SP7_Update_19 | sles 15.7 | 1-150700.15.3.4 |
| kernel-obs-build | sles 15.7 | 6.4.0-150700.53.73.2 |
| kernel-source | sles 15.7 | 6.4.0-150700.53.73.1 |
| kernel-syms | sles 15.7 | 6.4.0-150700.53.73.1 |
| kernel-zfcpdump | sles 15.7 | 6.4.0-150700.53.73.2 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-53362 | ipv6: account for fraggap on the paged allocation path | 7.8 | 0.0071 | KEVExploited |
| Urgent | CVE-2026-52914 | linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix fragment reassembly length accou... | 9.8 | 0.0063 | None reported |
| Urgent | CVE-2026-43304 | linux: In the Linux kernel, the following vulnerability has been resolved: libceph: define and enforce CEPH_MAX_KEY_LEN Wh... | 9.8 | 0.0061 | None reported |
| Urgent | CVE-2026-43011 | linux: In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix potential double free of skb When... | 9.8 | 0.0059 | None reported |
| Urgent | CVE-2026-53224 | linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded INIT chunk and address l... | 9.1 | 0.0057 | None reported |
| Urgent | CVE-2026-43383 | linux: In the Linux kernel, the following vulnerability has been resolved: net/tcp-md5: Fix MAC comparison to be constant-t... | 9.4 | 0.0054 | None reported |
| Urgent | CVE-2026-43465 | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: RX, Fix XDP multi-buf frag counting f... | 9.8 | 0.0054 | None reported |
| Urgent | CVE-2026-52982 | linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix use-after-free in rtl8150... | 9.8 | 0.0054 | None reported |
| Urgent | CVE-2026-53045 | linux: In the Linux kernel, the following vulnerability has been resolved: memory: tegra124-emc: Fix dll_change check The... | 9.8 | 0.0051 | None reported |
| Urgent | CVE-2026-53215 | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0050 | None reported |
| Urgent | CVE-2026-53216 | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0050 | None reported |
| Urgent | CVE-2026-52931 | batman-adv: tp_meter: avoid use of uninit sender vars | 9.8 | 0.0050 | None reported |
| Urgent | CVE-2026-43117 | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: get correct superblock from... | 9.1 | 0.0046 | None reported |
| Urgent | CVE-2026-52993 | tipc: fix double-free in tipc_buf_append() | 9.8 | 0.0040 | None reported |
| Urgent | CVE-2026-52922 | batman-adv: dat: handle forward allocation error | 9.8 | 0.0039 | None reported |
| Urgent | CVE-2026-52955 | kernel-uek64k-core: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0038 | None reported |
| Urgent | CVE-2026-52989 | nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers | 9.8 | 0.0036 | None reported |
| Urgent | CVE-2026-53086 | net: bcmgenet: fix racing timeout handler | 9.8 | 0.0030 | None reported |
| Urgent | CVE-2026-53075 | ppp: require CAP_NET_ADMIN in target netns for unattached ioctls | 9.8 | 0.0027 | None reported |
| Urgent | CVE-2026-53009 | ice: fix double-free of tx_buf skb | 9.8 | 0.0018 | None reported |
| Urgent | CVE-2025-71305 | drm/display/dp_mst: Add protection against 0 vcpi | 9.8 | 0.0016 | None reported |
| Urgent | CVE-2026-45899 | ext4: drop extent cache when splitting extent fails | 9.8 | 0.0016 | None reported |
| Urgent | CVE-2026-53036 | bpf, arm64: Fix off-by-one in check_imm signed range check | 9.8 | 0.0014 | None reported |
| Urgent | CVE-2026-52919 | batman-adv: fix tp_meter counter underflow during shutdown | 9.8 | 0.0012 | None reported |
| High | CVE-2026-46242 | kpatch-patch-5_14_0-687_10_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... | 7.8 | 0.0458 | None reported |
Showing 1 to 25 of 513
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.