Linux · SUSE Linux Enterprise · Security advisory · October 2, 2026
SUSE-SU-2026:3602-1: Security update for 7 packages
SUSE-SU-2026:3602-1, released October 2, 2026, fixes 73 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
73
5 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0430
91st percentile
Priority of the 73 CVEs
Patch now 0
Urgent 5
High 57
Routine 11
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-default | sles 15.6 | 6.4.0-150600.23.130.1 |
| kernel-default-base | sles 15.6 | 6.4.0-150600.23.130.1.150600.12.60.3 |
| kernel-docs | sles 15.6 | 6.4.0-150600.23.130.1 |
| kernel-livepatch-SLE15-SP6_Update_30 | sles 15.6 | 1-150600.13.5.1 |
| kernel-obs-build | sles 15.6 | 6.4.0-150600.23.130.1 |
| kernel-source | sles 15.6 | 6.4.0-150600.23.130.1 |
| kernel-syms | sles 15.6 | 6.4.0-150600.23.130.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-64564 | sctp: don't free the ASCONF's own transport in DEL-IP processing | 9.8 | 0.0143 | None reported |
| Urgent | CVE-2026-53224 | linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded INIT chunk and address l... | 9.1 | 0.0057 | None reported |
| Urgent | CVE-2026-63984 | kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0051 | None reported |
| Urgent | CVE-2026-63824 | KEYS: fix overflow in keyctl_pkey_params_get_2() | 9.8 | 0.0017 | None reported |
| Urgent | CVE-2026-64106 | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with o... | 9.0 | 0.0015 | None reported |
| High | CVE-2026-46333 | ptrace: slightly saner 'get_dumpable()' logic | 8.1 | 0.0430 | None reported |
| High | CVE-2026-63912 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0071 | None reported |
| High | CVE-2026-63922 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 9.8 | 0.0071 | None reported |
| High | CVE-2026-63924 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 9.8 | 0.0071 | None reported |
| High | CVE-2026-63968 | linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in fib6_select_... | 7.5 | 0.0067 | None reported |
| High | CVE-2026-64530 | net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle | 9.8 | 0.0066 | None reported |
| High | CVE-2026-63919 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0065 | None reported |
| High | CVE-2026-52986 | netfilter: nf_conntrack_sip: don't use simple_strtoul | 9.8 | 0.0063 | None reported |
| High | CVE-2026-53391 | NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr | 8.8 | 0.0052 | None reported |
| High | CVE-2026-63994 | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0051 | None reported |
| High | CVE-2026-64560 | linux: In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-lead... | 7.8 | 0.0050 | None reported |
| High | CVE-2026-64600 | xfs: resample the data fork mapping after cycling ILOCK | 7.8 | 0.0047 | None reported |
| High | CVE-2026-53246 | sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing | 9.8 | 0.0044 | None reported |
| High | CVE-2026-53131 | netfilter: require Ethernet MAC header before using eth_hdr() | 9.4 | 0.0044 | None reported |
| High | CVE-2026-31598 | ocfs2: fix possible deadlock between unlink and dio_end_io_write | 7.5 | 0.0044 | None reported |
| High | CVE-2026-46243 | smb: client: reject userspace cifs.spnego descriptions | 7.8 | 0.0041 | None reported |
| High | CVE-2026-52967 | linux: In the Linux kernel, the following vulnerability has been resolved: smb/client: fix possible infinite loop and oob r... | 8.1 | 0.0039 | None reported |
| High | CVE-2026-63893 | kernel-uek-debug-modules-extra: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.1 | 0.0039 | None reported |
| High | CVE-2026-46056 | Bluetooth: hci_event: fix potential UAF in SSP passkey handlers | 8.8 | 0.0028 | None reported |
| High | CVE-2026-63975 | kernel-rt-64k-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0027 | None reported |
Showing 1 to 25 of 73
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.