Linux · SUSE Linux Enterprise · Security advisory · August 25, 2026
SUSE-SU-2026:3790-1: Security update for 10 packages
SUSE-SU-2026:3790-1, released August 25, 2026, fixes 268 CVEs across 10 products. One of them is being exploited (CVE-2026-31431); 1 on CISA KEV. Patch Radar priority: Patch now.
Patch now1 on CISA KEV
CVEs closed
268
16 rated Critical
Exploited
1
CVE-2026-31431
Highest CVSS
10.0
Base score, 0 to 10
Highest EPSS
0.9811
99th percentile
Priority of the 268 CVEs
Patch now 1
Urgent 16
High 164
Routine 87
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-64kb | sles 15.7 | 6.4.0-150700.53.78.1 |
| kernel-azure | sles 15.7 | 6.4.0-150700.53.78.1 |
| kernel-default | sles 15.7 | 6.4.0-150700.53.78.1 |
| kernel-default-base | sles 15.7 | 6.4.0-150700.53.78.1.150700.17.43.2 |
| kernel-docs | sles 15.7 | 6.4.0-150700.53.78.1 |
| kernel-livepatch-SLE15-SP7_Update_20 | sles 15.7 | 1-150700.15.3.2 |
| kernel-obs-build | sles 15.7 | 6.4.0-150700.53.78.1 |
| kernel-source | sles 15.7 | 6.4.0-150700.53.78.1 |
| kernel-syms | sles 15.7 | 6.4.0-150700.53.78.1 |
| kernel-zfcpdump | sles 15.7 | 6.4.0-150700.53.78.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Patch now | CVE-2026-31431 | crypto: algif_aead - Revert to operating out-of-place | 8.1 | 0.9811 | KEVExploited |
| Urgent | CVE-2026-64564 | sctp: don't free the ASCONF's own transport in DEL-IP processing | 9.8 | 0.0143 | None reported |
| Urgent | CVE-2026-64089 | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0055 | None reported |
| Urgent | CVE-2025-68741 | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix improper freeing of purex ite... | 9.8 | 0.0043 | None reported |
| Urgent | CVE-2026-64025 | kernel-64kb: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx (bsc#1273117). | 9.8 | 0.0037 | None reported |
| Urgent | CVE-2026-53002 | netfilter: conntrack: remove sprintf usage | 9.8 | 0.0037 | None reported |
| Urgent | CVE-2026-63974 | Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close | 9.8 | 0.0035 | None reported |
| Urgent | CVE-2026-63882 | drm/amdkfd: fix NULL pointer bug in svm_range_set_attr | 9.8 | 0.0022 | None reported |
| Urgent | CVE-2026-63824 | KEYS: fix overflow in keyctl_pkey_params_get_2() | 9.8 | 0.0017 | None reported |
| Urgent | CVE-2026-53376 | drm/amdkfd: Add upper bound check for num_of_nodes | 9.8 | 0.0016 | None reported |
| Urgent | CVE-2026-63959 | usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT | 9.8 | 0.0016 | None reported |
| Urgent | CVE-2026-64106 | kernel-default: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242). | 9.0 | 0.0015 | None reported |
| Urgent | CVE-2026-52991 | sched/psi: fix race between file release and pressure write | 9.8 | 0.0015 | None reported |
| Urgent | CVE-2026-53403 | fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var | 9.8 | 0.0013 | None reported |
| Urgent | CVE-2026-53374 | drm/amdgpu: zero-initialize GART table on allocation | 9.8 | 0.0013 | None reported |
| Urgent | CVE-2026-52947 | net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove | 9.8 | 0.0011 | None reported |
| Urgent | CVE-2026-53062 | dm cache policy smq: fix missing locks in invalidating cache blocks | 9.8 | 0.0010 | None reported |
| High | CVE-2026-46333 | ptrace: slightly saner 'get_dumpable()' logic | 8.1 | 0.0430 | None reported |
| High | CVE-2026-45860 | kernel-64kb: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710). | 7.5 | 0.0075 | None reported |
| High | CVE-2026-63912 | kernel-default: xfrm: esp: restore combined single-frag length gate (bsc#1272836). | 9.8 | 0.0071 | None reported |
| High | CVE-2026-63922 | kernel: kernel: ipv6: exthdrs: refresh nh after handling HAO option | 9.8 | 0.0071 | None reported |
| High | CVE-2026-63924 | kernel: kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() | 9.8 | 0.0071 | None reported |
| High | CVE-2026-63968 | kernel-default: ipv6: fix possible infinite loop in fib6_select_path() (bsc#1272466). | 7.5 | 0.0067 | None reported |
| High | CVE-2026-53399 | nfsd: release layout stid on setlease failure | 9.8 | 0.0066 | None reported |
| High | CVE-2026-64530 | net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle | 9.8 | 0.0066 | None reported |
Showing 1 to 25 of 268
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.