Linux · SUSE Linux Enterprise · Security advisory · October 2, 2026
SUSE-SU-2026:4369-1: Security update for 7 packages
SUSE-SU-2026:4369-1, released October 2, 2026, fixes 131 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
131
9 rated Critical
Exploited
0
None reported
Highest CVSS
10.0
Base score, 0 to 10
Highest EPSS
0.0087
59th percentile
Priority of the 131 CVEs
Patch now 0
Urgent 9
High 108
Routine 14
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-default | sles 15.6 | 6.4.0-150600.23.135.1 |
| kernel-default-base | sles 15.6 | 6.4.0-150600.23.135.1.150600.12.62.4 |
| kernel-docs | sles 15.6 | 6.4.0-150600.23.135.1 |
| kernel-livepatch-SLE15-SP6_Update_31 | sles 15.6 | 1-150600.13.3.4 |
| kernel-obs-build | sles 15.6 | 6.4.0-150600.23.135.1 |
| kernel-source | sles 15.6 | 6.4.0-150600.23.135.1 |
| kernel-syms | sles 15.6 | 6.4.0-150600.23.135.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-68160 | ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() | 9.8 | 0.0077 | None reported |
| Urgent | CVE-2026-64541 | linux: In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF in smc_cdc_rx_handler() by pinn... | 9.8 | 0.0057 | None reported |
| Urgent | CVE-2026-74345 | RDMA/siw: Fix endpoint/socket association handling | 9.8 | 0.0048 | None reported |
| Urgent | CVE-2026-68121 | pppoe: reload header pointer after dev_hard_header() | 9.8 | 0.0037 | None reported |
| Urgent | CVE-2026-53260 | linux: In the Linux kernel, the following vulnerability has been resolved: tcp: Add preempt_{disable,enable}_nested() in re... | 9.8 | 0.0029 | None reported |
| Urgent | CVE-2026-63881 | drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger | 9.8 | 0.0019 | None reported |
| Urgent | CVE-2026-72288 | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Handle race between interrupt... | 9.3 | 0.0019 | None reported |
| Urgent | CVE-2026-64562 | KVM: nVMX: Hide shadow VMCS right after VMCLEAR | 9.8 | 0.0016 | None reported |
| Urgent | CVE-2026-63827 | apparmor: fix use-after-free in rawdata dedup loop | 9.8 | 0.0012 | None reported |
| High | CVE-2026-52929 | sctp: stream: fully roll back denied add-stream state | 9.8 | 0.0087 | None reported |
| High | CVE-2026-63887 | kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsi_encode_text_outp... | 9.8 | 0.0078 | None reported |
| High | CVE-2026-63888 | kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC overread and double-... | 9.8 | 0.0078 | None reported |
| High | CVE-2026-68159 | libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE | 9.8 | 0.0075 | None reported |
| High | CVE-2026-72084 | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0075 | None reported |
| High | CVE-2026-72339 | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0075 | None reported |
| High | CVE-2026-72069 | kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] | 9.8 | 0.0073 | None reported |
| High | CVE-2026-72083 | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0072 | None reported |
| High | CVE-2026-64268 | RDMA/siw: bound Read Response placement to the RREAD length | 9.8 | 0.0071 | None reported |
| High | CVE-2026-68158 | libceph: Fix multiplication overflow in decode_new_up_state_weight() | 9.8 | 0.0071 | None reported |
| High | CVE-2026-72020 | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 | None reported |
| High | CVE-2026-72251 | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 | None reported |
| High | CVE-2026-63886 | kernel-default: Security update for the Linux Kernel | 9.8 | 0.0071 | None reported |
| High | CVE-2026-68155 | libceph: Reject monmaps advertising zero monitors | 8.8 | 0.0070 | None reported |
| High | CVE-2026-72317 | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0064 | None reported |
| High | CVE-2026-72221 | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0064 | None reported |
Showing 1 to 25 of 131
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.