Linux · SUSE Linux Enterprise · Security advisory · November 7, 2026
SUSE-SU-2026:4640-1: kernel-livepatch-SLE15-SP7-RT_Update_21 security update
SUSE-SU-2026:4640-1, released November 7, 2026, fixes 508 CVEs in kernel-livepatch-SLE15-SP7-RT_Update_21 (version 1-150700.1.3.1). None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
508
21 rated Critical
Exploited
0
None reported
Highest CVSS
10.0
Base score, 0 to 10
Highest EPSS
0.0147
73rd percentile
Priority of the 508 CVEs
Patch now 0
Urgent 21
High 371
Routine 116
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-livepatch-SLE15-SP7-RT_Update_21 | sles 15.7 | 1-150700.1.3.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-89970 | nvmet-auth: Synchronize timeout work during SQ teardown | 9.8 | 0.0080 | None reported |
| Urgent | CVE-2026-89697 | linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: add fh_want_write() for early-verified SET... | 9.1 | 0.0070 | None reported |
| Urgent | CVE-2026-72399 | linux: In the Linux kernel, the following vulnerability has been resolved: net: enetc: check the number of BDs needed for x... | 9.8 | 0.0068 | None reported |
| Urgent | CVE-2026-89672 | kernel-64kb: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235). | 9.1 | 0.0060 | None reported |
| Urgent | CVE-2026-64319 | linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: validate reply message payload bound... | 9.1 | 0.0056 | None reported |
| Urgent | CVE-2026-53384 | serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails | 9.8 | 0.0052 | None reported |
| Urgent | CVE-2026-64046 | kernel-64kb: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). | 9.8 | 0.0051 | None reported |
| Urgent | CVE-2026-89542 | SUNRPC: harden gss_krb5_unwrap_v2 against short tokens | 9.8 | 0.0051 | None reported |
| Urgent | CVE-2026-89551 | SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow | 9.8 | 0.0051 | None reported |
| Urgent | CVE-2026-80681 | vxlan: re-fetch eth header after route_shortcircuit() | 9.8 | 0.0050 | None reported |
| Urgent | CVE-2026-89479 | sctp: stop processing a packet once its association is deleted | 9.8 | 0.0050 | None reported |
| Urgent | CVE-2026-89631 | smb: client: reject a tree connect response whose byte count is too small | 9.1 | 0.0049 | None reported |
| Urgent | CVE-2026-93207 | SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry | 9.8 | 0.0047 | None reported |
| Urgent | CVE-2026-100075 | RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters | 9.8 | 0.0043 | None reported |
| Urgent | CVE-2026-80721 | Bluetooth: ISO: ensure no dangling hcon references in iso_conn | 9.8 | 0.0038 | None reported |
| Urgent | CVE-2026-68198 | wifi: ath6kl: fix use-after-free in aggr_reset_state() | 9.8 | 0.0028 | None reported |
| Urgent | CVE-2026-68395 | ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered | 9.8 | 0.0022 | None reported |
| Urgent | CVE-2026-68146 | ftrace: Add global mutex to serialize trace_parser access | 9.8 | 0.0018 | None reported |
| Urgent | CVE-2026-80686 | mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE | 9.8 | 0.0017 | None reported |
| Urgent | CVE-2026-80715 | igc: remove napi_synchronize() in igc_down() | 9.8 | 0.0016 | None reported |
| Urgent | CVE-2026-80693 | linux: In the Linux kernel, the following vulnerability has been resolved: idpf: bound interrupt-vector register fill to th... | 9.3 | 0.0014 | None reported |
| High | CVE-2026-74469 | sctp: prevent peer transport count overflow | 8.8 | 0.0147 | None reported |
| High | CVE-2026-63913 | kernel-64k-modules-core: kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check | 8.8 | 0.0097 | None reported |
| High | CVE-2026-90413 | IB/isert: reject login PDUs declaring more data than was received | 9.1 | 0.0084 | None reported |
| High | CVE-2026-89968 | nvmet-tcp: reject unsolicited H2CData PDUs | 9.8 | 0.0082 | None reported |
Showing 1 to 25 of 508
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.