# OPENSUSE-SU-2026:20416-1: Security update for 13 packages

OPENSUSE-SU-2026:20416-1, released March 25, 2026, fixes 175 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/opensuse-su-2026-20416-1
- Platform: Linux
- Released: Mar 25, 2026
- Priority: Urgent (Closes CVE-2025-68745, rated Critical)
- CVEs: 175, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/openSUSE-SU-2026:20416-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [dtb-aarch64](https://patchblox.com/security/data/product/linux/dtb-aarch64.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1 |
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1 |
| [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1.160000.2.8 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1 |
| [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1 |
| [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1 |
| [kernel-rt](https://patchblox.com/security/data/product/linux/kernel-rt.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | opensuse-leap 16.0 | 6.12.0-160000.27.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-68745](https://patchblox.com/security/data/cve/CVE-2025-68745.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: qla2xxx: Clear cmds after chip reset  Comm... | 9.8 | 0.0050 |  |
| [CVE-2026-23111](https://patchblox.com/security/data/cve/CVE-2026-23111.md) | High | kernel-64kb: netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (bsc#1258181). | 7.8 | 0.0113 |  |
| [CVE-2026-22998](https://patchblox.com/security/data/cve/CVE-2026-22998.md) | High | kernel-64kb: nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (bsc#1257209). | 7.5 | 0.0078 |  |
| [CVE-2026-23003](https://patchblox.com/security/data/cve/CVE-2026-23003.md) | High | kernel-64kb: geneve: Fix incorrect inner network header offset when innerprotoinherit is set (bsc#1257246). | 8.8 | 0.0055 |  |
| [CVE-2026-23112](https://patchblox.com/security/data/cve/CVE-2026-23112.md) | High | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0048 |  |
| [CVE-2025-40099](https://patchblox.com/security/data/cve/CVE-2025-40099.md) | High | cifs: parse_dfs_referrals: prevent oob on malformed input | 9.4 | 0.0041 |  |
| [CVE-2026-23139](https://patchblox.com/security/data/cve/CVE-2026-23139.md) | High | kernel-64kb: netfilter: nf_conncount: update last_gc only when GC has been performed (bsc#1258304). | 7.6 | 0.0039 |  |
| [CVE-2025-71236](https://patchblox.com/security/data/cve/CVE-2025-71236.md) | High | scsi: qla2xxx: Validate sp before freeing associated memory | 7.8 | 0.0038 |  |
| [CVE-2025-68818](https://patchblox.com/security/data/cve/CVE-2025-68818.md) | High | scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" | 8.8 | 0.0033 |  |
| [CVE-2026-23230](https://patchblox.com/security/data/cve/CVE-2026-23230.md) | High | smb: client: split cached_fid bitfields to avoid shared-byte RMW races | 8.4 | 0.0028 |  |
| [CVE-2025-71197](https://patchblox.com/security/data/cve/CVE-2025-71197.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0026 |  |
| [CVE-2026-23136](https://patchblox.com/security/data/cve/CVE-2026-23136.md) | High | kernel-livepatch-SLE15-SP7-RT_Update_11: libceph: reset sparse-read state in osd_fault() (bsc#1258303). | 8.1 | 0.0025 |  |
| [CVE-2026-23030](https://patchblox.com/security/data/cve/CVE-2026-23030.md) | High | kernel-livepatch-SLE15-SP7-RT_Update_11: phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() (bsc#1257561). | n/a | 0.0024 |  |
| [CVE-2025-71234](https://patchblox.com/security/data/cve/CVE-2025-71234.md) | High | wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add | 7.8 | 0.0024 |  |
| [CVE-2026-23056](https://patchblox.com/security/data/cve/CVE-2026-23056.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2026-23054](https://patchblox.com/security/data/cve/CVE-2026-23054.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0021 |  |
| [CVE-2026-23049](https://patchblox.com/security/data/cve/CVE-2026-23049.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2026-23176](https://patchblox.com/security/data/cve/CVE-2026-23176.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2026-23182](https://patchblox.com/security/data/cve/CVE-2026-23182.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2025-40103](https://patchblox.com/security/data/cve/CVE-2025-40103.md) | High | smb: client: Fix refcount leak for cifs_sb_tlink | 7.1 | 0.0021 |  |
| [CVE-2026-23172](https://patchblox.com/security/data/cve/CVE-2026-23172.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0020 |  |
| [CVE-2026-23050](https://patchblox.com/security/data/cve/CVE-2026-23050.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0020 |  |
| [CVE-2026-23010](https://patchblox.com/security/data/cve/CVE-2026-23010.md) | High | kernel-64kb: ipv6: Fix use-after-free in inet6_addr_del() (bsc#1257332). | 7.8 | 0.0020 |  |
| [CVE-2025-68371](https://patchblox.com/security/data/cve/CVE-2025-68371.md) | High | kernel-64kb: scsi: smartpqi: Fix device resources accessed after device removal (bsc#1255572). | 7.0 | 0.0020 |  |
| [CVE-2025-68186](https://patchblox.com/security/data/cve/CVE-2025-68186.md) | High | kernel-64kb: ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up (bsc#1255144). | n/a | 0.0020 |  |
| [CVE-2026-23178](https://patchblox.com/security/data/cve/CVE-2026-23178.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0019 |  |
| [CVE-2026-23074](https://patchblox.com/security/data/cve/CVE-2026-23074.md) | High | kernel-64kb: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749). | 7.8 | 0.0019 |  |
| [CVE-2026-23073](https://patchblox.com/security/data/cve/CVE-2026-23073.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2026-23208](https://patchblox.com/security/data/cve/CVE-2026-23208.md) | High | kernel-64kb: ALSA: usb-audio: Prevent excessive number of frames (bsc#1258468). | 7.8 | 0.0018 |  |
| [CVE-2026-23076](https://patchblox.com/security/data/cve/CVE-2026-23076.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0018 |  |
| [CVE-2026-23213](https://patchblox.com/security/data/cve/CVE-2026-23213.md) | High | drm/amd/pm: Disable MMIO access during SMU Mode 1 reset | 8.4 | 0.0018 |  |
| [CVE-2026-23214](https://patchblox.com/security/data/cve/CVE-2026-23214.md) | High | btrfs: reject new transactions if the fs is fully read-only | 8.4 | 0.0018 |  |
| [CVE-2026-23209](https://patchblox.com/security/data/cve/CVE-2026-23209.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2026-23099](https://patchblox.com/security/data/cve/CVE-2026-23099.md) | High | kernel-64kb: bonding: limit BOND_MODE_8023AD to Ethernet devices (bsc#1257816). | 7.1 | 0.0017 |  |
| [CVE-2026-23078](https://patchblox.com/security/data/cve/CVE-2026-23078.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2026-23171](https://patchblox.com/security/data/cve/CVE-2026-23171.md) | High | kernel-64kb: net: bonding: update the slave array for broadcast mode (bsc#1258349). | 7.8 | 0.0017 |  |
| [CVE-2026-23089](https://patchblox.com/security/data/cve/CVE-2026-23089.md) | High | kernel-64kb: ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (bsc#1257790). | 7.8 | 0.0016 |  |
| [CVE-2025-68785](https://patchblox.com/security/data/cve/CVE-2025-68785.md) | High | net: openvswitch: fix middle attribute validation in push_nsh() action | 7.1 | 0.0016 |  |
| [CVE-2026-23083](https://patchblox.com/security/data/cve/CVE-2026-23083.md) | High | kernel-64kb: fou: Don't allow 0 for FOU_ATTR_IPPROTO (bsc#1257745). | 7.8 | 0.0016 |  |
| [CVE-2026-23004](https://patchblox.com/security/data/cve/CVE-2026-23004.md) | High | kernel-64kb: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231). | 7.0 | 0.0016 |  |
| [CVE-2026-23068](https://patchblox.com/security/data/cve/CVE-2026-23068.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2025-71071](https://patchblox.com/security/data/cve/CVE-2025-71071.md) | High | kernel-64kb: iommu/mediatek: fix use-after-free on probe deferral (bsc#1256802). | 7.8 | 0.0015 |  |
| [CVE-2025-68810](https://patchblox.com/security/data/cve/CVE-2025-68810.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an... | 7.8 | 0.0015 |  |
| [CVE-2026-22980](https://patchblox.com/security/data/cve/CVE-2026-22980.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2026-23144](https://patchblox.com/security/data/cve/CVE-2026-23144.md) | High | kernel-64kb: mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (bsc#1258290). | 7.3 | 0.0015 |  |
| [CVE-2026-23082](https://patchblox.com/security/data/cve/CVE-2026-23082.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0015 |  |
| [CVE-2026-23105](https://patchblox.com/security/data/cve/CVE-2026-23105.md) | High | kernel-64kb: net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (bsc#1257775). | 8.8 | 0.0015 |  |
| [CVE-2026-23156](https://patchblox.com/security/data/cve/CVE-2026-23156.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 |  |
| [CVE-2026-23224](https://patchblox.com/security/data/cve/CVE-2026-23224.md) | High | erofs: fix UAF issue for file-backed mounts w/ directio option | 7.8 | 0.0014 |  |
| [CVE-2026-22979](https://patchblox.com/security/data/cve/CVE-2026-22979.md) | High | kernel-64kb: net: fix memory leak in skb_segment_list for GRO packets (bsc#1257228). | 7.8 | 0.0014 |  |
| [CVE-2026-23221](https://patchblox.com/security/data/cve/CVE-2026-23221.md) | High | bus: fsl-mc: fix use-after-free in driver_override_show() | 7.8 | 0.0014 |  |
| [CVE-2026-23223](https://patchblox.com/security/data/cve/CVE-2026-23223.md) | High | xfs: fix UAF in xchk_btree_check_block_owner | 7.8 | 0.0014 |  |
| [CVE-2026-23102](https://patchblox.com/security/data/cve/CVE-2026-23102.md) | High | kernel-64kb: arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state (bsc#1257772). | 7.1 | 0.0014 |  |
| [CVE-2025-71233](https://patchblox.com/security/data/cve/CVE-2025-71233.md) | High | PCI: endpoint: Avoid creating sub-groups asynchronously | 8.4 | 0.0014 |  |
| [CVE-2025-71229](https://patchblox.com/security/data/cve/CVE-2025-71229.md) | High | wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() | 8.4 | 0.0014 |  |
| [CVE-2026-23158](https://patchblox.com/security/data/cve/CVE-2026-23158.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 |  |
| [CVE-2025-71231](https://patchblox.com/security/data/cve/CVE-2025-71231.md) | High | crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode | 8.4 | 0.0014 |  |
| [CVE-2025-71192](https://patchblox.com/security/data/cve/CVE-2025-71192.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: ac97: fix a double free in snd_ac97_contro... | 7.0 | 0.0014 |  |
| [CVE-2026-23191](https://patchblox.com/security/data/cve/CVE-2026-23191.md) | High | kernel-64kb: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258395). | 7.3 | 0.0013 |  |
| [CVE-2026-23066](https://patchblox.com/security/data/cve/CVE-2026-23066.md) | High | kernel-64kb: rxrpc: Fix recvmsg() unconditional requeue (bsc#1257726). | 7.4 | 0.0012 |  |
| [CVE-2026-23110](https://patchblox.com/security/data/cve/CVE-2026-23110.md) | High | kernel-64k: kernel: scsi: core: Wake up the error handler when final completions race against each other | 7.8 | 0.0011 |  |
| [CVE-2026-23097](https://patchblox.com/security/data/cve/CVE-2026-23097.md) | High | kernel-64kb: migrate: correct lock ordering for hugetlb file folios (bsc#1257815). | 7.5 | 0.0011 |  |
| [CVE-2026-23161](https://patchblox.com/security/data/cve/CVE-2026-23161.md) | High | kernel-uek: ELSA-2026-50232: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.0 | 0.0011 |  |
| [CVE-2026-23210](https://patchblox.com/security/data/cve/CVE-2026-23210.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.5 | 0.0010 |  |
| [CVE-2025-71161](https://patchblox.com/security/data/cve/CVE-2025-71161.md) | Routine | dm-verity: disable recursive forward error correction | 5.5 | 0.0047 |  |
| [CVE-2025-71183](https://patchblox.com/security/data/cve/CVE-2025-71183.md) | Routine | btrfs: always detect conflicting inodes when logging inode refs | 5.5 | 0.0032 |  |
| [CVE-2026-23095](https://patchblox.com/security/data/cve/CVE-2026-23095.md) | Routine | kernel-64kb: gue: Fix skb memleak with inner IP protocol 0 (bsc#1257808). | 5.5 | 0.0031 |  |
| [CVE-2026-23148](https://patchblox.com/security/data/cve/CVE-2026-23148.md) | Routine | kernel-uek: ELSA-2026-50232: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.7 | 0.0030 |  |
| [CVE-2026-23038](https://patchblox.com/security/data/cve/CVE-2026-23038.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0028 |  |
| [CVE-2026-23037](https://patchblox.com/security/data/cve/CVE-2026-23037.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0024 |  |
| [CVE-2026-23035](https://patchblox.com/security/data/cve/CVE-2026-23035.md) | Routine | kernel-64kb: net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (bsc#1257559). | 5.1 | 0.0024 |  |
| [CVE-2025-40230](https://patchblox.com/security/data/cve/CVE-2025-40230.md) | Routine | kernel-64kb: mm: prevent poison consumption when splitting THP (bsc#1254817). | 5.9 | 0.0023 |  |
| [CVE-2026-23033](https://patchblox.com/security/data/cve/CVE-2026-23033.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0023 |  |
| [CVE-2026-23031](https://patchblox.com/security/data/cve/CVE-2026-23031.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-71185](https://patchblox.com/security/data/cve/CVE-2025-71185.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-71186](https://patchblox.com/security/data/cve/CVE-2025-71186.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-71190](https://patchblox.com/security/data/cve/CVE-2025-71190.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-71191](https://patchblox.com/security/data/cve/CVE-2025-71191.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2026-23026](https://patchblox.com/security/data/cve/CVE-2026-23026.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-68292](https://patchblox.com/security/data/cve/CVE-2025-68292.md) | Routine | kernel-64kb: mm/memfd: fix information leak in hugetlb folios (bsc#1255148). | 5.5 | 0.0021 |  |
| [CVE-2025-68295](https://patchblox.com/security/data/cve/CVE-2025-68295.md) | Routine | smb: client: fix memory leak in cifs_construct_tcon() | 5.5 | 0.0021 |  |
| [CVE-2026-23058](https://patchblox.com/security/data/cve/CVE-2026-23058.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-71224](https://patchblox.com/security/data/cve/CVE-2025-71224.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 3.3 | 0.0021 |  |
| [CVE-2025-71196](https://patchblox.com/security/data/cve/CVE-2025-71196.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2025-71199](https://patchblox.com/security/data/cve/CVE-2025-71199.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2025-71188](https://patchblox.com/security/data/cve/CVE-2025-71188.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-71189](https://patchblox.com/security/data/cve/CVE-2025-71189.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2026-23021](https://patchblox.com/security/data/cve/CVE-2026-23021.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2026-23017](https://patchblox.com/security/data/cve/CVE-2026-23017.md) | Routine | kernel-64kb: idpf: fix error handling in the init_task on load (bsc#1257552). | 5.5 | 0.0020 |  |
| [CVE-2025-68173](https://patchblox.com/security/data/cve/CVE-2025-68173.md) | Routine | kernel-64kb: ftrace: Fix softlockup in ftrace_module_enable (bsc#1255311). | 5.5 | 0.0020 |  |
| [CVE-2026-23059](https://patchblox.com/security/data/cve/CVE-2026-23059.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2026-23053](https://patchblox.com/security/data/cve/CVE-2026-23053.md) | Routine | kernel-64kb: NFS: Fix a deadlock involving nfs_release_folio() (bsc#1257718). | 5.3 | 0.0020 |  |
| [CVE-2025-71193](https://patchblox.com/security/data/cve/CVE-2025-71193.md) | Routine | kernel-64kb: phy: qcom-qusb2: Fix NULL pointer dereference on early suspend (bsc#1257686). | n/a | 0.0020 |  |
| [CVE-2025-71195](https://patchblox.com/security/data/cve/CVE-2025-71195.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 |  |
| [CVE-2025-71198](https://patchblox.com/security/data/cve/CVE-2025-71198.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 |  |
| [CVE-2026-23179](https://patchblox.com/security/data/cve/CVE-2026-23179.md) | Routine | kernel-64kb: nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() (bsc#1258394). | 6.5 | 0.0020 |  |
| [CVE-2026-23057](https://patchblox.com/security/data/cve/CVE-2026-23057.md) | Routine | kernel-64kb: vsock/virtio: Coalesce only linear skb (bsc#1257740). | 5.5 | 0.0020 |  |
| [CVE-2026-23055](https://patchblox.com/security/data/cve/CVE-2026-23055.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 |  |
| [CVE-2026-23177](https://patchblox.com/security/data/cve/CVE-2026-23177.md) | Routine | kernel-uek: ELSA-2026-50232: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0020 |  |
| [CVE-2026-23047](https://patchblox.com/security/data/cve/CVE-2026-23047.md) | Routine | kernel-livepatch-SLE15-SP7-RT_Update_11: libceph: make calc_target() set t->paused, not just clear it (bsc#1257682). | 5.5 | 0.0019 |  |
| [CVE-2025-68329](https://patchblox.com/security/data/cve/CVE-2025-68329.md) | Routine | kernel-64kb: tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs (bsc#1255490). | 5.5 | 0.0018 |  |
| [CVE-2025-71232](https://patchblox.com/security/data/cve/CVE-2025-71232.md) | Routine | scsi: qla2xxx: Free sp in error path to fix system crash | 5.5 | 0.0018 |  |
| [CVE-2026-23154](https://patchblox.com/security/data/cve/CVE-2026-23154.md) | Routine | kernel-64kb: net: fix segmentation of forwarding fraglist GRO (bsc#1258286). | 5.5 | 0.0018 |  |
| [CVE-2026-23069](https://patchblox.com/security/data/cve/CVE-2026-23069.md) | Routine | kernel-64kb: vsock/virtio: fix potential underflow in virtio_transport_get_credit() (bsc#1257755). | 5.5 | 0.0018 |  |
| [CVE-2026-23060](https://patchblox.com/security/data/cve/CVE-2026-23060.md) | Routine | kernel-64kb: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735). | 6.5 | 0.0018 |  |
| [CVE-2026-23023](https://patchblox.com/security/data/cve/CVE-2026-23023.md) | Routine | kernel-64kb: idpf: fix memory leak in idpf_vport_rel() (bsc#1257556). | 5.5 | 0.0018 |  |
| [CVE-2025-71194](https://patchblox.com/security/data/cve/CVE-2025-71194.md) | Routine | bpftool: In the Linux kernel, the following vulnerability has been resolved | 5.5 | 0.0018 |  |
| [CVE-2026-23061](https://patchblox.com/security/data/cve/CVE-2026-23061.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2026-23128](https://patchblox.com/security/data/cve/CVE-2026-23128.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2026-23042](https://patchblox.com/security/data/cve/CVE-2026-23042.md) | Routine | kernel-64kb: idpf: fix aux device unplugging when rdma is not supported by vport (bsc#1257705). | n/a | 0.0017 |  |
| [CVE-2026-23137](https://patchblox.com/security/data/cve/CVE-2026-23137.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2026-23086](https://patchblox.com/security/data/cve/CVE-2026-23086.md) | Routine | kernel-64kb: vsock/virtio: cap TX credit to local buffer size (bsc#1257757). | 6.2 | 0.0017 |  |
| [CVE-2025-39753](https://patchblox.com/security/data/cve/CVE-2025-39753.md) | Routine | gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops | 5.5 | 0.0017 |  |
| [CVE-2025-71125](https://patchblox.com/security/data/cve/CVE-2025-71125.md) | Routine | tracing: Do not register unsupported perf events | 5.5 | 0.0016 |  |
| [CVE-2026-23024](https://patchblox.com/security/data/cve/CVE-2026-23024.md) | Routine | kernel-64kb: idpf: fix memory leak of flow steer list on rmmod (bsc#1257572). | 5.5 | 0.0016 |  |
| [CVE-2025-71222](https://patchblox.com/security/data/cve/CVE-2025-71222.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2026-23022](https://patchblox.com/security/data/cve/CVE-2026-23022.md) | Routine | kernel-64kb: idpf: fix memory leak in idpf_vc_core_deinit() (bsc#1257581). | 5.5 | 0.0015 |  |
| [CVE-2026-23108](https://patchblox.com/security/data/cve/CVE-2026-23108.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2026-23107](https://patchblox.com/security/data/cve/CVE-2026-23107.md) | Routine | kernel-64kb: arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA (bsc#1257762). | 6.2 | 0.0015 |  |
| [CVE-2026-23084](https://patchblox.com/security/data/cve/CVE-2026-23084.md) | Routine | kernel-64kb: be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list (bsc#1257830). | 5.5 | 0.0015 |  |
| [CVE-2026-23198](https://patchblox.com/security/data/cve/CVE-2026-23198.md) | Routine | kernel-64kb: KVM: Don't clobber irqfd routing type when deassigning irqfd (bsc#1258321). | 5.5 | 0.0015 |  |
| [CVE-2026-23222](https://patchblox.com/security/data/cve/CVE-2026-23222.md) | Routine | crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly | 5.5 | 0.0015 |  |
| [CVE-2026-23063](https://patchblox.com/security/data/cve/CVE-2026-23063.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2026-23064](https://patchblox.com/security/data/cve/CVE-2026-23064.md) | Routine | kernel-64kb: net/sched: act_ife: avoid possible NULL deref (bsc#1257765). | 5.5 | 0.0015 |  |
| [CVE-2026-23080](https://patchblox.com/security/data/cve/CVE-2026-23080.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2026-23085](https://patchblox.com/security/data/cve/CVE-2026-23085.md) | Routine | kernel-64kb: irqchip/gic-v3-its: Avoid truncating memory addresses (bsc#1257758). | 5.5 | 0.0015 |  |
| [CVE-2026-23090](https://patchblox.com/security/data/cve/CVE-2026-23090.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2026-23091](https://patchblox.com/security/data/cve/CVE-2026-23091.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2026-23100](https://patchblox.com/security/data/cve/CVE-2026-23100.md) | Routine | kernel-uek: ELSA-2026-50232: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0015 |  |
| [CVE-2026-23133](https://patchblox.com/security/data/cve/CVE-2026-23133.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2026-23141](https://patchblox.com/security/data/cve/CVE-2026-23141.md) | Routine | kernel-64kb: btrfs: send: check for inline extents in range_is_hole_in_parent() (bsc#1258377). | 5.5 | 0.0015 |  |
| [CVE-2026-23145](https://patchblox.com/security/data/cve/CVE-2026-23145.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2026-23135](https://patchblox.com/security/data/cve/CVE-2026-23135.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0015 |  |
| [CVE-2026-23062](https://patchblox.com/security/data/cve/CVE-2026-23062.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2026-23088](https://patchblox.com/security/data/cve/CVE-2026-23088.md) | Routine | kernel-64kb: tracing: Fix crash on synthetic stacktrace field usage (bsc#1257814). | 5.5 | 0.0015 |  |
| [CVE-2026-23142](https://patchblox.com/security/data/cve/CVE-2026-23142.md) | Routine | kernel-64kb: mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure (bsc#1258289). | 5.5 | 0.0015 |  |
| [CVE-2026-23065](https://patchblox.com/security/data/cve/CVE-2026-23065.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2026-23070](https://patchblox.com/security/data/cve/CVE-2026-23070.md) | Routine | kernel-64kb: Octeontx2-af: Add proper checks for fwdata (bsc#1257709). | 5.5 | 0.0015 |  |
| [CVE-2025-71235](https://patchblox.com/security/data/cve/CVE-2025-71235.md) | Routine | scsi: qla2xxx: Delay module unload while fabric scan in progress | 5.5 | 0.0014 |  |
| [CVE-2026-23169](https://patchblox.com/security/data/cve/CVE-2026-23169.md) | Routine | kernel-64kb: mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() (bsc#1258389). | 5.6 | 0.0014 |  |
| [CVE-2026-23123](https://patchblox.com/security/data/cve/CVE-2026-23123.md) | Routine | kernel-uek: ELSA-2026-50232: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0014 |  |
| [CVE-2026-23229](https://patchblox.com/security/data/cve/CVE-2026-23229.md) | Routine | crypto: virtio - Add spinlock protection with virtqueue notification | 5.5 | 0.0014 |  |
| [CVE-2025-71184](https://patchblox.com/security/data/cve/CVE-2025-71184.md) | Routine | bpftool6.12: In the Linux kernel, the following vulnerability has been resolved | 5.5 | 0.0014 |  |
| [CVE-2026-23129](https://patchblox.com/security/data/cve/CVE-2026-23129.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.6 | 0.0014 |  |
| [CVE-2026-23071](https://patchblox.com/security/data/cve/CVE-2026-23071.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-23151](https://patchblox.com/security/data/cve/CVE-2026-23151.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0014 |  |
| [CVE-2025-71182](https://patchblox.com/security/data/cve/CVE-2025-71182.md) | Routine | bpftool6.12: In the Linux kernel, the following vulnerability has been resolved | 5.5 | 0.0014 |  |
| [CVE-2026-23096](https://patchblox.com/security/data/cve/CVE-2026-23096.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-23119](https://patchblox.com/security/data/cve/CVE-2026-23119.md) | Routine | kernel-64kb: bonding: provide a net pointer to __skb_flow_dissect() (bsc#1258273). | 5.5 | 0.0014 |  |
| [CVE-2026-23150](https://patchblox.com/security/data/cve/CVE-2026-23150.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-23155](https://patchblox.com/security/data/cve/CVE-2026-23155.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-23157](https://patchblox.com/security/data/cve/CVE-2026-23157.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-23163](https://patchblox.com/security/data/cve/CVE-2026-23163.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-23170](https://patchblox.com/security/data/cve/CVE-2026-23170.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-23173](https://patchblox.com/security/data/cve/CVE-2026-23173.md) | Routine | kernel-64kb: net/mlx5e: TC, delete flows only for existing peers (bsc#1258520). | 5.5 | 0.0014 |  |
| [CVE-2026-23190](https://patchblox.com/security/data/cve/CVE-2026-23190.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2025-71200](https://patchblox.com/security/data/cve/CVE-2025-71200.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-23094](https://patchblox.com/security/data/cve/CVE-2026-23094.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-23116](https://patchblox.com/security/data/cve/CVE-2026-23116.md) | Routine | kernel-64kb: pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu (bsc#1258277). | 5.5 | 0.0014 |  |
| [CVE-2026-23131](https://patchblox.com/security/data/cve/CVE-2026-23131.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-23166](https://patchblox.com/security/data/cve/CVE-2026-23166.md) | Routine | kernel-64kb: ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (bsc#1258272). | 6.2 | 0.0014 |  |
| [CVE-2025-71134](https://patchblox.com/security/data/cve/CVE-2025-71134.md) | Routine | kernel-64kb: mm/page_alloc: change all pageblocks migrate type on coalescing (bsc#1256732). | 5.5 | 0.0014 |  |
| [CVE-2026-23104](https://patchblox.com/security/data/cve/CVE-2026-23104.md) | Routine | kernel-64kb: ice: fix devlink reload call trace (bsc#1257763). | 5.5 | 0.0014 |  |
| [CVE-2026-23189](https://patchblox.com/security/data/cve/CVE-2026-23189.md) | Routine | kernel-uek: ELSA-2026-50232: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0014 |  |
| [CVE-2026-23207](https://patchblox.com/security/data/cve/CVE-2026-23207.md) | Routine | spi: tegra210-quad: Protect curr_xfer check in IRQ handler | 5.5 | 0.0013 |  |
| [CVE-2026-23146](https://patchblox.com/security/data/cve/CVE-2026-23146.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2025-71225](https://patchblox.com/security/data/cve/CVE-2025-71225.md) | Routine | md: suspend array while updating raid_disks via sysfs | 5.3 | 0.0013 |  |
| [CVE-2026-23018](https://patchblox.com/security/data/cve/CVE-2026-23018.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-23152](https://patchblox.com/security/data/cve/CVE-2026-23152.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2025-71104](https://patchblox.com/security/data/cve/CVE-2025-71104.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-23101](https://patchblox.com/security/data/cve/CVE-2026-23101.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0011 |  |
| [CVE-2026-23121](https://patchblox.com/security/data/cve/CVE-2026-23121.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-23188](https://patchblox.com/security/data/cve/CVE-2026-23188.md) | Routine | kernel-uek: ELSA-2026-50232: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0011 |  |
| [CVE-2026-23202](https://patchblox.com/security/data/cve/CVE-2026-23202.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0010 |  |
| [CVE-2026-23167](https://patchblox.com/security/data/cve/CVE-2026-23167.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0010 |  |

---

Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.