OPENSUSE-SU-2026:22091-1: Security update for 13 packages

OPENSUSE-SU-2026:22091-1, released November 7, 2026, fixes 401 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

401

20 rated Critical

Exploited

None reported

Highest CVSS

9.8

Base score, 0 to 10

Highest EPSS

0.0147

74th percentile

Priority of the 401 CVEs

Patch now 0
                                Urgent 20
                                High 279
                                Routine 102

Fixed package versions

Product	Release	Fixed in
dtb-aarch64	opensuse-leap 16.0	6.12.0-160000.39.1
kernel-64kb	opensuse-leap 16.0	6.12.0-160000.39.1
kernel-azure	opensuse-leap 16.0	6.12.0-160000.39.1
kernel-default	opensuse-leap 16.0	6.12.0-160000.39.1
kernel-default-base	opensuse-leap 16.0	6.12.0-160000.39.1.160000.2.25
kernel-docs	opensuse-leap 16.0	6.12.0-160000.39.1
kernel-kvmsmall	opensuse-leap 16.0	6.12.0-160000.39.1
kernel-obs-build	opensuse-leap 16.0	6.12.0-160000.39.1
kernel-obs-qa	opensuse-leap 16.0	6.12.0-160000.39.1
kernel-rt	opensuse-leap 16.0	6.12.0-160000.39.1
kernel-source	opensuse-leap 16.0	6.12.0-160000.39.1
kernel-syms	opensuse-leap 16.0	6.12.0-160000.39.1
kernel-zfcpdump	opensuse-leap 16.0	6.12.0-160000.39.1

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Urgent	CVE-2026-89970	nvmet-auth: Synchronize timeout work during SQ teardown	9.8	0.0080	None reported
Urgent	CVE-2026-89697	linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: add fh_want_write() for early-verified SET...	9.1	0.0070	None reported
Urgent	CVE-2026-89526	svcrdma: Validate Read chunk positions before reconstruction	9.8	0.0068	None reported
Urgent	CVE-2026-80694	net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller	9.8	0.0060	None reported
Urgent	CVE-2026-89672	kernel-64kb: nfsd: gate nfs2 setacl by argp->mask (bsc#1280235).	9.1	0.0060	None reported
Urgent	CVE-2026-53384	serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails	9.8	0.0052	None reported
Urgent	CVE-2026-64046	kernel-64kb: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).	9.8	0.0051	None reported
Urgent	CVE-2026-89542	SUNRPC: harden gss_krb5_unwrap_v2 against short tokens	9.8	0.0051	None reported
Urgent	CVE-2026-89551	SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow	9.8	0.0051	None reported
Urgent	CVE-2026-89479	sctp: stop processing a packet once its association is deleted	9.8	0.0050	None reported
Urgent	CVE-2026-68385	linux: In the Linux kernel, the following vulnerability has been resolved: s390/checksum: Fix csum_partial() without vector...	9.8	0.0049	None reported
Urgent	CVE-2026-93207	SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry	9.8	0.0047	None reported
Urgent	CVE-2026-64216	linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential UAF in netfs_unlock_abandon...	9.8	0.0046	None reported
Urgent	CVE-2026-100075	RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters	9.8	0.0043	None reported
Urgent	CVE-2026-63881	drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger	9.8	0.0019	None reported
Urgent	CVE-2026-68146	ftrace: Add global mutex to serialize trace_parser access	9.8	0.0018	None reported
Urgent	CVE-2026-80686	mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE	9.8	0.0017	None reported
Urgent	CVE-2026-63983	net/sched: fix packet loop on netem when duplicate is on	9.8	0.0017	None reported
Urgent	CVE-2026-80715	igc: remove napi_synchronize() in igc_down()	9.8	0.0016	None reported
Urgent	CVE-2026-64070	powerpc/hv-gpci: fix preempt count leak in sysfs show paths	9.8	0.0012	None reported
High	CVE-2026-74469	sctp: prevent peer transport count overflow	8.8	0.0147	None reported
High	CVE-2026-63913	kernel-64k-modules-core: kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check	8.8	0.0097	None reported
High	CVE-2026-90413	IB/isert: reject login PDUs declaring more data than was received	9.1	0.0084	None reported
High	CVE-2026-89968	nvmet-tcp: reject unsolicited H2CData PDUs	9.8	0.0082	None reported
High	CVE-2026-72130	kernel: nvmet-auth: reject short AUTH_RECEIVE buffers (CKI Backport Bot) [RHEL-244913]	9.8	0.0080	None reported

Also fixes CVE-2026-89970

SUSE-SU-2026:4640-1
kernel-livepatch-SLE15-SP7-RT_Update_21 on sles 15.7
SUSE-SU-2026:4706-1
kernel-64kb, kernel-azure, kernel-default and 7 more on sles 15.7
SUSE-SU-2026:24197-1
kernel-default on sles 16.0
SUSE-SU-2026:24235-1
kernel-64kb, kernel-azure, kernel-default-base and 6 more on sles 16.0
ELSA-2026-500374
kernel-uek, kernel-uek-core, kernel-uek-debug and 32 more on ol 10, ol 9
ELSA-2026-81552
kernel, kernel-abi-stablelists, kernel-core and 26 more on ol 9
ALSA-2026:81552
kernel, kernel-64k, kernel-64k-core and 15 more on almalinux 9
RLSA-2026:81552
kernel on rocky 9

Vendor advisory

https://osv.dev/vulnerability/openSUSE-SU-2026:22091-1

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/opensuse-su-2026-22091-1">OPENSUSE-SU-2026:22091-1 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.