Linux · SUSE Linux Enterprise · Security advisory · July 1, 2026
SUSE-SU-2026:2195-1: Security update for 7 packages
SUSE-SU-2026:2195-1, released July 1, 2026, fixes 69 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
69
1 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0122
69th percentile
Priority of the 69 CVEs
Patch now 0
Urgent 1
High 63
Routine 5
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-default | sles 15.6 | 6.4.0-150600.23.112.1 |
| kernel-default-base | sles 15.6 | 6.4.0-150600.23.112.1.150600.12.52.1 |
| kernel-docs | sles 15.6 | 6.4.0-150600.23.112.1 |
| kernel-livepatch-SLE15-SP6_Update_26 | sles 15.6 | 1-150600.13.3.1 |
| kernel-obs-build | sles 15.6 | 6.4.0-150600.23.112.1 |
| kernel-source | sles 15.6 | 6.4.0-150600.23.112.1 |
| kernel-syms | sles 15.6 | 6.4.0-150600.23.112.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-23450 | kernel-default: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584). | 9.8 | 0.0046 | None reported |
| High | CVE-2026-31402 | kernel-64kb: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638). | 9.8 | 0.0122 | None reported |
| High | CVE-2026-46331 | net/sched: fix pedit partial COW leading to page cache corruption | 8.1 | 0.0064 | None reported |
| High | CVE-2026-23240 | tls: Fix race condition in tls_sw_cancel_work_tx() | 9.8 | 0.0056 | None reported |
| High | CVE-2026-43365 | kernel-64kb: xfs: fix undersized l_iclog_roundoff values (bsc#1265119). | 8.2 | 0.0051 | None reported |
| High | CVE-2026-31685 | netfilter: ip6t_eui64: reject invalid MAC header for all packets | 9.4 | 0.0049 | None reported |
| High | CVE-2026-31669 | mptcp: fix slab-use-after-free in __inet_lookup_established | 9.8 | 0.0047 | None reported |
| High | CVE-2026-43190 | kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_tcpmss: check remaining length befo... | 8.2 | 0.0046 | None reported |
| High | CVE-2026-31649 | net: stmmac: fix integer underflow in chain mode | 9.8 | 0.0046 | None reported |
| High | CVE-2026-31436 | kernel-64kb: dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (bsc#1262602). | 9.8 | 0.0046 | None reported |
| High | CVE-2026-43494 | net/rds: reset op_nents when zerocopy page pin fails | 7.8 | 0.0041 | None reported |
| High | CVE-2026-31533 | kernel-default: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262758). | 9.8 | 0.0040 | None reported |
| High | CVE-2026-31662 | tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG | 7.5 | 0.0039 | None reported |
| High | CVE-2026-31408 | Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold | 8.8 | 0.0032 | None reported |
| High | CVE-2026-31607 | usbip: validate number_of_packets in usbip_pack_ret_submit() | 9.8 | 0.0031 | None reported |
| High | CVE-2026-31622 | NFC: digital: Bounds check NFC-A cascade depth in SDD response handler | 8.8 | 0.0029 | None reported |
| High | CVE-2025-54518 | AMD: CVE-2025-54518 CPU OP Cache Corruption | 7.8 | 0.0029 | Exploitation Unlikely |
| High | CVE-2026-31694 | fuse: reject oversized dirents in page cache | 7.8 | 0.0028 | None reported |
| High | CVE-2026-43334 | kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: force responder MITM requirements... | 8.8 | 0.0028 | None reported |
| High | CVE-2026-23462 | kernel-default: Bluetooth: HIDP: Fix possible UAF (bsc#1261710). | 8.8 | 0.0028 | None reported |
| High | CVE-2026-43110 | kernel-default: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264482). | 8.8 | 0.0027 | None reported |
| High | CVE-2026-31570 | can: gw: fix OOB heap access in cgw_csum_crc8_rel() | 8.8 | 0.0026 | None reported |
| High | CVE-2026-43038 | kpatch-patch-4_18_0-553_125_1: kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() | 9.8 | 0.0026 | None reported |
| High | CVE-2026-23461 | kernel-source: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (bsc#1261707). | 8.8 | 0.0024 | None reported |
| High | CVE-2026-31588 | KVM: x86: Use scratch field in MMIO fragment to hold small write values | 8.8 | 0.0019 | None reported |
Showing 1 to 25 of 69
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.