Linux · SUSE Linux Enterprise · Security advisory · October 2, 2026
SUSE-SU-2026:3602-1: Security update for 7 packages
SUSE-SU-2026:3602-1, released October 2, 2026, fixes 73 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
73
4 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0430
91st percentile
Priority of the 73 CVEs
Patch now 0
Urgent 4
High 58
Routine 11
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-default | sles 15.6 | 6.4.0-150600.23.130.1 |
| kernel-default-base | sles 15.6 | 6.4.0-150600.23.130.1.150600.12.60.3 |
| kernel-docs | sles 15.6 | 6.4.0-150600.23.130.1 |
| kernel-livepatch-SLE15-SP6_Update_30 | sles 15.6 | 1-150600.13.5.1 |
| kernel-obs-build | sles 15.6 | 6.4.0-150600.23.130.1 |
| kernel-source | sles 15.6 | 6.4.0-150600.23.130.1 |
| kernel-syms | sles 15.6 | 6.4.0-150600.23.130.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2026-64564 | sctp: don't free the ASCONF's own transport in DEL-IP processing | 9.8 | 0.0143 | None reported |
| Urgent | CVE-2026-53224 | kernel-default: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997). | 9.1 | 0.0057 | None reported |
| Urgent | CVE-2026-63824 | KEYS: fix overflow in keyctl_pkey_params_get_2() | 9.8 | 0.0017 | None reported |
| Urgent | CVE-2026-64106 | kernel-default: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242). | 9.0 | 0.0015 | None reported |
| High | CVE-2026-46333 | ptrace: slightly saner 'get_dumpable()' logic | 8.1 | 0.0430 | None reported |
| High | CVE-2026-63912 | kernel-default: xfrm: esp: restore combined single-frag length gate (bsc#1272836). | 9.8 | 0.0071 | None reported |
| High | CVE-2026-63922 | kernel: kernel: ipv6: exthdrs: refresh nh after handling HAO option | 9.8 | 0.0071 | None reported |
| High | CVE-2026-63924 | kernel: kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() | 9.8 | 0.0071 | None reported |
| High | CVE-2026-63968 | kernel-default: ipv6: fix possible infinite loop in fib6_select_path() (bsc#1272466). | 7.5 | 0.0067 | None reported |
| High | CVE-2026-64530 | net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle | 9.8 | 0.0066 | None reported |
| High | CVE-2026-63919 | kernel-default: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907). | 8.8 | 0.0065 | None reported |
| High | CVE-2026-52986 | netfilter: nf_conntrack_sip: don't use simple_strtoul | 9.8 | 0.0063 | None reported |
| High | CVE-2026-53391 | NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr | 8.8 | 0.0052 | None reported |
| High | CVE-2026-63984 | kernel-default: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865). | 9.8 | 0.0051 | None reported |
| High | CVE-2026-63994 | kernel-default: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035). | 9.8 | 0.0051 | None reported |
| High | CVE-2026-64560 | linux: In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-lead... | 7.8 | 0.0050 | None reported |
| High | CVE-2026-64600 | xfs: resample the data fork mapping after cycling ILOCK | 7.8 | 0.0047 | None reported |
| High | CVE-2026-53246 | sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing | 9.8 | 0.0044 | None reported |
| High | CVE-2026-53131 | netfilter: require Ethernet MAC header before using eth_hdr() | 9.4 | 0.0044 | None reported |
| High | CVE-2026-31598 | ocfs2: fix possible deadlock between unlink and dio_end_io_write | 7.5 | 0.0044 | None reported |
| High | CVE-2026-46243 | smb: client: reject userspace cifs.spnego descriptions | 7.8 | 0.0041 | None reported |
| High | CVE-2026-52967 | kernel-default: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181). | 8.1 | 0.0039 | None reported |
| High | CVE-2026-63893 | kernel-default: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607). | 8.1 | 0.0039 | None reported |
| High | CVE-2026-46056 | Bluetooth: hci_event: fix potential UAF in SSP passkey handlers | 8.8 | 0.0028 | None reported |
| High | CVE-2026-63975 | kernel-default: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (bsc#1272694). | 8.8 | 0.0027 | None reported |
Showing 1 to 25 of 73
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.