/
← Voltar ao feed
high

CERT-FR: Multiple SUSE Linux Enterprise kernel vulnerabilities allow privilege escalation, DoS and data confidentiality breach

1 fonte(s) · 1 atualização(ões) · publicado 15/10/2026 21:00 · coletado há 3 dias

CERT-FR advisory CERTFR-2026-AVI-1335, published 16 October 2026, reports multiple vulnerabilities in the Linux kernel shipped with SUSE products. Some of them allow an attacker to escalate privileges, cause a remote denial of service and breach data confidentiality. Other listed impacts are data integrity breach and security policy bypass. The advisory references more than 200 CVEs (the list is truncated in the source text) and 16 SUSE security bulletins dated 6 to 15 October 2026. It does not mention active exploitation, CVSS scores, IOCs or attribution.

Detalhes técnicos

  • Affected: SUSE Linux Enterprise Server 11 SP4, 12 SP5, 15 SP4 to SP7 and 16.0, including LTSS variants and Server for SAP Applications.
  • Affected: SUSE Linux Enterprise High Performance Computing 12 SP5 and 15 SP4/SP5 (including ESPOS and LTSS), High Availability Extension 15 SP4/SP6, Real Time 15 SP4 to SP7, Real Time Module 15-SP7.
  • Affected: SUSE Linux Enterprise Live Patching 12-SP5 and 15-SP4 to SP7, SUSE Linux Enterprise Micro 5.3 to 5.5, Micro for Rancher 5.3/5.4, and SUSE Manager Retail Branch Server 4.3.
  • The advisory does not map individual CVEs to specific impacts or kernel components.

Remediação

  • Apply the kernel updates published in the SUSE bulletins SUSE-SU-2026:24106-1, 24107-1, 24108-1, 24173-1, 24174-1, 24175-1, 4639-1, 4640-1, 4660-1, 4665-1, 4666-1, 4667-1, 4668-1 and 4687-1.
  • Refer to the SUSE security bulletins for the fixed package versions matching each product.

Linha do tempo

  1. cert.ssi.gouv.fr ↗ · pub. 15/10/2026 21:00 · coletado 20/10 16:32 primeiro registro

    CERT-FR: Multiple SUSE Linux Enterprise kernel vulnerabilities allow privilege escalation, DoS and data confidentiality breach

    ler a análise desta fonte

    CERT-FR advisory CERTFR-2026-AVI-1335, published 16 October 2026, reports multiple vulnerabilities in the Linux kernel shipped with SUSE products. Some of them allow an attacker to escalate privileges, cause a remote denial of service and breach data confidentiality. Other listed impacts are data integrity breach and security policy bypass. The advisory references more than 200 CVEs (the list is truncated in the source text) and 16 SUSE security bulletins dated 6 to 15 October 2026. It does not mention active exploitation, CVSS scores, IOCs or attribution.

    Technical Details

    • Affected: SUSE Linux Enterprise Server 11 SP4, 12 SP5, 15 SP4 to SP7 and 16.0, including LTSS variants and Server for SAP Applications.
    • Affected: SUSE Linux Enterprise High Performance Computing 12 SP5 and 15 SP4/SP5 (including ESPOS and LTSS), High Availability Extension 15 SP4/SP6, Real Time 15 SP4 to SP7, Real Time Module 15-SP7.
    • Affected: SUSE Linux Enterprise Live Patching 12-SP5 and 15-SP4 to SP7, SUSE Linux Enterprise Micro 5.3 to 5.5, Micro for Rancher 5.3/5.4, and SUSE Manager Retail Branch Server 4.3.
    • The advisory does not map individual CVEs to specific impacts or kernel components.

    Remediation

    • Apply the kernel updates published in the SUSE bulletins SUSE-SU-2026:24106-1, 24107-1, 24108-1, 24173-1, 24174-1, 24175-1, 4639-1, 4640-1, 4660-1, 4665-1, 4666-1, 4667-1, 4668-1 and 4687-1.
    • Refer to the SUSE security bulletins for the fixed package versions matching each product.