CERT-FR advisory CERTFR-2026-AVI-1470: SUSE ships kernel updates for over 100 Linux kernel CVEs across SLE 12 SP5 and 15 SP4-SP7
CERT-FR published advisory CERTFR-2026-AVI-1470 on 6 November 2026 covering multiple vulnerabilities in the Linux kernel packages shipped by SUSE. The flaws allow an attacker to cause a loss of data confidentiality, a loss of data integrity and a security policy bypass; CERT-FR notes some impacts are not specified by the vendor. The bulletin references more than fifty SUSE security bulletins published between 31 October and 5 November 2026 (SUSE-SU-2026:4960-1 through SUSE-SU-2026:5121-1 and the 24xxx series for SLE Micro), and lists over one hundred CVE identifiers, ranging from older issues such as CVE-2023-7356 and CVE-2024-50241 to recent kernel CVEs of the 2026-72xxx series. No exploitation in the wild is mentioned, and the bulletin gives no CVSS score, no prerequisite and no per-CVE mapping to a subsystem. Local access is the usual prerequisite for kernel flaws of this kind, which limits the immediate operational urgency compared with a remotely reachable vulnerability.
Entenda a falha
A vulnerabilidade
CERT-FR advisory CERTFR-2026-AVI-1470 covers more than one hundred Linux kernel CVEs fixed in SUSE kernel updates, from older ones such as CVE-2023-7356 and CVE-2024-50241 to the 2026-72xxx series. Affected products are SUSE Linux Enterprise Server 12 SP5 (including LTSS) and 15 SP4 to SP7, SLES for SAP, Desktop, High Availability, HPC, Real Time, Micro 5.3 to 5.5, Live Patching and several 15-SP7 modules. CERT-FR says the flaws can cause loss of confidentiality, loss of integrity and a security policy bypass, and that some impacts are not specified by the vendor. The advisory gives no CVSS score, no prerequisites, no per-CVE subsystem and no fixed version numbers. Kernel flaws of this kind usually need local access, but that is an inference, not something the advisory states.
Como funciona
The advisory does not describe how any of these flaws work, so no mechanism can be given without guessing. It does not map CVEs to kernel subsystems or explain what input or event triggers them. Defenders should consult the individual SUSE bulletins and CVE records for per-flaw detail.
Por que é vulnerável
The advisory does not state root causes for the individual CVEs. It only lists the impact classes (confidentiality, integrity, policy bypass) and says some impacts are unspecified by the vendor. The fix is the set of SUSE kernel package updates referenced in the SUSE bulletins.
Como foi descoberta
The articles do not say who found the flaws or how. CERT-FR published the advisory on 6 November 2026, consolidating more than fifty SUSE security bulletins released between 31 October and 5 November 2026. No exploitation in the wild is mentioned.
Explicação gerada por IA a partir da matéria e dos artigos, em 08/11/2026 11:17.
Detalhes técnicos
Affected products are the SUSE Linux Enterprise 12 SP5 and 15 SP4 to SP7 families: SUSE Linux Enterprise Server 15 SP4/SP5/SP6/SP7 and 12 SP5 (including LTSS and LTSS Extended Security), SLES for SAP Applications 12 SP5 and 15 SP4-SP7, SUSE Linux Enterprise Desktop 15 SP7, High Availability Extension 15 SP7, High Performance Computing 12 SP5 and 15 SP4/SP5, Real Time 15 SP4-SP7, SUSE Linux Enterprise Micro 5.3, 5.4 and 5.5, Live Patching 12-SP5 and 15-SP4 to 15-SP7, plus the Development Tools, Public Cloud and Workstation Extension modules for 15-SP7 (cert.cyber.gouv.fr).
Remediação
Apply the kernel updates referenced in the corresponding SUSE security bulletins for each product and service pack, and reboot or apply the matching Live Patching update where kernel live patching is in use. The advisory names no workaround.
Linha do tempo
-
CERT-FR advisory CERTFR-2026-AVI-1470: SUSE ships kernel updates for over 100 Linux kernel CVEs across SLE 12 SP5 and 15 SP4-SP7
ler a análise desta fonte ocultar
CERT-FR published advisory CERTFR-2026-AVI-1470 on 6 November 2026 covering multiple vulnerabilities in the Linux kernel packages shipped by SUSE. The flaws allow an attacker to cause a loss of data confidentiality, a loss of data integrity and a security policy bypass; CERT-FR notes some impacts are not specified by the vendor. The bulletin references more than fifty SUSE security bulletins published between 31 October and 5 November 2026 (SUSE-SU-2026:4960-1 through SUSE-SU-2026:5121-1 and the 24xxx series for SLE Micro), and lists over one hundred CVE identifiers, ranging from older issues such as CVE-2023-7356 and CVE-2024-50241 to recent kernel CVEs of the 2026-72xxx series. No exploitation in the wild is mentioned, and the bulletin gives no CVSS score, no prerequisite and no per-CVE mapping to a subsystem. Local access is the usual prerequisite for kernel flaws of this kind, which limits the immediate operational urgency compared with a remotely reachable vulnerability.
Technical Details
Affected products are the SUSE Linux Enterprise 12 SP5 and 15 SP4 to SP7 families: SUSE Linux Enterprise Server 15 SP4/SP5/SP6/SP7 and 12 SP5 (including LTSS and LTSS Extended Security), SLES for SAP Applications 12 SP5 and 15 SP4-SP7, SUSE Linux Enterprise Desktop 15 SP7, High Availability Extension 15 SP7, High Performance Computing 12 SP5 and 15 SP4/SP5, Real Time 15 SP4-SP7, SUSE Linux Enterprise Micro 5.3, 5.4 and 5.5, Live Patching 12-SP5 and 15-SP4 to 15-SP7, plus the Development Tools, Public Cloud and Workstation Extension modules for 15-SP7 (cert.cyber.gouv.fr).
Remediation
Apply the kernel updates referenced in the corresponding SUSE security bulletins for each product and service pack, and reboot or apply the matching Live Patching update where kernel live patching is in use. The advisory names no workaround.