Multiple vulnerabilities in SUSE Linux kernel affecting data integrity, confidentiality and security policy
Multiple vulnerabilities have been discovered in the SUSE Linux kernel across various SUSE Linux Enterprise editions and service packs. These vulnerabilities may allow attackers to compromise data confidentiality, data integrity, and bypass security policies in affected systems. SUSE has issued a series of security bulletins with patches to address these flaws. Defenders should review the SUSE advisories and apply updates promptly to mitigate risks associated with these kernel vulnerabilities.
Entenda a falha
A vulnerabilidade
This is a batch of roughly 150 CVEs in the SUSE Linux Enterprise kernel, from CVE-2024-49974 to CVE-2026-72226. The articles do not describe the individual flaws. CERT-FR says some of them let an attacker harm data confidentiality, harm data integrity or bypass the security policy. Affected products include SLE Server 12 SP5 (including LTSS and SAP variants), High Performance Computing 12 SP5, Live Patching 12-SP5, SLE Server 16.0 (including SAP and High Availability), Server for NVIDIA 16.1 and Micro Extras 6.2. Attack requirements (local or remote, privileges) are not specified by the vendor, and the exact fixed kernel versions are in the SUSE bulletins, which the articles only list.
Como funciona
The articles do not describe how any of these flaws work in the kernel, so no step-by-step mechanism can be given. The only information is the general impact class: confidentiality loss, integrity loss and security policy bypass. Consult the individual CVE entries and SUSE bulletins for the mechanism of each flaw.
Por que é vulnerável
The articles do not state the root causes of these CVEs. They only say that SUSE released kernel updates in a series of security bulletins, starting with SUSE-SU-2026:24550-1 on 3 November 2026, which fix them.
Como foi descoberta
The articles do not say who found these flaws or how. They only show disclosure through SUSE security bulletins published from 3 November 2026 onward, which CERT-FR consolidated in advisory CERTFR-2026-AVI-1535 dated 13 November 2026. The articles mention no exploitation in the wild.
Explicação gerada por IA a partir da matéria e dos artigos, em 13/11/2026 12:26.
Linha do tempo
-
Multiple vulnerabilities in SUSE Linux kernel affecting data integrity, confidentiality and security policy
ler a análise desta fonte ocultar
Multiple vulnerabilities have been discovered in the SUSE Linux kernel across various SUSE Linux Enterprise editions and service packs. These vulnerabilities may allow attackers to compromise data confidentiality, data integrity, and bypass security policies in affected systems. SUSE has issued a series of security bulletins with patches to address these flaws. Defenders should review the SUSE advisories and apply updates promptly to mitigate risks associated with these kernel vulnerabilities.