# CERT-FR Details Hundreds of SUSE Linux Flaws

Published: 2026-10-23 · Severity: routine
Canonical: https://vorant.io/reports/816f7bca-8e17-5448-9cc1-27d09497730a/cert-fr-details-hundreds-of-suse-linux-flaws

> CERT-FR issued a bulletin covering hundreds of vulnerabilities across SUSE Linux Enterprise and openSUSE products, some enabling remote code execution and privilege escalation.

CERT-FR published a consolidated advisory aggregating dozens of SUSE security updates (SUSE-SU bulletins) released between October 12 and October 22, 2026, affecting nearly the entire SUSE Linux Enterprise and openSUSE product line, including SLES, SLED, SUSE Linux Enterprise Micro, High Availability Extension, High Performance Computing, Real Time, Live Patching, and SAP Applications editions across multiple service packs (12 SP5 through 16.0), as well as openSUSE Leap 15.4-15.6 and various modules (Basesystem, Development Tools, Legacy, Public Cloud).

The bulletin references an extremely large number of CVEs (several hundred) spanning the kernel and bundled packages, with impacts including remote code execution, privilege escalation, denial of service, data confidentiality and integrity compromise, and security control bypass. No single root cause or component is called out in the summary; the advisory functions as an index pointing administrators to the individual SUSE security update announcements for patch details and affected package versions.

There is no indication in the advisory of active in-the-wild exploitation of any of these flaws; this is a routine, high-volume patch consolidation bulletin. Defenders running SUSE-based systems should prioritize patching based on the severity of individual CVEs relevant to their deployed modules, referring to the linked SUSE-SU announcements for exact fixed package versions, and apply updates via standard SUSE patch management (zypper patch) as soon as operationally feasible.

## Mentioned in this report

- Vulnerabilities: CVE-2024-26730, CVE-2025-38704, CVE-2025-40136, CVE-2026-100075, CVE-2026-23128, CVE-2026-23199, CVE-2026-23352, CVE-2026-31523, CVE-2026-31689, CVE-2026-43210, CVE-2026-43272, CVE-2026-43409, CVE-2026-43448, CVE-2026-45836, CVE-2026-45872, CVE-2026-46044, CVE-2026-46135, CVE-2026-46149, CVE-2026-46196, CVE-2026-46272, CVE-2026-46304, CVE-2026-52912, CVE-2026-53061, CVE-2026-53131, CVE-2026-53284, CVE-2026-53377, CVE-2026-53384, CVE-2026-53400, CVE-2026-63794, CVE-2026-63795, CVE-2026-63838, CVE-2026-63881, CVE-2026-63883, CVE-2026-63887, CVE-2026-63890, CVE-2026-63913, CVE-2026-63939, CVE-2026-63956, CVE-2026-63963

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1372

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/816f7bca-8e17-5448-9cc1-27d09497730a/cert-fr-details-hundreds-of-suse-linux-flaws.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup