SUSE Linux kernel vulnerabilities affect multiple distributions
Free public brief. The indicators, the detections with Splunk SPL already written (plus Elastic and KQL where they apply), and a Slack alert the next time this touches a vendor you run are in the app — free account, no card.
CERT-FR advisory covering multiple kernel flaws in SUSE Linux Enterprise affecting confidentiality, integrity and privilege escalation with patches available.
CERT-FR has published a vulnerability advisory documenting multiple flaws discovered in the Linux kernel shipped with SUSE products. The affected systems include SUSE Linux Enterprise Server 15 SP7, Server 16.0, Desktop 15 SP7, High Availability Extension 15 SP7, Live Patching, Real Time variants, SUSE Linux Micro 6.0 and 6.1, and associated modules. The vulnerabilities enable attackers to compromise data confidentiality and integrity, bypass security policies, and potentially achieve privilege escalation or denial of service. SUSE has published 16 security update bulletins (SUSE-SU-2026:22473-1 through SUSE-SU-2026:2800-1) released between 25 June and 8 July 2026 containing kernel patches. The advisory references over 160 CVE identifiers spanning multiple vulnerability classes; defenders should apply patches from the referenced SUSE bulletins immediately to affected systems.
Mentioned in this report
Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0864
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), the actors and CVEs it names as live profiles, and the vendor research on the same campaign — the primary source the news paraphrased, cited and read directly.
It sits in a corpus of 13,853 reports from 146 sources, 616 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Name the vendors you run and Slack hears about the reports that touch them — about forty a week that are yours, not the four hundred that are not.
Create a free account What it costs