# SUSE Linux kernel vulnerabilities affect multiple distributions

Published: 2026-07-10 · Severity: routine
Canonical: https://vorant.io/reports/9bea16f0-1c04-5da3-9a0e-fbd691e7099f/suse-linux-kernel-vulnerabilities-affect-multiple-distributions

> CERT-FR advisory covering multiple kernel flaws in SUSE Linux Enterprise affecting confidentiality, integrity and privilege escalation with patches available.

CERT-FR has published a vulnerability advisory documenting multiple flaws discovered in the Linux kernel shipped with SUSE products. The affected systems include SUSE Linux Enterprise Server 15 SP7, Server 16.0, Desktop 15 SP7, High Availability Extension 15 SP7, Live Patching, Real Time variants, SUSE Linux Micro 6.0 and 6.1, and associated modules. The vulnerabilities enable attackers to compromise data confidentiality and integrity, bypass security policies, and potentially achieve privilege escalation or denial of service. SUSE has published 16 security update bulletins (SUSE-SU-2026:22473-1 through SUSE-SU-2026:2800-1) released between 25 June and 8 July 2026 containing kernel patches. The advisory references over 160 CVE identifiers spanning multiple vulnerability classes; defenders should apply patches from the referenced SUSE bulletins immediately to affected systems.

## Mentioned in this report

- Vulnerabilities: CVE-2025-10263, CVE-2025-38549, CVE-2025-40216, CVE-2025-40341, CVE-2025-54518, CVE-2025-68324, CVE-2025-68822, CVE-2025-71294, CVE-2026-23278, CVE-2026-23303, CVE-2026-23327, CVE-2026-23359, CVE-2026-23438, CVE-2026-23444, CVE-2026-23451, CVE-2026-31396, CVE-2026-31402, CVE-2026-31414, CVE-2026-31429, CVE-2026-31446, CVE-2026-31448, CVE-2026-31450, CVE-2026-31452, CVE-2026-31453, CVE-2026-31454, CVE-2026-31455, CVE-2026-31462, CVE-2026-31464, CVE-2026-31466, CVE-2026-31469, CVE-2026-31473, CVE-2026-31480, CVE-2026-31492, CVE-2026-31493, CVE-2026-31495, CVE-2026-31499, CVE-2026-31500, CVE-2026-31502, CVE-2026-31504, CVE-2026-31516

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0864

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/9bea16f0-1c04-5da3-9a0e-fbd691e7099f/suse-linux-kernel-vulnerabilities-affect-multiple-distributions.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup