# Multiple Linux kernel vulnerabilities affect SUSE systems

Published: 2026-05-29 · Severity: routine
Canonical: https://vorant.io/reports/aed48dac-214d-50c8-8d81-aed77dae8d9f/multiple-linux-kernel-vulnerabilities-affect-suse-systems

> SUSE released patches for 60+ kernel vulnerabilities affecting SLES 12 SP5, SLES 16.0, and related systems with privilege escalation risks.

CERT-FR published an advisory covering multiple vulnerabilities discovered in the Linux kernel shipped with SUSE Linux Enterprise products. The affected systems include SUSE Linux Enterprise Server 12 SP5 (including LTSS variants), SUSE Linux Enterprise Server 16.0, SUSE Linux Enterprise High Performance Computing 12 SP5, SUSE Linux Enterprise Live Patching 12 SP5, SUSE Linux Micro 6.1 and 6.2, and SUSE Linux Enterprise Server for SAP Applications variants.

The vulnerabilities enable multiple attack vectors including privilege escalation, data confidentiality and integrity compromise, security policy bypass, and denial of service. This is a coordinated patch release across 22 separate SUSE security bulletins issued between May 18-26, 2026. Defenders operating any SUSE Linux Enterprise variant listed should prioritize applying kernel updates from the referenced security bulletins. The breadth of affected product families and the number of CVEs indicate a comprehensive kernel update addressing accumulated security issues.

## Mentioned in this report

- Vulnerabilities: CVE-2022-50053, CVE-2023-20585, CVE-2024-50082, CVE-2025-68185, CVE-2025-71108, CVE-2025-71118, CVE-2025-71238, CVE-2026-23193, CVE-2026-23209, CVE-2026-23216, CVE-2026-23268, CVE-2026-23269, CVE-2026-23273, CVE-2026-23276, CVE-2026-23290, CVE-2026-23292, CVE-2026-23293, CVE-2026-23312, CVE-2026-23340, CVE-2026-23378, CVE-2026-23391, CVE-2026-23403, CVE-2026-23404, CVE-2026-23405, CVE-2026-23408, CVE-2026-23442, CVE-2026-23449, CVE-2026-23455, CVE-2026-23456, CVE-2026-23457, CVE-2026-23458, CVE-2026-23461, CVE-2026-23462, CVE-2026-23468, CVE-2026-23472, CVE-2026-31393, CVE-2026-31400, CVE-2026-31402, CVE-2026-31403, CVE-2026-31407

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0664

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/aed48dac-214d-50c8-8d81-aed77dae8d9f/multiple-linux-kernel-vulnerabilities-affect-suse-systems.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup