# Multiple Linux kernel vulnerabilities in SUSE products

Published: 2026-06-05 · Severity: elevated
Canonical: https://vorant.io/reports/bcd57c0b-5b62-5add-a26a-a71c892f5dfe/multiple-linux-kernel-vulnerabilities-in-suse-products
Vorant's rating weighs the evidence in the report: confirmed exploitation, victims claimed, CVSS and EPSS, and how many sources agree. It rates the report, not your assets.

> Dozens of kernel flaws in SUSE Linux affect data confidentiality, integrity, security policy bypass, and denial of service.

Source: cert.ssi.gouv.fr — https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0697

## What to check

- Applies to: The 40 CVEs named below. Whether you run an affected version is not assessed: check the versions the source lists.
- Exploitation: No exploitation in the wild and no public exploit is recorded for the CVEs named.

CERT-FR has published an advisory documenting multiple vulnerabilities in the Linux kernel affecting numerous SUSE products and distributions. The affected systems span a wide range of SUSE offerings, including SUSE Linux Enterprise Server, openSUSE Leap, SUSE Manager, and specialized modules across versions 12 SP5 through 15 SP7. The vulnerabilities enable attackers to compromise data confidentiality and integrity, bypass security policies, and trigger denial of service conditions. The advisory references over 100 CVE identifiers spanning from 2021 through 2026, indicating a significant remediation effort required across the SUSE product portfolio. SUSE has released patches organized across multiple security bulletins published between May 28 and June 3, 2026, each addressing specific product lines and versions. Defenders using any SUSE Linux distribution should immediately consult the referenced SUSE security bulletins to identify applicable patches for their deployed systems.

## Mentioned in this report

- Vulnerabilities: CVE-2021-47103, CVE-2022-49979, CVE-2023-2058, CVE-2023-20585, CVE-2024-14027, CVE-2025-40181, CVE-2025-40219, CVE-2025-54518, CVE-2025-68265, CVE-2025-68310, CVE-2025-71183, CVE-2025-71238, CVE-2025-71268, CVE-2025-71269, CVE-2025-71302, CVE-2026-23168, CVE-2026-23209, CVE-2026-23236, CVE-2026-23237, CVE-2026-23239, CVE-2026-23240, CVE-2026-23243, CVE-2026-23245, CVE-2026-23246, CVE-2026-23253, CVE-2026-23260, CVE-2026-23261, CVE-2026-23262, CVE-2026-23264, CVE-2026-23266, CVE-2026-23268, CVE-2026-23269, CVE-2026-23271, CVE-2026-23273, CVE-2026-23274, CVE-2026-23276, CVE-2026-23279, CVE-2026-23290, CVE-2026-23291, CVE-2026-23298

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0697

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/bcd57c0b-5b62-5add-a26a-a71c892f5dfe/multiple-linux-kernel-vulnerabilities-in-suse-products.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup