# Multiple Linux kernel vulnerabilities in SUSE products

Published: 2026-09-18 · Severity: high
Canonical: https://vorant.io/reports/dfc041e1-2343-5637-95da-c2a5ab098e36/multiple-linux-kernel-vulnerabilities-in-suse-products

> SUSE Linux kernel contains multiple vulnerabilities allowing arbitrary code execution, data theft, and denial of service.

CERT-FR has disclosed multiple vulnerabilities in the Linux kernel as shipped in SUSE products. The advisory lists over 150 CVEs affecting the kernel across numerous SUSE distributions including SUSE Linux Enterprise Server (11, 12, 15 SP4-SP7), openSUSE Leap (15.4-15.6), SUSE Linux Enterprise Micro, and High Performance Computing variants. The vulnerabilities enable attackers to execute arbitrary code, compromise data confidentiality and integrity, bypass security policies, and cause denial of service. SUSE has released coordinated security updates across multiple bulletins issued between 8-17 September 2026. The article provides CVE references and SUSE bulletin links for remediation but does not detail individual vulnerability mechanics or exploitation status in the wild.

## Mentioned in this report

- Vulnerabilities: CVE-2024-44981, CVE-2024-57841, CVE-2025-23137, CVE-2025-38469, CVE-2025-39939, CVE-2025-39964 (KEV), CVE-2025-40022, CVE-2025-40199, CVE-2025-40204, CVE-2025-68179, CVE-2025-68214, CVE-2025-71075, CVE-2025-71104, CVE-2026-23210, CVE-2026-23227, CVE-2026-23230, CVE-2026-23240, CVE-2026-23449, CVE-2026-23454, CVE-2026-31392, CVE-2026-31418, CVE-2026-31531, CVE-2026-31557, CVE-2026-31629, CVE-2026-31658, CVE-2026-31663, CVE-2026-31759, CVE-2026-43014, CVE-2026-43015, CVE-2026-43077, CVE-2026-43109, CVE-2026-43110, CVE-2026-43116, CVE-2026-43125, CVE-2026-43163, CVE-2026-43206, CVE-2026-43213, CVE-2026-43271, CVE-2026-43273, CVE-2026-43278

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1202

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/dfc041e1-2343-5637-95da-c2a5ab098e36/multiple-linux-kernel-vulnerabilities-in-suse-products.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup