CERT-FR Warns of SUSE Linux Kernel Flaws
CERT-FR advisory details hundreds of Linux kernel vulnerabilities affecting multiple SUSE products; patches available via SUSE security bulletins.
Sourcecert.cyber.gouv.fr — open the original
What to check
- Applies to
- The 40 CVEs named below. Whether you run an affected version is not assessed: check the versions the source lists.
- Exploitation
- No exploitation in the wild and no public exploit is recorded for the CVEs named.
CERT-FR has published an advisory consolidating a very large number of vulnerabilities discovered in the Linux kernel as shipped by SUSE, affecting SUSE Linux Enterprise Server 12 SP5 and 16.0, SUSE Linux Enterprise High Performance Computing, SUSE Linux Enterprise Live Patching, SUSE Linux Enterprise Server for SAP Applications, SUSE Linux Enterprise Server for NVIDIA, SUSE Linux Enterprise Server High Availability Extension, and SUSE Linux Micro 6.0/6.2. The advisory aggregates dozens of SUSE security update bulletins (SUSE-SU-2026 series) issued between early and mid November 2026, and references several hundred individual CVEs affecting the kernel.
The potential impacts described by CERT-FR include loss of data confidentiality and integrity, security policy bypass, and denial of service; the advisory does not specify a particular exploited-in-the-wild scenario for the bulk of these CVEs. Given the sheer scale of the CVE list (several hundred entries) this is a routine, large-scope kernel update bulletin typical of a major distribution's periodic security rollup rather than a single notable flaw.
Defenders running affected SUSE products should apply the vendor-supplied kernel updates referenced in the corresponding SUSE-SU bulletins as soon as feasible, prioritizing systems exposed to untrusted input or multi-tenant workloads where privilege escalation or DoS via kernel bugs would be most impactful. No specific exploitation activity, proof-of-concept code, or threat actor involvement is noted in the CERT-FR summary; this is a patch-management advisory requiring systematic update of SUSE kernel packages across the listed product lines.
Mentioned in this report
Source reporting: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1535
Free public brief. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them, no card.
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out.
It sits in a corpus of 16,572 reports from 147 sources, 724 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them, not the rest of the week's. Nothing is charged unless you subscribe.
Create a free account What it costs