# CERT-FR Warns of SUSE Linux Kernel Flaws

Published: 2026-11-13 · Severity: routine
Canonical: https://vorant.io/reports/f8676e01-9c39-5c33-81a5-0062749e2eae/cert-fr-warns-of-suse-linux-kernel-flaws
Vorant's rating weighs the evidence in the report: confirmed exploitation, victims claimed, CVSS and EPSS, and how many sources agree. It rates the report, not your assets.

> CERT-FR advisory details hundreds of Linux kernel vulnerabilities affecting multiple SUSE products; patches available via SUSE security bulletins.

Source: cert.cyber.gouv.fr — https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1535

## What to check

- Applies to: The 40 CVEs named below. Whether you run an affected version is not assessed: check the versions the source lists.
- Exploitation: No exploitation in the wild and no public exploit is recorded for the CVEs named.

CERT-FR has published an advisory consolidating a very large number of vulnerabilities discovered in the Linux kernel as shipped by SUSE, affecting SUSE Linux Enterprise Server 12 SP5 and 16.0, SUSE Linux Enterprise High Performance Computing, SUSE Linux Enterprise Live Patching, SUSE Linux Enterprise Server for SAP Applications, SUSE Linux Enterprise Server for NVIDIA, SUSE Linux Enterprise Server High Availability Extension, and SUSE Linux Micro 6.0/6.2. The advisory aggregates dozens of SUSE security update bulletins (SUSE-SU-2026 series) issued between early and mid November 2026, and references several hundred individual CVEs affecting the kernel.

The potential impacts described by CERT-FR include loss of data confidentiality and integrity, security policy bypass, and denial of service; the advisory does not specify a particular exploited-in-the-wild scenario for the bulk of these CVEs. Given the sheer scale of the CVE list (several hundred entries) this is a routine, large-scope kernel update bulletin typical of a major distribution's periodic security rollup rather than a single notable flaw.

Defenders running affected SUSE products should apply the vendor-supplied kernel updates referenced in the corresponding SUSE-SU bulletins as soon as feasible, prioritizing systems exposed to untrusted input or multi-tenant workloads where privilege escalation or DoS via kernel bugs would be most impactful. No specific exploitation activity, proof-of-concept code, or threat actor involvement is noted in the CERT-FR summary; this is a patch-management advisory requiring systematic update of SUSE kernel packages across the listed product lines.

## Mentioned in this report

- Vulnerabilities: CVE-2024-49974, CVE-2024-50241, CVE-2024-53073, CVE-2025-38117, CVE-2025-38237, CVE-2025-38576, CVE-2025-38632, CVE-2025-38688, CVE-2025-39729, CVE-2025-39936, CVE-2025-40100, CVE-2025-68219, CVE-2025-68741, CVE-2025-68745, CVE-2025-71073, CVE-2025-71128, CVE-2025-71232, CVE-2025-71235, CVE-2026-100071, CVE-2026-100077, CVE-2026-100078, CVE-2026-100079, CVE-2026-23059, CVE-2026-23112, CVE-2026-31708, CVE-2026-31709, CVE-2026-43172, CVE-2026-43178, CVE-2026-43294, CVE-2026-43315, CVE-2026-43350, CVE-2026-45944, CVE-2026-46070, CVE-2026-46091, CVE-2026-46135, CVE-2026-46139, CVE-2026-46155, CVE-2026-46195, CVE-2026-46228, CVE-2026-52989

Source reporting: https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1535

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/f8676e01-9c39-5c33-81a5-0062749e2eae/cert-fr-warns-of-suse-linux-kernel-flaws.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup