Changeflow GovPing Data Privacy & Cybersecurity SUSE Linux Kernel Multiple Vulnerabilities Advi...
Priority review Guidance Added Final

SUSE Linux Kernel Multiple Vulnerabilities Advisory

Favicon for www.cert.ssi.gouv.fr CERT-FR Security Advisories
Published
Detected
Email

Summary

CERT-FR published advisory CERTFR-2026-AVI-0422 disclosing multiple vulnerabilities in the SUSE Linux kernel affecting openSUSE Leap, SUSE Linux Enterprise Server, and related product lines across versions 12 SP5 through 15 SP7. The vulnerabilities, sourced from 13 SUSE security bulletins, could allow an attacker to cause unspecified security impacts. Affected parties are advised to apply patches referenced in the vendor security bulletins.

View original document View source feed page

What changed

CERT-FR issued a security advisory covering 13 separate SUSE Linux kernel security bulletins, disclosing multiple vulnerabilities across openSUSE Leap and SUSE Linux Enterprise product families including Server, High Performance Computing, Live Patching, Real Time, and SAP Applications variants from version 12 SP5 through 15 SP7. The specific nature of each vulnerability is not detailed in the advisory but stems from unpatched kernel defects.

Organizations running any affected SUSE products should prioritize immediate patch deployment by referencing the linked SUSE security bulletins. Given the kernel-level nature of these flaws, exploitation could result in privilege escalation, system compromise, or denial of service, making timely remediation critical for any environment running these distributions, particularly in government, enterprise, or critical infrastructure settings.

What to do next

  1. Identify all SUSE Linux installations in your environment matching affected products and versions
  2. Apply the relevant SUSE kernel security patches from bulletins SUSE-SU-2026:1180-1 through SUSE-SU-2026:1239-1
  3. Verify patch deployment and monitor for exploitation attempts

Archived snapshot

Apr 10, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 10 avril 2026 N° CERTFR-2026-AVI-0422 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Multiples vulnérabilités dans le noyau Linux de SUSE

Gestion du document

| Référence | CERTFR-2026-AVI-0422 |
| Titre | Multiples vulnérabilités dans le noyau Linux de SUSE |
| Date de la première version | 10 avril 2026 |
| Date de la dernière version | 10 avril 2026 |
| Source(s) | Bulletin de sécurité SUSE SUSE-SU-2026:1180-1 du 03 avril 2026
Bulletin de sécurité SUSE SUSE-SU-2026:1185-1 du 03 avril 2026
Bulletin de sécurité SUSE SUSE-SU-2026:1187-1 du 05 avril 2026
Bulletin de sécurité SUSE SUSE-SU-2026:1188-1 du 05 avril 2026
Bulletin de sécurité SUSE SUSE-SU-2026:1189-1 du 05 avril 2026
Bulletin de sécurité SUSE SUSE-SU-2026:1212-1 du 08 avril 2026
Bulletin de sécurité SUSE SUSE-SU-2026:1221-1 du 08 avril 2026
Bulletin de sécurité SUSE SUSE-SU-2026:1222-1 du 09 avril 2026
Bulletin de sécurité SUSE SUSE-SU-2026:1225-1 du 09 avril 2026
Bulletin de sécurité SUSE SUSE-SU-2026:1231-1 du 09 avril 2026
Bulletin de sécurité SUSE SUSE-SU-2026:1236-1 du 09 avril 2026
Bulletin de sécurité SUSE SUSE-SU-2026:1237-1 du 09 avril 2026
Bulletin de sécurité SUSE SUSE-SU-2026:1239-1 du 09 avril 2026 |
Une gestion de version détaillée se trouve à la fin de ce document.

Risque

  • Non spécifié par l'éditeur

Systèmes affectés

  • openSUSE Leap 15.4
  • openSUSE Leap 15.5
  • openSUSE Leap 15.6
  • SUSE Linux Enterprise High Performance Computing 12 SP5
  • SUSE Linux Enterprise High Performance Computing 15 SP4
  • SUSE Linux Enterprise High Performance Computing 15 SP5
  • SUSE Linux Enterprise Live Patching 12-SP5
  • SUSE Linux Enterprise Live Patching 15-SP4
  • SUSE Linux Enterprise Live Patching 15-SP5
  • SUSE Linux Enterprise Live Patching 15-SP6
  • SUSE Linux Enterprise Live Patching 15-SP7
  • SUSE Linux Enterprise Micro 5.3
  • SUSE Linux Enterprise Micro 5.4
  • SUSE Linux Enterprise Micro 5.5
  • SUSE Linux Enterprise Real Time 15 SP4
  • SUSE Linux Enterprise Real Time 15 SP5
  • SUSE Linux Enterprise Real Time 15 SP6
  • SUSE Linux Enterprise Real Time 15 SP7
  • SUSE Linux Enterprise Server 12 SP5
  • SUSE Linux Enterprise Server 15 SP4
  • SUSE Linux Enterprise Server 15 SP5
  • SUSE Linux Enterprise Server 15 SP6
  • SUSE Linux Enterprise Server 15 SP7
  • SUSE Linux Enterprise Server for SAP Applications 12 SP5
  • SUSE Linux Enterprise Server for SAP Applications 15 SP4
  • SUSE Linux Enterprise Server for SAP Applications 15 SP5
  • SUSE Linux Enterprise Server for SAP Applications 15 SP6
  • SUSE Linux Enterprise Server for SAP Applications 15 SP7

Résumé

De multiples vulnérabilités ont été découvertes dans le noyau Linux de SUSE. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Documentation

Gestion détaillée du document

  1. le 10 avril 2026 Version initiale

Related changes

Favicon for www.cert.ssi.gouv.fr Red Hat Linux Kernel Multiple Vulnerabilities Alert
Urgent Apr 10, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Multiple Ubuntu Linux Kernel Vulnerabilities Allow Privilege Escalation
Priority review Apr 10, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr SUSE Linux Kernel Multiple Vulnerabilities Advisory
Priority review Apr 03, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity

Get daily alerts for CERT-FR Security Advisories

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

Source

Favicon for www.cert.ssi.gouv.fr
CERT-FR Security Advisories cert.ssi.gouv.fr/avis
Data Privacy & Cybersecurity

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from CERT-FR.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Press inquiries →

Classification

Agency
CERT-FR
Published
April 10th, 2026
Instrument
Guidance
Legal weight
Non-binding
Stage
Final
Change scope
Substantive
Document ID
CERTFR-2026-AVI-0422

Who this affects

Applies to
Technology companies Government agencies
Industry sector
5112 Software & Technology
Activity scope
Vulnerability disclosure Security patching
Geographic scope
France FR

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Compliance frameworks
NIST CSF
Topics
Software & Technology Defense & National Security

Browse Categories

Agriculture & Food Safety 65 AI Regulation 3 Banking & Finance 314 Consumer Protection 46 Courts & Legal 361 Data Privacy & Cybersecurity 76 Defense & National Security 51 Education 22 Energy 100 Environment 86 Environmental & Energy 11 Environmental Regulation 7 Financial Regulation 2 Government & Legislation 279 Government Operations 5 Healthcare 136 Healthcare & Life Sciences 5 Housing 16 Immigration 8 Immigration & Border Control 1 Insurance 58 Labor & Employment 114 Legal & Judicial 9 Pharma & Drug Safety 104 Public Health 2 Real Estate & Housing 3 Sanctions & Export Controls 1 Securities & Investments 8 Securities & Markets 103 Securities Regulation 6 Tax 65 Tax & Revenue 1 Telecom & Technology 47 Trade & Commerce 2 Trade & Sanctions 135 Transportation 60

Get alerts for this source

We'll email you when CERT-FR Security Advisories publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!