Skip to content
OpenAdvisories

Source

SUSE / openSUSE Security Updates

Source: https://www.suse.com/support/update/

1,565 results · Clear filters · Feed

  • High max 7.8
    SUSE-SU-2026:0528-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP5)

    This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.97 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38111: net/mdiobus: Fix potential…

    first Feb 15, 2026
  • High max 7.8
    SUSE-SU-2026:0526-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP4)

    This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.147 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38111: net/mdiobus: Fix potentia…

    first Feb 14, 2026
  • High max 8.1
    SUSE-SU-2026:0521-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 69 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise kernel 4.12.14-122.261 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38352: posix-cpu-timers: fix race betw…

    first Feb 14, 2026
  • High max 8.1
    SUSE-SU-2026:0518-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 64 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise kernel 4.12.14-122.244 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38352: posix-cpu-timers: fix race betw…

    first Feb 14, 2026
  • High max 8.1
    SUSE-SU-2026:0515-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 65 for SUSE Linux Enterprise 12 SP5)

    This update for the SUSE Linux Enterprise kernel 4.12.14-122.247 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38352: posix-cpu-timers: fix race betw…

    first Feb 13, 2026
  • High max 8.1
    SUSE-SU-2026:0489-1 4 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.8 fixes various security issues The following security issues were fixed: - CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205). -…

    first Feb 13, 2026
  • High max 8.1
    SUSE-SU-2026:0487-1 5 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.3 fixes various security issues The following security issues were fixed: - CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1249455). - CVE-2025-38352: posix-cpu-t…

    first Feb 13, 2026
  • Critical max 9.8
    SUSE-SU-2026:0283-1 7 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.51 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-38476:…

    first Jan 23, 2026
  • Critical max 9.8
    SUSE-SU-2026:0274-1 7 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.47 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-384…

    first Jan 23, 2026
  • Critical max 9.8
    SUSE-SU-2026:0270-1 7 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.33 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-384…

    first Jan 23, 2026
  • Critical max 9.8
    SUSE-SU-2026:0269-1 8 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.30 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2024-578…

    first Jan 23, 2026
  • Critical max 9.8
    SUSE-SU-2026:0262-1 7 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.38 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-384…

    first Jan 22, 2026
  • Critical max 9.8
    SUSE-SU-2026:0203-1 3 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP6)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150600.23.70 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-396…

    first Jan 21, 2026
  • Critical max 9.8
    SUSE-SU-2026:0144-1 7 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.8 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-38476…

    first Jan 17, 2026
  • Critical max 9.8
    SUSE-SU-2026:0145-1 3 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.16 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-3968…

    first Jan 17, 2026
  • High max 8.8
    SUSE-SU-2026:0021-1 25 CVEs 3 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.50.4. Security issues fixed: - CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a UIProcess crash due to an out-of-bounds rea…

    first Jan 5, 2026
  • High max 8.1
    SUSE-SU-2026:0556-1 4 CVEs 1 exploited

    Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.53.6 fixes various security issues The following security issues were fixed: - CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205). …

    first Feb 16, 2026
  • Critical max 9.8
    SUSE-SU-2026:0148-1 7 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.5 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-38476: …

    first Jan 17, 2026
  • High max 8.8
    SUSE-SU-2025:4423-1 18 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.50.3. Security issues fixed: - CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a UIProcess crash due to an out-of-bounds rea…

    first Dec 17, 2025
  • Critical max 9.9
    SUSE-SU-2026:0037-1 76 CVEs 1 exploited

    Security update for govulncheck-vulndb

    This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20251230T014957 2025-12-30T01:49:57Z (jsc#PED-11136). Go CVE Numbering Authority IDs added or updated with aliases: * GO-2025-4249 CVE-2025-68120 CVE-2025-68120 * GO-2025-4…

    first Jan 6, 2026
  • High max 8.8
    SUSE-SU-2025:4416-1 18 CVEs 1 exploited

    Security update for webkit2gtk3

    This update for webkit2gtk3 fixes the following issues: Update to version 2.50.3. Security issues fixed: - CVE-2025-13502: processing of maliciously crafted payloads by the GLib remote inspector server may lead to a UIProcess crash due to an out-of-bounds rea…

    first Dec 16, 2025
  • Critical max 10.0
    SUSE-SU-2025:21179-1 573 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863). - CVE-2024-57891: sche…

    first Nov 25, 2025
  • Critical max 10.0
    SUSE-SU-2025:21139-1 573 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863). - CVE-2024-57891: sche…

    first Nov 25, 2025
  • Critical max 10.0
    SUSE-SU-2025:21074-1 573 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863). - CVE-2024-57891: sche…

    first Nov 25, 2025
  • High max 7.8
    SUSE-SU-2025:20866-1 1 CVE 1 exploited

    Security update for open-vm-tools

    This update for open-vm-tools fixes the following issues: Update to open-vm-tools 13.0.5 based on build 24915695. (bsc#1250692): Please refer to the Release Notes at: https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md. The granular cha…

    first Oct 17, 2025
  • Critical max 9.8
    SUSE-SU-2025:20851-1 346 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770). - CVE-2024-58090: sched/core: Prev…

    first Oct 15, 2025
  • High max 7.8
    SUSE-SU-2025:20853-1 1 CVE 1 exploited

    Security update for open-vm-tools

    This update for open-vm-tools fixes the following issues: Update to open-vm-tools 13.0.5 based on build 24915695. (bsc#1250692): Please refer to the Release Notes at https://github.com/vmware/open-vm-tools/blob/stable-13.0.5/ReleaseNotes.md. The granular chan…

    first Oct 17, 2025
  • Critical max 9.3
    SUSE-SU-2025:20478-1 2 CVEs 1 exploited

    Security update for sudo

    This update for sudo fixes the following issues: - CVE-2025-32462: Fix a possible local privilege escalation via the --host option (bsc#1245274) - CVE-2025-32463: Fix a possible local privilege Escalation via chroot option (bsc#1245275)

    first Jul 15, 2025
  • Critical max 9.8
    SUSE-SU-2025:20285-1 8 CVEs 2 exploited

    Security update for kernel-livepatch-MICRO-6-0_Update_2

    This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues: - CVE-2024-57882: Fixed mptcp: fix TCP options overflow. (bsc#1235916) - CVE-2024-46818: Fixed drm/amd/display: check gpio_id before used as array index (bsc#1231204) - CVE-2024-4…

    first Apr 17, 2025
  • Critical max 10.0
    SUSE-SU-2025:20165-1 357 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820). - CVE-2024-27397: ne…

    first Mar 27, 2025
  • Critical max 9.8
    SUSE-SU-2025:20163-1 507 CVEs 2 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948). - CVE-2023-52920: bpf: support non-r10 register sp…

    first Mar 27, 2025
  • Critical max 9.8
    SUSE-SU-2025:03634-1 445 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770). - CVE-2024-46733: btrfs: fix qgroup res…

    first Oct 17, 2025
  • High max 7.8
    SUSE-SU-2025:03435-1 1 CVE 1 exploited

    Security update for open-vm-tools

    This update for open-vm-tools fixes the following issues: - CVE-2025-41244: local privilege escalation via the Service Discovery Plugin (bsc#1250373).

    first Sep 30, 2025
  • High max 7.8
    SUSE-SU-2025:03434-1 1 CVE 1 exploited

    Security update for open-vm-tools

    This update for open-vm-tools fixes the following issues: - CVE-2025-41244: local privilege escalation via the Service Discovery Plugin (bsc#1250373).

    first Sep 30, 2025
  • High max 8.6
    SUSE-SU-2025:03384-1 23 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49492: nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags (bsc#1238954). - CVE-2022-50116: kernel: t…

    first Sep 26, 2025
  • Critical max 9.8
    SUSE-SU-2025:03204-1 60 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49967: bpf: Fix a data-race around bpf_jit_limit (bsc#1244964). - CVE-2022-49975: bpf: Don't redirect packets with inv…

    first Sep 12, 2025
  • Critical max 9.8
    SUSE-SU-2026:0146-1 4 CVEs 1 exploited

    Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 15 SP7)

    This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.13 fixes various security issues The following security issues were fixed: - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). - CVE-2025-3860…

    first Jan 17, 2026
  • Critical max 9.8
    SUSE-SU-2025:20861-1 346 CVEs 1 exploited

    Security update for the Linux Kernel

    The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770). - CVE-2024-58090: sched/core: Prev…

    first Oct 15, 2025
  • High max 8.6
    SUSE-SU-2025:20721-1 10 CVEs 1 exploited

    Security update for git

    This update for git fixes the following issues: - Update to 2.51.0 - UI, Workflows & Features - Userdiff patterns for the R language have been added. - Documentation for "git send-email" has been updated with a bit more credential helper and OAuth information…

    first Sep 22, 2025
  • Critical max 9.3
    SUSE-SU-2025:20489-1 2 CVEs 1 exploited

    Security update for sudo

    This update for sudo fixes the following issues: - CVE-2025-32462: Fix a possible local privilege escalation via the --host option (bsc#1245274) - CVE-2025-32463: Fix a possible local privilege Escalation via chroot option (bsc#1245275)

    first Jul 10, 2025