Alerts This Week
Warning Icon 1 1,154
Alerts This Week
Warning Icon 1 1,154

SUSE 2026 Util-linux Moderate Access Control Bypass 2026-1406-1

suse
Calendar Grey April 16, 2026
Dist Suse Esm H88
Update for util-linux addresses access control bypass and offers fixes in SUSE systems, ensuring better security.
An update that solves one vulnerability and has two security fixes can now be installed.

Summary

## This update for util-linux fixes the following issues: Security issue: * CVE-2026-3184: access control bypass due to improper hostname canonicalization in `login` (bsc#1258859). Non security issues: * recognize fuse "portal" as a virtual file system (bsc#1234736). * fdisk: fix possible partition overlay and data corruption if EBR gap is missing (bsc#1222465). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-1406=1 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-1406=1 ## Package List:

Topics%20covered

Topics Covered

security advisory moderate security issue SuSE access control util-linux

References

* bsc#1222465

* bsc#1234736

* bsc#1258859

Cross-

* CVE-2026-3184

CVSS scores:

* CVE-2026-3184 ( SUSE ): 6.3

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

* CVE-2026-3184 ( SUSE ): 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

* CVE-2026-3184 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected Products:

* Basesystem Module 15-SP7

* Server Applications Module 15-SP7

* SUSE Linux Enterprise Desktop 15 SP7

* SUSE Linux Enterprise Real Time 15 SP7

* SUSE Linux Enterprise Server 15 SP7

* SUSE Linux Enterprise Server for SAP Applications 15 SP7

An update that solves one vulnerability and has two security fixes can now be

installed.

##

* https://www.suse.com/security/cve/CVE-2026-3184.html

* https://bugzilla.suse.com/show_bug.cgi?id=1222465

Announcement ID: SUSE-SU-2026:1406-1
Release Date: 2026-04-16T12:35:30Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate security issue SuSE access control util-linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here