Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -3 articles for you...
100
security advisorybuffer overflowSuSESUSE Linux Enterprise 12 SP5 Kernel Important Security Update 2026-2592-1
An update that solves four vulnerabilities can now be installed.. # Security update for the Linux Kernel (Live Patch 79 for SUSE Linux Enterprise 12 SP5) Announcement ID: SUSE-SU-2026:2592-1 Release Date: 2026-06-23T14:49:08Z Rating: important References: * bsc#1261640 * bsc#1263088 * bsc#1266229 * bsc#1268282 Cross-References: * CVE-2026-31402 * CVE-2026-31504 * CVE-2026-43503 * CVE-2026-46323 CVSS scores: * CVE-2026-31402 ( SUSE ): 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-31402 ( SUSE ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H * CVE-2026-31402 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31504 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-31504 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31504 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43503 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-43503 ( SUSE ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-43503 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-46323 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46323 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 4.12.14-122.299 fixes various security issues The following security issues were fixed: * CVE-2026-31402: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261640). * CVE-2026-31504: net: fix fanout UAF in packet_release() via NETDEV_UP race (bsc#1263088). *CVE-2026-43503: final dirty.frag related fixes (bsc#1266229). * CVE-2026-46323: net: gro: don't merge zcopy skbs (bsc#1268282). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-2592=1 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_299-default-5-2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-31402.html * https://www.suse.com/security/cve/CVE-2026-31504.html * https://www.suse.com/security/cve/CVE-2026-43503.html * https://www.suse.com/security/cve/CVE-2026-46323.html * https://bugzilla.suse.com/show_bug.cgi?id=1261640 * https://bugzilla.suse.com/show_bug.cgi?id=1263088 * https://bugzilla.suse.com/show_bug.cgi?id=1266229 * https://bugzilla.suse.com/show_bug.cgi?id=1268282 . A security update for SUSE Linux Enterprise kernel addresses four important vulnerabilities. Immediate installation recommended.. SUSE kernel update security issues important patches. . Severity: Important. LinuxSecurity.com Team
Jun 23, 2026
•Important
SuSE
100
security advisoryimportantsecurity patchSUSE Linux Micro 6.0 Kernel RT Important Security Fix 2026-21516-1
An update that solves two vulnerabilities can now be installed.. # Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:21516-1 Release Date: 2026-05-05T13:07:21Z Rating: important References: * bsc#1259126 * bsc#1263689 Cross-References: * CVE-2026-23204 * CVE-2026-31431 CVSS scores: * CVE-2026-23204 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-23204 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23204 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-23204 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-31431 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31431 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves two vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues The following security issues were fixed: * CVE-2026-23204: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1259126). * CVE-2026-31431: crypto: algif_aead - Revert to operating out-of-place (bsc#1263689). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-384=1 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_18-debugsource-3-1.1 * kernel-livepatch-6_4_0-40-rt-3-1.1 * kernel-livepatch-6_4_0-40-rt-debuginfo-3-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-23204.html * https://www.suse.com/security/cve/CVE-2026-31431.html * https://bugzilla.suse.com/show_bug.cgi?id=1259126 *https://bugzilla.suse.com/show_bug.cgi?id=1263689 . This update addresses two significant security issues in the SUSE Linux Enterprise Kernel, enhancing system security and stability.. SUSE Linux Micro update, Kernel security patch, CVE fixes. . Severity: Important. LinuxSecurity.com Team
May 07, 2026
•Important
SuSE
100
security advisoryimportantthreat fixSUSE: Kernel-Livepatch 2025:20839-1 CVE-2025-38477 Important Net Issue
* bsc#1247315 Cross-References: * CVE-2025-38477 . # Security update for kernel-livepatch-MICRO-6-0_Update_9 Announcement ID: SUSE-SU-2025:20839-1 Release Date: 2025-10-07T15:38:32Z Rating: important References: * bsc#1247315 Cross-References: * CVE-2025-38477 CVSS scores: * CVE-2025-38477 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-38477 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for kernel-livepatch-MICRO-6-0_Update_9 fixes the following issues: * CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-157=1 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-6_4_0-31-default-debuginfo-6-1.2 * kernel-livepatch-MICRO-6-0_Update_9-debugsource-6-1.2 * kernel-livepatch-6_4_0-31-default-6-1.2 ## References: * https://www.suse.com/security/cve/CVE-2025-38477.html * https://bugzilla.suse.com/show_bug.cgi?id=1247315 . Addressing a critical race condition in SUSE Linux Micro 6.0 for kernel-livepatch-MICRO, ensuring enhanced system stability.. Kernel Patch, SUSE Linux, Security Fix, Race Condition, Threat Management. . Severity: Important. LinuxSecurity.com Team
Oct 14, 2025
•Important
SuSE
100
security advisorySuSEimportantSUSE: Critical Kernel Race Condition Patch for CVE-2025-38477 Advisory
* bsc#1247315 Cross-References: * CVE-2025-38477 . # Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP7) Announcement ID: SUSE-SU-2025:03576-1 Release Date: 2025-10-12T15:33:31Z Rating: important References: * bsc#1247315 Cross-References: * CVE-2025-38477 CVSS scores: * CVE-2025-38477 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-38477 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for the Linux Kernel 6.4.0-150700_53_6 fixes one issue. The following security issue was fixed: * CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2025-3576=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150700_53_6-default-debuginfo-5-150700.2.1 * kernel-livepatch-6_4_0-150700_53_6-default-5-150700.2.1 * kernel-livepatch-SLE15-SP7_Update_2-debugsource-5-150700.2.1 ## References: * https://www.suse.com/security/cve/CVE-2025-38477.html * https://bugzilla.suse.com/show_bug.cgi?id=1247315 . A critical update for SUSE Linux Kernel addressing an important security issue with a risk level identified as important.. SUSE Linux Kernel, security advisory, race condition fix, important security update. . Severity: Important. LinuxSecurity.com Team
Oct 13, 2025
•Important
SuSE
100
security advisorymoderateSuSESUSE: kernel-livepatch-MICRO Moderate Update CVE-2025-21999 2025:20707-1
* bsc#1242579 * bsc#1244235 * bsc#1245505 * bsc#1245775 * bsc#1245791 . # Security update for kernel-livepatch-MICRO-6-0-RT_Update_7 Announcement ID: SUSE-SU-2025:20707-1 Release Date: 2025-09-11T15:44:56Z Rating: moderate References: * bsc#1242579 * bsc#1244235 * bsc#1245505 * bsc#1245775 * bsc#1245791 * bsc#1246030 * bsc#1248108 Cross-References: * CVE-2025-21999 * CVE-2025-37890 * CVE-2025-38000 * CVE-2025-38001 * CVE-2025-38087 * CVE-2025-38212 CVSS scores: * CVE-2025-21999 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-21999 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-21999 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-37890 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-38000 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-38000 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-38001 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-38001 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-38087 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-38087 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-38212 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-38212 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves six vulnerabilities and has one fix can now be installed. ## Description: This update for kernel-livepatch-MICRO-6-0-RT_Update_7 fixes the following issues: * CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245505) * CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579) * CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue addingclass to eltree twice (bsc#1244235) * CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1245775) * CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1245791) * CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-113=1 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-30-rt-5-1.3 * kernel-livepatch-6_4_0-30-rt-debuginfo-5-1.3 * kernel-livepatch-MICRO-6-0-RT_Update_7-debugsource-5-1.3 ## References: * https://www.suse.com/security/cve/CVE-2025-21999.html * https://www.suse.com/security/cve/CVE-2025-37890.html * https://www.suse.com/security/cve/CVE-2025-38000.html * https://www.suse.com/security/cve/CVE-2025-38001.html * https://www.suse.com/security/cve/CVE-2025-38087.html * https://www.suse.com/security/cve/CVE-2025-38212.html * https://bugzilla.suse.com/show_bug.cgi?id=1242579 * https://bugzilla.suse.com/show_bug.cgi?id=1244235 * https://bugzilla.suse.com/show_bug.cgi?id=1245505 * https://bugzilla.suse.com/show_bug.cgi?id=1245775 * https://bugzilla.suse.com/show_bug.cgi?id=1245791 * https://bugzilla.suse.com/show_bug.cgi?id=1246030 * https://bugzilla.suse.com/show_bug.cgi?id=1248108 . Kernel live patch MICRO-6-0-RT_Update_7 issued to resolve medium-level vulnerabilities and implement necessary enhancements.. SUSE Micro security kernel-livepatch updates net issues IPC fixes. . LinuxSecurity.com Team
Sep 17, 2025
SuSE
217
security advisoryimportantkernelOracle Linux 7 ELSA-2025-11358 Kernel Security Advisory for CVEs
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-11358 http://linux.oracle.com/errata/ELSA-2025-11358.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: x86_64: bpftool-3.10.0-1160.119.1.0.10.el7.x86_64.rpm kernel-3.10.0-1160.119.1.0.10.el7.x86_64.rpm kernel-abi-whitelists-3.10.0-1160.119.1.0.10.el7.noarch.rpm kernel-debug-3.10.0-1160.119.1.0.10.el7.x86_64.rpm kernel-debug-devel-3.10.0-1160.119.1.0.10.el7.x86_64.rpm kernel-devel-3.10.0-1160.119.1.0.10.el7.x86_64.rpm kernel-doc-3.10.0-1160.119.1.0.10.el7.noarch.rpm kernel-headers-3.10.0-1160.119.1.0.10.el7.x86_64.rpm kernel-tools-3.10.0-1160.119.1.0.10.el7.x86_64.rpm kernel-tools-libs-3.10.0-1160.119.1.0.10.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-1160.119.1.0.10.el7.x86_64.rpm perf-3.10.0-1160.119.1.0.10.el7.x86_64.rpm python-perf-3.10.0-1160.119.1.0.10.el7.x86_64.rpm SRPMS: http://oss.oracle.com/ol7/SRPMS-updates/kernel-3.10.0-1160.119.1.0.10.el7.src.rpm Related CVEs: CVE-2022-50066 CVE-2025-22004 Description of changes: [3.10.0-1160.119.1.0.10] - net: atlantic: fix aq_vec index out of range error (Chia-Lin Kao) {CVE-2022-50066} [Orabug: 38201271] - net: atm: fix use after free in lec_send() (Dan Carpenter) {CVE-2025-22004} [Orabug: 38201271] _______________________________________________ El-errata mailing list
Aug 05, 2025
•Important
Oracle
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!