Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 3 articles for you...
100

SUSE Linux Enterprise 16 Kernel Important nfsd Refcount Leak 2026-20148-1

An update that solves one vulnerability can now be installed.. # Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:20148-1 Release Date: 2026-01-23T16:43:12Z Rating: important References: * bsc#1254196 Cross-References: * CVE-2025-40212 CVSS scores: * CVE-2025-40212 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-40212 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP Applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for the SUSE Linux Enterprise kernel 6.12.0-160000.7.1 fixes one security issue The following security issue was fixed: * CVE-2025-40212: nfsd: fix refcount leak in nfsd_set_fh_dentry() (bsc#1254196). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-187=1 * SUSE Linux Enterprise Server for SAP Applications 16.0 zypper in -t patch SUSE-SLES-16.0-187=1 ## Package List: * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_7-default-debuginfo-2-160000.1.1 * kernel-livepatch-SLE16_Update_2-debugsource-2-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-2-160000.1.1 * SUSE Linux Enterprise Server for SAP Applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_7-default-debuginfo-2-160000.1.1 * kernel-livepatch-SLE16_Update_2-debugsource-2-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-2-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2025-40212.html * https://bugzilla.suse.com/show_bug.cgi?id=1254196 . Critical update for SUSELinux Enterprise kernel addresses important nfsd security concern. Install promptly to protect systems.. SUSE Linux, security patch, nfsd issue, kernel update, refcount leak. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jan 28, 2026 Important SuSE
100

SUSE Linux Micro 6.2 Important Kernel Patch CVE-2025-40212

An update that solves one vulnerability can now be installed.. # Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:20163-1 Release Date: 2026-01-23T16:43:12Z Rating: important References: * bsc#1254196 Cross-References: * CVE-2025-40212 CVSS scores: * CVE-2025-40212 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-40212 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for the SUSE Linux Enterprise kernel 6.12.0-160000.7.1 fixes one security issue The following security issue was fixed: * CVE-2025-40212: nfsd: fix refcount leak in nfsd_set_fh_dentry() (bsc#1254196). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-187=1 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_7-default-debuginfo-2-160000.1.1 * kernel-livepatch-SLE16_Update_2-debugsource-2-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-2-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2025-40212.html * https://bugzilla.suse.com/show_bug.cgi?id=1254196 . An important security update for SUSE Linux Enterprise kernel addresses CVE-2025-40212, fixing a critical issue.. SUSE Kernel Update, Security Patch, Linux Enterprise, CVE Fix, NFS Security. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jan 28, 2026 Important SuSE
100

SUSE Linux Enterprise 16 Kernel RT Important Refcount Leak CVE-2025-40212

An update that solves one vulnerability can now be installed.. # Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:20165-1 Release Date: 2026-01-26T09:12:02Z Rating: important References: * bsc#1254196 Cross-References: * CVE-2025-40212 CVSS scores: * CVE-2025-40212 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-40212 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for the SUSE Linux Enterprise kernel 6.12.0-160000.7.1 fixes one security issue The following security issue was fixed: * CVE-2025-40212: nfsd: fix refcount leak in nfsd_set_fh_dentry() (bsc#1254196). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-191=1 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_7-rt-debuginfo-2-160000.1.1 * kernel-livepatch-SLE16-RT_Update_2-debugsource-2-160000.1.1 * kernel-livepatch-6_12_0-160000_7-rt-2-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2025-40212.html * https://bugzilla.suse.com/show_bug.cgi?id=1254196 . Secure your SUSE Linux Kernel RT with this important patch to fix a significant refcount leak vulnerability.. SUSE Kernel Patch RT, nfsd Security Fix, refcount leak issue. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jan 28, 2026 Important SuSE
202

openSUSE 2026 Kernel RT Important nfsd Refcount Leak Fix CVE-2025-40212

An update that solves one vulnerability and has one bug fix can now be installed.. openSUSE security update: security update for the linux kernel rt (live patch 2 for suse linux enterprise 16) ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20108-1 Rating: important References: * bsc#1254196 Cross-References: * CVE-2025-40212 CVSS scores: * CVE-2025-40212 ( SUSE ): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-40212 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves one vulnerability and has one bug fix can now be installed. Description: This update for the SUSE Linux Enterprise kernel 6.12.0-160000.7.1 fixes one security issue The following security issue was fixed: - CVE-2025-40212: nfsd: fix refcount leak in nfsd_set_fh_dentry() (bsc#1254196). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-191=1 Package List: - openSUSE Leap 16.0: kernel-livepatch-6_12_0-160000_7-rt-2-160000.1.1 References: * https://www.suse.com/security/cve/CVE-2025-40212.html . An important security update for openSUSE addresses a kernel issue and includes a bug fix for CVE-2025-40212.. openSUSE updates,kernel security,security fixes. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jan 27, 2026 Important OpenSUSE
217

Oracle Linux 7 ELSA-2025-20650 Kernel Important NFS Client Fix

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-20650 http://linux.oracle.com/errata/ELSA-2025-20650.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: x86_64: kernel-uek-5.4.17-2136.347.6.4.el7uek.x86_64.rpm kernel-uek-container-5.4.17-2136.347.6.4.el7uek.x86_64.rpm kernel-uek-container-debug-5.4.17-2136.347.6.4.el7uek.x86_64.rpm kernel-uek-debug-5.4.17-2136.347.6.4.el7uek.x86_64.rpm kernel-uek-debug-devel-5.4.17-2136.347.6.4.el7uek.x86_64.rpm kernel-uek-devel-5.4.17-2136.347.6.4.el7uek.x86_64.rpm kernel-uek-doc-5.4.17-2136.347.6.4.el7uek.noarch.rpm kernel-uek-tools-5.4.17-2136.347.6.4.el7uek.x86_64.rpm SRPMS: http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-5.4.17-2136.347.6.4.el7uek.src.rpm Related CVEs: CVE-2025-38724 Description of changes: [5.4.17-2136.347.6.4.el7uek] - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton) [Orabug: 38501612] {CVE-2025-38724} _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Oracle Linux 7 rpm updates include critical kernel fixes addressing important vulnerabilities.. Oracle Linux Kernel Patch Important Update Security. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Oct 08, 2025 Important Oracle
202

openSUSE: Key Linux Kernel Update CVE-2024-56558 Advisory SUSE-2025:02470-1

An update that solves one vulnerability can now be installed.. # Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP4) Announcement ID: SUSE-SU-2025:02470-1 Release Date: 2025-07-22T20:04:04Z Rating: important References: * bsc#1243648 Cross-References: * CVE-2024-56558 CVSS scores: * CVE-2024-56558 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-56558 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-56558 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves one vulnerability can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_164 fixes one issue. The following security issue was fixed: * CVE-2024-56558: nfsd: make sure exp active before svc_export_show (bsc#1243648). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-2470=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2025-2470=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_164-default-2-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_40-debugsource-2-150400.2.1 * kernel-livepatch-5_14_21-150400_24_164-default-debuginfo-2-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) *kernel-livepatch-5_14_21-150400_24_164-default-2-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_40-debugsource-2-150400.2.1 * kernel-livepatch-5_14_21-150400_24_164-default-debuginfo-2-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-56558.html * https://bugzilla.suse.com/show_bug.cgi?id=1243648 . SUSE enhances the Linux Kernel addressing CVE-2024-56558, deemed significant due to its capability to cause service interruptions.. Linux Kernel, SUSE, security updates, nfsd issue, openSUSE. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jul 23, 2025 Important OpenSUSE
100

SUSE: Linux Kernel Important nfsd Fix 2025:02470-1 CVE-2024-56558

* bsc#1243648 Cross-References: * CVE-2024-56558 . # Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP4) Announcement ID: SUSE-SU-2025:02470-1 Release Date: 2025-07-22T20:04:04Z Rating: important References: * bsc#1243648 Cross-References: * CVE-2024-56558 CVSS scores: * CVE-2024-56558 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-56558 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-56558 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves one vulnerability can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_164 fixes one issue. The following security issue was fixed: * CVE-2024-56558: nfsd: make sure exp active before svc_export_show (bsc#1243648). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-2470=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2025-2470=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_164-default-2-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_40-debugsource-2-150400.2.1 * kernel-livepatch-5_14_21-150400_24_164-default-debuginfo-2-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_164-default-2-150400.2.1 *kernel-livepatch-SLE15-SP4_Update_40-debugsource-2-150400.2.1 * kernel-livepatch-5_14_21-150400_24_164-default-debuginfo-2-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-56558.html * https://bugzilla.suse.com/show_bug.cgi?id=1243648 . SUSE has tackled a significant security vulnerability within the Linux Kernel, which posed potential risks for system exploitation. Discover how to apply the necessary patches.. Linux Kernel, SUSE Updates, Security Patch, nfsd Exploit, Important Advisory. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jul 23, 2025 Important SuSE
100

SUSE: Linux Kernel Important NFS Exploit Fix CVE-2024-56558 2025:02469-1

* bsc#1243648 Cross-References: * CVE-2024-56558 . # Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP4) Announcement ID: SUSE-SU-2025:02469-1 Release Date: 2025-07-22T19:03:55Z Rating: important References: * bsc#1243648 Cross-References: * CVE-2024-56558 CVSS scores: * CVE-2024-56558 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-56558 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-56558 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves one vulnerability can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_161 fixes one issue. The following security issue was fixed: * CVE-2024-56558: nfsd: make sure exp active before svc_export_show (bsc#1243648). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-2469=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2025-2469=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_161-default-2-150400.2.1 * kernel-livepatch-5_14_21-150400_24_161-default-debuginfo-2-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_39-debugsource-2-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_161-default-2-150400.2.1 *kernel-livepatch-5_14_21-150400_24_161-default-debuginfo-2-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_39-debugsource-2-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-56558.html * https://bugzilla.suse.com/show_bug.cgi?id=1243648 . SUSE releases critical security patch for Linux Kernel targeting CVE-2024-56558. Detailed update guidelines provided.. Linux Kernel Security,SUSE Patch Update,Kernel Exploit Fix,suse-linux-security. . Severity: Important. LinuxSecurity.com Team

Calendar%202 Jul 22, 2025 Important SuSE
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200