Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
An update that solves one vulnerability can now be installed.. # Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:20148-1 Release Date: 2026-01-23T16:43:12Z Rating: important References: * bsc#1254196 Cross-References: * CVE-2025-40212 CVSS scores: * CVE-2025-40212 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-40212 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP Applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for the SUSE Linux Enterprise kernel 6.12.0-160000.7.1 fixes one security issue The following security issue was fixed: * CVE-2025-40212: nfsd: fix refcount leak in nfsd_set_fh_dentry() (bsc#1254196). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-187=1 * SUSE Linux Enterprise Server for SAP Applications 16.0 zypper in -t patch SUSE-SLES-16.0-187=1 ## Package List: * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_7-default-debuginfo-2-160000.1.1 * kernel-livepatch-SLE16_Update_2-debugsource-2-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-2-160000.1.1 * SUSE Linux Enterprise Server for SAP Applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_7-default-debuginfo-2-160000.1.1 * kernel-livepatch-SLE16_Update_2-debugsource-2-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-2-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2025-40212.html * https://bugzilla.suse.com/show_bug.cgi?id=1254196 . Critical update for SUSELinux Enterprise kernel addresses important nfsd security concern. Install promptly to protect systems.. SUSE Linux, security patch, nfsd issue, kernel update, refcount leak. . Severity: Important. LinuxSecurity.com Team
An update that solves one vulnerability can now be installed.. # Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:20163-1 Release Date: 2026-01-23T16:43:12Z Rating: important References: * bsc#1254196 Cross-References: * CVE-2025-40212 CVSS scores: * CVE-2025-40212 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-40212 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for the SUSE Linux Enterprise kernel 6.12.0-160000.7.1 fixes one security issue The following security issue was fixed: * CVE-2025-40212: nfsd: fix refcount leak in nfsd_set_fh_dentry() (bsc#1254196). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-187=1 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_7-default-debuginfo-2-160000.1.1 * kernel-livepatch-SLE16_Update_2-debugsource-2-160000.1.1 * kernel-livepatch-6_12_0-160000_7-default-2-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2025-40212.html * https://bugzilla.suse.com/show_bug.cgi?id=1254196 . An important security update for SUSE Linux Enterprise kernel addresses CVE-2025-40212, fixing a critical issue.. SUSE Kernel Update, Security Patch, Linux Enterprise, CVE Fix, NFS Security. . Severity: Important. LinuxSecurity.com Team
An update that solves one vulnerability can now be installed.. # Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:20165-1 Release Date: 2026-01-26T09:12:02Z Rating: important References: * bsc#1254196 Cross-References: * CVE-2025-40212 CVSS scores: * CVE-2025-40212 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-40212 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for the SUSE Linux Enterprise kernel 6.12.0-160000.7.1 fixes one security issue The following security issue was fixed: * CVE-2025-40212: nfsd: fix refcount leak in nfsd_set_fh_dentry() (bsc#1254196). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-191=1 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * kernel-livepatch-6_12_0-160000_7-rt-debuginfo-2-160000.1.1 * kernel-livepatch-SLE16-RT_Update_2-debugsource-2-160000.1.1 * kernel-livepatch-6_12_0-160000_7-rt-2-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2025-40212.html * https://bugzilla.suse.com/show_bug.cgi?id=1254196 . Secure your SUSE Linux Kernel RT with this important patch to fix a significant refcount leak vulnerability.. SUSE Kernel Patch RT, nfsd Security Fix, refcount leak issue. . Severity: Important. LinuxSecurity.com Team
An update that solves one vulnerability and has one bug fix can now be installed.. openSUSE security update: security update for the linux kernel rt (live patch 2 for suse linux enterprise 16) ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20108-1 Rating: important References: * bsc#1254196 Cross-References: * CVE-2025-40212 CVSS scores: * CVE-2025-40212 ( SUSE ): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-40212 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Affected Products: openSUSE Leap 16.0 ------------------------------------------------------------- An update that solves one vulnerability and has one bug fix can now be installed. Description: This update for the SUSE Linux Enterprise kernel 6.12.0-160000.7.1 fixes one security issue The following security issue was fixed: - CVE-2025-40212: nfsd: fix refcount leak in nfsd_set_fh_dentry() (bsc#1254196). Patch instructions: To install this openSUSE security update use the suse recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 16.0 zypper in -t patch openSUSE-Leap-16.0-191=1 Package List: - openSUSE Leap 16.0: kernel-livepatch-6_12_0-160000_7-rt-2-160000.1.1 References: * https://www.suse.com/security/cve/CVE-2025-40212.html . An important security update for openSUSE addresses a kernel issue and includes a bug fix for CVE-2025-40212.. openSUSE updates,kernel security,security fixes. . Severity: Important. LinuxSecurity.com Team
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-20650 http://linux.oracle.com/errata/ELSA-2025-20650.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: x86_64: kernel-uek-5.4.17-2136.347.6.4.el7uek.x86_64.rpm kernel-uek-container-5.4.17-2136.347.6.4.el7uek.x86_64.rpm kernel-uek-container-debug-5.4.17-2136.347.6.4.el7uek.x86_64.rpm kernel-uek-debug-5.4.17-2136.347.6.4.el7uek.x86_64.rpm kernel-uek-debug-devel-5.4.17-2136.347.6.4.el7uek.x86_64.rpm kernel-uek-devel-5.4.17-2136.347.6.4.el7uek.x86_64.rpm kernel-uek-doc-5.4.17-2136.347.6.4.el7uek.noarch.rpm kernel-uek-tools-5.4.17-2136.347.6.4.el7uek.x86_64.rpm SRPMS: http://oss.oracle.com/ol7/SRPMS-updates/kernel-uek-5.4.17-2136.347.6.4.el7uek.src.rpm Related CVEs: CVE-2025-38724 Description of changes: [5.4.17-2136.347.6.4.el7uek] - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton) [Orabug: 38501612] {CVE-2025-38724} _______________________________________________ El-errata mailing list
An update that solves one vulnerability can now be installed.. # Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP4) Announcement ID: SUSE-SU-2025:02470-1 Release Date: 2025-07-22T20:04:04Z Rating: important References: * bsc#1243648 Cross-References: * CVE-2024-56558 CVSS scores: * CVE-2024-56558 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-56558 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-56558 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves one vulnerability can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_164 fixes one issue. The following security issue was fixed: * CVE-2024-56558: nfsd: make sure exp active before svc_export_show (bsc#1243648). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-2470=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2025-2470=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_164-default-2-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_40-debugsource-2-150400.2.1 * kernel-livepatch-5_14_21-150400_24_164-default-debuginfo-2-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) *kernel-livepatch-5_14_21-150400_24_164-default-2-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_40-debugsource-2-150400.2.1 * kernel-livepatch-5_14_21-150400_24_164-default-debuginfo-2-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-56558.html * https://bugzilla.suse.com/show_bug.cgi?id=1243648 . SUSE enhances the Linux Kernel addressing CVE-2024-56558, deemed significant due to its capability to cause service interruptions.. Linux Kernel, SUSE, security updates, nfsd issue, openSUSE. . Severity: Important. LinuxSecurity.com Team
* bsc#1243648 Cross-References: * CVE-2024-56558 . # Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP4) Announcement ID: SUSE-SU-2025:02470-1 Release Date: 2025-07-22T20:04:04Z Rating: important References: * bsc#1243648 Cross-References: * CVE-2024-56558 CVSS scores: * CVE-2024-56558 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-56558 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-56558 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves one vulnerability can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_164 fixes one issue. The following security issue was fixed: * CVE-2024-56558: nfsd: make sure exp active before svc_export_show (bsc#1243648). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-2470=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2025-2470=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_164-default-2-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_40-debugsource-2-150400.2.1 * kernel-livepatch-5_14_21-150400_24_164-default-debuginfo-2-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_164-default-2-150400.2.1 *kernel-livepatch-SLE15-SP4_Update_40-debugsource-2-150400.2.1 * kernel-livepatch-5_14_21-150400_24_164-default-debuginfo-2-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-56558.html * https://bugzilla.suse.com/show_bug.cgi?id=1243648 . SUSE has tackled a significant security vulnerability within the Linux Kernel, which posed potential risks for system exploitation. Discover how to apply the necessary patches.. Linux Kernel, SUSE Updates, Security Patch, nfsd Exploit, Important Advisory. . Severity: Important. LinuxSecurity.com Team
* bsc#1243648 Cross-References: * CVE-2024-56558 . # Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP4) Announcement ID: SUSE-SU-2025:02469-1 Release Date: 2025-07-22T19:03:55Z Rating: important References: * bsc#1243648 Cross-References: * CVE-2024-56558 CVSS scores: * CVE-2024-56558 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-56558 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-56558 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves one vulnerability can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150400_24_161 fixes one issue. The following security issue was fixed: * CVE-2024-56558: nfsd: make sure exp active before svc_export_show (bsc#1243648). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-2469=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2025-2469=1 ## Package List: * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_161-default-2-150400.2.1 * kernel-livepatch-5_14_21-150400_24_161-default-debuginfo-2-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_39-debugsource-2-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_161-default-2-150400.2.1 *kernel-livepatch-5_14_21-150400_24_161-default-debuginfo-2-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_39-debugsource-2-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2024-56558.html * https://bugzilla.suse.com/show_bug.cgi?id=1243648 . SUSE releases critical security patch for Linux Kernel targeting CVE-2024-56558. Detailed update guidelines provided.. Linux Kernel Security,SUSE Patch Update,Kernel Exploit Fix,suse-linux-security. . Severity: Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.