Stay Vigilant with Timely Linux Security Advisories

Refine advisories

X Clear Filters

Critical (1)

Important (11)

Mageia (2560)

buffer overflow (11049)

critical (19125)

libevent (9)

remote access (1960)

security advisory (113236)

RPC response (1)

clickjacking (48)

transmission (26)

OpenSUSE (4230)

Fedora (1)

OpenSUSE (2)

Slackware (1)

SuSE (8)

Published Date Range

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Advisory Watch

Linux Security Week

Community Poll

More Polls

Should Linux servers automatically install security updates?

Message!

Yes — critical security patches should install automatically.
No — every update should be tested before deployment.
Only critical vulnerabilities should auto-install.
I patch when Reddit starts panicking.

No answer selected. Please try again.

Please select either existing option or enter your own, however not both.

Please select minimum {0} answer(s).

Please select maximum {0} answer(s).

/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json

157

radio

Yes — critical security patches should install automatically. (0%)

0% votes

No — every update should be tested before deployment. (60%)

60% votes

Only critical vulnerabilities should auto-install. (0%)

0% votes

I patch when Reddit starts panicking. (40%)

40% votes

[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":3,"type":"x","order":2,"pct":60,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":2,"type":"x","order":4,"pct":40,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350

bottom 200

Ubuntu 26.04 LTS Samba Critical Update Denial of Service USN-8306-1

Ubuntu 24.04 LTS Linux Kernel Critical Security Issues Vuln 8373-1

Oracle Linux 9 Kernel Significant Security Update ELSA-2026-50293

Urgent Resolution for rxrpc Vulnerabilities in Slackware 15.0 Kernel

Explore Latest Linux Security advisories

We found 3 articles for you...

100

security advisorySuSEimportant

SUSE Linux Enterprise 16 Kernel Key Fix Strategy for CVE-2026-23268

An update that solves one vulnerability can now be installed.. # Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:21387-1 Release Date: 2026-04-23T08:20:31Z Rating: important References: * bsc#1259859 Cross-References: * CVE-2026-23268 CVSS scores: * CVE-2026-23268 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-23268 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23268 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves one vulnerability can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes one security issue The following security issue was fixed: * CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-633=1 * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-633=1 ## Package List: * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * kernel-livepatch-6_12_0-160000_8-default-5-160000.1.1 * kernel-livepatch-SLE16_Update_3-debugsource-5-160000.1.1 * kernel-livepatch-6_12_0-160000_8-default-debuginfo-5-160000.1.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_8-default-5-160000.1.1 * kernel-livepatch-SLE16_Update_3-debugsource-5-160000.1.1 * kernel-livepatch-6_12_0-160000_8-default-debuginfo-5-160000.1.1 ## References: *https://www.suse.com/security/cve/CVE-2026-23268.html * https://bugzilla.suse.com/show_bug.cgi?id=1259859 . SUSE Linux Enterprise 16 Kernel important update resolves a security issue with local user policy management flaws.. SUSE Linux Enterprise Security Kernel Update Local User Policy. . Severity: Important. LinuxSecurity.com Team

Apr 28, 2026 •Important SuSE

100

security advisoryimportantkernel

SUSE Linux Enterprise Live Patch 2026-1622-1 Important Kernel Security Fix

An update that solves two vulnerabilities can now be installed.. # Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP5) Announcement ID: SUSE-SU-2026:1622-1 Release Date: 2026-04-25T06:33:49Z Rating: important References: * bsc#1258396 * bsc#1259859 Cross-References: * CVE-2026-23191 * CVE-2026-23268 CVSS scores: * CVE-2026-23191 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23191 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-23191 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23191 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23268 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-23268 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23268 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves two vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.110 fixes various security issues The following security issues were fixed: * CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258396). * CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-1627=1 SUSE-2026-1628=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2026-1627=1 SUSE-SLE- Module-Live-Patching-15-SP5-2026-1628=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-1622=1 SUSE-2026-1623=1 SUSE-2026-1624=1 SUSE-2026-1625=1 SUSE-2026-1626=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-1622=1 SUSE-SLE- Module-Live-Patching-15-SP4-2026-1623=1 SUSE-SLE-Module-Live- Patching-15-SP4-2026-1624=1 SUSE-SLE-Module-Live-Patching-15-SP4-2026-1625=1 SUSE-SLE-Module-Live-Patching-15-SP4-2026-1626=1 ## Package List: * openSUSE Leap 15.5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_27-debugsource-16-150500.2.1 * kernel-livepatch-5_14_21-150500_55_100-default-17-150500.2.1 * kernel-livepatch-5_14_21-150500_55_110-default-16-150500.2.1 * kernel-livepatch-5_14_21-150500_55_100-default-debuginfo-17-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_25-debugsource-17-150500.2.1 * kernel-livepatch-5_14_21-150500_55_110-default-debuginfo-16-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP5_Update_27-debugsource-16-150500.2.1 * kernel-livepatch-5_14_21-150500_55_100-default-17-150500.2.1 * kernel-livepatch-5_14_21-150500_55_110-default-16-150500.2.1 * kernel-livepatch-5_14_21-150500_55_100-default-debuginfo-17-150500.2.1 * kernel-livepatch-SLE15-SP5_Update_25-debugsource-17-150500.2.1 * kernel-livepatch-5_14_21-150500_55_110-default-debuginfo-16-150500.2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) *kernel-livepatch-SLE15-SP4_Update_41-debugsource-16-150400.2.1 * kernel-livepatch-5_14_21-150400_24_164-default-debuginfo-17-150400.2.1 * kernel-livepatch-5_14_21-150400_24_167-default-debuginfo-16-150400.2.1 * kernel-livepatch-5_14_21-150400_24_176-default-11-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_40-debugsource-17-150400.2.1 * kernel-livepatch-5_14_21-150400_24_179-default-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_179-default-debuginfo-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_173-default-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_176-default-debuginfo-11-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_44-debugsource-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_164-default-17-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_43-debugsource-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_173-default-debuginfo-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_167-default-16-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_45-debugsource-9-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP4_Update_41-debugsource-16-150400.2.1 * kernel-livepatch-5_14_21-150400_24_164-default-debuginfo-17-150400.2.1 * kernel-livepatch-5_14_21-150400_24_167-default-debuginfo-16-150400.2.1 * kernel-livepatch-5_14_21-150400_24_176-default-11-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_40-debugsource-17-150400.2.1 * kernel-livepatch-5_14_21-150400_24_179-default-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_179-default-debuginfo-9-150400.2.1 * kernel-livepatch-5_14_21-150400_24_173-default-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_176-default-debuginfo-11-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_44-debugsource-11-150400.2.1 * kernel-livepatch-5_14_21-150400_24_164-default-17-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_43-debugsource-12-150400.2.1 *kernel-livepatch-5_14_21-150400_24_173-default-debuginfo-12-150400.2.1 * kernel-livepatch-5_14_21-150400_24_167-default-16-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_45-debugsource-9-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-23191.html * https://www.suse.com/security/cve/CVE-2026-23268.html * https://bugzilla.suse.com/show_bug.cgi?id=1258396 * https://bugzilla.suse.com/show_bug.cgi?id=1259859 . Two important vulnerabilities fixed in the SUSE Linux Enterprise Kernel, improving overall system security and stability.. SUSE Linux, kernel update, security alert, Linux Enterprise, patch management. . Severity: Important. LinuxSecurity.com Team

Apr 27, 2026 •Important SuSE

100

security advisorysecurity issueSuSE

SUSE Linux Micro 6.0 Important Kernel RT Fix CVE-2026-23268

An update that solves one vulnerability can now be installed.. # Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:21314-1 Release Date: 2026-04-22T16:59:00Z Rating: important References: * bsc#1259859 Cross-References: * CVE-2026-23268 CVSS scores: * CVE-2026-23268 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-23268 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23268 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves one vulnerability can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes one security issue The following security issue was fixed: * CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-354=1 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_18-debugsource-2-1.1 * kernel-livepatch-6_4_0-40-rt-debuginfo-2-1.1 * kernel-livepatch-6_4_0-40-rt-2-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-23268.html * https://bugzilla.suse.com/show_bug.cgi?id=1259859 . Critical update for SUSE Linux Micro 6.0 addressing security fix for privileged policy management issue. Install now!. SUSE Linux Micro 6.0 update, kernel RT patch 2026, security management fix. . Severity: Important. LinuxSecurity.com Team

Apr 27, 2026 •Important SuSE

100

security advisoryimportantSuSE Linux

SUSE Linux Micro 6.0 Kernel RT Vital Bluetooth Local User Vulnerability Fix

An update that solves two vulnerabilities can now be installed.. # Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:21329-1 Release Date: 2026-04-22T16:54:00Z Rating: important References: * bsc#1255066 * bsc#1259859 Cross-References: * CVE-2025-40309 * CVE-2026-23268 CVSS scores: * CVE-2025-40309 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-40309 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23268 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-23268 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23268 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-36.1 fixes various security issues The following security issues were fixed: * CVE-2025-40309: Bluetooth: SCO: Fix UAF on sco_conn_free (bsc#1255066). * CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-351=1 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-36-rt-8-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_12-debugsource-8-1.1 * kernel-livepatch-6_4_0-36-rt-debuginfo-8-1.1 ## References: * https://www.suse.com/security/cve/CVE-2025-40309.html * https://www.suse.com/security/cve/CVE-2026-23268.html * https://bugzilla.suse.com/show_bug.cgi?id=1255066 * https://bugzilla.suse.com/show_bug.cgi?id=1259859 . Update resolvescritical issues in SUSE Linux Micro 6.0 addressing Bluetooth and local user vulnerabilities.. system update,SUSE Linux,vulnerability management,security issues,Bluetooth management. . Severity: Important. LinuxSecurity.com Team

Apr 27, 2026 •Important SuSE

100

security advisorylocal privilegeSuSE

SUSE Linux Micro 6.0 Kernel RT Significant Security Update 2026-21331-1

An update that solves one vulnerability can now be installed.. # Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0) Announcement ID: SUSE-SU-2026:21331-1 Release Date: 2026-04-22T16:59:00Z Rating: important References: * bsc#1259859 Cross-References: * CVE-2026-23268 CVSS scores: * CVE-2026-23268 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-23268 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23268 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes one security issue The following security issue was fixed: * CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-354=1 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-MICRO-6-0-RT_Update_18-debugsource-2-1.1 * kernel-livepatch-6_4_0-40-rt-debuginfo-2-1.1 * kernel-livepatch-6_4_0-40-rt-2-1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-23268.html * https://bugzilla.suse.com/show_bug.cgi?id=1259859 . SUSE Kernel RT Live Patch 18 update addresses important privilege management issue. Install now for better security.. SUSE Linux, kernel update, local user issue, privilege escalation, apparmor security. . Severity: Important. LinuxSecurity.com Team

Apr 27, 2026 •Important SuSE

100

security advisoryimportantkernel

SUSE Linux 16 Kernel Important Policy Management Issue 2026-21281-1

An update that solves one vulnerability can now be installed.. # Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:21281-1 Release Date: 2026-04-23T08:20:31Z Rating: important References: * bsc#1259859 Cross-References: * CVE-2026-23268 CVSS scores: * CVE-2026-23268 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-23268 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23268 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes one security issue The following security issue was fixed: * CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-633=1 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_8-default-5-160000.1.1 * kernel-livepatch-6_12_0-160000_8-default-debuginfo-5-160000.1.1 * kernel-livepatch-SLE16_Update_3-debugsource-5-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-23268.html * https://bugzilla.suse.com/show_bug.cgi?id=1259859 . New SUSE Linux update fixes security issue for kernel Live Patch with important rating.. SUSE Linux Kernel, Security Update Important, Local User Management. . Severity: Important. LinuxSecurity.com Team

Apr 24, 2026 •Important SuSE

100

security advisorySuSEimportant

SUSE Linux Micro 6.2 Important Kernel AppArmor Fix 2026-21282-1

An update that solves one vulnerability can now be installed.. # Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 16) Announcement ID: SUSE-SU-2026:21282-1 Release Date: 2026-04-23T08:22:01Z Rating: important References: * bsc#1259859 Cross-References: * CVE-2026-23268 CVSS scores: * CVE-2026-23268 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-23268 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23268 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.2 An update that solves one vulnerability can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes one security issue The following security issue was fixed: * CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-634=1 ## Package List: * SUSE Linux Micro 6.2 (ppc64le s390x x86_64) * kernel-livepatch-6_12_0-160000_27-default-debuginfo-2-160000.1.1 * kernel-livepatch-6_12_0-160000_27-default-2-160000.1.1 * kernel-livepatch-SLE16_Update_6-debugsource-2-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2026-23268.html * https://bugzilla.suse.com/show_bug.cgi?id=1259859 . SUSE Linux Enterprise 16 kernel update addresses important security issue with apparmor. Update now for protection.. SUSE Linux Micro, security update, apparmor, kernel patch, Linux security. . Severity: Important. LinuxSecurity.com Team

Apr 24, 2026 •Important SuSE

202

security advisoryimportantkernel

openSUSE Kernel Vital Security Update for CVE-2026-23191 and CVE-2026-23268

An update that solves two vulnerabilities can now be installed.. # Security update for the Linux Kernel (Live Patch 47 for SUSE Linux Enterprise 15 SP4) Announcement ID: SUSE-SU-2026:1584-1 Release Date: 2026-04-24T06:34:01Z Rating: important References: * bsc#1258396 * bsc#1259859 Cross-References: * CVE-2026-23191 * CVE-2026-23268 CVSS scores: * CVE-2026-23191 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23191 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-23191 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23191 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23268 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-23268 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23268 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Live Patching 12-SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves two vulnerabilities can now be installed. ## Description: This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.187 fixes various security issues The following security issues were fixed: * CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258396). * CVE-2026-23268: apparmor: fix unprivileged local user can do privileged policy management (bsc#1259859). ## Patch Instructions: To install this SUSE update use the SUSErecommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 12-SP5 zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2026-1584=1 SUSE-SLE-Live- Patching-12-SP5-2026-1585=1 SUSE-SLE-Live-Patching-12-SP5-2026-1586=1 SUSE-SLE- Live-Patching-12-SP5-2026-1587=1 SUSE-SLE-Live-Patching-12-SP5-2026-1588=1 SUSE- SLE-Live-Patching-12-SP5-2026-1589=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2026-1591=1 * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2026-1591=1 ## Package List: * SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64) * kgraft-patch-4_12_14-122_290-default-5-2.1 * kgraft-patch-4_12_14-122_275-default-7-2.1 * kgraft-patch-4_12_14-122_283-default-5-2.1 * kgraft-patch-4_12_14-122_293-default-4-2.1 * kgraft-patch-4_12_14-122_272-default-9-2.1 * kgraft-patch-4_12_14-122_280-default-5-2.1 * openSUSE Leap 15.4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_187-default-debuginfo-5-150400.2.1 * kernel-livepatch-5_14_21-150400_24_187-default-5-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_47-debugsource-5-150400.2.1 * SUSE Linux Enterprise Live Patching 15-SP4 (ppc64le s390x x86_64) * kernel-livepatch-5_14_21-150400_24_187-default-debuginfo-5-150400.2.1 * kernel-livepatch-5_14_21-150400_24_187-default-5-150400.2.1 * kernel-livepatch-SLE15-SP4_Update_47-debugsource-5-150400.2.1 ## References: * https://www.suse.com/security/cve/CVE-2026-23191.html * https://www.suse.com/security/cve/CVE-2026-23268.html * https://bugzilla.suse.com/show_bug.cgi?id=1258396 * https://bugzilla.suse.com/show_bug.cgi?id=1259859 . Critical update for openSUSE kernel fixes significant security issues and risks; timely installation recommended.. openSUSE kernel security patch, important Linux update, system vulnerabilities fix. . Severity: Important.LinuxSecurity.com Team

Apr 24, 2026 •Important OpenSUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Advisory Watch

Linux Security Week

Community Poll

More Polls

Should Linux servers automatically install security updates?

Message!

Yes — critical security patches should install automatically.
No — every update should be tested before deployment.
Only critical vulnerabilities should auto-install.
I patch when Reddit starts panicking.

No answer selected. Please try again.

Please select either existing option or enter your own, however not both.

Please select minimum {0} answer(s).

Please select maximum {0} answer(s).

/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json

157

radio

Yes — critical security patches should install automatically. (0%)

0% votes

No — every update should be tested before deployment. (60%)

60% votes

Only critical vulnerabilities should auto-install. (0%)

0% votes

I patch when Reddit starts panicking. (40%)

40% votes

bottom 200

Stay Secure with the Latest Linux Advisories

Mageia Libevent Critical Security Update CVE-2026-63379 Advisory 2026-0294

Mageia Transmission Critical Clickjacking Vulnerability Fix 2026-0293

openSUSE Leap 16.0 Advisory 2026-21435-1 perl-XML-Bare Moderate Risk

openSUSE Leap 16.0 transport Significant Security Update CVE-2026-39821

openSUSE Leap 16.0 Gh Important Security Threat CVE-2026-39821

openSUSE Leap 16.0 net-tools Low Denial of Service CVE-2024-58251

openSUSE Perl-HTTP-Date Moderate CPU Exhaustion Fix CVE-2026-14741

openSUSE ImageMagick Important Memory Leak Policy Bypass Vuln 2026-21426-1

openSUSE Leap 16.0 PackageKit Moderate Authorization Issue CVE-2026-10294

Refine advisories

Get the latest News and Insights

Community Poll

Should Linux servers automatically install security updates?

Trending News

Ubuntu 26.04 LTS Samba Critical Update Denial of Service USN-8306-1

Ubuntu 24.04 LTS Linux Kernel Critical Security Issues Vuln 8373-1

Oracle Linux 9 Kernel Significant Security Update ELSA-2026-50293

Urgent Resolution for rxrpc Vulnerabilities in Slackware 15.0 Kernel

Explore Latest Linux Security advisories

SUSE Linux Enterprise 16 Kernel Key Fix Strategy for CVE-2026-23268

SUSE Linux Enterprise Live Patch 2026-1622-1 Important Kernel Security Fix

SUSE Linux Micro 6.0 Important Kernel RT Fix CVE-2026-23268

SUSE Linux Micro 6.0 Kernel RT Vital Bluetooth Local User Vulnerability Fix

SUSE Linux Micro 6.0 Kernel RT Significant Security Update 2026-21331-1

SUSE Linux 16 Kernel Important Policy Management Issue 2026-21281-1

SUSE Linux Micro 6.2 Important Kernel AppArmor Fix 2026-21282-1

openSUSE Kernel Vital Security Update for CVE-2026-23191 and CVE-2026-23268

Get the latest News and Insights

Community Poll

Should Linux servers automatically install security updates?

Trending News

Ubuntu 26.04 LTS Samba Critical Update Denial of Service USN-8306-1

Ubuntu 24.04 LTS Linux Kernel Critical Security Issues Vuln 8373-1

Oracle Linux 9 Kernel Significant Security Update ELSA-2026-50293

Urgent Resolution for rxrpc Vulnerabilities in Slackware 15.0 Kernel

Powered By

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

QUICK LINKS

subscribe to newsletters!

Stay Secure with the Latest Linux Advisories

Mageia Libevent Critical Security Update CVE-2026-63379 Advisory 2026-0294

Mageia Transmission Critical Clickjacking Vulnerability Fix 2026-0293

openSUSE Leap 16.0 Advisory 2026-21435-1 perl-XML-Bare Moderate Risk

openSUSE Leap 16.0 transport Significant Security Update CVE-2026-39821

openSUSE Leap 16.0 Gh Important Security Threat CVE-2026-39821

openSUSE Leap 16.0 net-tools Low Denial of Service CVE-2024-58251

openSUSE Perl-HTTP-Date Moderate CPU Exhaustion Fix CVE-2026-14741

openSUSE ImageMagick Important Memory Leak Policy Bypass Vuln 2026-21426-1

openSUSE Leap 16.0 PackageKit Moderate Authorization Issue CVE-2026-10294

Refine advisories

severity

Topics

Distro

Published Date

Get the latest News and Insights

Community Poll

Should Linux servers automatically install security updates?

Trending News

Explore Latest Linux Security advisories

Get the latest News and Insights

Community Poll

Should Linux servers automatically install security updates?

Trending News

Search Topics

Powered By

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

QUICK LINKS

subscribe to newsletters!