SUSE Linux kernel updates fix dozens of flaws across enterprise and openSUSE releases

SUSE issued a series of important Linux kernel security updates across SUSE Linux Enterprise 12 SP5, SUSE Linux Enterprise 15 SP6, SUSE Linux Enterprise Micro 5.5, openSUSE Leap 15.5, and openSUSE Leap 15.6, remediating large batches of vulnerabilities in core subsystems including networking, netfilter, Bluetooth, KVM, NFSD, filesystems, USB, Xen, ALSA, and Wi-Fi drivers. The advisories reported fixes for 62 to 74 vulnerabilities per release, plus additional security fixes, and included multiple high-severity CVEs with CVSS 9.8 ratings such as CVE-2026-23240, CVE-2026-31402, CVE-2026-31533, CVE-2026-31669, and CVE-2026-43044. The patched flaws included use-after-free, double-free, heap overflow, out-of-bounds access, race conditions, integer underflow, NULL dereference, and information disclosure bugs.

SUSE also published follow-on live patch advisories for several supported branches, including SUSE Linux Enterprise 12 SP5, 15 SP4, 15 SP5, 15 SP6, and 15 SP7, extending kernel protections without requiring immediate downtime on some systems. One tracked issue, CVE-2026-23403, affected AppArmor and caused a memory leak and namespace consistency problems during profile unpacking; SUSE rated it moderate and marked it resolved across numerous product lines. Customers were directed to apply updates through YaST or zypper, and SUSE said systems should be rebooted after installation where standard kernel packages were updated.