Back Linuxsecurity

SUSE Fuse-OverlayFS Moderate Privilege Escalation Fix 2026-23469

Linuxsecurity •LinuxSecurity Advisories • September 9, 2026

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

## This update for fuse-overlayfs fixes the following issue: * CVE-2026-52791: privilege escalation due to SUID/SGID bit preservation after truncate operation (bsc#1273100). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1601=1 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * fuse-overlayfs-debuginfo-1.15-160000.3.1 * fuse-overlayfs-debugsource-1.15-160000.3.1 * fuse-overlayfs-1.15-160000.3.1

* CVE-2026-52791 ( SUSE ): 5.7

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

* CVE-2026-52791 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

* CVE-2026-52791 ( NVD ): 2.0

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

* SUSE Linux Micro 6.2

An update that solves one vulnerability can now be installed.

Announcement ID: SUSE-SU-2026:23469-1 Release Date: 2026-09-03T20:11:38Z Rating: moderate

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE Linux Vulnerabilities: Buffer Overflow and Privilege Escalation Issues Two vulnerabilities in SUSE Linux systems have been disclosed, affecting opensc and fuse-overlayfs. The first, CVE-2026-40510, is a stack buffer overflow in `piv_process_history()` that allows physical attackers to exploit crafted PIV smart cards or USB devices, leading to memory corruption. The second, CVE-2026-52791, involves privilege escalation due to SUID/SGID bit preservation after a truncate operation. Both vulnerabilities are rated as moderate in severity and require immediate patching. SUSE has provided patch instructions for both vulnerabilities, urging users to update their systems promptly. The opensc vulnerability was published on May 29, 2026, while the fuse-overlayfs issue was published on July 29, 2026. Users of SUSE Linux Micro 6.0 and 6.2 are specifically affected by these vulnerabilities. 21 sources 46

Extracted Entities

SUSE Fuse-OverlayFS Moderate Privilege Escalation Fix 2026-23469

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)