Back Linuxsecurity

SUSE Linux Micro Security Update 2026-24129

Linuxsecurity •LinuxSecurity Advisories • October 13, 2026

Running self-managed GitLab? Critical flaws could allow server code execution. Check the fixes. ×

## This update for gcc13 fixes the following issue: Update to GCC 13.5: * CVE-2026-102010: UAF due to improper pointer update when an application calls the `erase_if` function on a binary heap priority queue in `libstdc++` (bsc#1283123). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-1896 ## Package List: * SUSE Linux Micro 6.2 (aarch64 ppc64le s390x x86_64) * gcc13-13.5.0+git10516-160000.1.1 * gcc13-debuginfo-13.5.0+git10516-160000.1.1 * cpp13-13.5.0+git10516-160000.1.1 * gcc13-debugsource-13.5.0+git10516-160000.1.1 * cpp13-debuginfo-13.5.0+git10516-160000.1.1

* CVE-2026-102010 ( SUSE ): 8.3

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N

* CVE-2026-102010 ( SUSE ): 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

* CVE-2026-102010 ( NVD ): 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

* SUSE Linux Micro 6.2

An update that solves one vulnerability and has one fix can now be installed.

Announcement ID: SUSE-SU-2026:24129-1 Release Date: 2026-10-09T18:18:08Z Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE Releases UAF Patch for GCC 13 and 48 Vulnerabilities SUSE has released important updates addressing an use-after-free (UAF) vulnerability, CVE-2026-102010, affecting the `libstdc++` library in both GCC 13 and GCC 48. The flaw arises from improper pointer updates when the `erase_if` function is called on a binary heap priority queue. This vulnerability could potentially allow for remote code execution on affected systems. The CVE was published on September 28, 2026, and has a CVSS score of 7.0, indicating high severity. Users of SUSE Linux Enterprise Server 12 SP5 LTSS and SUSE Linux Micro 6.2 are urged to apply the patches immediately. Patch instructions are provided for various SUSE products, ensuring that administrators can quickly remediate the issue. The updates are available via the recommended installation methods or through specific commands for each product. As of now, there are no reports of in the wild. 6 sources 65

Extracted Entities

SUSE Linux Micro Security Update 2026-24129

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (1)