Skip to content
Critical Buffer Overflow Vulnerabilities in SUSE Kernel RT Affecting Multiple Versions

Critical Buffer Overflow Vulnerabilities in SUSE Kernel RT Affecting Multiple Versions

First seen 17 Oct 2026, 16:47 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 17, 2026 at 18:20 UTC
  • •Critical vulnerabilities CVE-2026-63887 and CVE-2026-68158 allow remote code execution.
  • •SUSE has released patches for affected versions of the Linux Enterprise Kernel.
  • •Immediate patching is recommended to prevent potential exploitation.

SUSE Linux Enterprise Kernel 15 SP7 has critical buffer overflow vulnerabilities identified as CVE-2026-63887 and CVE-2026-68158, which could allow remote code execution. These vulnerabilities affect various SUSE Linux Enterprise versions, including Live Patching and Real Time modules. CVE-2026-63887, published on July 19, 2026, has a CVSS score of 9.8, while CVE-2026-68158, published on August 10, 2026, also scores 9.8. The vulnerabilities were addressed in multiple updates released on October 16, 2026, with patch instructions provided for system administrators. Users are urged to apply the patches immediately to mitigate the risk of exploitation. Other vulnerabilities, such as CVE-2026-53131 and CVE-2026-63795, were also fixed in the updates, highlighting a broader security concern within the kernel.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-06-25
CVE-2026-53131 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-19
CVE-2026-63887 published
A critical buffer overflow vulnerability in the SUSE Linux kernel was disclosed, allowing remote code execution.
Linuxsecurity
2026-07-19
CVE-2026-63939 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-19
CVE-2026-63795 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-07-19
CVE-2026-63794 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-08-10
CVE-2026-68158 published
Another critical vulnerability related to buffer overflow in the SUSE Linux kernel was disclosed.
Linuxsecurity
2026-10-16
Patches released for vulnerabilities
SUSE released important updates addressing multiple vulnerabilities, including CVE-2026-63887 and CVE-2026-68158.
Linuxsecurity

More articles in this cluster (3)

Following this threat?

Track CVE-2026-53131 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (12)

1 / 3

Common questions

Which SUSE versions are affected?
The vulnerabilities affect SUSE Linux Enterprise Kernel 15 SP7 and its related modules.
What is the severity of these vulnerabilities?
Both CVE-2026-63887 and CVE-2026-68158 have a CVSS score of 9.8, indicating critical severity.
How can I apply the patches?
Patches can be applied using SUSE's recommended installation methods, such as YaST online_update or the 'zypper patch' command.