SUSE Linux Kernel RT Security Updates Address Multiple Vulnerabilities

Severity: High (Score: 72.8)

Sources: Lists.Suse, Linuxsecurity

Summary

On May 5, 2026, SUSE released critical security updates for the Linux Kernel RT affecting SUSE Linux Enterprise 15 SP7. The updates address multiple vulnerabilities, including CVE-2025-71066, CVE-2026-23004, CVE-2026-23204, and CVE-2026-31431, which could lead to serious security issues if exploited. The vulnerabilities were identified in various components of the kernel, including the network scheduler and cryptographic algorithms. CVE-2026-31431 was particularly concerning as it was added to the CISA KEV list due to active exploitation starting May 1, 2026. Users are advised to apply the patches immediately using SUSE's recommended installation methods. The updates are crucial for maintaining the security of affected systems, including SUSE Linux Enterprise Server and Live Patching modules. The patches can be installed via YaST or the command line using 'zypper patch'. Key Points: • SUSE released important security updates for Linux Kernel RT on May 5, 2026. • Multiple vulnerabilities, including CVE-2026-31431, are actively exploited. • Users must apply patches immediately to protect affected systems.

Key Entities

• CVE-2025-20123 (cve)
• CVE-2025-38375 (cve)
• CVE-2025-39977 (cve)
• CVE-2025-71066 (cve)
• CVE-2026-23004 (cve)
• Cwe-362 - Race Condition (cwe)
• Cwe-416 - Use After Free (cwe)
• Linux (platform)
• OpenSUSE Leap 15.6 (platform)
• SUSE Linux Enterprise (platform)
• SUSE Linux Enterprise 15 SP5 Kernel (platform)
• SUSE Linux Enterprise Live Patch 15-sp7 (platform)