Linuxsecurity SUSE libgcrypt Denial of Service Vulnerability Advisory
Article Content
- •CVE-2026-41989 allows denial of service via crafted ECDH ciphertext.
- •Affected systems include SUSE Linux Enterprise Micro and openSUSE Leap.
- •Patches are available and should be applied promptly.
A moderate denial of service vulnerability has been identified in libgcrypt, tracked as CVE-2026-41989. This vulnerability allows crafted ECDH ciphertext to lead to a denial of service condition. Affected systems include SUSE Linux Enterprise Micro 5.3, 5.4, and openSUSE Leap 15.4. The issue was published on April 23, 2026, and has been addressed with patches available for various SUSE products. Administrators are advised to apply the patches using recommended installation methods such as YaST or zypper. The vulnerability has a CVSS score of 6.3, indicating a moderate severity level. No active exploitation has been reported at this time. The advisory emphasizes the importance of keeping systems up to date to mitigate potential risks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track CVE-2026-41989 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…