Linuxsecurity SUSE Linux Vulnerabilities: Buffer Overflow and Privilege Escalation Issues
Article Content
- •CVE-2026-40510 allows memory corruption via crafted PIV devices.
- •CVE-2026-52791 enables privilege escalation due to improper file handling.
- •Immediate patching is recommended for affected SUSE Linux Micro versions.
Two vulnerabilities in SUSE Linux systems have been disclosed, affecting opensc and fuse-overlayfs. The first, CVE-2026-40510, is a stack buffer overflow in `piv_process_history()` that allows physical attackers to exploit crafted PIV smart cards or USB devices, leading to memory corruption. The second, CVE-2026-52791, involves privilege escalation due to SUID/SGID bit preservation after a truncate operation. Both vulnerabilities are rated as moderate in severity and require immediate patching. SUSE has provided patch instructions for both vulnerabilities, urging users to update their systems promptly. The opensc vulnerability was published on May 29, 2026, while the fuse-overlayfs issue was published on July 29, 2026. Users of SUSE Linux Micro 6.0 and 6.2 are specifically affected by these vulnerabilities.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (23)
Following this threat?
Track SuSE and CVE-2026-40510 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host… 
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…