SUSE Multi-Linux Manager Faces Denial of Service Vulnerabilities

Linuxsecurity

SUSE Multi-Linux Manager Faces Denial of Service Vulnerabilities

First seen 4 Jun 2026, 01:54 UTC • •57.8

Article Content

1 / 6

Browse articles

ThreatCluster •June 5, 2026 at 01:39 UTC

•SUSE released critical patches for denial of service vulnerabilities affecting Multi-Linux Manager.
•CVE-2022-21698 is a significant vulnerability that can disrupt services if exploited.
•Updates also address CVE-2023-45288 and CVE-2025-22870, enhancing overall system security.

SUSE has issued multiple security updates addressing denial of service vulnerabilities in its Multi-Linux Manager. The primary issue is CVE-2022-21698, which affects various components including prometheus-postgres_exporter and golang-github-QubitProducts-exporter_exporter. This vulnerability allows attackers to exploit the InstrumentHandlerCounter, leading to potential service disruptions. The updates also include fixes for other vulnerabilities such as CVE-2023-45288 and CVE-2025-22870, which address proxy bypass and header handling issues, respectively. Affected systems include SUSE Linux Enterprise Desktop and Server versions 12 and High-Performance Computing versions. The updates were released on June 3, 2026, and are rated as important. Administrators are urged to apply these patches promptly to mitigate risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 136d ago How this analysis works

Timeline

2022-02-15

CVE-2022-21698 published

SUSE disclosed a denial of service vulnerability affecting multiple components.

2024-04-04

CVE-2023-45288 published

A vulnerability was published that addresses connection handling issues in certain software.

2025-03-12

CVE-2025-22870 published

A potential proxy bypass vulnerability was disclosed affecting specific tools.

2026-06-03

SUSE security updates released

SUSE issued important patches for multiple vulnerabilities including CVE-2022-21698, CVE-2023-45288, and CVE-2025-22870.

More articles in this cluster (5)

Threat Graph

9 entities, 13 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Denial of Service

Organization (1)

SuSE

Vulnerability (5)

CVE-2022-21698
CVE-2023-45288
CVE-2025-22870
CVE-2026-27448
CVE-2026-27459

Affected Platform (2)

AIX
Linux

Relationships

CVE-2022-21698 targets AIX
CVE-2022-21698 targets Linux
CVE-2023-45288 targets AIX
CVE-2023-45288 targets Linux
CVE-2025-22870 targets AIX
CVE-2025-22870 targets Linux
CVE-2026-27448 targets AIX
CVE-2026-27448 targets Linux
CVE-2026-27459 targets AIX
CVE-2026-27459 targets Linux
Denial of Service targets AIX
Denial of Service targets Linux
CVE-2022-21698 related to SuSE

Following this threat?

Track SuSE and CVE-2022-21698 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…

CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…