Sign inStart freeBook a demo

Suse Linux vulnerabilitiesAnd the versions its exploited flaws hit.

Product1 known exploited8 versions
The short answer

Suse Linux is made by Novell. We track 23 published vulnerabilities listed under that exact name, across 8 versions. 1 of them is on the list of flaws known to be exploited, the newest added on 1 May 2026. Novell lists newer releases under their own names, such as Suse Linux Enterprise Server, so check those pages too.

Check your version

The most recent Suse Linux flaw added to the known-exploited list is CVE-2026-31431, on 1 May 2026. We keep watching the known-exploited list.

Other names

Is Suse Linux listed under other names? Yes.

Novell also lists Suse Linux under more specific names, such as Suse Linux Enterprise Server and Suse Linux Enterprise Desktop. Flaws listed only under those names are counted on their own pages, not here. If you run one of these, open its page for its own exploited flaws.

Versions

Which versions of Suse Linux do the exploited flaws hit?

Each exploited flaw lists the versions it affects, as published by the vendor. Find your version, then patch.

Known exploited

Which Suse Linux vulnerabilities are being exploited?

1 flaw is on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.

  1. 7.8
    CVE-2026-31431HighKnown exploited
    Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

    Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.

    Chance of use3.4%Known exploited since1 May 2026
Exploit likelihood

Which Suse Linux flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 72%
    CVE-2024-12084Critical

    A heap-based buffer overflow flaw was found in the rsync daemon.

    CVSS9.8Published15 Jan 2025
  2. 58%
    CVE-2006-5229Low

    OpenSSH portable 4.1 on SUSE Linux, and possibly other platforms and versions, and possibly under limited configurations, allows remote attackers to determine valid usernames via timing discrepancies in which...

    CVSS2.6Published10 Oct 2006
  3. 34%
    CVE-2013-4854High

    The RFC 5011 implementation in rdata.c in ISC BIND 9.7.x and 9.8.x before 9.8.5-P2, 9.8.6b1, 9.9.x before 9.9.3-P2, and 9.9.4b1, and DNSco BIND 9.9.3-S1 before 9.9.3-S1-P1 and 9.9.4-S1b1, allows remote attackers to...

    CVSS7.8Published29 Jul 2013
  4. 19%
    CVE-2007-1285High

    The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the...

    CVSS7.5Published6 Mar 2007
  5. 7.9%
    CVE-2008-2025Medium

    Cross-site scripting (XSS) vulnerability in Apache Struts before 1.2.9-162.31.1 on SUSE Linux Enterprise (SLE) 11, before 1.2.9-108.2 on SUSE openSUSE 10.3, before 1.2.9-198.2 on SUSE openSUSE 11.0, and before...

    CVSS4.3Published9 Apr 2009
  6. 4.7%
    CVE-2024-12088Medium

    A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it.

    CVSS6.5Published14 Jan 2025
  7. 3.4%
    CVE-2026-31431HighKnown exploited

    In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data.

    CVSS7.8Published22 Apr 2026
  8. 2.6%
    CVE-2015-2566Low

    Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via vectors related to DML.

    CVSS2.8Published16 Apr 2015
  9. 2.5%
    CVE-2015-2567Low

    Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Privileges.

    CVSS3.5Published16 Apr 2015
  10. 2.1%
    CVE-2010-1507Medium

    WebYaST in yast2-webclient in SUSE Linux Enterprise (SLE) 11 on the WebYaST appliance uses a fixed secret key that is embedded in the appliance's image, which allows remote attackers to spoof session cookies by...

    CVSS5.0Published3 Sep 2010
Precursor Intelligence

Running Suse Linux? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Start free →Book a demo

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

We track 23 published vulnerabilities listed under the name Suse Linux, across 8 versions. The most recent Suse Linux flaw added to the known-exploited list is CVE-2026-31431, on 1 May 2026.

1 is on the list of flaws known to be exploited. The most recently added is CVE-2026-31431.

Novell also lists Suse Linux under more specific names, such as Suse Linux Enterprise Server and Suse Linux Enterprise Desktop. Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list.

Create a Precursor Intelligence account and track Suse Linux. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.

Keep exploring