CVE-2026-72693

Upstream information

CVE-2026-72693 at MITRE

Description

`openvt -u` is intended to identify the owner of the current VT and then execute `login` as that user from a privileged context. In the documented `kbrequest`/init usage, the ownership test in `authenticate_user()` relies on `stat("/proc/<pid>/fd/0")`. `stat()` on `/proc/<pid>/fd/0` follows the symlink to the underlying TTY device node. As a result, `buf.st_uid` reflects the owner of the TTY node rather than the owner of the process holding the file descriptor. If the TTY owner returns to `root` or the getty owner after logout while an unprivileged process still has `fd 0` attached to that TTY, the check can incorrectly treat that process as belonging to the privileged console owner. Once that check succeeds, the `-u` path executes a passwordless login as the selected user. In the documented `kbrequest`/init deployment using `openvt -us`, this can result in passwordless `login -f root` on the spawned VT. This report establishes that privilege escalation path for that documented deployment; it does not claim equivalent reachability for deployments that do not use `openvt -u` from a privileged `kbrequest`/init path.

---

SUSE information

Overall state of this security issue: Pending

This issue is currently rated as having important severity.

CVSS v3 Scores

CVSS detail	CNA (Red Hat)	SUSE
Base Score	7.8	7.8
Vector	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector	Local	Local
Attack Complexity	Low	Low
Privileges Required	Low	Low
User Interaction	None	None
Scope	Unchanged	Unchanged
Confidentiality Impact	High	High
Integrity Impact	High	High
Availability Impact	High	High
CVSSv3 Version	3.1	3.1

CVSS v4 Scores

CVSS detail	SUSE
Base Score	8.5
Vector	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Attack Vector	Local
Attack Complexity	Low
Attack Requirements	None
Privileges Required	Low
User Interaction	None
Vulnerable System Confidentiality Impact	High
Vulnerable System Integrity Impact	High
Vulnerable System Availability Impact	High
Subsequent System Confidentiality Impact	None
Subsequent System Integrity Impact	None
Subsequent System Availability Impact	None
CVSSv4 Version	4.0

SUSE Bugzilla entry: 1275441 [NEW]

SUSE Security Advisories:

• RHSA-2026:57597, published Sat Aug 22 15:06:56 UTC 2026
• RHSA-2026:57610, published Mon Aug 24 15:13:53 UTC 2026
• SUSE-SU-2026:23742-1, published 2026-09-16T09:16:27Z
• SUSE-SU-2026:23844-1, published 2026-09-16T09:28:13Z
• SUSE-SU-2026:4207-1, published Wed Sep 16 19:03:56 CEST 2026
• SUSE-SU-2026:4211-1, published Wed Sep 16 19:03:55 CEST 2026

List of released packages

Product(s)	Fixed package version(s)	References
Container bci/bci-init:15.7-53.53 Container suse/hpc/warewulf4-x86_64/sle-hpc-node:15.7.20.8.166 Container suse/kiosk/pulseaudio:17.0-73.35 Container suse/kiosk/tigervnc-x11vnc:1.14-63.37 Container suse/kiosk/xorg:21.1-83.35 Container third-party/nvidia/driver:550-sles15.7 Container third-party/nvidia/driver:570-sles15.7 Container third-party/nvidia/driver:575-sles15.7 Container third-party/nvidia/driver:580-sles15.7 Container third-party/nvidia/driver:590-sles15.7 Container third-party/nvidia/driver:595-sles15.7 Container third-party/nvidia/driver:610-sles15.7 Image SLES15-SP7-Azure-3P Image SLES15-SP7-Azure-Standard Image SLES15-SP7-BYOS-Azure Image SLES15-SP7-BYOS-EC2 Image SLES15-SP7-BYOS-GCE Image SLES15-SP7-CHOST-BYOS-Azure Image SLES15-SP7-CHOST-BYOS-EC2 Image SLES15-SP7-CHOST-BYOS-GCE Image SLES15-SP7-CHOST-BYOS-GDC Image SLES15-SP7-CHOST-BYOS-SAP-CCloud Image SLES15-SP7-EC2 Image SLES15-SP7-EC2-ECS-HVM Image SLES15-SP7-GCE Image SLES15-SP7-HPC-Azure Image SLES15-SP7-HPC-BYOS-Azure Image SLES15-SP7-HPC-BYOS-EC2 Image SLES15-SP7-SAP-Azure Image SLES15-SP7-SAP-Azure-3P Image SLES15-SP7-SAP-BYOS-Azure Image SLES15-SP7-SAP-BYOS-EC2 Image SLES15-SP7-SAP-BYOS-GCE Image SLES15-SP7-SAP-EC2 Image SLES15-SP7-SAP-GCE Image SLES15-SP7-SAP-GCE-3P Image SLES15-SP7-SAPCAL-Azure Image SLES15-SP7-SAPCAL-EC2 Image SLES15-SP7-SAPCAL-GCE	kbd >= 2.4.0-150700.15.10.1
Container suse/manager/4.3/proxy-httpd:4.3.19.9.82.38 Container suse/sle-micro-rancher/5.3:latest Container suse/sle-micro-rancher/5.4:5.4.4.5.188 Container suse/sle-micro/5.5:2.0.4-5.8.117 Container suse/sle-micro/base-5.5:2.0.4-5.8.319 Container suse/sle-micro/kvm-5.5:2.0.4-3.5.614 Container suse/sle-micro/rt-5.5:2.0.4-4.5.728 Image SLES15-SP4-Micro-5-4 Image SLES15-SP4-Micro-5-4-BYOS Image SLES15-SP4-Micro-5-4-BYOS-Azure Image SLES15-SP4-Micro-5-4-BYOS-EC2 Image SLES15-SP4-Micro-5-4-BYOS-GCE Image SLES15-SP4-Micro-5-4-EC2 Image SLES15-SP4-Micro-5-4-GCE Image SLES15-SP5-Azure-3P Image SLES15-SP5-Azure-Standard Image SLES15-SP5-BYOS-Azure Image SLES15-SP5-BYOS-EC2 Image SLES15-SP5-BYOS-GCE Image SLES15-SP5-EC2 Image SLES15-SP5-GCE Image SLES15-SP5-Micro-5-5 Image SLES15-SP5-Micro-5-5-Azure Image SLES15-SP5-Micro-5-5-BYOS Image SLES15-SP5-Micro-5-5-BYOS-Azure Image SLES15-SP5-Micro-5-5-BYOS-EC2 Image SLES15-SP5-Micro-5-5-BYOS-GCE Image SLES15-SP5-Micro-5-5-EC2 Image SLES15-SP5-Micro-5-5-GCE Image SLES15-SP5-SAP-Azure-3P Image SLES15-SP5-SAP-BYOS-EC2 Image SLES15-SP5-SAP-BYOS-GCE Image SLES15-SP5-SAPCAL-Azure Image SLES15-SP5-SAPCAL-EC2 Image SLES15-SP5-SAPCAL-GCE Image SLES15-SP6 Image SLES15-SP6-Azure-Standard Image SLES15-SP6-BYOS Image SLES15-SP6-BYOS-Azure Image SLES15-SP6-BYOS-EC2 Image SLES15-SP6-BYOS-GCE Image SLES15-SP6-CHOST-BYOS Image SLES15-SP6-CHOST-BYOS-Azure Image SLES15-SP6-CHOST-BYOS-EC2 Image SLES15-SP6-CHOST-BYOS-GCE Image SLES15-SP6-CHOST-BYOS-GDC Image SLES15-SP6-CHOST-BYOS-SAP-CCloud Image SLES15-SP6-EC2 Image SLES15-SP6-EC2-ECS-HVM Image SLES15-SP6-GCE Image SLES15-SP6-SAP Image SLES15-SP6-SAP-BYOS Image SLES15-SP6-SAP-BYOS-GCE Image SLES15-SP6-SAP-GCE Image SLES15-SP6-SAPCAL Image SLES15-SP6-SAPCAL-GCE	kbd >= 2.4.0-150400.5.12.1 kbd-legacy >= 2.4.0-150400.5.12.1
Container suse/sl-micro/6.0/baremetal-os-container:2.1.3-6.251 Container suse/sl-micro/6.0/base-os-container:2.1.3-7.214 Container suse/sl-micro/6.0/kvm-os-container:2.1.3-6.223 Container suse/sl-micro/6.0/rt-os-container:2.1.3-7.243 Container suse/sl-micro/6.0/toolbox:13.2-9.167 Image SL-Micro Image SL-Micro-Base Image SL-Micro-Base-RT Image SL-Micro-Base-RT-SelfInstall Image SL-Micro-Base-RT-encrypted Image SL-Micro-Base-SelfInstall Image SL-Micro-Base-encrypted Image SL-Micro-Base-qcow Image SL-Micro-Default Image SL-Micro-Default-SelfInstall Image SL-Micro-Default-encrypted Image SL-Micro-Default-qcow Image SLE-Micro Image SLE-Micro-Azure Image SLE-Micro-BYOS Image SLE-Micro-BYOS-Azure Image SLE-Micro-BYOS-EC2 Image SLE-Micro-BYOS-GCE Image SLE-Micro-EC2 Image SLE-Micro-GCE	kbd >= 2.6.4-slfo.1.1_2.1 kbd-legacy >= 2.6.4-slfo.1.1_2.1
Container suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.177 Container suse/sl-micro/6.1/base-os-container:2.2.1-5.190 Container suse/sl-micro/6.1/kvm-os-container:2.2.1-5.192 Container suse/sl-micro/6.1/rt-os-container:2.2.1-5.188 Image SL-Micro-BYOS-GCE Image SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE Image SUSE-Multi-Linux-Manager-Server-BYOS-GCE	kbd >= 2.6.4-slfo.1.1_2.1
SUSE Liberty Linux 10	kbd >= 2.6.4-8.el10_2 kbd-legacy >= 2.6.4-8.el10_2 kbd-misc >= 2.6.4-8.el10_2	Patchnames: RHSA-2026:57597 (x86_64)
SUSE Liberty Linux 9	kbd >= 2.4.0-12.el9_8 kbd-legacy >= 2.4.0-12.el9_8 kbd-misc >= 2.4.0-12.el9_8	Patchnames: RHSA-2026:57610 (x86_64)
SUSE Linux Enterprise Desktop 15 SP7 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Server 15 SP7 SUSE Linux Enterprise Server for SAP Applications 15 SP7	kbd >= 2.4.0-150700.15.10.1 kbd-legacy >= 2.4.0-150700.15.10.1	Patchnames: SUSE-SLE-Module-Basesystem-15-SP7-2026-4211 (aarch64,ppc64le,s390x,x86_64)
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	kbd >= 2.4.0-150400.5.12.1 kbd-legacy >= 2.4.0-150400.5.12.1	Patchnames: SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4207 (aarch64,x86_64)
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	kbd >= 2.4.0-150400.5.12.1 kbd-legacy >= 2.4.0-150400.5.12.1	Patchnames: SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4207 (aarch64,x86_64)
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	kbd >= 2.4.0-150400.5.12.1 kbd-legacy >= 2.4.0-150400.5.12.1	Patchnames: SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4207 (aarch64,x86_64)
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS	kbd >= 2.4.0-150400.5.12.1 kbd-legacy >= 2.4.0-150400.5.12.1	Patchnames: SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4207 (aarch64,x86_64)
SUSE Linux Enterprise Micro 5.3	kbd >= 2.4.0-150400.5.12.1 kbd-legacy >= 2.4.0-150400.5.12.1	Patchnames: SUSE-SLE-Micro-5.3-2026-4207 (aarch64,s390x,x86_64)
SUSE Linux Enterprise Micro 5.4	kbd >= 2.4.0-150400.5.12.1 kbd-legacy >= 2.4.0-150400.5.12.1	Patchnames: SUSE-SLE-Micro-5.4-2026-4207 (aarch64,s390x,x86_64)
SUSE Linux Enterprise Micro 5.5	kbd >= 2.4.0-150400.5.12.1 kbd-legacy >= 2.4.0-150400.5.12.1	Patchnames: SUSE-SLE-Micro-5.5-2026-4207 (aarch64,ppc64le,s390x,x86_64)
SUSE Linux Enterprise Server 15 SP4-LTSS	kbd >= 2.4.0-150400.5.12.1 kbd-legacy >= 2.4.0-150400.5.12.1	Patchnames: SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4207 (aarch64,ppc64le,s390x,x86_64)
SUSE Linux Enterprise Server 15 SP5-LTSS	kbd >= 2.4.0-150400.5.12.1 kbd-legacy >= 2.4.0-150400.5.12.1	Patchnames: SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4207 (aarch64,ppc64le,s390x,x86_64)
SUSE Linux Enterprise Server 15 SP6-LTSS	kbd >= 2.4.0-150400.5.12.1 kbd-legacy >= 2.4.0-150400.5.12.1	Patchnames: SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4207 (aarch64,ppc64le,s390x,x86_64)
SUSE Linux Enterprise Server for SAP Applications 15 SP4	kbd >= 2.4.0-150400.5.12.1 kbd-legacy >= 2.4.0-150400.5.12.1	Patchnames: SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4207 (ppc64le,x86_64)
SUSE Linux Enterprise Server for SAP Applications 15 SP5	kbd >= 2.4.0-150400.5.12.1 kbd-legacy >= 2.4.0-150400.5.12.1	Patchnames: SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4207 (ppc64le,x86_64)
SUSE Linux Enterprise Server for SAP Applications 15 SP6	kbd >= 2.4.0-150400.5.12.1 kbd-legacy >= 2.4.0-150400.5.12.1	Patchnames: SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4207 (ppc64le,x86_64)
SUSE Linux Micro 6.0	kbd >= 2.6.4-2.1 kbd-legacy >= 2.6.4-2.1	Patchnames: SUSE-SLE-Micro-6.0-903 (aarch64,s390x,x86_64)
SUSE Linux Micro 6.1	kbd >= 2.6.4-slfo.1.1_2.1	Patchnames: SUSE-SLE-Micro-6.1-732 (aarch64,ppc64le,s390x,x86_64)
openSUSE Leap 16.0	kbd >= 2.7.1-160000.3.1 kbd-devel >= 2.7.1-160000.3.1 kbd-legacy >= 2.7.1-160000.3.1 libkbdfile1 >= 2.7.1-160000.3.1 libkeymap1 >= 2.7.1-160000.3.1 libkfont0 >= 2.7.1-160000.3.1	Patchnames: openSUSE-Leap-16.0-1748

List of packages in QA

Product(s)	Package(s)
SUSE Linux Enterprise Server 15 SP6-LTSS	kbd >= 2.4.0-150400.5.12.1 kbd-legacy >= 2.4.0-150400.5.12.1
SUSE Linux Enterprise Server 15 SP6-LTSS	kbd >= 2.4.0-150400.5.12.1 kbd-legacy >= 2.4.0-150400.5.12.1
SUSE Linux Enterprise Server 16.0	kbd >= 2.7.1-160000.3.1 kbd-legacy >= 2.7.1-160000.3.1 libkbdfile1 >= 2.7.1-160000.3.1 libkeymap1 >= 2.7.1-160000.3.1 libkfont0 >= 2.7.1-160000.3.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6	kbd >= 2.4.0-150400.5.12.1 kbd-legacy >= 2.4.0-150400.5.12.1
SUSE Linux Enterprise Server for SAP applications 16.0	kbd >= 2.7.1-160000.3.1 kbd-legacy >= 2.7.1-160000.3.1 libkbdfile1 >= 2.7.1-160000.3.1 libkeymap1 >= 2.7.1-160000.3.1 libkfont0 >= 2.7.1-160000.3.1
SUSE Linux Micro 6.2	kbd >= 2.7.1-160000.3.1 libkbdfile1 >= 2.7.1-160000.3.1 libkeymap1 >= 2.7.1-160000.3.1 libkfont0 >= 2.7.1-160000.3.1

---

First public cloud image revisions this CVE is fixed in:

• amazon/suse-sle-hpc-15-sp7-byos-v20260922-hvm-ssd-x86_64
• amazon/suse-sle-micro-5-4-byos-v20260923-hvm-ssd-arm64
• amazon/suse-sle-micro-5-4-byos-v20260923-hvm-ssd-x86_64
• amazon/suse-sle-micro-5-4-v20260923-hvm-ssd-arm64-llc
• amazon/suse-sle-micro-5-4-v20260923-hvm-ssd-arm64-ltd
• amazon/suse-sle-micro-5-4-v20260923-hvm-ssd-x86_64-llc
• amazon/suse-sle-micro-5-4-v20260923-hvm-ssd-x86_64-ltd
• amazon/suse-sle-micro-5-5-byos-v20260924-hvm-ssd-arm64
• amazon/suse-sle-micro-5-5-byos-v20260924-hvm-ssd-x86_64
• amazon/suse-sle-micro-5-5-v20260924-hvm-ssd-arm64-llc
• amazon/suse-sle-micro-5-5-v20260924-hvm-ssd-arm64-ltd
• amazon/suse-sle-micro-5-5-v20260924-hvm-ssd-x86_64-llc
• amazon/suse-sle-micro-5-5-v20260924-hvm-ssd-x86_64-ltd
• amazon/suse-sles-15-sp5-byos-v20260918-hvm-ssd-arm64
• amazon/suse-sles-15-sp5-byos-v20260918-hvm-ssd-x86_64
• amazon/suse-sles-15-sp5-sapcal-v20260922-hvm-ssd-x86_64
• amazon/suse-sles-15-sp5-v20260918-ecs-hvm-ssd-x86_64
• amazon/suse-sles-15-sp5-v20260918-hvm-ssd-arm64
• amazon/suse-sles-15-sp5-v20260918-hvm-ssd-x86_64
• amazon/suse-sles-15-sp6-byos-v20260919-hvm-ssd-arm64
• amazon/suse-sles-15-sp6-byos-v20260919-hvm-ssd-x86_64
• amazon/suse-sles-15-sp6-chost-byos-v20260921-hvm-ssd-arm64
• amazon/suse-sles-15-sp6-chost-byos-v20260921-hvm-ssd-x86_64
• amazon/suse-sles-15-sp6-v20260919-ecs-hvm-ssd-x86_64
• amazon/suse-sles-15-sp6-v20260919-hvm-ssd-arm64
• amazon/suse-sles-15-sp6-v20260919-hvm-ssd-x86_64
• amazon/suse-sles-15-sp7-byos-v20260922-hvm-ssd-arm64
• amazon/suse-sles-15-sp7-byos-v20260922-hvm-ssd-x86_64
• amazon/suse-sles-15-sp7-chost-byos-v20260916-hvm-ssd-arm64
• amazon/suse-sles-15-sp7-chost-byos-v20260916-hvm-ssd-x86_64
• amazon/suse-sles-15-sp7-sapcal-v20260922-hvm-ssd-x86_64
• amazon/suse-sles-15-sp7-v20260918-hvm-ssd-arm64
• amazon/suse-sles-15-sp7-v20260918-hvm-ssd-x86_64
• amazon/suse-sles-15-sp7-v20260922-ecs-hvm-ssd-x86_64
• amazon/suse-sles-sap-15-sp5-byos-v20260920-hvm-ssd-x86_64
• amazon/suse-sles-sap-15-sp7-byos-v20260921-hvm-ssd-x86_64
• google/sle-micro-5-4-byos-v20260923-arm64
• google/sle-micro-5-4-byos-v20260923-x86-64
• google/sle-micro-5-5-byos-v20260924-arm64
• google/sle-micro-5-5-byos-v20260924-x86-64
• google/sle-micro-6-1-byos-v20260921-arm64
• google/sle-micro-6-1-byos-v20260921-x86-64
• google/sles-15-sp5-byos-v20260918-arm64
• google/sles-15-sp5-byos-v20260918-x86-64
• google/sles-15-sp5-sapcal-v20260922-x86-64
• google/sles-15-sp5-v20260918-arm64
• google/sles-15-sp5-v20260918-x86-64
• google/sles-15-sp6-byos-v20260922-arm64
• google/sles-15-sp6-byos-v20260922-x86-64
• google/sles-15-sp6-chost-byos-v20260923-arm64
• google/sles-15-sp6-chost-byos-v20260923-x86-64
• google/sles-15-sp6-sapcal-v20260922-x86-64
• google/sles-15-sp6-v20260922-arm64
• google/sles-15-sp6-v20260922-x86-64
• google/sles-15-sp7-byos-v20260918-arm64
• google/sles-15-sp7-byos-v20260918-x86-64
• google/sles-15-sp7-chost-byos-v20260916-arm64
• google/sles-15-sp7-chost-byos-v20260916-x86-64
• google/sles-15-sp7-sapcal-v20260922-x86-64
• google/sles-15-sp7-v20260918-arm64
• google/sles-15-sp7-v20260918-x86-64
• google/sles-sap-15-sp5-byos-v20260920-x86-64
• google/sles-sap-15-sp5-v20260920-x86-64
• google/sles-sap-15-sp6-byos-v20260917-x86-64
• google/sles-sap-15-sp6-v20260917-x86-64
• google/sles-sap-15-sp7-byos-v20260921-x86-64
• google/sles-sap-15-sp7-v20260921-x86-64
• google/suse-multi-linux-mgr-proxy-5-1-byos-v20260921-arm64
• google/suse-multi-linux-mgr-proxy-5-1-byos-v20260921-x86-64
• google/suse-multi-linux-mgr-server-5-1-byos-v20260921-arm64
• google/suse-multi-linux-mgr-server-5-1-byos-v20260921-x86-64
• microsoft/suse-sle-hpc-15-sp7-byos-v20260922-x86_64
• microsoft/suse-sle-hpc-15-sp7-v20260922-x86_64
• microsoft/suse-sle-micro-5-4-byos-v20260923-arm64
• microsoft/suse-sle-micro-5-4-byos-v20260923-x86_64
• microsoft/suse-sle-micro-5-5-byos-v20260924-arm64
• microsoft/suse-sle-micro-5-5-byos-v20260924-x86_64
• microsoft/suse-sle-micro-5-5-v20260924-arm64-llc
• microsoft/suse-sle-micro-5-5-v20260924-arm64-ltd
• microsoft/suse-sle-micro-5-5-v20260924-x86_64-llc
• microsoft/suse-sle-micro-5-5-v20260924-x86_64-ltd
• microsoft/suse-sles-15-sp5-byos-v20260919-arm64
• microsoft/suse-sles-15-sp5-byos-v20260919-x86_64
• microsoft/suse-sles-15-sp5-sapcal-v20260922-x86_64
• microsoft/suse-sles-15-sp5-v20260918-arm64-ltd
• microsoft/suse-sles-15-sp5-v20260918-x86_64-ltd
• microsoft/suse-sles-15-sp5-v20260919-arm64
• microsoft/suse-sles-15-sp5-v20260919-x86_64
• microsoft/suse-sles-15-sp6-byos-v20260919-arm64
• microsoft/suse-sles-15-sp6-byos-v20260919-x86_64
• microsoft/suse-sles-15-sp6-chost-byos-v20260921-arm64
• microsoft/suse-sles-15-sp6-chost-byos-v20260921-x86_64
• microsoft/suse-sles-15-sp6-v20260919-arm64
• microsoft/suse-sles-15-sp6-v20260919-arm64-llc
• microsoft/suse-sles-15-sp6-v20260919-arm64-ltd
• microsoft/suse-sles-15-sp6-v20260919-x86_64
• microsoft/suse-sles-15-sp6-v20260919-x86_64-llc
• microsoft/suse-sles-15-sp6-v20260919-x86_64-ltd
• microsoft/suse-sles-15-sp7-byos-v20260918-arm64
• microsoft/suse-sles-15-sp7-byos-v20260922-x86_64
• microsoft/suse-sles-15-sp7-chost-byos-v20260916-arm64
• microsoft/suse-sles-15-sp7-chost-byos-v20260916-x86_64
• microsoft/suse-sles-15-sp7-sapcal-v20260922-x86_64
• microsoft/suse-sles-15-sp7-v20260918-arm64
• microsoft/suse-sles-15-sp7-v20260918-arm64-llc
• microsoft/suse-sles-15-sp7-v20260918-arm64-ltd
• microsoft/suse-sles-15-sp7-v20260918-x86_64
• microsoft/suse-sles-15-sp7-v20260918-x86_64-ltd
• microsoft/suse-sles-sap-15-sp5-v20260925-x86_64
• microsoft/suse-sles-sap-15-sp7-byos-v20260921-x86_64
• microsoft/suse-sles-sap-15-sp7-v20260921-x86_64
• microsoft/suse-sles-sap-15-sp7-v20260921-x86_64-ltd

---

Status of this issue by product and package

Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification. The updates are grouped by state of their lifecycle. SUSE product lifecycles are documented on the lifecycle page.

Product(s)	Source package	State
Products under general support and receiving all security fixes.
SLES15-SP5-CHOST-BYOS-SAP-CCloud	kbd	In progress
SLES15-SP6-CHOST-BYOS	kbd	Released
SLES15-SP6-CHOST-BYOS-Aliyun	kbd	In progress
SLES15-SP6-CHOST-BYOS-Azure	kbd	Released
SLES15-SP6-CHOST-BYOS-EC2	kbd	Released
SLES15-SP6-CHOST-BYOS-GCE	kbd	Released
SLES15-SP6-CHOST-BYOS-GDC	kbd	Released
SLES15-SP6-CHOST-BYOS-SAP-CCloud	kbd	Released
SLES15-SP7-CHOST-BYOS-Aliyun	kbd	In progress
SLES15-SP7-CHOST-BYOS-Azure	kbd	Released
SLES15-SP7-CHOST-BYOS-EC2	kbd	Released
SLES15-SP7-CHOST-BYOS-GCE	kbd	Released
SLES15-SP7-CHOST-BYOS-GDC	kbd	Released
SLES15-SP7-CHOST-BYOS-SAP-CCloud	kbd	Released
SUSE Linux Enterprise Desktop 15 SP7	kbd	Released
SUSE Linux Enterprise High Performance Computing 12	kbd	Affected
SUSE Linux Enterprise Micro 5.3	kbd	Released
SUSE Linux Enterprise Micro 5.4	kbd	Released
SUSE Linux Enterprise Micro 5.5	kbd	Released
SUSE Linux Enterprise Micro for Rancher 5.3	kbd	Released
SUSE Linux Enterprise Micro for Rancher 5.4	kbd	Released
SUSE Linux Enterprise Module for Basesystem 15 SP7	kbd	Released
SUSE Linux Enterprise Server 15 SP7	kbd	Released
SUSE Linux Enterprise Server 16.0	kbd	In progress
SUSE Linux Enterprise Server 16.1	kbd	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP7	kbd	Released
SUSE Linux Enterprise Server for SAP applications 16.0	kbd	In progress
SUSE Linux Enterprise Server for SAP applications 16.1	kbd	Released
SUSE Linux Micro 6.0	kbd	Released
SUSE Linux Micro 6.1	kbd	Released
SUSE Linux Micro 6.2	kbd	In progress
openSUSE Leap 16.0	kbd	Released
Products under Long Term Service Pack support and receiving important and critical security fixes.
SLES15-SP3-CHOST-BYOS-Aliyun	kbd	Affected
SLES15-SP3-CHOST-BYOS-Azure	kbd	Affected
SLES15-SP3-CHOST-BYOS-EC2	kbd	Affected
SLES15-SP3-CHOST-BYOS-GCE	kbd	Affected
SLES15-SP3-CHOST-BYOS-SAP-CCloud	kbd	Affected
SLES15-SP4-CHOST-BYOS	kbd	In progress
SLES15-SP4-CHOST-BYOS-Aliyun	kbd	In progress
SLES15-SP4-CHOST-BYOS-Azure	kbd	In progress
SLES15-SP4-CHOST-BYOS-EC2	kbd	In progress
SLES15-SP4-CHOST-BYOS-GCE	kbd	In progress
SLES15-SP4-CHOST-BYOS-SAP-CCloud	kbd	In progress
SLES15-SP5-CHOST-BYOS-Aliyun	kbd	In progress
SLES15-SP5-CHOST-BYOS-Azure	kbd	In progress
SLES15-SP5-CHOST-BYOS-EC2	kbd	In progress
SLES15-SP5-CHOST-BYOS-GCE	kbd	In progress
SLES15-SP5-CHOST-BYOS-GDC	kbd	In progress
SUSE Linux Enterprise High Performance Computing 12 SP5	kbd	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	kbd	Released
SUSE Linux Enterprise High Performance Computing 15 SP5	kbd	Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS	kbd	Released
SUSE Linux Enterprise Module for Basesystem 15 SP4	kbd	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP5	kbd	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP6	kbd	Affected
SUSE Linux Enterprise Server 12 SP5	kbd	Affected
SUSE Linux Enterprise Server 12 SP5-LTSS	kbd	Affected
SUSE Linux Enterprise Server 15 SP4	kbd	Affected
SUSE Linux Enterprise Server 15 SP4-LTSS	kbd	Released
SUSE Linux Enterprise Server 15 SP5	kbd	Affected
SUSE Linux Enterprise Server 15 SP5-LTSS	kbd	Released
SUSE Linux Enterprise Server 15 SP6	kbd	Affected
SUSE Linux Enterprise Server 15 SP6-LTSS	kbd	In progress
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5	kbd	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP4	kbd	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP5	kbd	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP6	kbd	In progress
Products past their end of life and not receiving proactive updates anymore.
HPE Helion OpenStack 8	kbd	Affected
SUSE CaaS Platform 3.0	kbd	Affected
SUSE CaaS Platform 4.0	kbd	Affected
SUSE Enterprise Storage 6	kbd	Affected
SUSE Enterprise Storage 7	kbd	Affected
SUSE Enterprise Storage 7.1	kbd	Affected
SUSE Linux Enterprise Desktop 12	kbd	Affected
SUSE Linux Enterprise Desktop 12 SP1	kbd	Affected
SUSE Linux Enterprise Desktop 12 SP2	kbd	Affected
SUSE Linux Enterprise Desktop 12 SP3	kbd	Affected
SUSE Linux Enterprise Desktop 12 SP4	kbd	Affected
SUSE Linux Enterprise Desktop 15	kbd	Affected
SUSE Linux Enterprise Desktop 15 SP1	kbd	Affected
SUSE Linux Enterprise Desktop 15 SP2	kbd	Affected
SUSE Linux Enterprise Desktop 15 SP3	kbd	Affected
SUSE Linux Enterprise Desktop 15 SP4	kbd	Affected
SUSE Linux Enterprise Desktop 15 SP5	kbd	Affected
SUSE Linux Enterprise Desktop 15 SP6	kbd	Affected
SUSE Linux Enterprise High Performance Computing 12 SP1	kbd	Affected
SUSE Linux Enterprise High Performance Computing 12 SP2	kbd	Affected
SUSE Linux Enterprise High Performance Computing 12 SP3	kbd	Affected
SUSE Linux Enterprise High Performance Computing 12 SP4	kbd	Affected
SUSE Linux Enterprise High Performance Computing 15	kbd	Affected
SUSE Linux Enterprise High Performance Computing 15 SP1	kbd	Affected
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS	kbd	Affected
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS	kbd	Affected
SUSE Linux Enterprise High Performance Computing 15 SP2	kbd	Affected
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS	kbd	Affected
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS	kbd	Affected
SUSE Linux Enterprise High Performance Computing 15 SP3	kbd	Affected
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS	kbd	Affected
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	kbd	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4	kbd	Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	kbd	Released
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	kbd	Released
SUSE Linux Enterprise High Performance Computing 15-ESPOS	kbd	Affected
SUSE Linux Enterprise High Performance Computing 15-LTSS	kbd	Affected
SUSE Linux Enterprise Micro 5.0	kbd	Affected
SUSE Linux Enterprise Micro 5.1	kbd	Affected
SUSE Linux Enterprise Micro 5.2	kbd	Affected
SUSE Linux Enterprise Module for Basesystem 15	kbd	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP1	kbd	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP2	kbd	Affected
SUSE Linux Enterprise Module for Basesystem 15 SP3	kbd	Affected
SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT	kbd	Affected
SUSE Linux Enterprise Real Time 15 SP2	kbd	Affected
SUSE Linux Enterprise Real Time 15 SP3	kbd	Affected
SUSE Linux Enterprise Real Time 15 SP4	kbd	Affected
SUSE Linux Enterprise Server 12	kbd	Affected
SUSE Linux Enterprise Server 12 SP1	kbd	Affected
SUSE Linux Enterprise Server 12 SP1-LTSS	kbd	Affected
SUSE Linux Enterprise Server 12 SP2	kbd	Affected
SUSE Linux Enterprise Server 12 SP2-BCL	kbd	Affected
SUSE Linux Enterprise Server 12 SP2-ESPOS	kbd	Affected
SUSE Linux Enterprise Server 12 SP2-LTSS	kbd	Affected
SUSE Linux Enterprise Server 12 SP3	kbd	Affected
SUSE Linux Enterprise Server 12 SP3-BCL	kbd	Affected
SUSE Linux Enterprise Server 12 SP3-ESPOS	kbd	Affected
SUSE Linux Enterprise Server 12 SP3-LTSS	kbd	Affected
SUSE Linux Enterprise Server 12 SP4	kbd	Affected
SUSE Linux Enterprise Server 12 SP4-ESPOS	kbd	Affected
SUSE Linux Enterprise Server 12 SP4-LTSS	kbd	Affected
SUSE Linux Enterprise Server 12-LTSS	kbd	Affected
SUSE Linux Enterprise Server 15	kbd	Affected
SUSE Linux Enterprise Server 15 SP1	kbd	Affected
SUSE Linux Enterprise Server 15 SP1-BCL	kbd	Affected
SUSE Linux Enterprise Server 15 SP1-LTSS	kbd	Affected
SUSE Linux Enterprise Server 15 SP2	kbd	Affected
SUSE Linux Enterprise Server 15 SP2-BCL	kbd	Affected
SUSE Linux Enterprise Server 15 SP2-LTSS	kbd	Affected
SUSE Linux Enterprise Server 15 SP3	kbd	Affected
SUSE Linux Enterprise Server 15 SP3-BCL	kbd	Affected
SUSE Linux Enterprise Server 15 SP3-LTSS	kbd	Affected
SUSE Linux Enterprise Server 15-LTSS	kbd	Affected
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2	kbd	Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP1	kbd	Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP2	kbd	Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP3	kbd	Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP4	kbd	Affected
SUSE Linux Enterprise Server for SAP Applications 15	kbd	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP1	kbd	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP2	kbd	Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP3	kbd	Affected
SUSE Manager Proxy 4.0	kbd	Affected
SUSE Manager Proxy 4.1	kbd	Affected
SUSE Manager Proxy 4.2	kbd	Affected
SUSE Manager Proxy 4.3	kbd	Affected
SUSE Manager Proxy LTS 4.3	kbd	Affected
SUSE Manager Retail Branch Server 4.0	kbd	Affected
SUSE Manager Retail Branch Server 4.1	kbd	Affected
SUSE Manager Retail Branch Server 4.2	kbd	Affected
SUSE Manager Retail Branch Server 4.3	kbd	Affected
SUSE Manager Retail Branch Server LTS 4.3	kbd	Affected
SUSE Manager Server 4.0	kbd	Affected
SUSE Manager Server 4.1	kbd	Affected
SUSE Manager Server 4.2	kbd	Affected
SUSE Manager Server 4.3	kbd	Affected
SUSE Manager Server LTS 4.3	kbd	Affected
SUSE OpenStack Cloud 7	kbd	Affected
SUSE OpenStack Cloud 8	kbd	Affected
SUSE OpenStack Cloud 9	kbd	Affected
SUSE OpenStack Cloud Crowbar 8	kbd	Affected
SUSE OpenStack Cloud Crowbar 9	kbd	Affected
openSUSE Leap 15.3	kbd	Affected
openSUSE Leap 15.4	kbd	Released
openSUSE Leap 15.5	kbd	Affected
openSUSE Leap 15.6	kbd	Affected
openSUSE Leap Micro 5.2	kbd	Affected
openSUSE Leap Micro 5.3	kbd	Affected
openSUSE Leap Micro 5.4	kbd	Affected
openSUSE Leap Micro 5.5	kbd	Affected
Products at an unknown state of their lifecycle.
SLES-CHOST-BYOS-Aliyun	kbd	In progress
SLES-CHOST-BYOS-Azure	kbd	In progress
SLES-CHOST-BYOS-EC2	kbd	In progress
SLES-CHOST-BYOS-GCE	kbd	In progress
SLES-CHOST-BYOS-GDC	kbd	In progress
SLES-CHOST-BYOS-SAP-CCloud	kbd	In progress
Container Status
bci/bci-init:15.3 ses/6/cephcsi/cephcsi ses/6/rook/ceph ses/7.1/ceph/haproxy ses/7.1/ceph/keepalived ses/7.1/cephcsi/cephcsi ses/7.1/rook/ceph ses/7/ceph/ceph ses/7/ceph/grafana ses/7/cephcsi/cephcsi ses/7/rook/ceph suse/sle-micro-rancher/5.2 suse/sle-micro/5.0/toolbox suse/sles-16.1-kubevirt-minimal suse/sles/15.2/virt-handler:0.38.1 suse/sles/15.2/virt-launcher:0.38.1 suse/sles/15.3/libguestfs-tools:0.45.0 suse/sles/15.3/virt-handler:0.45.0 suse/sles/15.3/virt-launcher:0.45.0 trento/trento-db	kbd	Affected
bci/bci-init suse/hpc/warewulf4-x86_64/sle-hpc-node suse/kiosk/pulseaudio suse/kiosk/tigervnc-x11vnc suse/kiosk/xorg suse/manager/4.3/proxy-httpd suse/sle-micro-rancher/5.3 suse/sle-micro-rancher/5.4 suse/sle-micro/5.5 suse/sle-micro/base-5.5 suse/sle-micro/kvm-5.5 suse/sle-micro/rt-5.5 third-party/nvidia/driver:550-sles15.7 third-party/nvidia/driver:570-sles15.7 third-party/nvidia/driver:575-sles15.7 third-party/nvidia/driver:580-sles15.7 third-party/nvidia/driver:590-sles15.7 third-party/nvidia/driver:595-sles15.7 third-party/nvidia/driver:610-sles15.7	kbd	Released
bci/bci-init:15.4 bci/bci-init:15.5 bci/bci-init:15.6 bci/bci-init:16.0 bci/bci-init:16.1 bci/kiwi bci/kiwi:10 kiwi-templates-Minimal kiwi-templates-Minimal-Cloud-sap kiwi-templates-Minimal-MS-HyperV-sap kiwi-templates-Minimal-VMware-sap kiwi-templates-Minimal-kvm-and-xen-sap rancher/elemental-builder-image/5.3 rancher/elemental-teal-iso/5.3 rancher/elemental-teal-iso/5.4 rancher/elemental-teal-rt/5.3 rancher/elemental-teal-rt/5.4 rancher/elemental-teal/5.3 rancher/elemental-teal/5.4 rancher/seedimage-builder suse/kiosk/pulseaudio:17 suse/kiosk/xorg:21 suse/manager/5.0/x86_64/proxy-httpd suse/manager/5.0/x86_64/server suse/manager/5.0/x86_64/server-hub-xmlrpc-api suse/multi-linux-manager/5.1/x86_64/proxy-httpd suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker suse/multi-linux-manager/5.1/x86_64/server suse/multi-linux-manager/5.1/x86_64/server-hub-xmlrpc-api suse/multi-linux-manager/5.2/x86_64/server suse/multi-linux-manager/5.2/x86_64/server-hub-xmlrpc-api suse/pcp suse/pcp:5 suse/pcp:6 suse/postgres suse/postgres:10 suse/postgres:12 suse/postgres:13 suse/postgres:14 suse/sles/15.4/cdi-importer:1.43.0 suse/sles/15.4/libguestfs-tools:0.49.0 suse/sles/15.4/virt-handler:0.49.0 suse/sles/15.4/virt-launcher:0.49.0 suse/sles/15.5/cdi-importer:1.55.0 suse/sles/15.5/libguestfs-tools:0.58.0 suse/sles/15.5/virt-handler:0.58.0 suse/sles/15.5/virt-launcher:0.58.0 suse/sles/15.6/libguestfs-tools:1.1.1 suse/sles/15.6/virt-handler:1.1.1 suse/sles/15.6/virt-launcher:1.1.1 suse/sles/15.7/libguestfs-tools:1.5.0 suse/sles/15.7/virt-handler:1.5.0 suse/sles/15.7/virt-launcher:1.5.0 suse/sles/16.1/containerdisk-minimal third-party/nvidia/driver:550.163.01-sles15.7 third-party/nvidia/driver:570.195.03-sles15.7 third-party/nvidia/driver:570.211.01-sles15.7 third-party/nvidia/driver:575.57.08-sles15.7 third-party/nvidia/driver:580.105.08-sles15.7 third-party/nvidia/driver:580.126.09-sles15.7 third-party/nvidia/driver:580.126.16-sles15.7 third-party/nvidia/driver:580.126.20-sles15.7 third-party/nvidia/driver:580.82.07-sles15.7 third-party/nvidia/driver:580.95.05-sles15.7 third-party/nvidia/driver:590.48.01-sles15.7 third-party/nvidia/driver:595-sles16.0 third-party/nvidia/driver:595.45.04-sles15.7 third-party/nvidia/driver:595.45.04-sles16.0 third-party/nvidia/driver:595.58.03-sles15.7 third-party/nvidia/driver:595.58.03-sles16.0 third-party/nvidia/driver:610-sles16.0	kbd	In progress

---

SUSE Timeline for this CVE

CVE page created: Mon Aug 17 21:37:29 2026
CVE page last modified: Sat Sep 26 12:49:58 2026