Suse Linux Enterprise Real Time vulnerabilities

7 CVEs affecting Suse Linux Enterprise Real Time, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-31431, published 2026-04-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-32463: Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability, published 2025-06-30. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2025-09-29. EPSS: 55.5% chance of exploitation in the next 30 days. Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.
CVE-2026-31431: Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability, published 2026-04-22. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2026-05-01. EPSS: 3.4% chance of exploitation in the next 30 days. In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the…
CVE-2009-2692, published 2009-08-14. High severity, CVSS 7.8. EPSS: 14.6% chance of exploitation in the next 30 days. The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a…
CVE-2010-2959, published 2010-09-08. High severity, CVSS 7.2. EPSS: 3.7% chance of exploitation in the next 30 days. Integer overflow in net/can/bcm.c in the Controller Area Network (CAN) implementation in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and 2.6.35.x before…
CVE-2022-27239, published 2022-04-27. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges.
CVE-2010-3865, published 2011-01-11. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. Integer overflow in the rds_rdma_pages function in net/rds/rdma.c in the Linux kernel allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted iovec…
CVE-2010-2803, published 2010-09-08. Low severity, CVSS 1.9. EPSS: 0.5% chance of exploitation in the next 30 days. The drm_ioctl function in drivers/gpu/drm/drm_drv.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.27.53, 2.6.32.x before 2.6.32.21, 2.6.34.x before 2.6.34.6, and…