Skip to main content
CVE-2025-40136VulnerabilityPublished Updated

SUSE · Security update for the Linux Kernel

Affects SUSESource GCVE Database

0
Compare

Mentioned vulnerabilities

Authoritative record:CVE-2025-40136· Low

Not known to be exploited · fixed in SUSE package updates : update SUSE when convenient.

Data as of 10 Nov 2026, 20:18 UTC

Severity
Low

Rated by Threat Radar · CVSS not yet scored by NVD

Thin evidence

One scorer or none
Patch
Available – fixed in e0a82361cef20380b1c0f342c7e92f8ddabeefc2, 24315474ca913c0693939ab74b389ee04c7d3020, 9228facb308157ac0bdd264b873187896f7a9c7a +2

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 12 Nov 2025

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 10 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 3536cc55cadaf2a03241915f9cfdaf6cd073e4fe, < e0a82361cef20380b1c0f342c7e92f8ddabeefc2
Fixed in
  • e0a82361cef20380b1c0f342c7e92f8ddabeefc2
LinuxLinuxAffected
  • ≥ 3536cc55cadaf2a03241915f9cfdaf6cd073e4fe, < 24315474ca913c0693939ab74b389ee04c7d3020
Fixed in
  • 24315474ca913c0693939ab74b389ee04c7d3020
LinuxLinuxAffected
  • ≥ 3536cc55cadaf2a03241915f9cfdaf6cd073e4fe, < 9228facb308157ac0bdd264b873187896f7a9c7a
Fixed in
  • 9228facb308157ac0bdd264b873187896f7a9c7a
LinuxLinuxAffected
  • ≥ 3536cc55cadaf2a03241915f9cfdaf6cd073e4fe, < 854da2b0df1654d63963d587b12fec6068d89643
Fixed in
  • 854da2b0df1654d63963d587b12fec6068d89643
LinuxLinuxAffected
  • ≥ 3536cc55cadaf2a03241915f9cfdaf6cd073e4fe, < 5f75857ed634d04266301d7a4f695a7deeb9bfdc
Fixed in
  • 5f75857ed634d04266301d7a4f695a7deeb9bfdc
LinuxLinuxAffected
  • =6.1
Fixed in–

AI-suggested

Apply the SUSE Linux Enterprise 16.0 kernel update provided by the vendor to address these vulnerabilities. The update contains official fixes for all listed CVEs. No additional mitigation steps are indicated beyond applying the security update.

Description

SUSE Linux Enterprise 16.0 kernel received a security update addressing multiple vulnerabilities across various components including crypto, procfs, x86/efi, tracing, Bluetooth, netfilter, USB, drm, and others. These fixes resolve issues such as null pointer dereferences, race conditions, memory corruption, use-after-free, integer overflows, and other security flaws. The update mitigates a broad set of potential security risks in the kernel.

References

Community reviews

Loading reviews…