CVE-2022-50233

Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}

Both dev_name and short_name are not guaranteed to be NULL terminated so this instead use strnlen and then attempt to determine if the resulting string needs to be truncated or not.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.15%Up 0.1 points since Aug 10, 2025

What each source reports

CVE List Score used 7.8

Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}

Both dev_name and short_name are not guaranteed to be NULL terminated so this instead use strnlen and then attempt to determine if the resulting string needs to be truncated or not.

Record: CVE-2022-50233
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

EUVDEUVD-2022-55213 7.8

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}

Both dev_name and short_name are not guaranteed to be NULL terminated so this instead use strnlen and then attempt to determine if the resulting string needs to be truncated or not.

Record: EUVD-2022-55213
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-m5mr-p52m-vp72 5.5

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix using...

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}

Both dev_name and short_name are not guaranteed to be NULL terminated so this instead use strnlen and then attempt to determine if the resulting string needs to be truncated or not.

Record: GHSA-m5mr-p52m-vp72
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}

Both dev_name and short_name are not guaranteed to be NULL terminated so this instead use strnlen and then attempt to determine if the resulting string needs to be truncated or not.

Record: CVE-2022-50233
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSV 7.8

Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}

Both dev_name and short_name are not guaranteed to be NULL terminated so this instead use strnlen and then attempt to determine if the resulting string needs to be truncated or not.

Record: CVE-2022-50233
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2022-50233 5.5

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} Both dev_name and short_name are not guaranteed to be NULL terminated so this instead use strnlen and then attempt to determine if the resulting string needs to be truncated or not.

Record: DEBIAN-CVE-2022-50233
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-03

Show 19 moreShow less

OSVROOT-OS-DEBIAN-11-CVE-2022-50233 5.5

CVE-2022-50233 in linux - Patched by Root

Root has patched CVE-2022-50233 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-11-CVE-2022-50233
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2204-CVE-2022-50233 5.5

CVE-2022-50233 in linux - Patched by Root

Root has patched CVE-2022-50233 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2204-CVE-2022-50233
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-06

OSVUBUNTU-CVE-2022-50233 5.5

Record: UBUNTU-CVE-2022-50233
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVAZL-70474 No score

CVE-2022-50233 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name}

Both dev_name and short_name are not guaranteed to be NULL terminated so this instead use strnlen and then attempt to determine if the resulting string needs to be truncated or not.

Record: AZL-70474
Updated: 2026-11-02

OSVSUSE-SU-2025:03613-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-49980: USB: gadget: fix use-after-free read in usb_udc_uevent() (bsc#1245110).
CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} (bsc#1246968).
CVE-2022-50248: wifi: iwlwifi: mvm: fix double free on tx path (bsc#1249840).
CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249846).
CVE-2022-50258: wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() (bsc#1249947).
CVE-2022-50381: md: fix a crash in mempool_free (bsc#1250257).
CVE-2022-50386: Bluetooth: L2CAP: Fix user-after-free (bsc#1250301).
CVE-2022-50401: nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (bsc#1250140).
CVE-2022-50408: wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (bsc#1250391).
CVE-2022-50409: net: If sock is dead do not access sock's sk_wq in sk_stream_wait_memory (bsc#1250392).
CVE-2023-53178: mm: fix zswap writeback race condition (bsc#1249827).
CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250313).
CVE-2023-53438: x86/MCE: Always save CS register on AMD Zen IF Poison errors (bsc#1250180).
CVE-2025-21969: kABI workaround for l2cap_conn changes (bsc#1240784).
CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38553: net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1248255).
CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248399).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38685: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1249220).
CVE-2025-38713: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1249200).
CVE-2025-39751: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1249538).
CVE-2025-39823: KVM: x86: use array_index_nospec with indices that come from guest (bsc#1250002).

The following non-security bugs were fixed:

Limit patch filenames to 100 characters (bsc#1249604).
Move pesign-obs-integration requirement from kernel-syms to kernel devel subpackage (bsc#1248108).
hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (git-fixes).
kernel-binary: Another installation ordering fix (bsc#1241353).
kernel-source: Do not list mkspec and its inputs as sources (bsc#1250522).
kernel-subpackage-build: Decompress ghost file when compressed version exists (bsc#1249346)
kernel-syms.spec: Drop old rpm release number hack (bsc#1247172).
rpm/kernel-subpackage-spec: Skip brp-strip-debug to avoid file truncation (bsc#1246879)
rpm/mkspec: Fix missing kernel-syms-rt creation (bsc#1244337)
rpm: Configure KABI checkingness macro (bsc#1249186)
rpm: Drop support for kabi/arch/ignore-flavor (bsc#1249186)
rpm: Link arch-symbols script from scripts directory.
rpm: Link guards script from scripts directory.
use uniform permission checks for all mount propagation changes (git-fixes).

Record: SUSE-SU-2025:03613-1
Updated: 2026-11-02

OSVSUSE-SU-2025:03614-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} (bsc#1246968).
CVE-2022-50242: drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() (bsc#1249696).
CVE-2022-50244: cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() (bsc#1249647).
CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249846).
CVE-2022-50258: wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() (bsc#1249947).
CVE-2022-50265: kcm: annotate data-races around kcm->rx_wait (bsc#1249744).
CVE-2022-50278: PNP: fix name memory leak in pnp_alloc_dev() (bsc#1249715).
CVE-2022-50285: mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages (bsc#1249803).
CVE-2022-50288: qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure (bsc#1249802).
CVE-2022-50291: kcm: annotate data-races around kcm->rx_psock (bsc#1249798).
CVE-2022-50294: wifi: libertas: fix memory leak in lbs_init_adapter() (bsc#1249799).
CVE-2022-50297: wifi: ath9k: verify the expected usb_endpoints are present (bsc#1250250).
CVE-2022-50304: mm: export bdi_unregister (bsc#1249725).
CVE-2022-50311: cxl: Fix refcount leak in cxl_calc_capp_routing (bsc#1249720).
CVE-2022-50312: drivers: serial: jsm: fix some leaks in probe (bsc#1249716).
CVE-2022-50321: wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() (bsc#1249706).
CVE-2022-50330: crypto: cavium - prevent integer overflow loading firmware (bsc#1249700).
CVE-2022-50349: misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() (bsc#1249920).
CVE-2022-50352: net: hns: fix possible memory leak in hnae_ae_register() (bsc#1249922).
CVE-2022-50359: media: cx88: Fix a null-ptr-deref bug in buffer_prepare() (bsc#1250269).
CVE-2022-50365: skbuff: Account for tail adjustment during pull operations (bsc#1250084).
CVE-2022-50375: tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown (bsc#1250132).
CVE-2022-50386: Bluetooth: L2CAP: Fix user-after-free (bsc#1250301).
CVE-2022-50396: net: sched: fix memory leak in tcindex_set_parms (bsc#1250104).
CVE-2022-50402: drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (bsc#1250363).
CVE-2022-50405: net/tunnel: wait until all sk_user_data reader finish before releasing the sock (bsc#1250155).
CVE-2022-50406: iomap: iomap: fix memory corruption when recording errors during writeback (bsc#1250165).
CVE-2022-50408: wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (bsc#1250391).
CVE-2022-50409: net: If sock is dead do not access sock's sk_wq in sk_stream_wait_memory (bsc#1250392).
CVE-2022-50419: Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times (bsc#1250394).
CVE-2023-53148: igb: Do not bring the device up after non-fatal error (bsc#1249842).
CVE-2023-53153: wifi: cfg80211: Partial revert 'wifi: cfg80211: Fix use after free for wext' (bsc#1249877).
CVE-2023-53176: serial: 8250: Fix oops for port->pm on uart_change_pm() (bsc#1249991).
CVE-2023-53178: mm: zswap: fix missing folio cleanup in writeback race path (bsc#1249827 git-fix).
CVE-2023-53199: wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails (bsc#1249683).
CVE-2023-53201: RDMA/bnxt_re: wraparound mbox producer index (bsc#1249687).
CVE-2023-53226: wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (bsc#1249658).
CVE-2023-53248: drm/amdgpu: install stub fence into potential unused fence pointers (bsc#1249779).
CVE-2023-53254: drivers: base: cacheinfo: Fix shared_cpu_map changes in event of CPU hotplug (bsc#1249871).
CVE-2023-53272: net: ena: fix shift-out-of-bounds in exponential backoff (bsc#1249917).
CVE-2023-53277: wifi: iwl3945: Add missing check for create_singlethread_workqueue…

Record: SUSE-SU-2025:03614-1
Updated: 2026-11-02

OSVSUSE-SU-2025:03615-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} (bsc#1246968).
CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249846).
CVE-2022-50409: net: If sock is dead do not access sock's sk_wq in sk_stream_wait_memory (bsc#1250392).
CVE-2023-53178: mm: fix zswap writeback race condition (bsc#1249827).
CVE-2023-53257: wifi: mac80211: check S1G action frame size (bsc#1249869).
CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250313).
CVE-2023-53438: x86/MCE: Always save CS register on AMD Zen IF Poison errors (bsc#1250180).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37958: mm/huge_memory: fix dereferencing invalid pmd migration entry (bsc#1243539).
CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1245666).
CVE-2025-38380: i2c/designware: Fix an initialization issue (bsc#1247028).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38553: net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1248255).
CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248399).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38685: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1249220).
CVE-2025-38706: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (bsc#1249195).
CVE-2025-38713: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1249200).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-39691: fs/buffer: fix use-after-free when call bh_read() helper (bsc#1249374).
CVE-2025-39703: net, hsr: reject HSR frame if skb can't hold tag (bsc#1249315).
CVE-2025-39726: s390/ism: fix concurrency management in ism_cmd() (bsc#1249266).
CVE-2025-39746: wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1249516).
CVE-2025-39751: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1249538).
CVE-2025-39790: bus: mhi: host: Detect events pointing to unexpected TREs (bsc#1249548).
CVE-2025-39823: KVM: x86: use array_index_nospec with indices that come from guest (bsc#1250002).
CVE-2025-39824: HID: asus: fix UAF via HID_CLAIMED_INPUT validation (bsc#1250007).
CVE-2025-39860: Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() (bsc#1250247).
CVE-2025-39869: dmaengine: ti: edma: Fix memory allocation size for queue_priority_map (bsc#1250406).

The following non-security bugs were fixed:

!CONFIG & reference -> this is bug, immediate fail
CONFIG & no reference -> OK temporarily, must be resolved eventually
Do not self obsolete older kernel variants
Kconfig.suse: Add KABI checkiness macro (config) (bsc#1249186).
Limit patch filenames to 100 characters (bsc#1249604).
Move pesign-obs-integration requirement from kernel-syms to kernel devel subpackage (bsc#1248108).
Update config files. (bsc#1249186) Enable where we define KABI refs + rely on Kconfig deps.
build_bug.h: Add KABI assert (bsc#1249186).
hv_netvsc: Fix panic during namespace deletion with VF (bsc#1248111).
kernel-binary: Another installation ordering fix (bsc#1241353).
kernel-source: Do not list mkspec and its inputs as sources (bsc#1250522).
kernel-subpackage-build: Decompress ghost file when compressed version exists (bsc#1249346)
kernel-syms.spec: Drop…

Record: SUSE-SU-2025:03615-1
Updated: 2026-11-02

OSVSUSE-SU-2025:03626-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-49980: USB: gadget: fix use-after-free read in usb_udc_uevent() (bsc#1245110).
CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} (bsc#1246968).
CVE-2022-50248: wifi: iwlwifi: mvm: fix double free on tx path (bsc#1249840).
CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249846).
CVE-2022-50258: wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() (bsc#1249947).
CVE-2022-50381: md: fix a crash in mempool_free (bsc#1250257).
CVE-2022-50386: Bluetooth: L2CAP: Fix user-after-free (bsc#1250301).
CVE-2022-50401: nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (bsc#1250140).
CVE-2022-50408: wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (bsc#1250391).
CVE-2022-50409: net: If sock is dead do not access sock's sk_wq in sk_stream_wait_memory (bsc#1250392).
CVE-2022-50412: drm: bridge: adv7511: unregister cec i2c device after cec adapter (bsc#1250189).
CVE-2023-53178: mm: fix zswap writeback race condition (bsc#1249827).
CVE-2023-53220: media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() (bsc#1250337).
CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250313).
CVE-2023-53438: x86/MCE: Always save CS register on AMD Zen IF Poison errors (bsc#1250180).
CVE-2024-53093: nvme-multipath: defer partition scanning (bsc#1233640).
CVE-2025-21969: kABI workaround for l2cap_conn changes (bsc#1240784).
CVE-2025-38011: drm/amdgpu: csa unmap use uninterruptible lock (bsc#1244729).
CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38553: net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1248255).
CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248399).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38685: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1249220).
CVE-2025-38713: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1249200).
CVE-2025-39751: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1249538).
CVE-2025-39823: KVM: x86: use array_index_nospec with indices that come from guest (bsc#1250002).

The following non-security bugs were fixed:

Limit patch filenames to 100 characters (bsc#1249604).
Move pesign-obs-integration requirement from kernel-syms to kernel devel subpackage (bsc#1248108).
git_sort: Make tests independent of environment.
hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (git-fixes).
kernel-binary: Another installation ordering fix (bsc#1241353).
kernel-source: Do not list mkspec and its inputs as sources (bsc#1250522).
kernel-subpackage-build: Decompress ghost file when compressed version exists (bsc#1249346).
kernel-syms.spec: Drop old rpm release number hack (bsc#1247172).
rpm/kernel-subpackage-spec: Skip brp-strip-debug to avoid file truncation (bsc#1246879).
rpm/mkspec: Fix missing kernel-syms-rt creation (bsc#1244337).
rpm: Configure KABI checkingness macro (bsc#1249186).
rpm: Drop support for kabi/arch/ignore-flavor (bsc#1249186).
scripts/python/kss-dashboard: attempt getting smash data
scripts/python/kss-dashboard: fetch into repos if stale
scripts/python/kss-dashboard: implement CVSSv3.1 score consistency check
scripts/python/kss-dashboard: prepare for the alternative CVE branch
scripts/python/kss-dashboard: simplify control flow
scripts/python/kss-dashboard: speed up patch checking a bit
scripts/python/kss-dashboard: use…

Record: SUSE-SU-2025:03626-1
Updated: 2026-11-02

OSVSUSE-SU-2025:03628-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
CVE-2022-49980: USB: gadget: fix use-after-free read in usb_udc_uevent() (bsc#1245110).
CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} (bsc#1246968).
CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249846).
CVE-2022-50409: net: If sock is dead do not access sock's sk_wq in sk_stream_wait_memory (bsc#1250392).
CVE-2023-53178: mm: fix zswap writeback race condition (bsc#1249827).
CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250313).
CVE-2023-53438: x86/MCE: Always save CS register on AMD Zen IF Poison errors (bsc#1250180).
CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37958: mm/huge_memory: fix dereferencing invalid pmd migration entry (bsc#1243539).
CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
CVE-2025-38084: mm/hugetlb: unshare page tables during VMA split, not before (bsc#1245498).
CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245499).
CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1245666).
CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
CVE-2025-38380: i2c/designware: Fix an initialization issue (bsc#1247028).
CVE-2025-38470: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (bsc#1247288).
CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1247317).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38553: net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1248255).
CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248399).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38685: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1249220).
CVE-2025-38706: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (bsc#1249195).
CVE-2025-38713: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1249200).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-39691: fs/buffer: fix use-after-free when call bh_read() helper (bsc#1249374).
CVE-2025-39703: net, hsr: reject HSR frame if skb can't hold tag (bsc#1249315).
CVE-2025-39726: s390/ism: fix concurrency management in ism_cmd() (bsc#1249266).
CVE-2025-39746: wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1249516).
CVE-2025-39751: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1249538).
CVE-2025-39790: bus: mhi: host: Detect events pointing to unexpected TREs (bsc#1249548).
CVE-2025-39797: xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (bsc#1249608).
CVE-2025-39823: KVM: x86: use array_index_nospec with indices that come from guest (bsc#1250002).
CVE-2025-39824: HID: asus: fix UAF via HID_CLAIMED_INPUT validation (bsc#1250007).
CVE-2025-39860: Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() (bsc#1250247).
CVE-2025-39869: dmaengine: ti: edma: Fix memory allocation size for queue_priority_map (bsc#1250406).

The following non-security bugs were fixed:

Limit patch filenames to 100 characters (bsc#1249604).
Move pesign-obs-integration requirement from kernel-syms to…

Record: SUSE-SU-2025:03628-1
Updated: 2026-11-02

OSVSUSE-SU-2025:3716-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-49980: USB: gadget: fix use-after-free read in usb_udc_uevent() (bsc#1245110).
CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} (bsc#1246968).
CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249846).
CVE-2022-50409: net: If sock is dead do not access sock's sk_wq in sk_stream_wait_memory (bsc#1250392).
CVE-2023-53178: mm: fix zswap writeback race condition (bsc#1249827).
CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250313).
CVE-2023-53438: x86/MCE: Always save CS register on AMD Zen IF Poison errors (bsc#1250180).
CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37958: mm/huge_memory: fix dereferencing invalid pmd migration entry (bsc#1243539).
CVE-2025-38084: mm/hugetlb: unshare page tables during VMA split, not before (bsc#1245498).
CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245499).
CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1245666).
CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
CVE-2025-38380: i2c/designware: Fix an initialization issue (bsc#1247028).
CVE-2025-38470: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (bsc#1247288).
CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1247317).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38553: net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1248255).
CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248399).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38685: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1249220).
CVE-2025-38706: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (bsc#1249195).
CVE-2025-38713: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1249200).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-39691: fs/buffer: fix use-after-free when call bh_read() helper (bsc#1249374).
CVE-2025-39703: net, hsr: reject HSR frame if skb can't hold tag (bsc#1249315).
CVE-2025-39726: s390/ism: fix concurrency management in ism_cmd() (bsc#1249266).
CVE-2025-39746: wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1249516).
CVE-2025-39751: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1249538).
CVE-2025-39790: bus: mhi: host: Detect events pointing to unexpected TREs (bsc#1249548).
CVE-2025-39797: xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (bsc#1249608).
CVE-2025-39823: KVM: x86: use array_index_nospec with indices that come from guest (bsc#1250002).
CVE-2025-39824: HID: asus: fix UAF via HID_CLAIMED_INPUT validation (bsc#1250007).
CVE-2025-39860: Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() (bsc#1250247).
CVE-2025-39869: dmaengine: ti: edma: Fix memory allocation size for queue_priority_map (bsc#1250406).

The following non-security bugs were fixed:

Kconfig.suse: Add KABI checkiness macro (config) (bsc#1249186).
Limit patch filenames to 100 characters (bsc#1249604).
Move pesign-obs-integration requirement from kernel-syms to kernel devel subpackage (bsc#1248108).
Revert backported patches for bsc#1238160.
btrfs: avoid NULL pointer dereference if…

Record: SUSE-SU-2025:3716-1
Updated: 2026-11-02

OSVSUSE-SU-2025:3761-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} (bsc#1246968).
CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249846).
CVE-2022-50409: net: If sock is dead do not access sock's sk_wq in sk_stream_wait_memory (bsc#1250392).
CVE-2023-53178: mm: fix zswap writeback race condition (bsc#1249827).
CVE-2023-53257: wifi: mac80211: check S1G action frame size (bsc#1249869).
CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250313).
CVE-2023-53438: x86/MCE: Always save CS register on AMD Zen IF Poison errors (bsc#1250180).
CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
CVE-2025-37958: mm/huge_memory: fix dereferencing invalid pmd migration entry (bsc#1243539).
CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1245666).
CVE-2025-38380: i2c/designware: Fix an initialization issue (bsc#1247028).
CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
CVE-2025-38553: net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1248255).
CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248399).
CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
CVE-2025-38685: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1249220).
CVE-2025-38706: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (bsc#1249195).
CVE-2025-38713: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1249200).
CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
CVE-2025-39691: fs/buffer: fix use-after-free when call bh_read() helper (bsc#1249374).
CVE-2025-39703: net, hsr: reject HSR frame if skb can't hold tag (bsc#1249315).
CVE-2025-39726: s390/ism: fix concurrency management in ism_cmd() (bsc#1249266).
CVE-2025-39746: wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1249516).
CVE-2025-39751: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1249538).
CVE-2025-39790: bus: mhi: host: Detect events pointing to unexpected TREs (bsc#1249548).
CVE-2025-39823: KVM: x86: use array_index_nospec with indices that come from guest (bsc#1250002).
CVE-2025-39824: HID: asus: fix UAF via HID_CLAIMED_INPUT validation (bsc#1250007).
CVE-2025-39860: Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() (bsc#1250247).
CVE-2025-39869: dmaengine: ti: edma: Fix memory allocation size for queue_priority_map (bsc#1250406).

The following non-security bugs were fixed:

Kconfig.suse: Add KABI checkiness macro (config) (bsc#1249186).
Limit patch filenames to 100 characters (bsc#1249604).
Move pesign-obs-integration requirement from kernel-syms to kernel devel subpackage (bsc#1248108).
Revert selinux patches that caused regressions (bsc#1249353).
btrfs: avoid NULL pointer dereference if no valid extent tree (bsc#1249158).
build_bug.h: Add KABI assert (bsc#1249186).
hv_netvsc: Fix panic during namespace deletion with VF (bsc#1248111).
kabi/severities: ignore kABI for atheros helper modules The symbols are used only internally by atheros drivers.
kernel-binary: Another installation ordering fix (bsc#1241353).
kernel-source: Do not list mkspec and its inputs as sources (bsc#1250522).
kernel-subpackage-build: Decompress ghost file when compressed version exists (bsc#1249346)
kernel-syms.spec: Drop…

Record: SUSE-SU-2025:3761-1
Updated: 2026-11-02

OSVSUSE-SU-2026:0154-1 No score

Security update for the Linux Kernel (Live Patch 63 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise kernel 4.12.14-122.237 fixes various security issues