CVE-2025-21690

In the Linux kernel, the following vulnerability has been resolved:

scsi: storvsc: Ratelimit warning logs to prevent VM denial of service

If there's a persistent error in the hypervisor, the SCSI warning for failed I/O can flood the kernel log and max out CPU utilization, preventing troubleshooting from the VM side. Ratelimit the warning so it doesn't DoS the VM.

In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Ratelimit warning logs to prevent VM denial of service If there's a persistent error in the hypervisor, the SCSI warning for failed I/O can flood the kernel log and max out CPU utilization, preventing troubleshooting from the VM side. Ratelimit the warning so it doesn't DoS the VM.

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans

There is a kernel API ntb_mw_clear_trans() would pass 0 to both addr and size. This would make xlate_pos negative.

[ 23.734156] switchtec switchtec0: MW 0: part 0 addr 0x0000000000000000 size 0x0000000000000000 [ 23.734158] ================================================================================ [ 23.734172] UBSAN: shift-out-of-bounds in drivers/ntb/hw/mscc/ntb_hw_switchtec.c:293:7 [ 23.734418] shift exponent -1 is negative

Ensuring xlate_pos is a positive or zero before BIT.(CVE-2023-53034)

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()

The "submit->cmd[i].size" and "submit->cmd[i].offset" variables are u32 values that come from the user via the submit_lookup_cmds() function. This addition could lead to an integer wrapping bug so use size_add() to prevent that.

Patchwork: https://patchwork.freedesktop.org/patch/624696/(CVE-2024-52559)

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()

Extended the mi_enum_attr() function interface with an additional parameter, struct ntfs_inode *ni, to allow marking the inode as bad as soon as an error is detected.(CVE-2024-52560)

In the Linux kernel, the following vulnerability has been resolved:

crypto: qat/qat_4xxx - fix off by one in uof_get_name()

The fw_objs[] array has "num_objs" elements so the > needs to be >= to prevent an out of bounds read.(CVE-2024-53162)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: fix use-after-free of signing key

Customers have reported use-after-free in @ses->auth_key.response with SMB2.1 + sign mounts which occurs due to following race:

task A task B cifs_mount() dfs_mount_share() get_session() cifs_mount_get_session() cifs_send_recv() cifs_get_smb_ses() compound_send_recv() cifs_setup_session() smb2_setup_request() kfree_sensitive() smb2_calc_signature() crypto_shash_setkey() UAF

Fix this by ensuring that we have a valid @ses->auth_key.response by checking whether @ses->ses_status is SES_GOOD or SES_EXITING with @ses->ses_lock held. After commit 24a9799aa8ef ("smb: client: fix UAF in smb2_reconnect_server()"), we made sure to call ->logoff() only when @ses was known to be good (e.g. valid ->auth_key.response), so it's safe to access signing key when @ses->ses_status == SES_EXITING.(CVE-2024-53179)

In the Linux kernel, the following vulnerability has been resolved:

scsi: ufs: bsg: Set bsg_queue to NULL after removal

Currently, this does not cause any issues, but I believe it is necessary to set bsg_queue to NULL after removing it to prevent potential use-after-free (UAF) access.(CVE-2024-54458)

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86: Play nice with protected guests in complete_hypercall_exit()

Use is_64_bit_hypercall() instead of is_64_bit_mode() to detect a 64-bit hypercall when completing said hypercall. For guests with protected state, e.g. SEV-ES and SEV-SNP, KVM must assume the hypercall was made in 64-bit mode as the vCPU state needed to detect 64-bit mode is unavailable.

Hacking the sev_smoke_test selftest to generate a KVM_HC_MAP_GPA_RANGE hypercall via VMGEXIT trips the WARN:

------------[ cut here ]------------ WARNING: CPU: 273 PID: 326626 at arch/x86/kvm/x86.h:180 complete_hypercall_exit+0x44/0xe0 [kvm] Modules linked in: kvm_amd kvm ... [last unloaded: kvm] CPU: 273 UID: 0 PID: 326626 Comm: sev_smoke_test Not tainted 6.12.0-smp--392e932fa0f3-feat…

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans

There is a kernel API ntb_mw_clear_trans() would pass 0 to both addr and size. This would make xlate_pos negative.

[ 23.734156] switchtec switchtec0: MW 0: part 0 addr 0x0000000000000000 size 0x0000000000000000 [ 23.734158] ================================================================================ [ 23.734172] UBSAN: shift-out-of-bounds in drivers/ntb/hw/mscc/ntb_hw_switchtec.c:293:7 [ 23.734418] shift exponent -1 is negative

Ensuring xlate_pos is a positive or zero before BIT.(CVE-2023-53034)

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to shrink read extent node in batches

We use rwlock to protect core structure data of extent tree during its shrink, however, if there is a huge number of extent nodes in extent tree, during shrink of extent tree, it may hold rwlock for a very long time, which may trigger kernel hang issue.

This patch fixes to shrink read extent node in batches, so that, critical region of the rwlock can be shrunk to avoid its extreme long time hold.(CVE-2024-41935)

In the Linux kernel, the following vulnerability has been resolved:

vrf: revert "vrf: Remove unnecessary RCU-bh critical section"

This reverts commit 504fc6f4f7f681d2a03aa5f68aad549d90eab853.

dev_queue_xmit_nit is expected to be called with BH disabled. __dev_queue_xmit has the following:

    /* Disable soft irqs for various locks below. Also
     * stops preemption for RCU.
     */
    rcu_read_lock_bh();

VRF must follow this invariant. The referenced commit removed this protection. Which triggered a lockdep warning:

================================
WARNING: inconsistent lock state
6.11.0 #1 Tainted: G        W
--------------------------------
inconsistent {IN-SOFTIRQ-W} -> {SOFTIRQ-ON-W} usage.
btserver/134819 [HC0[0]:SC0[0]:HE1:SE1] takes:
ffff8882da30c118 (rlock-AF_PACKET){+.?.}-{2:2}, at: tpacket_rcv+0x863/0x3b30
{IN-SOFTIRQ-W} state was registered at:
  lock_acquire+0x19a/0x4f0
  _raw_spin_lock+0x27/0x40
  packet_rcv+0xa33/0x1320
  __netif_receive_skb_core.constprop.0+0xcb0/0x3a90
  __netif_receive_skb_list_core+0x2c9/0x890
  netif_receive_skb_list_internal+0x610/0xcc0
      [...]

other info that might help us debug this:
 Possible unsafe locking scenario:

       CPU0
       ----
  lock(rlock-AF_PACKET);
  <Interrupt>
    lock(rlock-AF_PACKET);

 *** DEADLOCK ***

Call Trace:
 <TASK>
 dump_stack_lvl+0x73/0xa0
 mark_lock+0x102e/0x16b0
 __lock_acquire+0x9ae/0x6170
 lock_acquire+0x19a/0x4f0
 _raw_spin_lock+0x27/0x40
 tpacket_rcv+0x863/0x3b30
 dev_queue_xmit_nit+0x709/0xa40
 vrf_finish_direct+0x26e/0x340 [vrf]
 vrf_l3_out+0x5f4/0xe80 [vrf]
 __ip_local_out+0x51e/0x7a0
      [...](CVE-2024-49980)

In the Linux kernel, the following vulnerability has been resolved:

drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()

The "submit->cmd[i].size" and "submit->cmd[i].offset" variables are u32 values that come from the user via the submit_lookup_cmds() function. This addition could lead to an integer wrapping bug so use size_add() to prevent that.

Patchwork: https://patchwork.freedesktop.org/patch/624696/(CVE-2024-52559)

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()

Extended the mi_enum_attr() function interface with an additional parameter, struct ntfs_inode *ni, to allow marking the inode as bad as soon as an error is detected.(CVE-2024-52560)

In the Linux kernel, the following vulnerability has been resolved:

crypto: qat/qat_4xxx - fix off by one in uof_get_name()

The fw_objs[] array has "num_objs" elements so the > needs to be >= to…

Root has patched CVE-2025-21690 in the linux package for Root:Debian:11. Multiple fixed versions available.

In the Linux kernel, the following vulnerability has been resolved: scsi: storvsc: Ratelimit warning logs to prevent VM denial of service If there's a persistent error in the hypervisor, the SCSI warning for failed I/O can flood the kernel log and max out CPU utilization, preventing troubleshooting from the VM side. Ratelimit the warning so it doesn't DoS the VM.

• tracing: Verify event formats that have "%*p.." {CVE-2025-37938}
• HID: pidff: Fix null pointer dereference in pidff_find_fields {CVE-2025-37862}
• scsi: st: Fix array overflow in st_setup() {CVE-2025-37857}
• drm/amdkfd: debugfs hang_hws skip GPU with MES {CVE-2025-37853}
• mm/vmscan: don't try to reclaim hwpoison folio {CVE-2025-37834}
• cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() {CVE-2025-37830}
• drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() {CVE-2025-37852}
• cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() {CVE-2025-37829}
• sound/virtio: Fix cancel_sync warnings on uninitialized work_structs {CVE-2025-37805}
• net: tls: explicitly disallow disconnect {CVE-2025-37756}
• drm/amd/pm: Prevent division by zero {CVE-2025-37770}
• drm/amd/pm: Prevent division by zero {CVE-2025-37768}
• net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. {CVE-2025-22111}
• wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path {CVE-2025-23129}
• x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs {CVE-2025-22045}
• ftrace: Avoid potential division by zero in function_stat_show() {CVE-2025-21898}
• md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime {CVE-2025-21712}
• bpf: Fix softlockup in arena_map_free on 64k page kernel {CVE-2025-21851}
• RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]" {CVE-2025-21829}
• mm: zswap: properly synchronize freeing resources during CPU hotunplug {CVE-2025-21693}
• drop_monitor: fix incorrect initialization order {CVE-2025-21862}
• ptp: Ensure info->enable callback is always set {CVE-2025-21814}
• efi: Don't map the entire mokvar table to determine its size {CVE-2025-21872}
• drm/amd/display: Assign normalized_pix_clk when color depth = 14 {CVE-2025-21956}
• net: usb: rtl8150: enable basic endpoint checking {CVE-2025-21708}
• nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() {CVE-2025-21848}
• netfilter: nf_tables: reject mismatching sum of field_len with set key length {CVE-2025-21826}
• mm: clear uffd-wp PTE/PMD state on mremap() {CVE-2025-21696}
• wifi: cfg80211: regulatory: improve invalid hints checking {CVE-2025-21910}
• eth: bnxt: always recalculate features after XDP clearing, fix null-deref {CVE-2025-21682}
• vxlan: check vxlan_vnigroup_init() return value {CVE-2025-21790}
• ata: libata-sff: Ensure that we cannot write outside the allocated buffer {CVE-2025-21738}
• wifi: mac80211: don't flush non-uploaded STAs {CVE-2025-21828}
• team: better TEAM_OPTION_TYPE_STRING validation {CVE-2025-21787}
• ppp: Fix KMSAN uninit-value warning with bpf {CVE-2025-21922}
• scsi: storvsc: Ratelimit warning logs to prevent VM denial of service {CVE-2025-21690}
• sctp: sysctl: udp_port: avoid using current->nsproxy {CVE-2025-21637}
• cgroup/cpuset: remove kernfs active break {CVE-2025-21634}
• KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() {CVE-2024-58083}
• idpf: convert workqueues to unbound {CVE-2024-58057}
• xfrm: state: fix out-of-bounds read during lookup {CVE-2024-57982}
• printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX {CVE-2024-58017}
• Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() {CVE-2024-57988}
• HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections {CVE-2024-57986}
• virtio-blk: don't keep queue frozen during system suspend {CVE-2024-57946}
• drm/amd/display: Initialize denominator defaults to 1 {CVE-2024-57950}
• fs: relax assertions on failure to encode file handles {CVE-2024-57924}
• drm/amd/display: Add check for granularity in dml ceil/floor helpers {CVE-2024-57922}
• scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() {CVE-2024-56748}
• ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration() {CVE-2024-56782}
• scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() {CVE-2024-56747}
• netdevsim: prevent bad user input in…

• KVM: x86: Fix shadow paging use-after-free due to unexpected role {CVE-2026-46113}
• KVM: x86: Fix shadow paging use-after-free due to unexpected GFN {CVE-2026-46113}
• Bluetooth: bcsp: receive data only if registered {CVE-2025-40308}
• xen/privcmd: unregister xenstore notifier on module exit {CVE-2026-31788}
• xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
• USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts {CVE-2026-43429}
• net: usb: rtl8150: enable basic endpoint checking {CVE-2025-21708}
• net: usb: kaweth: validate USB endpoints {CVE-2026-23312}
• net: usb: kalmia: validate USB endpoints {CVE-2026-23365}
• net: usb: pegasus: validate USB endpoints {CVE-2026-23290}
• net: usb: pegasus: enable basic endpoint checking {CVE-2026-43156}
• USB: usbcore: Introduce usb_bulk_msg_killable() {CVE-2026-43429}
• USB: core: Add routines for endpoint checks in old drivers {CVE-2026-43156}
• nf_tables: nft_dynset: fix possible stateful expression memleak in error path {CVE-2026-23399}
• tpm: Cap the number of PCR banks {CVE-2025-71077}
• clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() {CVE-2023-53704}
• dm: fix a race condition in retrieve_deps {CVE-2023-54324}
• ice: fix Tx scheduler error handling in XDP callback {CVE-2025-38127}
• mlx5: fix skb leak while fifo resync and push {CVE-2023-54238}
• mmc: vub300: fix return value check of mmc_add_host() {CVE-2022-50251}
• bonding: annotate data-races around slave->last_rx {CVE-2026-23212}
• RDMA/irdma: Fix data race on CQP completion stats {CVE-2023-54302}
• bpf: cpumap: Fix memory leak in cpu_map_update_elem {CVE-2023-53441}
• fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var {CVE-2025-38215}
• trace/fgraph: Fix the warning caused by missing unregister notifier {CVE-2025-39829}
• vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects {CVE-2025-39850}
• team: prevent adding a device which is already a team device lower {CVE-2024-58071}
• net: stmmac: move the EST lock to struct stmmac_priv {CVE-2024-38594}
• drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too {CVE-2024-50108}
• rxrpc: Fix handling of received connection abort {CVE-2024-58053}
• bnxt_en: Fix out-of-bound memcpy() during ethtool -w {CVE-2025-37911}
• scsi: storvsc: Ratelimit warning logs to prevent VM denial of service {CVE-2025-21690}
• net: atlantic: Fix DMA mapping for PTP hwts ring {CVE-2024-26680}
• wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() {CVE-2024-47713}
• drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2) {CVE-2024-49905}
• dm: fix NULL pointer dereference in __dm_suspend() {CVE-2025-40134}
• smb: client: validate the whole DACL before rewriting it in cifsacl {CVE-2026-31709}
• PM: runtime: Fix a race condition related to device removal {CVE-2026-23452}
• ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces {CVE-2026-43436}
• nvme-pci: Fix race bug in nvme_poll_irqdisable() {CVE-2026-43448}
• sctp: add mutual exclusion in proc_sctp_do_udp_port() {CVE-2025-22062}
• cachefiles: fix dentry leak in cachefiles_open_file() {CVE-2024-49870}
• mm: revert "mm: shmem: fix data-race in shmem_getattr()" {CVE-2024-53136}
• memcg: fix soft lockup in the OOM process {CVE-2024-57977}
• resource: fix region_intersects() vs add_memory_driver_managed() {CVE-2024-49878}
• r8169: add tally counter fields added with RTL8125 {CVE-2024-49973}
• svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() {CVE-2024-53215}
• ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths {CVE-2026-43066}
• wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() {CVE-2025-71273}
• net: netlink: af_netlink: Prevent empty skb by adding a check on len. {CVE-2021-47606}
• extcon: Modify extcon device to be created after driver data is set {CVE-2022-49308}
• tick/nohz: unexport __init-annotated tick_nohz_full_setup() {CVE-2022-49675}
• bridge:…

Vanilla upstream kernel version 6.6.79 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Upstream kernel version 6.6.79 fixes bugs and vulnerabilities. The kmod-virtualbox and kmod-xtables-addons packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-26708: mptcp: fastopen and PM-trigger subflow shutdown can race (bsc#1222672).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50185: mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
• CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
• CVE-2024-56720: bpf, sockmap: Several fixes to bpf_msg_pop_data (bsc#1235592).
• CVE-2025-21636: sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (bsc#1236113).
• CVE-2025-21637: sctp: sysctl: udp_port: avoid using current->nsproxy (bsc#1236114).
• CVE-2025-21638: sctp: sysctl: auth_enable: avoid using current->nsproxy (bsc#1236115).
• CVE-2025-21639: sctp: sysctl: rto_min/max: avoid using current->nsproxy (bsc#1236122).
• CVE-2025-21640: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (bsc#1236123).
• CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).
• CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236700).
• CVE-2025-21687: vfio/platform: check the bounds of read/write syscalls (bsc#1237045).
• CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
• CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).

The following non-security bugs were fixed:

• ACPI: x86: Add skip i2c clients quirk for Vexia EDU ATLA 10 tablet 5V (stable-fixes).
• ALSA: hda/cirrus: Correct the full scale volume set logic (git-fixes).
• ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED (stable-fixes).
• ALSA: hda/realtek: Fixup ALC225 depop procedure (git-fixes).
• ALSA: hda: Add error check for snd_ctl_rename_id() in snd_hda_create_dig_out_ctls() (git-fixes).
• ALSA: seq: Drop UMP events when no UMP-conversion is set (git-fixes).
• APEI: GHES: Have GHES honor the panic= setting (stable-fixes).
• ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V (stable-fixes).
• ASoC: SOF: pcm: Clear the susbstream pointer to NULL on close (git-fixes).
• ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() (git-fixes).
• ASoC: amd: Add ACPI dependency to fix build error (stable-fixes).
• ASoC: fsl_micfil: Enable default case in micfil_set_quality() (git-fixes).
• ASoC: rockchip: i2s-tdm: fix shift config for SND_SOC_DAIFMT_DSP_[AB] (git-fixes).
• Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (stable-fixes).
• HID: Wacom: Add PCI Wacom device support (stable-fixes).
• HID: hid-steam: Add Deck IMU support (stable-fixes).
• HID: hid-steam: Add gamepad-only mode switched to by holding options (stable-fixes).
• HID: hid-steam: Avoid overwriting smoothing parameter (stable-fixes).
• HID: hid-steam: Clean up locking (stable-fixes).
• HID: hid-steam: Disable watchdog instead of using a heartbeat (stable-fixes).
• HID: hid-steam: Do not use cancel_delayed_work_sync in IRQ context (git-fixes).
• HID: hid-steam: Fix cleanup in probe() (git-fixes).
• HID: hid-steam: Make sure rumble work is canceled on removal (stable-fixes).
• HID: hid-steam: Move hidraw input (un)registering to work (git-fixes).
• HID: hid-steam: Update list of identifiers from SDL (stable-fixes).
• HID: hid-steam: remove pointless error message (stable-fixes).
• HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints()…

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238033).
• CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
• CVE-2024-53226: RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (bsc#1236576)
• CVE-2024-57948: mac802154: check local interfaces before deleting sdata list (bsc#1236677).
• CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).
• CVE-2025-21690: scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (bsc#1237025).
• CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
• CVE-2025-21699: gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (bsc#1237139).

The following non-security bugs were fixed:

• cpufreq/amd-pstate: Only print supported EPP values for performance governor (bsc#1236777).
• iavf: fix the waiting time for initial reset (bsc#1235111).
• ice: add ice_adapter for shared data across PFs on the same NIC (bsc#1235111).
• ice: avoid the PTP hardware semaphore in gettimex64 path (bsc#1235111).
• ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (bsc#1235111).
• idpf: call set_real_num_queues in idpf_open (bsc#1236661 bsc#1237316).
• ipv4/tcp: do not use per netns ctl sockets (bsc#1237693).
• kabi: hide adding RCU head into struct netdev_name_node (bsc#1233749).
• net: Fix undefined behavior in netdev name allocation (bsc#1233749).
• net: avoid UAF on deleted altname (bsc#1233749).
• net: check for altname conflicts when changing netdev's netns (bsc#1233749).
• net: core: Use the bitmap API to allocate bitmaps (bsc#1233749).
• net: do not send a MOVE event when netdev changes netns (bsc#1233749).
• net: do not use input buffer of __dev_alloc_name() as a scratch space (bsc#1233749).
• net: fix ifname in netlink ntf during netns move (bsc#1233749).
• net: fix removing a namespace with conflicting altnames (bsc#1233749).
• net: free altname using an RCU callback (bsc#1233749).
• net: introduce a function to check if a netdev name is in use (bsc#1233749).
• net: make dev_alloc_name() call dev_prep_valid_name() (bsc#1233749).
• net: mana: Add get_link and get_link_ksettings in ethtool (bsc#1236761).
• net: mana: Cleanup 'mana' debugfs dir after cleanup of all children (bsc#1236760).
• net: mana: Enable debugfs files for MANA device (bsc#1236758).
• net: minor __dev_alloc_name() optimization (bsc#1233749).
• net: move altnames together with the netdevice (bsc#1233749).
• net: netvsc: Update default VMBus channels (bsc#1236757).
• net: reduce indentation of __dev_alloc_name() (bsc#1233749).
• net: remove dev_valid_name() check from __dev_alloc_name() (bsc#1233749).
• net: remove else after return in dev_prep_valid_name() (bsc#1233749).
• net: trust the bitmap in __dev_alloc_name() (bsc#1233749).
• nfsd: use explicit lock/unlock for directory ops (bsc#1234650 bsc#1233701 bsc#1232472).
• rcu: Remove rcu_is_idle_cpu() (bsc#1236289).
• scsi: storvsc: Set correct data length for sending SCSI command without payload (git-fixes).
• x86/aperfmperf: Dont wake idle CPUs in arch_freq_get_on_cpu() (bsc#1236289).
• x86/aperfmperf: Integrate the fallback code from show_cpuinfo() (bsc#1236289).
• x86/aperfmperf: Make parts of the frequency invariance code unconditional (bsc#1236289).
• x86/aperfmperf: Put frequency invariance aperf/mperf data into a struct (bsc#1236289).
• x86/aperfmperf: Replace aperfmperf_get_khz() (bsc#1236289).
• x86/aperfmperf: Replace arch_freq_get_on_cpu() (bsc#1236289).
• x86/aperfmperf: Restructure arch_scale_freq_tick() (bsc#1236289).
• x86/aperfmperf: Separate AP/BP frequency invariance init (bsc#1236289).
• x86/aperfmperf: Store aperf/mperf data for cpu frequency reads (bsc#1236289).
• x86/aperfmperf: Untangle Intel and AMD frequency invariance init (bsc#1236289). -…

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238033).
• CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
• CVE-2024-53226: RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (bsc#1236576)
• CVE-2024-57948: mac802154: check local interfaces before deleting sdata list (bsc#1236677).
• CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).
• CVE-2025-21690: scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (bsc#1237025).
• CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
• CVE-2025-21699: gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (bsc#1237139).

The following non-security bugs were fixed:

• cpufreq/amd-pstate: Only print supported EPP values for performance governor (bsc#1236777).
• iavf: fix the waiting time for initial reset (bsc#1235111).
• ice: add ice_adapter for shared data across PFs on the same NIC (bsc#1235111).
• ice: avoid the PTP hardware semaphore in gettimex64 path (bsc#1235111).
• ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (bsc#1235111).
• idpf: call set_real_num_queues in idpf_open (bsc#1236661 bsc#1237316).
• ipv4/tcp: do not use per netns ctl sockets (bsc#1237693).
• kabi: hide adding RCU head into struct netdev_name_node (bsc#1233749).
• net: Fix undefined behavior in netdev name allocation (bsc#1233749).
• net: avoid UAF on deleted altname (bsc#1233749).
• net: check for altname conflicts when changing netdev's netns (bsc#1233749).
• net: core: Use the bitmap API to allocate bitmaps (bsc#1233749).
• net: do not send a MOVE event when netdev changes netns (bsc#1233749).
• net: do not use input buffer of __dev_alloc_name() as a scratch space (bsc#1233749).
• net: fix ifname in netlink ntf during netns move (bsc#1233749).
• net: fix removing a namespace with conflicting altnames (bsc#1233749).
• net: free altname using an RCU callback (bsc#1233749).
• net: introduce a function to check if a netdev name is in use (bsc#1233749).
• net: make dev_alloc_name() call dev_prep_valid_name() (bsc#1233749).
• net: mana: Add get_link and get_link_ksettings in ethtool (bsc#1236761).
• net: mana: Cleanup 'mana' debugfs dir after cleanup of all children (bsc#1236760).
• net: mana: Enable debugfs files for MANA device (bsc#1236758).
• net: minor __dev_alloc_name() optimization (bsc#1233749).
• net: move altnames together with the netdevice (bsc#1233749).
• net: netvsc: Update default VMBus channels (bsc#1236757).
• net: reduce indentation of __dev_alloc_name() (bsc#1233749).
• net: remove dev_valid_name() check from __dev_alloc_name() (bsc#1233749).
• net: remove else after return in dev_prep_valid_name() (bsc#1233749).
• net: trust the bitmap in __dev_alloc_name() (bsc#1233749).
• nfsd: use explicit lock/unlock for directory ops (bsc#1234650 bsc#1233701 bsc#1232472).
• rcu: Remove rcu_is_idle_cpu() (bsc#1236289).
• scsi: storvsc: Set correct data length for sending SCSI command without payload (git-fixes).
• x86/aperfmperf: Dont wake idle CPUs in arch_freq_get_on_cpu() (bsc#1236289).
• x86/aperfmperf: Integrate the fallback code from show_cpuinfo() (bsc#1236289).
• x86/aperfmperf: Make parts of the frequency invariance code unconditional (bsc#1236289).
• x86/aperfmperf: Put frequency invariance aperf/mperf data into a struct (bsc#1236289).
• x86/aperfmperf: Replace aperfmperf_get_khz() (bsc#1236289).
• x86/aperfmperf: Replace arch_freq_get_on_cpu() (bsc#1236289).
• x86/aperfmperf: Restructure arch_scale_freq_tick() (bsc#1236289).
• x86/aperfmperf: Separate AP/BP frequency invariance init (bsc#1236289).
• x86/aperfmperf: Store aperf/mperf data for cpu frequency reads (bsc#1236289).
• x86/aperfmperf: Untangle Intel and AMD frequency invariance init (bsc#1236289). -…

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2021-22543: Fixed improper handling of VM_IO|VM_PFNMAP vmas in KVM (bsc#1186482).
• CVE-2021-47634: ubi: Fix race condition between ctrl_cdev_ioctl and ubi_cdev_ioctl (bsc#1237758).
• CVE-2021-47644: media: staging: media: zoran: move videodev alloc (bsc#1237766).
• CVE-2022-48953: rtc: cmos: fix build on non-ACPI platforms (bsc#1231941).
• CVE-2022-48975: gpiolib: fix memory leak in gpiochip_setup_dev() (bsc#1231885).
• CVE-2022-49006: tracing: Free buffers when a used dynamic event is removed (bsc#1232163).
• CVE-2022-49076: RDMA/hfi1: Fix use-after-free bug for mm struct (bsc#1237738).
• CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238033).
• CVE-2022-49089: IB/rdmavt: add lock to call to rvt_error_qp to prevent a race condition (bsc#1238041).
• CVE-2022-49124: x86/mce: Work around an erratum on fast string copy instructions (bsc#1238148).
• CVE-2022-49134: mlxsw: spectrum: Guard against invalid local ports (bsc#1237982).
• CVE-2022-49135: drm/amd/display: Fix memory leak (bsc#1238006).
• CVE-2022-49151: can: mcba_usb: properly check endpoint type (bsc#1237778).
• CVE-2022-49178: memstick/mspro_block: fix handling of read-only devices (bsc#1238107).
• CVE-2022-49182: net: hns3: add vlan list lock to protect vlan list (bsc#1238260).
• CVE-2022-49201: ibmvnic: fix race between xmit and reset (bsc#1238256).
• CVE-2022-49247: media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED (bsc#1237783).
• CVE-2022-49490: drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is (bsc#1238275).
• CVE-2022-49626: sfc: fix use after free when disabling sriov (bsc#1238270).
• CVE-2022-49661: can: gs_usb: gs_usb_open/close(): fix memory leak (bsc#1237788).
• CVE-2023-52572: Fixed UAF in cifs_demultiplex_thread() in cifs (bsc#1220946).
• CVE-2023-52853: hid: cp2112: Fix duplicate workqueue initialization (bsc#1224988).
• CVE-2023-52924: netfilter: nf_tables: do not skip expired elements during walk (bsc#1236821).
• CVE-2023-6606: Fixed an out of bounds read in the SMB client when receiving a malformed length from a server (bsc#1217947).
• CVE-2024-23307: Fixed Integer Overflow or Wraparound vulnerability in x86 and ARM md, raid, raid5 modules (bsc#1219169).
• CVE-2024-27397: netfilter: nf_tables: use timestamp to check for set element timeout (bsc#1224095).
• CVE-2024-49963: mailbox: bcm2835: Fix timeout during suspend mode (bsc#1232147).
• CVE-2024-49975: uprobes: fix kernel info leak via '[uprobes]' vma (bsc#1232104).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50067: uprobe: avoid out-of-bounds memory access of fetching args (bsc#1232416).
• CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
• CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
• CVE-2024-53217: nfsd: restore callback functionality for NFSv4.0 (bsc#1234999).
• CVE-2024-56633: bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data (bsc#1235485).
• CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
• CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
• CVE-2024-56688: sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport (bsc#1235538).
• CVE-2025-21638: sctp: sysctl: auth_enable: avoid using current->nsproxy (bsc#1236115).
• CVE-2025-21639: sctp: sysctl: rto_min/max: avoid using current->nsproxy (bsc#1236122).
• CVE-2025-21640: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (bsc#1236123).
• CVE-2025-21673: smb: client: fix double free of TCP_Server_Info::hostname (bsc#1236689).
• CVE-2025-21689: USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (bsc#1237017).
• CVE-2025-21690: scsi: storvsc:…

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238033).
• CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1224700).
• CVE-2024-50128: net: wwan: fix global oob in wwan_rtnl_policy (bsc#1232905).
• CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
• CVE-2024-57948: mac802154: check local interfaces before deleting sdata list (bsc#1236677).
• CVE-2025-21690: scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (bsc#1237025).
• CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
• CVE-2025-21699: gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (bsc#1237139).

The following non-security bugs were fixed:

• idpf: call set_real_num_queues in idpf_open (bsc#1236661 bsc#1237316).
• ipv4/tcp: do not use per netns ctl sockets (bsc#1237693).
• net: mana: Add get_link and get_link_ksettings in ethtool (bsc#1236761).
• net: mana: Cleanup 'mana' debugfs dir after cleanup of all children (bsc#1236760).
• net: mana: Enable debugfs files for MANA device (bsc#1236758).
• net: netvsc: Update default VMBus channels (bsc#1236757).
• scsi: storvsc: Use scsi_cmd_to_rq() instead of scsi_cmnd.request (git-fixes).
• x86/kvm: fix is_stale_page_fault() (bsc#1236675).
• x86/xen: add FRAME_END to xen_hypercall_hvm() (git-fixes).
• x86/xen: fix xen_hypercall_hvm() to not clobber %rbx (git-fixes).

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
• CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
• CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
• CVE-2024-56720: bpf, sockmap: Several fixes to bpf_msg_pop_data (bsc#1235592).
• CVE-2024-57882: mptcp: fix TCP options overflow. (bsc#1235914).
• CVE-2024-57994: ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() (bsc#1237901).
• CVE-2025-21636: sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (bsc#1236113).
• CVE-2025-21637: sctp: sysctl: udp_port: avoid using current->nsproxy (bsc#1236114).
• CVE-2025-21638: sctp: sysctl: auth_enable: avoid using current->nsproxy (bsc#1236115).
• CVE-2025-21639: sctp: sysctl: rto_min/max: avoid using current->nsproxy (bsc#1236122).
• CVE-2025-21640: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (bsc#1236123).
• CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).
• CVE-2025-21665: filemap: avoid truncating 64-bit offset to 32 bits (bsc#1236684).
• CVE-2025-21666: vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (bsc#1236680).
• CVE-2025-21667: iomap: avoid avoid truncating 64-bit offset to 32 bits (bsc#1236681).
• CVE-2025-21668: pmdomain: imx8mp-blk-ctrl: add missing loop break condition (bsc#1236682).
• CVE-2025-21669: vsock/virtio: discard packets if the transport changes (bsc#1236683).
• CVE-2025-21670: vsock/bpf: return early if transport is not assigned (bsc#1236685).
• CVE-2025-21673: smb: client: fix double free of TCP_Server_Info::hostname (bsc#1236689).
• CVE-2025-21675: net/mlx5: Clear port select structure when fail to create (bsc#1236694).
• CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236700).
• CVE-2025-21681: openvswitch: fix lockup on tx to unregistering netdev with carrier (bsc#1236702).
• CVE-2025-21687: vfio/platform: check the bounds of read/write syscalls (bsc#1237045).
• CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
• CVE-2025-21700: net: sched:…

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238033).
• CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
• CVE-2024-53226: RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg() (bsc#1236576)
• CVE-2024-57948: mac802154: check local interfaces before deleting sdata list (bsc#1236677).
• CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).
• CVE-2025-21690: scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (bsc#1237025).
• CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
• CVE-2025-21699: gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (bsc#1237139).

The following non-security bugs were fixed:

• NFSD: use explicit lock/unlock for directory ops (bsc#1234650 bsc#1233701 bsc#1232472).
• cpufreq/amd-pstate: Only print supported EPP values for performance governor (bsc#1236777).
• iavf: fix the waiting time for initial reset (bsc#1235111).
• ice: add ice_adapter for shared data across PFs on the same NIC (bsc#1235111).
• ice: avoid the PTP hardware semaphore in gettimex64 path (bsc#1235111).
• ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (bsc#1235111).
• idpf: call set_real_num_queues in idpf_open (bsc#1236661 bsc#1237316).
• ipv4/tcp: do not use per netns ctl sockets (bsc#1237693).
• kabi: hide adding RCU head into struct netdev_name_node (bsc#1233749).
• net: Fix undefined behavior in netdev name allocation (bsc#1233749).
• net: avoid UAF on deleted altname (bsc#1233749).
• net: check for altname conflicts when changing netdev's netns (bsc#1233749).
• net: core: Use the bitmap API to allocate bitmaps (bsc#1233749).
• net: do not send a MOVE event when netdev changes netns (bsc#1233749).
• net: do not use input buffer of __dev_alloc_name() as a scratch space (bsc#1233749).
• net: fix ifname in netlink ntf during netns move (bsc#1233749).
• net: fix removing a namespace with conflicting altnames (bsc#1233749).
• net: free altname using an RCU callback (bsc#1233749).
• net: introduce a function to check if a netdev name is in use (bsc#1233749).
• net: make dev_alloc_name() call dev_prep_valid_name() (bsc#1233749).
• net: mana: Add get_link and get_link_ksettings in ethtool (bsc#1236761).
• net: mana: Cleanup 'mana' debugfs dir after cleanup of all children (bsc#1236760).
• net: mana: Enable debugfs files for MANA device (bsc#1236758).
• net: minor __dev_alloc_name() optimization (bsc#1233749).
• net: move altnames together with the netdevice (bsc#1233749).
• net: netvsc: Update default VMBus channels (bsc#1236757).
• net: reduce indentation of __dev_alloc_name() (bsc#1233749).
• net: remove dev_valid_name() check from __dev_alloc_name() (bsc#1233749).
• net: remove else after return in dev_prep_valid_name() (bsc#1233749).
• net: trust the bitmap in __dev_alloc_name() (bsc#1233749).
• rcu: Remove rcu_is_idle_cpu() (bsc#1236289).
• scsi: storvsc: Set correct data length for sending SCSI command without payload (git-fixes).
• x86/aperfmperf: Dont wake idle CPUs in arch_freq_get_on_cpu() (bsc#1236289).
• x86/aperfmperf: Integrate the fallback code from show_cpuinfo() (bsc#1236289).
• x86/aperfmperf: Make parts of the frequency invariance code unconditional (bsc#1236289).
• x86/aperfmperf: Put frequency invariance aperf/mperf data into a struct (bsc#1236289).
• x86/aperfmperf: Replace aperfmperf_get_khz() (bsc#1236289).
• x86/aperfmperf: Replace arch_freq_get_on_cpu() (bsc#1236289).
• x86/aperfmperf: Restructure arch_scale_freq_tick() (bsc#1236289).
• x86/aperfmperf: Separate AP/BP frequency invariance init (bsc#1236289).
• x86/aperfmperf: Store aperf/mperf data for cpu frequency reads (bsc#1236289).
• x86/aperfmperf: Untangle Intel and AMD frequency invariance init (bsc#1236289). -…

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2021-47633: ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 (bsc#1237768).
• CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238033).
• CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1224700).
• CVE-2025-21690: scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (bsc#1237025).
• CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
• CVE-2025-21699: gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (bsc#1237139).

The following non-security bugs were fixed:

• net: mana: Add get_link and get_link_ksettings in ethtool (bsc#1236761).
• net: netvsc: Update default VMBus channels (bsc#1236757).
• scsi: storvsc: Handle SRB status value 0x30 (git-fixes).

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-56568: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
• CVE-2024-56720: bpf, sockmap: Several fixes to bpf_msg_pop_data (bsc#1235592).
• CVE-2024-57994: ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() (bsc#1237901).
• CVE-2025-21636: sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (bsc#1236113).
• CVE-2025-21637: sctp: sysctl: udp_port: avoid using current->nsproxy (bsc#1236114).
• CVE-2025-21638: sctp: sysctl: auth_enable: avoid using current->nsproxy (bsc#1236115).
• CVE-2025-21639: sctp: sysctl: rto_min/max: avoid using current->nsproxy (bsc#1236122).
• CVE-2025-21640: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (bsc#1236123).
• CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).
• CVE-2025-21665: filemap: avoid truncating 64-bit offset to 32 bits (bsc#1236684).
• CVE-2025-21667: iomap: avoid avoid truncating 64-bit offset to 32 bits (bsc#1236681).
• CVE-2025-21668: pmdomain: imx8mp-blk-ctrl: add missing loop break condition (bsc#1236682).
• CVE-2025-21673: smb: client: fix double free of TCP_Server_Info::hostname (bsc#1236689).
• CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236700).
• CVE-2025-21681: openvswitch: fix lockup on tx to unregistering netdev with carrier (bsc#1236702).
• CVE-2025-21687: vfio/platform: check the bounds of read/write syscalls (bsc#1237045).
• CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
• CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
• CVE-2025-21728: bpf: Send signals asynchronously if !preemptible (bsc#1237879).
• CVE-2025-21705: mptcp: handle fastopen disconnect correctly (bsc#1238525).
• CVE-2025-21715: net: davicom: fix UAF in dm9000_drv_remove (bsc#1237889).
• CVE-2025-21716: vxlan: Fix uninit-value in vxlan_vnifilter_dump() (bsc#1237891).
• CVE-2025-21719: ipmr: do not call mr_mfc_uses_dev() for unres entries (bsc#1238860).
• CVE-2025-21724: iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() (bsc#1238863).
• CVE-2025-21725: smb: client: fix oops due to unset link speed (bsc#1238877). -…

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2021-47633: ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 (bsc#1237768).
• CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238033).
• CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763).
• CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1224700).
• CVE-2024-50199: mm/swapfile: skip HugeTLB pages for unuse_vma (bsc#1233112).
• CVE-2024-53104: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (bsc#1234025).
• CVE-2024-56600: net: inet6: do not leave a dangling sk pointer in inet6_create() (bsc#1235217).
• CVE-2024-56601: net: inet: do not leave a dangling sk pointer in inet_create() (bsc#1235230).
• CVE-2024-56623: scsi: qla2xxx: Fix use after free on unload (bsc#1235466).
• CVE-2024-56650: netfilter: x_tables: fix LED ID check in led_tg_check() (bsc#1235430).
• CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
• CVE-2024-56664: bpf, sockmap: Fix race between element replace and close() (bsc#1235249).
• CVE-2024-56759: btrfs: fix use-after-free when COWing tree bock and tracing is enabled (bsc#1235645).
• CVE-2024-57791: net/smc: check return value of sock_recvmsg when draining clc data (bsc#1235759).
• CVE-2024-57798: drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req() (bsc#1235818).
• CVE-2024-57849: s390/cpum_sf: Handle CPU hotplug remove during sampling (bsc#1235814).
• CVE-2024-57893: ALSA: seq: oss: Fix races at processing SysEx messages (bsc#1235920).
• CVE-2025-21690: scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (bsc#1237025).
• CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
• CVE-2025-21699: gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (bsc#1237139).

The following non-security bugs were fixed:

• net: mana: Add get_link and get_link_ksettings in ethtool (bsc#1236761).
• net: netvsc: Update default VMBus channels (bsc#1236757).
• NFS: Adjust the amount of readahead performed by NFS readdir (bsc#1231847).
• NFS: Do not flush the readdir cache in nfs_dentry_iput() (bsc#1231847).
• NFS: Improve heuristic for readdirplus -revert (bsc#1237160).
• NFS: Improve heuristic for readdirplus (bsc#1231847).
• NFS: Reduce readdir stack usage (bsc#1231847).
• NFS: Trigger the 'ls -l' readdir heuristic sooner (bsc#1231847).
• NFS: Use kmemdup_nul() in nfs_readdir_make_qstr() (bsc#1231847).
• scsi: storvsc: Handle SRB status value 0x30 (git-fixes).

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2022-49080: mm/mempolicy: fix mpol_new leak in shared_policy_replace (bsc#1238033).
• CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1224700).
• CVE-2024-50128: net: wwan: fix global oob in wwan_rtnl_policy (bsc#1232905).
• CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN (bsc#1234154).
• CVE-2024-57948: mac802154: check local interfaces before deleting sdata list (bsc#1236677).
• CVE-2025-21690: scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (bsc#1237025).
• CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
• CVE-2025-21699: gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (bsc#1237139).

The following non-security bugs were fixed:

• idpf: call set_real_num_queues in idpf_open (bsc#1236661 bsc#1237316).
• ipv4/tcp: do not use per netns ctl sockets (bsc#1237693).
• net: mana: Add get_link and get_link_ksettings in ethtool (bsc#1236761).
• net: mana: Cleanup 'mana' debugfs dir after cleanup of all children (bsc#1236760).
• net: mana: Enable debugfs files for MANA device (bsc#1236758).
• net: netvsc: Update default VMBus channels (bsc#1236757).
• scsi: storvsc: Use scsi_cmd_to_rq() instead of scsi_cmnd.request (git-fixes).
• x86/kvm: fix is_stale_page_fault() (bsc#1236675).
• x86/xen: add FRAME_END to xen_hypercall_hvm() (git-fixes).
• x86/xen: fix xen_hypercall_hvm() to not clobber %rbx (git-fixes).

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
• CVE-2024-56720: bpf, sockmap: Several fixes to bpf_msg_pop_data (bsc#1235592).
• CVE-2024-57994: ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() (bsc#1237901).
• CVE-2025-21636: sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (bsc#1236113).
• CVE-2025-21637: sctp: sysctl: udp_port: avoid using current->nsproxy (bsc#1236114).
• CVE-2025-21638: sctp: sysctl: auth_enable: avoid using current->nsproxy (bsc#1236115).
• CVE-2025-21639: sctp: sysctl: rto_min/max: avoid using current->nsproxy (bsc#1236122).
• CVE-2025-21640: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (bsc#1236123).
• CVE-2025-21647: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133).
• CVE-2025-21665: filemap: avoid truncating 64-bit offset to 32 bits (bsc#1236684).
• CVE-2025-21667: iomap: avoid avoid truncating 64-bit offset to 32 bits (bsc#1236681).
• CVE-2025-21668: pmdomain: imx8mp-blk-ctrl: add missing loop break condition (bsc#1236682).
• CVE-2025-21673: smb: client: fix double free of TCP_Server_Info::hostname (bsc#1236689).
• CVE-2025-21680: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236700).
• CVE-2025-21681: openvswitch: fix lockup on tx to unregistering netdev with carrier (bsc#1236702).
• CVE-2025-21687: vfio/platform: check the bounds of read/write syscalls (bsc#1237045).
• CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237028).
• CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
• CVE-2025-21705: mptcp: handle fastopen disconnect correctly (bsc#1238525).
• CVE-2025-21715: net: davicom: fix UAF in dm9000_drv_remove (bsc#1237889).
• CVE-2025-21716: vxlan: Fix uninit-value in vxlan_vnifilter_dump() (bsc#1237891).
• CVE-2025-21719: ipmr: do not call mr_mfc_uses_dev() for unres entries (bsc#1238860).
• CVE-2025-21724: iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() (bsc#1238863).
• CVE-2025-21725: smb: client: fix oops due to unset link speed (bsc#1238877).
• CVE-2025-21728: bpf: Send signals asynchronously if !preemptible (bsc#1237879).
• CVE-2025-21767: clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic…

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
• CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
• CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
• CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn…

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
• CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
• CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free…

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-35910: tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: kABI fix for l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
• CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free issue (bsc#1235436).
• CVE-2024-56647: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435).
• CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
• CVE-2024-56702: bpf: Add tracepoints with null-able arguments (bsc#1235501).
• CVE-2024-56703: ipv6: Fix soft lockups in fib6_select_path under high next hop churn…

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-26708: mptcp: fix inconsistent state on fastopen race (bsc#1222672).
• CVE-2024-27415: netfilter: br_netfilter: skip conntrack input hook for promisc packets (bsc#1224757).
• CVE-2024-35910: kABI fix for tcp: properly terminate timers for kernel sockets (bsc#1224489).
• CVE-2024-40980: drop_monitor: replace spin_lock by raw_spin_lock (bsc#1227937).
• CVE-2024-41005: netpoll: Fix race condition in netpoll_owner_active (bsc#1227858).
• CVE-2024-44974: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235).
• CVE-2024-45009: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438).
• CVE-2024-45010: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439).
• CVE-2024-46782: ila: call nf_unregister_net_hooks() sooner (bsc#1230769).
• CVE-2024-46858: mptcp: pm: Fix uaf in __timer_delete_sync (bsc#1231088).
• CVE-2024-47408: net/smc: check smcd_v2_ext_offset when receiving proposal msg (bsc#1235711).
• CVE-2024-47794: kABI: bpf: Prevent tailcall infinite loop caused by freplace kABI workaround (bsc#1235712).
• CVE-2024-49571: net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (bsc#1235733).
• CVE-2024-49940: l2tp: prevent possible tunnel refcount underflow (bsc#1232812).
• CVE-2024-50029: Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync (bsc#1231949).
• CVE-2024-50036: net: do not delay dst_entries_add() in dst_release() (bsc#1231912).
• CVE-2024-50038: netfilter: xtables: fix typo causing some targets not to load on IPv6 (bsc#1231910).
• CVE-2024-50056: usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c (bsc#1232389).
• CVE-2024-50085: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508).
• CVE-2024-50140: net: sched: use RCU read-side critical section in taprio_dump() (bsc#1233060).
• CVE-2024-50142: xfrm: validate new SA's prefixlen using SA family when sel.family is unset (bsc#1233028).
• CVE-2024-50185: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109).
• CVE-2024-50251: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (bsc#1233248).
• CVE-2024-50258: net: fix crash when config small gso_max_size/gso_ipv4_max_size (bsc#1233221).
• CVE-2024-50294: rxrpc: Fix missing locking causing hanging calls (bsc#1233483).
• CVE-2024-50304: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (bsc#1233522).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53123: mptcp: error out earlier on disconnect (bsc#1234070).
• CVE-2024-53124: net: fix data-races around sk->sk_forward_alloc (bsc#1234074).
• CVE-2024-53139: sctp: fix possible UAF in sctp_v6_available() (bsc#1234157).
• CVE-2024-53140: netlink: terminate outstanding dump on socket close (bsc#1234222).
• CVE-2024-53147: exfat: fix out-of-bounds access of directory entries (bsc#1234857).
• CVE-2024-53176: smb: During unmount, ensure all cached dir instances drop their dentry (bsc#1234894).
• CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).
• CVE-2024-53178: smb: Do not leak cfid when reconnect races with open_cached_dir (bsc#1234895).
• CVE-2024-53680: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() (bsc#1235715).
• CVE-2024-54683: netfilter: IDLETIMER: Fix for possible ABBA deadlock (bsc#1235729).
• CVE-2024-56592: bpf: Call free_htab_elem() after htab_unlock_bucket() (bsc#1235244).
• CVE-2024-56633: selftests/bpf: Add apply_bytes test to test_txmsg_redir_wait_sndmem in test_sockmap (bsc#1235485).
• CVE-2024-56638: kABI fix for "netfilter: nft_inner: incorrect percpu area handling under softirq" (bsc#1235524).
• CVE-2024-56640: net/smc: fix LGR and link use-after-free…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• MIPS architecture;
• PowerPC architecture;
• RISC-V architecture;
• S390 architecture;
• SuperH RISC architecture;
• User-Mode Linux (UML);
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Drivers core;
• RAM backed block device driver;
• Virtio block driver;
• Data acquisition framework and drivers;
• Hardware crypto device drivers;
• DMA engine subsystem;
• EDAC drivers;
• ARM SCPI message protocol;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Microsoft Hyper-V drivers;
• I3C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• LED subsystem;
• Multiple devices driver;
• Media drivers;
• Multifunction device drivers;
• MMC subsystem;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• Microsoft Azure Network Adapter (MANA) driver;
• NVME drivers;
• PCI subsystem;
• Pin controllers subsystem;
• x86 platform drivers;
• Power supply drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SuperH / SH-Mobile drivers;
• i.MX SoC drivers;
• QCOM SoC drivers;
• SPI subsystem;
• Media staging drivers;
• UFS subsystem;
• DesignWare USB3 driver;
• USB Gadget drivers;
• USB Serial drivers;
• USB Type-C Port Controller Manager driver;
• VFIO drivers;
• Framebuffer layer;
• Xen hypervisor drivers;
• AFS file system;
• BTRFS file system;
• Ceph distributed file system;
• File systems infrastructure;
• F2FS file system;
• GFS2 file system;
• JFFS2 file system;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• NTFS3 file system;
• Overlay file system;
• Proc file system;
• Diskquota system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• VLANs driver;
• LAPB network protocol;
• Kernel init infrastructure;
• BPF subsystem;
• Kernel CPU control infrastructure;
• DMA mapping infrastructure;
• KCSAN framework;
• Tracing infrastructure;
• Memory management;
• 9P file system network protocol;
• Bluetooth subsystem;
• CAN network layer;
• Networking core;
• DCCP (Datagram Congestion Control Protocol);
• Distributed Switch Architecture;
• HSR network protocol;
• IEEE802154.4 network protocol;
• IPv4 networking;
• IPv6 networking;
• IEEE 802.15.4 subsystem;
• Multipath TCP;
• Netfilter;
• Netlink;
• NET/ROM layer;
• Packet sockets;
• Network traffic control;
• SCTP protocol;
• SMC sockets;
• Sun RPC protocol;
• TIPC protocol;
• VMware vSockets driver;
• eXpress Data Path;
• SELinux security module;
• ALSA framework;
• USB sound devices; (CVE-2024-56558, CVE-2024-53227, CVE-2024-53130, CVE-2025-21664, CVE-2024-53142, CVE-2024-55881, CVE-2024-57906, CVE-2024-46809, CVE-2024-53198, CVE-2024-53184, CVE-2024-53237, CVE-2024-56770, CVE-2024-53150, CVE-2024-56700, CVE-2024-50242, CVE-2024-53181, CVE-2024-56574, CVE-2024-56681, CVE-2024-56678, CVE-2024-53119, CVE-2024-53129, CVE-2024-56567, CVE-2024-56688, CVE-2024-49925, CVE-2025-21687, CVE-2024-56643, CVE-2025-21631, CVE-2024-52332, CVE-2024-53226, CVE-2025-21665, CVE-2024-56615, CVE-2024-57911, CVE-2024-53136, CVE-2024-56603, CVE-2024-56690, CVE-2024-47730, CVE-2024-56586, CVE-2024-46784, CVE-2024-56596, CVE-2024-53172, CVE-2024-57901, CVE-2024-56693, CVE-2024-56605, CVE-2024-57896, CVE-2024-56698, CVE-2024-56724, CVE-2024-49998, CVE-2024-53239, CVE-2024-53206, CVE-2024-56636, CVE-2024-56597, CVE-2024-56533, CVE-2024-42315, CVE-2024-56701, CVE-2024-56587, CVE-2024-57791, CVE-2024-56619, CVE-2024-50051, CVE-2024-56569, CVE-2025-21694, CVE-2025-21699, CVE-2024-53214, CVE-2024-57904, CVE-2024-49571,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• MIPS architecture;
• PowerPC architecture;
• RISC-V architecture;
• S390 architecture;
• SuperH RISC architecture;
• User-Mode Linux (UML);
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Drivers core;
• RAM backed block device driver;
• Virtio block driver;
• Data acquisition framework and drivers;
• Hardware crypto device drivers;
• DMA engine subsystem;
• EDAC drivers;
• ARM SCPI message protocol;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Microsoft Hyper-V drivers;
• I3C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• LED subsystem;
• Multiple devices driver;
• Media drivers;
• Multifunction device drivers;
• MMC subsystem;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• Microsoft Azure Network Adapter (MANA) driver;
• NVME drivers;
• PCI subsystem;
• Pin controllers subsystem;
• x86 platform drivers;
• Power supply drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SuperH / SH-Mobile drivers;
• i.MX SoC drivers;
• QCOM SoC drivers;
• SPI subsystem;
• Media staging drivers;
• UFS subsystem;
• DesignWare USB3 driver;
• USB Gadget drivers;
• USB Serial drivers;
• USB Type-C Port Controller Manager driver;
• VFIO drivers;
• Framebuffer layer;
• Xen hypervisor drivers;
• AFS file system;
• BTRFS file system;
• Ceph distributed file system;
• File systems infrastructure;
• F2FS file system;
• GFS2 file system;
• JFFS2 file system;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• NTFS3 file system;
• Overlay file system;
• Proc file system;
• Diskquota system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• VLANs driver;
• LAPB network protocol;
• Kernel init infrastructure;
• BPF subsystem;
• Kernel CPU control infrastructure;
• DMA mapping infrastructure;
• KCSAN framework;
• Tracing infrastructure;
• Memory management;
• 9P file system network protocol;
• Bluetooth subsystem;
• CAN network layer;
• Networking core;
• DCCP (Datagram Congestion Control Protocol);
• Distributed Switch Architecture;
• HSR network protocol;
• IEEE802154.4 network protocol;
• IPv4 networking;
• IPv6 networking;
• IEEE 802.15.4 subsystem;
• Multipath TCP;
• Netfilter;
• Netlink;
• NET/ROM layer;
• Packet sockets;
• Network traffic control;
• SCTP protocol;
• SMC sockets;
• Sun RPC protocol;
• TIPC protocol;
• VMware vSockets driver;
• eXpress Data Path;
• SELinux security module;
• ALSA framework;
• USB sound devices; (CVE-2024-56558, CVE-2024-53227, CVE-2024-53130, CVE-2025-21664, CVE-2024-53142, CVE-2024-55881, CVE-2024-57906, CVE-2024-46809, CVE-2024-53198, CVE-2024-53184, CVE-2024-53237, CVE-2024-56770, CVE-2024-53150, CVE-2024-56700, CVE-2024-50242, CVE-2024-53181, CVE-2024-56574, CVE-2024-56681, CVE-2024-56678, CVE-2024-53119, CVE-2024-53129, CVE-2024-56567, CVE-2024-56688, CVE-2024-49925, CVE-2025-21687, CVE-2024-56643, CVE-2025-21631, CVE-2024-52332, CVE-2024-53226, CVE-2025-21665, CVE-2024-56615, CVE-2024-57911, CVE-2024-53136, CVE-2024-56603, CVE-2024-56690, CVE-2024-47730, CVE-2024-56586, CVE-2024-46784, CVE-2024-56596, CVE-2024-53172, CVE-2024-57901, CVE-2024-56693, CVE-2024-56605, CVE-2024-57896, CVE-2024-56698, CVE-2024-56724, CVE-2024-49998, CVE-2024-53239, CVE-2024-53206, CVE-2024-56636, CVE-2024-56597, CVE-2024-56533, CVE-2024-42315, CVE-2024-56701, CVE-2024-56587, CVE-2024-57791, CVE-2024-56619, CVE-2024-50051, CVE-2024-56569, CVE-2025-21694, CVE-2025-21699, CVE-2024-53214, CVE-2024-57904, CVE-2024-49571,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• MIPS architecture;
• PowerPC architecture;
• RISC-V architecture;
• S390 architecture;
• SuperH RISC architecture;
• User-Mode Linux (UML);
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Drivers core;
• RAM backed block device driver;
• Virtio block driver;
• Data acquisition framework and drivers;
• Hardware crypto device drivers;
• DMA engine subsystem;
• EDAC drivers;
• ARM SCPI message protocol;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Microsoft Hyper-V drivers;
• I3C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• LED subsystem;
• Multiple devices driver;
• Media drivers;
• Multifunction device drivers;
• MMC subsystem;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• Microsoft Azure Network Adapter (MANA) driver;
• NVME drivers;
• PCI subsystem;
• Pin controllers subsystem;
• x86 platform drivers;
• Power supply drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SuperH / SH-Mobile drivers;
• i.MX SoC drivers;
• QCOM SoC drivers;
• SPI subsystem;
• Media staging drivers;
• UFS subsystem;
• DesignWare USB3 driver;
• USB Gadget drivers;
• USB Serial drivers;
• USB Type-C Port Controller Manager driver;
• VFIO drivers;
• Framebuffer layer;
• Xen hypervisor drivers;
• AFS file system;
• BTRFS file system;
• Ceph distributed file system;
• File systems infrastructure;
• F2FS file system;
• GFS2 file system;
• JFFS2 file system;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• NTFS3 file system;
• Overlay file system;
• Proc file system;
• Diskquota system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• VLANs driver;
• LAPB network protocol;
• Kernel init infrastructure;
• BPF subsystem;
• Kernel CPU control infrastructure;
• DMA mapping infrastructure;
• KCSAN framework;
• Tracing infrastructure;
• Memory management;
• 9P file system network protocol;
• Bluetooth subsystem;
• CAN network layer;
• Networking core;
• DCCP (Datagram Congestion Control Protocol);
• Distributed Switch Architecture;
• HSR network protocol;
• IEEE802154.4 network protocol;
• IPv4 networking;
• IPv6 networking;
• IEEE 802.15.4 subsystem;
• Multipath TCP;
• Netfilter;
• Netlink;
• NET/ROM layer;
• Packet sockets;
• Network traffic control;
• SCTP protocol;
• SMC sockets;
• Sun RPC protocol;
• TIPC protocol;
• VMware vSockets driver;
• eXpress Data Path;
• SELinux security module;
• ALSA framework;
• USB sound devices; (CVE-2024-56558, CVE-2024-53227, CVE-2024-53130, CVE-2025-21664, CVE-2024-53142, CVE-2024-55881, CVE-2024-57906, CVE-2024-46809, CVE-2024-53198, CVE-2024-53184, CVE-2024-53237, CVE-2024-56770, CVE-2024-53150, CVE-2024-56700, CVE-2024-50242, CVE-2024-53181, CVE-2024-56574, CVE-2024-56681, CVE-2024-56678, CVE-2024-53119, CVE-2024-53129, CVE-2024-56567, CVE-2024-56688, CVE-2024-49925, CVE-2025-21687, CVE-2024-56643, CVE-2025-21631, CVE-2024-52332, CVE-2024-53226, CVE-2025-21665, CVE-2024-56615, CVE-2024-57911, CVE-2024-53136, CVE-2024-56603, CVE-2024-56690, CVE-2024-47730, CVE-2024-56586, CVE-2024-46784, CVE-2024-56596, CVE-2024-53172, CVE-2024-57901, CVE-2024-56693, CVE-2024-56605, CVE-2024-57896, CVE-2024-56698, CVE-2024-56724, CVE-2024-49998, CVE-2024-53239, CVE-2024-53206, CVE-2024-56636, CVE-2024-56597, CVE-2024-56533, CVE-2024-42315, CVE-2024-56701, CVE-2024-56587, CVE-2024-57791, CVE-2024-56619, CVE-2024-50051, CVE-2024-56569, CVE-2025-21694, CVE-2025-21699, CVE-2024-53214, CVE-2024-57904, CVE-2024-49571,…

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• MIPS architecture;
• PowerPC architecture;
• RISC-V architecture;
• S390 architecture;
• SuperH RISC architecture;
• User-Mode Linux (UML);
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Drivers core;
• RAM backed block device driver;
• Virtio block driver;
• Data acquisition framework and drivers;
• Hardware crypto device drivers;
• DMA engine subsystem;
• EDAC drivers;
• ARM SCPI message protocol;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Microsoft Hyper-V drivers;
• I2C subsystem;
• I3C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• LED subsystem;
• Multiple devices driver;
• Media drivers;
• Multifunction device drivers;
• MMC subsystem;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• Microsoft Azure Network Adapter (MANA) driver;
• STMicroelectronics network drivers;
• NVME drivers;
• Parport drivers;
• PCI subsystem;
• Pin controllers subsystem;
• x86 platform drivers;
• Power supply drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SuperH / SH-Mobile drivers;
• i.MX SoC drivers;
• QCOM SoC drivers;
• SPI subsystem;
• Direct Digital Synthesis drivers;
• Media staging drivers;
• TCM subsystem;
• TTY drivers;
• UFS subsystem;
• DesignWare USB3 driver;
• USB Gadget drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• USB Type-C Port Controller Manager driver;
• USB Type-C Connector System Software Interface driver;
• VFIO drivers;
• Framebuffer layer;
• Xen hypervisor drivers;
• AFS file system;
• BTRFS file system;
• Ceph distributed file system;
• File systems infrastructure;
• F2FS file system;
• GFS2 file system;
• JFFS2 file system;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• NTFS3 file system;
• Overlay file system;
• Proc file system;
• Diskquota system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• VLANs driver;
• LAPB network protocol;
• User-space API (UAPI);
• Kernel init infrastructure;
• io_uring subsystem;
• BPF subsystem;
• Kernel CPU control infrastructure;
• DMA mapping infrastructure;
• KCSAN framework;
• Tracing infrastructure;
• Closures library;
• Memory management;
• 9P file system network protocol;
• Amateur Radio drivers;
• Bluetooth subsystem;
• CAN network layer;
• Networking core;
• DCCP (Datagram Congestion Control Protocol);
• Distributed Switch Architecture;
• HSR network protocol;
• IEEE802154.4 network protocol;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• IEEE 802.15.4 subsystem;
• Multipath TCP;
• Netfilter;
• Netlink;
• NET/ROM layer;
• Packet sockets;
• Network traffic control;
• SCTP protocol;
• SMC sockets;
• Sun RPC protocol;
• TIPC protocol;
• VMware vSockets driver;
• eXpress Data Path;
• XFRM subsystem;
• Key management;
• SELinux security module;
• ALSA framework;
• FireWire sound drivers;
• HD-audio driver;
• QCOM ASoC drivers;
• STMicroelectronics SoC drivers;
• USB sound devices;
• KVM core; (CVE-2024-56622, CVE-2024-42252, CVE-2024-53101, CVE-2025-21664, CVE-2024-50168, CVE-2024-53214, CVE-2024-56670,…

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• MIPS architecture;
• PowerPC architecture;
• RISC-V architecture;
• S390 architecture;
• SuperH RISC architecture;
• User-Mode Linux (UML);
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Drivers core;
• RAM backed block device driver;
• Virtio block driver;
• Data acquisition framework and drivers;
• Hardware crypto device drivers;
• DMA engine subsystem;
• EDAC drivers;
• ARM SCPI message protocol;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Microsoft Hyper-V drivers;
• I2C subsystem;
• I3C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• LED subsystem;
• Multiple devices driver;
• Media drivers;
• Multifunction device drivers;
• MMC subsystem;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• Microsoft Azure Network Adapter (MANA) driver;
• STMicroelectronics network drivers;
• NVME drivers;
• Parport drivers;
• PCI subsystem;
• Pin controllers subsystem;
• x86 platform drivers;
• Power supply drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SuperH / SH-Mobile drivers;
• i.MX SoC drivers;
• QCOM SoC drivers;
• SPI subsystem;
• Direct Digital Synthesis drivers;
• Media staging drivers;
• TCM subsystem;
• TTY drivers;
• UFS subsystem;
• DesignWare USB3 driver;
• USB Gadget drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• USB Type-C Port Controller Manager driver;
• USB Type-C Connector System Software Interface driver;
• VFIO drivers;
• Framebuffer layer;
• Xen hypervisor drivers;
• AFS file system;
• BTRFS file system;
• Ceph distributed file system;
• File systems infrastructure;
• F2FS file system;
• GFS2 file system;
• JFFS2 file system;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• NTFS3 file system;
• Overlay file system;
• Proc file system;
• Diskquota system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• VLANs driver;
• LAPB network protocol;
• User-space API (UAPI);
• Kernel init infrastructure;
• io_uring subsystem;
• BPF subsystem;
• Kernel CPU control infrastructure;
• DMA mapping infrastructure;
• KCSAN framework;
• Tracing infrastructure;
• Closures library;
• Memory management;
• 9P file system network protocol;
• Amateur Radio drivers;
• Bluetooth subsystem;
• CAN network layer;
• Networking core;
• DCCP (Datagram Congestion Control Protocol);
• Distributed Switch Architecture;
• HSR network protocol;
• IEEE802154.4 network protocol;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• IEEE 802.15.4 subsystem;
• Multipath TCP;
• Netfilter;
• Netlink;
• NET/ROM layer;
• Packet sockets;
• Network traffic control;
• SCTP protocol;
• SMC sockets;
• Sun RPC protocol;
• TIPC protocol;
• VMware vSockets driver;
• eXpress Data Path;
• XFRM subsystem;
• Key management;
• SELinux security module;
• ALSA framework;
• FireWire sound drivers;
• HD-audio driver;
• QCOM ASoC drivers;
• STMicroelectronics SoC drivers;
• USB sound devices;
• KVM core; (CVE-2025-21640, CVE-2024-56625, CVE-2024-53104, CVE-2024-53055, CVE-2024-26718, CVE-2024-53180, CVE-2024-50257,…

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• MIPS architecture;
• PowerPC architecture;
• RISC-V architecture;
• S390 architecture;
• SuperH RISC architecture;
• User-Mode Linux (UML);
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Drivers core;
• RAM backed block device driver;
• Virtio block driver;
• Data acquisition framework and drivers;
• Hardware crypto device drivers;
• DMA engine subsystem;
• EDAC drivers;
• ARM SCPI message protocol;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Microsoft Hyper-V drivers;
• I2C subsystem;
• I3C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• LED subsystem;
• Multiple devices driver;
• Media drivers;
• Multifunction device drivers;
• MMC subsystem;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• Microsoft Azure Network Adapter (MANA) driver;
• STMicroelectronics network drivers;
• NVME drivers;
• Parport drivers;
• PCI subsystem;
• Pin controllers subsystem;
• x86 platform drivers;
• Power supply drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SuperH / SH-Mobile drivers;
• i.MX SoC drivers;
• QCOM SoC drivers;
• SPI subsystem;
• Direct Digital Synthesis drivers;
• Media staging drivers;
• TCM subsystem;
• TTY drivers;
• UFS subsystem;
• DesignWare USB3 driver;
• USB Gadget drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• USB Type-C Port Controller Manager driver;
• USB Type-C Connector System Software Interface driver;
• VFIO drivers;
• Framebuffer layer;
• Xen hypervisor drivers;
• AFS file system;
• BTRFS file system;
• Ceph distributed file system;
• File systems infrastructure;
• F2FS file system;
• GFS2 file system;
• JFFS2 file system;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• NTFS3 file system;
• Overlay file system;
• Proc file system;
• Diskquota system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• VLANs driver;
• LAPB network protocol;
• User-space API (UAPI);
• Kernel init infrastructure;
• io_uring subsystem;
• BPF subsystem;
• Kernel CPU control infrastructure;
• DMA mapping infrastructure;
• KCSAN framework;
• Tracing infrastructure;
• Closures library;
• Memory management;
• 9P file system network protocol;
• Amateur Radio drivers;
• Bluetooth subsystem;
• CAN network layer;
• Networking core;
• DCCP (Datagram Congestion Control Protocol);
• Distributed Switch Architecture;
• HSR network protocol;
• IEEE802154.4 network protocol;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• IEEE 802.15.4 subsystem;
• Multipath TCP;
• Netfilter;
• Netlink;
• NET/ROM layer;
• Packet sockets;
• Network traffic control;
• SCTP protocol;
• SMC sockets;
• Sun RPC protocol;
• TIPC protocol;
• VMware vSockets driver;
• eXpress Data Path;
• XFRM subsystem;
• Key management;
• SELinux security module;
• ALSA framework;
• FireWire sound drivers;
• HD-audio driver;
• QCOM ASoC drivers;
• STMicroelectronics SoC drivers;
• USB sound devices;
• KVM core; (CVE-2024-50299, CVE-2024-50304, CVE-2024-50196, CVE-2024-56548, CVE-2024-56531, CVE-2024-56720, CVE-2024-58087,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• MIPS architecture;
• PowerPC architecture;
• RISC-V architecture;
• S390 architecture;
• SuperH RISC architecture;
• User-Mode Linux (UML);
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Drivers core;
• RAM backed block device driver;
• Virtio block driver;
• Data acquisition framework and drivers;
• Hardware crypto device drivers;
• DMA engine subsystem;
• EDAC drivers;
• ARM SCPI message protocol;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Microsoft Hyper-V drivers;
• I3C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• LED subsystem;
• Multiple devices driver;
• Media drivers;
• Multifunction device drivers;
• MMC subsystem;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• Microsoft Azure Network Adapter (MANA) driver;
• NVME drivers;
• PCI subsystem;
• Pin controllers subsystem;
• x86 platform drivers;
• Power supply drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SuperH / SH-Mobile drivers;
• i.MX SoC drivers;
• QCOM SoC drivers;
• SPI subsystem;
• Media staging drivers;
• UFS subsystem;
• DesignWare USB3 driver;
• USB Gadget drivers;
• USB Serial drivers;
• USB Type-C Port Controller Manager driver;
• VFIO drivers;
• Framebuffer layer;
• Xen hypervisor drivers;
• AFS file system;
• BTRFS file system;
• Ceph distributed file system;
• File systems infrastructure;
• F2FS file system;
• GFS2 file system;
• JFFS2 file system;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• NTFS3 file system;
• Overlay file system;
• Proc file system;
• Diskquota system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• VLANs driver;
• LAPB network protocol;
• Network namespace;
• Kernel init infrastructure;
• BPF subsystem;
• Kernel CPU control infrastructure;
• DMA mapping infrastructure;
• KCSAN framework;
• Tracing infrastructure;
• Memory management;
• 9P file system network protocol;
• Bluetooth subsystem;
• CAN network layer;
• Networking core;
• DCCP (Datagram Congestion Control Protocol);
• Distributed Switch Architecture;
• HSR network protocol;
• IEEE802154.4 network protocol;
• IPv4 networking;
• IPv6 networking;
• IEEE 802.15.4 subsystem;
• Multipath TCP;
• Netfilter;
• Netlink;
• NET/ROM layer;
• Packet sockets;
• Network traffic control;
• SCTP protocol;
• SMC sockets;
• Sun RPC protocol;
• TIPC protocol;
• VMware vSockets driver;
• eXpress Data Path;
• SELinux security module;
• ALSA framework;
• USB sound devices; (CVE-2024-50242, CVE-2024-53165, CVE-2024-56569, CVE-2024-57938, CVE-2024-57889, CVE-2024-53226, CVE-2024-57882, CVE-2024-57913, CVE-2024-53096, CVE-2024-56575, CVE-2024-56630, CVE-2024-50055, CVE-2024-53129, CVE-2025-21646, CVE-2024-50121, CVE-2024-56594, CVE-2024-57802, CVE-2024-53183, CVE-2024-57904, CVE-2025-21653, CVE-2024-56633, CVE-2024-56595, CVE-2024-56659, CVE-2024-47730, CVE-2024-57948, CVE-2024-56614, CVE-2024-56601, CVE-2024-36476, CVE-2024-49998, CVE-2024-53122, CVE-2024-56701, CVE-2024-56781, CVE-2024-56785, CVE-2024-47707, CVE-2025-21694, CVE-2024-56715, CVE-2024-56693, CVE-2024-56587, CVE-2024-56726, CVE-2024-56688, CVE-2024-53124, CVE-2024-46871, CVE-2025-21648, CVE-2024-56603, CVE-2024-56779, CVE-2025-21637, CVE-2025-21664, CVE-2024-57951, CVE-2024-53136, CVE-2025-21687, CVE-2024-57798, CVE-2024-53680, CVE-2024-56606, CVE-2024-56643, CVE-2024-56634, CVE-2024-56716, CVE-2024-57908, CVE-2024-56774, CVE-2024-56562, CVE-2025-21669, CVE-2024-57849, CVE-2024-56623,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• MIPS architecture;
• PowerPC architecture;
• RISC-V architecture;
• S390 architecture;
• SuperH RISC architecture;
• User-Mode Linux (UML);
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Drivers core;
• RAM backed block device driver;
• Virtio block driver;
• Data acquisition framework and drivers;
• Hardware crypto device drivers;
• DMA engine subsystem;
• EDAC drivers;
• ARM SCPI message protocol;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Microsoft Hyper-V drivers;
• I3C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• LED subsystem;
• Multiple devices driver;
• Media drivers;
• Multifunction device drivers;
• MMC subsystem;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• Microsoft Azure Network Adapter (MANA) driver;
• NVME drivers;
• PCI subsystem;
• Pin controllers subsystem;
• x86 platform drivers;
• Power supply drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SuperH / SH-Mobile drivers;
• i.MX SoC drivers;
• QCOM SoC drivers;
• SPI subsystem;
• Media staging drivers;
• UFS subsystem;
• DesignWare USB3 driver;
• USB Gadget drivers;
• USB Serial drivers;
• USB Type-C Port Controller Manager driver;
• VFIO drivers;
• Framebuffer layer;
• Xen hypervisor drivers;
• AFS file system;
• BTRFS file system;
• Ceph distributed file system;
• File systems infrastructure;
• F2FS file system;
• GFS2 file system;
• JFFS2 file system;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• NTFS3 file system;
• Overlay file system;
• Proc file system;
• Diskquota system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• VLANs driver;
• LAPB network protocol;
• Network namespace;
• Kernel init infrastructure;
• BPF subsystem;
• Kernel CPU control infrastructure;
• DMA mapping infrastructure;
• KCSAN framework;
• Tracing infrastructure;
• Memory management;
• 9P file system network protocol;
• Bluetooth subsystem;
• CAN network layer;
• Networking core;
• DCCP (Datagram Congestion Control Protocol);
• Distributed Switch Architecture;
• HSR network protocol;
• IEEE802154.4 network protocol;
• IPv4 networking;
• IPv6 networking;
• IEEE 802.15.4 subsystem;
• Multipath TCP;
• Netfilter;
• Netlink;
• NET/ROM layer;
• Packet sockets;
• Network traffic control;
• SCTP protocol;
• SMC sockets;
• Sun RPC protocol;
• TIPC protocol;
• VMware vSockets driver;
• eXpress Data Path;
• SELinux security module;
• ALSA framework;
• USB sound devices; (CVE-2024-53680, CVE-2024-53148, CVE-2024-47408, CVE-2024-53122, CVE-2024-56691, CVE-2024-56763, CVE-2024-53227, CVE-2024-56369, CVE-2024-50275, CVE-2024-57892, CVE-2024-53142, CVE-2024-56693, CVE-2024-56658, CVE-2024-57882, CVE-2024-56606, CVE-2024-46871, CVE-2024-57907, CVE-2024-56642, CVE-2025-21631, CVE-2024-57908, CVE-2024-57890, CVE-2024-53194, CVE-2024-57913, CVE-2024-56659, CVE-2024-56643, CVE-2024-56590, CVE-2024-56754, CVE-2025-21678, CVE-2024-56678, CVE-2024-49974, CVE-2024-56614, CVE-2024-53124, CVE-2022-49034, CVE-2024-49996, CVE-2024-47143, CVE-2024-50055, CVE-2024-53184, CVE-2024-56681, CVE-2025-21683, CVE-2024-57922, CVE-2024-56532, CVE-2024-53161, CVE-2024-57791, CVE-2025-21664, CVE-2024-53206, CVE-2024-56589, CVE-2024-57902, CVE-2024-56633, CVE-2024-53140, CVE-2024-56627, CVE-2024-57912, CVE-2024-55916, CVE-2024-56594, CVE-2025-21690, CVE-2024-56602, CVE-2024-49998, CVE-2024-53171, CVE-2024-53174, CVE-2024-53172, CVE-2024-56701, CVE-2024-52332, CVE-2024-57948,…

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• GPIO subsystem;
• GPU drivers;
• IRQ chip drivers;
• Network drivers;
• Mellanox network drivers;
• x86 platform drivers;
• i.MX PM domains;
• SCSI subsystem;
• USB Serial drivers;
• AFS file system;
• GFS2 file system;
• File systems infrastructure;
• Proc file system;
• SMB network file system;
• Timer subsystem;
• Kernel CPU control infrastructure;
• Memory management;
• Networking core;
• Ethtool driver;
• IEEE 802.15.4 subsystem;
• Open vSwitch;
• Network traffic control;
• VMware vSockets driver; (CVE-2025-21685, CVE-2025-21684, CVE-2025-21756, CVE-2025-21670, CVE-2024-57949, CVE-2025-21677, CVE-2025-21680, CVE-2025-21703, CVE-2024-57952, CVE-2025-21674, CVE-2025-21701, CVE-2025-21691, CVE-2025-21689, CVE-2025-21668, CVE-2025-21665, CVE-2025-21683, CVE-2025-21675, CVE-2025-21672, CVE-2024-57948, CVE-2025-21669, CVE-2025-21673, CVE-2025-21692, CVE-2025-21699, CVE-2025-21702, CVE-2025-21682, CVE-2025-21690, CVE-2025-21681, CVE-2025-21695, CVE-2025-21696, CVE-2025-21700, CVE-2025-21678, CVE-2025-21676, CVE-2024-57950, CVE-2025-21666, CVE-2025-21694, CVE-2025-21693, CVE-2025-21993, CVE-2024-57951, CVE-2025-21697, CVE-2025-21667)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• GPIO subsystem;
• GPU drivers;
• IRQ chip drivers;
• Network drivers;
• Mellanox network drivers;
• x86 platform drivers;
• i.MX PM domains;
• SCSI subsystem;
• USB Serial drivers;
• AFS file system;
• GFS2 file system;
• File systems infrastructure;
• Proc file system;
• SMB network file system;
• Timer subsystem;
• Kernel CPU control infrastructure;
• Memory management;
• Networking core;
• Ethtool driver;
• IEEE 802.15.4 subsystem;
• Open vSwitch;
• Network traffic control;
• VMware vSockets driver; (CVE-2025-21694, CVE-2025-21993, CVE-2025-21684, CVE-2025-21681, CVE-2025-21675, CVE-2025-21672, CVE-2025-21696, CVE-2025-21691, CVE-2025-21683, CVE-2025-21666, CVE-2025-21682, CVE-2025-21697, CVE-2025-21668, CVE-2025-21701, CVE-2025-21670, CVE-2025-21676, CVE-2025-21695, CVE-2025-21692, CVE-2025-21674, CVE-2025-21699, CVE-2024-57948, CVE-2025-21677, CVE-2024-57951, CVE-2025-21702, CVE-2025-21700, CVE-2024-57949, CVE-2025-21669, CVE-2025-21703, CVE-2025-21756, CVE-2025-21667, CVE-2024-57952, CVE-2024-57950, CVE-2025-21685, CVE-2025-21693, CVE-2025-21678, CVE-2025-21665, CVE-2025-21680, CVE-2025-21689, CVE-2025-21690, CVE-2025-21673)

Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• MIPS architecture;
• PowerPC architecture;
• RISC-V architecture;
• S390 architecture;
• SuperH RISC architecture;
• User-Mode Linux (UML);
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Drivers core;
• RAM backed block device driver;
• Virtio block driver;
• Data acquisition framework and drivers;
• Hardware crypto device drivers;
• DMA engine subsystem;
• EDAC drivers;
• ARM SCPI message protocol;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Microsoft Hyper-V drivers;
• I2C subsystem;
• I3C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• IRQ chip drivers;
• LED subsystem;
• Multiple devices driver;
• Media drivers;
• Multifunction device drivers;
• MMC subsystem;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• Microsoft Azure Network Adapter (MANA) driver;
• STMicroelectronics network drivers;
• NVME drivers;
• Parport drivers;
• PCI subsystem;
• Pin controllers subsystem;
• x86 platform drivers;
• Power supply drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SuperH / SH-Mobile drivers;
• i.MX SoC drivers;
• QCOM SoC drivers;
• SPI subsystem;
• Direct Digital Synthesis drivers;
• Media staging drivers;
• TCM subsystem;
• TTY drivers;
• UFS subsystem;
• DesignWare USB3 driver;
• USB Gadget drivers;
• USB Dual Role (OTG-ready) Controller drivers;
• USB Serial drivers;
• USB Type-C support driver;
• USB Type-C Port Controller Manager driver;
• USB Type-C Connector System Software Interface driver;
• VFIO drivers;
• Framebuffer layer;
• Xen hypervisor drivers;
• AFS file system;
• BTRFS file system;
• Ceph distributed file system;
• File systems infrastructure;
• F2FS file system;
• GFS2 file system;
• JFFS2 file system;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• NTFS3 file system;
• Overlay file system;
• Proc file system;
• Diskquota system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• VLANs driver;
• IP tunnels definitions;
• LAPB network protocol;
• Network namespace;
• User-space API (UAPI);
• Kernel init infrastructure;
• io_uring subsystem;
• BPF subsystem;
• Kernel CPU control infrastructure;
• DMA mapping infrastructure;
• KCSAN framework;
• Tracing infrastructure;
• Closures library;
• Memory management;
• 9P file system network protocol;
• Amateur Radio drivers;
• Bluetooth subsystem;
• CAN network layer;
• Networking core;
• DCCP (Datagram Congestion Control Protocol);
• Distributed Switch Architecture;
• HSR network protocol;
• IEEE802154.4 network protocol;
• IPv4 networking;
• IPv6 networking;
• MAC80211 subsystem;
• IEEE 802.15.4 subsystem;
• Multipath TCP;
• Netfilter;
• Netlink;
• NET/ROM layer;
• Packet sockets;
• Network traffic control;
• SCTP protocol;
• SMC sockets;
• Sun RPC protocol;
• TIPC protocol;
• VMware vSockets driver;
• eXpress Data Path;
• XFRM subsystem;
• Key management;
• SELinux security module;
• ALSA framework;
• FireWire sound drivers;
• HD-audio driver;
• QCOM ASoC drivers;
• STMicroelectronics SoC drivers;
• USB sound devices;
• KVM core; (CVE-2024-56747, CVE-2024-56575, CVE-2024-56781, CVE-2024-53173,…

Jann Horn discovered that the watch_queue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system crash) or escalate their privileges. (CVE-2022-0995)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• MIPS architecture;
• PowerPC architecture;
• RISC-V architecture;
• S390 architecture;
• SuperH RISC architecture;
• User-Mode Linux (UML);
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Drivers core;
• RAM backed block device driver;
• Virtio block driver;
• Data acquisition framework and drivers;
• Hardware crypto device drivers;
• DMA engine subsystem;
• EDAC drivers;
• ARM SCPI message protocol;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Microsoft Hyper-V drivers;
• I3C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• LED subsystem;
• Multiple devices driver;
• Media drivers;
• Multifunction device drivers;
• MMC subsystem;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• Microsoft Azure Network Adapter (MANA) driver;
• NVME drivers;
• PCI subsystem;
• Pin controllers subsystem;
• x86 platform drivers;
• Power supply drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SuperH / SH-Mobile drivers;
• i.MX SoC drivers;
• QCOM SoC drivers;
• SPI subsystem;
• Media staging drivers;
• UFS subsystem;
• DesignWare USB3 driver;
• USB Gadget drivers;
• USB Serial drivers;
• USB Type-C Port Controller Manager driver;
• VFIO drivers;
• Framebuffer layer;
• Xen hypervisor drivers;
• AFS file system;
• File systems infrastructure;
• BTRFS file system;
• Ceph distributed file system;
• F2FS file system;
• GFS2 file system;
• JFFS2 file system;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• NTFS3 file system;
• Overlay file system;
• Proc file system;
• Diskquota system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• VLANs driver;
• LAPB network protocol;
• Network namespace;
• Kernel init infrastructure;
• BPF subsystem;
• Kernel CPU control infrastructure;
• DMA mapping infrastructure;
• KCSAN framework;
• Tracing infrastructure;
• Memory management;
• 9P file system network protocol;
• Bluetooth subsystem;
• Ethernet bridge;
• CAN network layer;
• Networking core;
• DCCP (Datagram Congestion Control Protocol);
• Distributed Switch Architecture;
• Ethtool driver;
• HSR network protocol;
• IEEE802154.4 network protocol;
• IPv4 networking;
• IPv6 networking;
• IEEE 802.15.4 subsystem;
• Multipath TCP;
• Netfilter;
• Netlink;
• NET/ROM layer;
• Packet sockets;
• Network traffic control;
• SCTP protocol;
• SMC sockets;
• Sun RPC protocol;
• TIPC protocol;
• VMware vSockets driver;
• eXpress Data Path;
• SELinux security module;
• ALSA framework;
• USB sound devices; (CVE-2024-57913, CVE-2024-56748, CVE-2024-46871, CVE-2024-57900, CVE-2025-21637, CVE-2025-21756, CVE-2024-53680, CVE-2024-56728, CVE-2024-46826, CVE-2024-57910, CVE-2024-56679, CVE-2024-53215, CVE-2024-56640, CVE-2024-56634, CVE-2024-56594, CVE-2024-56619, CVE-2024-50242, CVE-2024-53150, CVE-2024-49925, CVE-2024-56648, CVE-2024-53121, CVE-2024-36476, CVE-2025-21631, CVE-2024-49996, CVE-2024-56723, CVE-2025-21690, CVE-2024-56769, CVE-2024-56767, CVE-2025-21664, CVE-2024-53155, CVE-2024-48881, CVE-2024-57925, CVE-2024-53197, CVE-2024-53156, CVE-2024-35864, CVE-2024-53122, CVE-2024-50121, CVE-2025-21700, CVE-2022-49034, CVE-2025-21648, CVE-2024-57903, CVE-2024-57902, CVE-2024-53184,…

Jann Horn discovered that the watch_queue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system crash) or escalate their privileges. (CVE-2022-0995)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• ARM64 architecture;
• MIPS architecture;
• PowerPC architecture;
• RISC-V architecture;
• S390 architecture;
• SuperH RISC architecture;
• User-Mode Linux (UML);
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• Drivers core;
• RAM backed block device driver;
• Virtio block driver;
• Data acquisition framework and drivers;
• Hardware crypto device drivers;
• DMA engine subsystem;
• EDAC drivers;
• ARM SCPI message protocol;
• iSCSI Boot Firmware Table Attributes driver;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Microsoft Hyper-V drivers;
• I3C subsystem;
• IIO ADC drivers;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• LED subsystem;
• Multiple devices driver;
• Media drivers;
• Multifunction device drivers;
• MMC subsystem;
• MTD block device drivers;
• Network drivers;
• Mellanox network drivers;
• Microsoft Azure Network Adapter (MANA) driver;
• NVME drivers;
• PCI subsystem;
• Pin controllers subsystem;
• x86 platform drivers;
• Power supply drivers;
• Real Time Clock drivers;
• SCSI subsystem;
• SuperH / SH-Mobile drivers;
• i.MX SoC drivers;
• QCOM SoC drivers;
• SPI subsystem;
• Media staging drivers;
• UFS subsystem;
• DesignWare USB3 driver;
• USB Gadget drivers;
• USB Serial drivers;
• USB Type-C Port Controller Manager driver;
• VFIO drivers;
• Framebuffer layer;
• Xen hypervisor drivers;
• AFS file system;
• File systems infrastructure;
• BTRFS file system;
• Ceph distributed file system;
• F2FS file system;
• GFS2 file system;
• JFFS2 file system;
• JFS file system;
• Network file system (NFS) client;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• NTFS3 file system;
• Overlay file system;
• Proc file system;
• Diskquota system;
• SMB network file system;
• UBI file system;
• Timer subsystem;
• VLANs driver;
• LAPB network protocol;
• Network namespace;
• Kernel init infrastructure;
• BPF subsystem;
• Kernel CPU control infrastructure;
• DMA mapping infrastructure;
• KCSAN framework;
• Tracing infrastructure;
• Memory management;
• 9P file system network protocol;
• Bluetooth subsystem;
• Ethernet bridge;
• CAN network layer;
• Networking core;
• DCCP (Datagram Congestion Control Protocol);
• Distributed Switch Architecture;
• Ethtool driver;
• HSR network protocol;
• IEEE802154.4 network protocol;
• IPv4 networking;
• IPv6 networking;
• IEEE 802.15.4 subsystem;
• Multipath TCP;
• Netfilter;
• Netlink;
• NET/ROM layer;
• Packet sockets;
• Network traffic control;
• SCTP protocol;
• SMC sockets;
• Sun RPC protocol;
• TIPC protocol;
• VMware vSockets driver;
• eXpress Data Path;
• SELinux security module;
• ALSA framework;
• USB sound devices; (CVE-2024-53690, CVE-2024-56642, CVE-2024-56777, CVE-2024-49998, CVE-2024-53181, CVE-2024-53184, CVE-2024-53180, CVE-2024-56615, CVE-2024-56679, CVE-2024-53099, CVE-2025-21993, CVE-2024-53112, CVE-2024-56594, CVE-2024-56606, CVE-2024-56533, CVE-2024-56616, CVE-2024-56631, CVE-2024-46784, CVE-2024-53124, CVE-2024-56623, CVE-2024-57939, CVE-2025-21694, CVE-2025-21653, CVE-2024-56548, CVE-2024-56600, CVE-2024-56578, CVE-2024-53198, CVE-2024-56619, CVE-2024-44938, CVE-2024-56688, CVE-2024-56651, CVE-2024-53215, CVE-2024-53150, CVE-2025-21687, CVE-2025-21646, CVE-2024-49571, CVE-2024-57884, CVE-2025-21700, CVE-2024-57907, CVE-2024-56569,…

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• GPIO subsystem;
• GPU drivers;
• InfiniBand drivers;
• IRQ chip drivers;
• Network drivers;
• Mellanox network drivers;
• i.MX PM domains;
• SCSI subsystem;
• USB Serial drivers;
• AFS file system;
• GFS2 file system;
• File systems infrastructure;
• File system notification infrastructure;
• Overlay file system;
• Proc file system;
• SMB network file system;
• Timer subsystem;
• Kernel CPU control infrastructure;
• Memory management;
• Networking core;
• DCCP (Datagram Congestion Control Protocol);
• IPv6 networking;
• IEEE 802.15.4 subsystem;
• Open vSwitch;
• Network traffic control;
• VMware vSockets driver; (CVE-2025-21943, CVE-2025-21672, CVE-2024-57952, CVE-2024-57949, CVE-2025-21683, CVE-2025-21690, CVE-2025-21699, CVE-2025-21676, CVE-2024-57924, CVE-2025-21694, CVE-2024-57948, CVE-2025-21675, CVE-2024-57951, CVE-2025-21692, CVE-2025-21684, CVE-2025-21668, CVE-2025-21665, CVE-2025-21667, CVE-2025-21670, CVE-2025-21674, CVE-2025-21697, CVE-2024-53124, CVE-2025-21666, CVE-2025-21682, CVE-2025-21680, CVE-2025-21681, CVE-2025-21691, CVE-2025-21669, CVE-2025-21673, CVE-2024-50157, CVE-2025-21689, CVE-2025-21678)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• GPIO subsystem;
• GPU drivers;
• InfiniBand drivers;
• IRQ chip drivers;
• Network drivers;
• Mellanox network drivers;
• i.MX PM domains;
• SCSI subsystem;
• USB Serial drivers;
• AFS file system;
• GFS2 file system;
• File systems infrastructure;
• File system notification infrastructure;
• Overlay file system;
• Proc file system;
• SMB network file system;
• Timer subsystem;
• Kernel CPU control infrastructure;
• Memory management;
• Networking core;
• DCCP (Datagram Congestion Control Protocol);
• IPv6 networking;
• IEEE 802.15.4 subsystem;
• Open vSwitch;
• Network traffic control;
• VMware vSockets driver; (CVE-2025-21943, CVE-2025-21672, CVE-2024-57952, CVE-2024-57949, CVE-2025-21683, CVE-2025-21690, CVE-2025-21699, CVE-2025-21676, CVE-2024-57924, CVE-2025-21694, CVE-2024-57948, CVE-2025-21675, CVE-2024-57951, CVE-2025-21692, CVE-2025-21684, CVE-2025-21668, CVE-2025-21665, CVE-2025-21667, CVE-2025-21670, CVE-2025-21674, CVE-2025-21697, CVE-2024-53124, CVE-2025-21666, CVE-2025-21682, CVE-2025-21680, CVE-2025-21681, CVE-2025-21691, CVE-2025-21669, CVE-2025-21673, CVE-2024-50157, CVE-2025-21689, CVE-2025-21678)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• GPIO subsystem;
• GPU drivers;
• InfiniBand drivers;
• IRQ chip drivers;
• Network drivers;
• Mellanox network drivers;
• i.MX PM domains;
• SCSI subsystem;
• USB Serial drivers;
• AFS file system;
• GFS2 file system;
• File systems infrastructure;
• File system notification infrastructure;
• Overlay file system;
• Proc file system;
• SMB network file system;
• Timer subsystem;
• Kernel CPU control infrastructure;
• Memory management;
• Networking core;
• DCCP (Datagram Congestion Control Protocol);
• IPv6 networking;
• IEEE 802.15.4 subsystem;
• Open vSwitch;
• Network traffic control;
• VMware vSockets driver; (CVE-2025-21943, CVE-2025-21672, CVE-2024-57952, CVE-2024-57949, CVE-2025-21683, CVE-2025-21690, CVE-2025-21699, CVE-2025-21676, CVE-2024-57924, CVE-2025-21694, CVE-2024-57948, CVE-2025-21675, CVE-2024-57951, CVE-2025-21692, CVE-2025-21684, CVE-2025-21668, CVE-2025-21665, CVE-2025-21667, CVE-2025-21670, CVE-2025-21674, CVE-2025-21697, CVE-2024-53124, CVE-2025-21666, CVE-2025-21682, CVE-2025-21680, CVE-2025-21681, CVE-2025-21691, CVE-2025-21669, CVE-2025-21673, CVE-2024-50157, CVE-2025-21689, CVE-2025-21678)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• GPIO subsystem;
• GPU drivers;
• InfiniBand drivers;
• IRQ chip drivers;
• Network drivers;
• Mellanox network drivers;
• i.MX PM domains;
• SCSI subsystem;
• USB Serial drivers;
• AFS file system;
• GFS2 file system;
• File systems infrastructure;
• File system notification infrastructure;
• Overlay file system;
• Proc file system;
• SMB network file system;
• Timer subsystem;
• Kernel CPU control infrastructure;
• Memory management;
• Networking core;
• DCCP (Datagram Congestion Control Protocol);
• IPv6 networking;
• IEEE 802.15.4 subsystem;
• Open vSwitch;
• Network traffic control;
• VMware vSockets driver; (CVE-2025-21943, CVE-2025-21672, CVE-2024-57952, CVE-2024-57949, CVE-2025-21683, CVE-2025-21690, CVE-2025-21699, CVE-2025-21676, CVE-2024-57924, CVE-2025-21694, CVE-2024-57948, CVE-2025-21675, CVE-2024-57951, CVE-2025-21692, CVE-2025-21684, CVE-2025-21668, CVE-2025-21665, CVE-2025-21667, CVE-2025-21670, CVE-2025-21674, CVE-2025-21697, CVE-2024-53124, CVE-2025-21666, CVE-2025-21682, CVE-2025-21680, CVE-2025-21681, CVE-2025-21691, CVE-2025-21669, CVE-2025-21673, CVE-2024-50157, CVE-2025-21689, CVE-2025-21678)

It was discovered that the CIFS network file system implementation in the Linux kernel did not properly verify the target namespace when handling upcalls. An attacker could use this to expose sensitive information. (CVE-2025-2312)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• GPIO subsystem;
• GPU drivers;
• InfiniBand drivers;
• IRQ chip drivers;
• Network drivers;
• Mellanox network drivers;
• i.MX PM domains;
• SCSI subsystem;
• USB Serial drivers;
• AFS file system;
• GFS2 file system;
• File systems infrastructure;
• File system notification infrastructure;
• Overlay file system;
• Proc file system;
• SMB network file system;
• Timer subsystem;
• Kernel CPU control infrastructure;
• Memory management;
• Networking core;
• DCCP (Datagram Congestion Control Protocol);
• IPv6 networking;
• IEEE 802.15.4 subsystem;
• Open vSwitch;
• Network traffic control;
• VMware vSockets driver; (CVE-2025-21943, CVE-2025-21672, CVE-2024-57952, CVE-2024-57949, CVE-2025-21683, CVE-2025-21690, CVE-2025-21699, CVE-2025-21676, CVE-2024-57924, CVE-2025-21694, CVE-2024-57948, CVE-2025-21675, CVE-2024-57951, CVE-2025-21692, CVE-2025-21684, CVE-2025-21668, CVE-2025-21665, CVE-2025-21667, CVE-2025-21670, CVE-2025-21674, CVE-2025-21697, CVE-2024-53124, CVE-2025-21666, CVE-2025-21682, CVE-2025-21680, CVE-2025-21681, CVE-2025-21691, CVE-2025-21669, CVE-2025-21673, CVE-2024-50157, CVE-2025-21689, CVE-2025-21678)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• GPIO subsystem;
• GPU drivers;
• InfiniBand drivers;
• IRQ chip drivers;
• Network drivers;
• Mellanox network drivers;
• i.MX PM domains;
• SCSI subsystem;
• USB Serial drivers;
• AFS file system;
• GFS2 file system;
• File systems infrastructure;
• File system notification infrastructure;
• Overlay file system;
• Proc file system;
• SMB network file system;
• Timer subsystem;
• Kernel CPU control infrastructure;
• Memory management;
• Networking core;
• DCCP (Datagram Congestion Control Protocol);
• IPv6 networking;
• IEEE 802.15.4 subsystem;
• Open vSwitch;
• Network traffic control;
• VMware vSockets driver; (CVE-2025-21675, CVE-2025-21697, CVE-2025-21668, CVE-2024-57951, CVE-2025-21680, CVE-2024-50157, CVE-2025-21699, CVE-2025-21669, CVE-2025-21678, CVE-2025-21665, CVE-2024-57924, CVE-2024-57949, CVE-2024-53124, CVE-2025-21684, CVE-2025-21676, CVE-2025-21672, CVE-2025-21682, CVE-2025-21670, CVE-2025-21690, CVE-2025-21673, CVE-2025-21691, CVE-2024-57952, CVE-2025-21674, CVE-2025-21689, CVE-2025-21943, CVE-2025-21692, CVE-2025-21667, CVE-2025-21666, CVE-2024-57948, CVE-2025-21694, CVE-2025-21683, CVE-2025-21681)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

• GPIO subsystem;
• GPU drivers;
• InfiniBand drivers;
• IRQ chip drivers;
• Network drivers;
• Mellanox network drivers;
• i.MX PM domains;
• SCSI subsystem;
• USB Serial drivers;
• AFS file system;
• GFS2 file system;
• File systems infrastructure;
• File system notification infrastructure;
• Overlay file system;
• Proc file system;
• SMB network file system;
• Timer subsystem;
• Kernel CPU control infrastructure;
• Memory management;
• Networking core;
• DCCP (Datagram Congestion Control Protocol);
• IPv6 networking;
• IEEE 802.15.4 subsystem;
• Open vSwitch;
• Network traffic control;
• VMware vSockets driver; (CVE-2025-21675, CVE-2025-21697, CVE-2025-21668, CVE-2024-57951, CVE-2025-21680, CVE-2024-50157, CVE-2025-21699, CVE-2025-21669, CVE-2025-21678, CVE-2025-21665, CVE-2024-57924, CVE-2024-57949, CVE-2024-53124, CVE-2025-21684, CVE-2025-21676, CVE-2025-21672, CVE-2025-21682, CVE-2025-21670, CVE-2025-21690, CVE-2025-21673, CVE-2025-21691, CVE-2024-57952, CVE-2025-21674, CVE-2025-21689, CVE-2025-21943, CVE-2025-21692, CVE-2025-21667, CVE-2025-21666, CVE-2024-57948, CVE-2025-21694, CVE-2025-21683, CVE-2025-21681)