CVE-2025-38213
In the Linux kernel, the following vulnerability has been resolved: vgacon: Add check for...
No scoreFix availableRejected
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
What each source reports
CVE List No score
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
- Record
CVE-2025-38213- Updated
- 2026-11-02
EUVDEUVD-2025-20043 No score
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
- Record
EUVD-2025-20043- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-28hg-q873-p4hv No score
In the Linux kernel, the following vulnerability has been resolved: vgacon: Add check for...
In the Linux kernel, the following vulnerability has been resolved:
vgacon: Add check for vc_origin address range in vgacon_scroll()
Our in-house Syzkaller reported the following BUG (twice), which we believed was the same issue with [1]:
================================================================== BUG: KASAN: slab-out-of-bounds in vcs_scr_readw+0xc2/0xd0 drivers/tty/vt/vt.c:4740 Read of size 2 at addr ffff88800f5bef60 by task syz.7.2620/12393 ... Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x72/0xa0 lib/dump_stack.c:106 print_address_description.constprop.0+0x6b/0x3d0 mm/kasan/report.c:364 print_report+0xba/0x280 mm/kasan/report.c:475 kasan_report+0xa9/0xe0 mm/kasan/report.c:588 vcs_scr_readw+0xc2/0xd0 drivers/tty/vt/vt.c:4740 vcs_write_buf_noattr drivers/tty/vt/vc_screen.c:493 [inline] vcs_write+0x586/0x840 drivers/tty/vt/vc_screen.c:690 vfs_write+0x219/0x960 fs/read_write.c:584 ksys_write+0x12e/0x260 fs/read_write.c:639 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x59/0x110 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x78/0xe2 ... </TASK>
Allocated by task 5614: kasan_save_stack+0x20/0x40 mm/kasan/common.c:45 kasan_set_track+0x25/0x30 mm/kasan/common.c:52 ____kasan_kmalloc mm/kasan/common.c:374 [inline] __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:383 kasan_kmalloc include/linux/kasan.h:201 [inline] __do_kmalloc_node mm/slab_common.c:1007 [inline] __kmalloc+0x62/0x140 mm/slab_common.c:1020 kmalloc include/linux/slab.h:604 [inline] kzalloc include/linux/slab.h:721 [inline] vc_do_resize+0x235/0xf40 drivers/tty/vt/vt.c:1193 vgacon_adjust_height+0x2d4/0x350 drivers/video/console/vgacon.c:1007 vgacon_font_set+0x1f7/0x240 drivers/video/console/vgacon.c:1031 con_font_set drivers/tty/vt/vt.c:4628 [inline] con_font_op+0x4da/0xa20 drivers/tty/vt/vt.c:4675 vt_k_ioctl+0xa10/0xb30 drivers/tty/vt/vt_ioctl.c:474 vt_ioctl+0x14c/0x1870 drivers/tty/vt/vt_ioctl.c:752 tty_ioctl+0x655/0x1510 drivers/tty/tty_io.c:2779 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:871 [inline] __se_sys_ioctl+0x12d/0x190 fs/ioctl.c:857 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x59/0x110 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x78/0xe2
Last potentially related work creation: kasan_save_stack+0x20/0x40 mm/kasan/common.c:45 __kasan_record_aux_stack+0x94/0xa0 mm/kasan/generic.c:492 __call_rcu_common.constprop.0+0xc3/0xa10 kernel/rcu/tree.c:2713 netlink_release+0x620/0xc20 net/netlink/af_netlink.c:802 __sock_release+0xb5/0x270 net/socket.c:663 sock_close+0x1e/0x30 net/socket.c:1425 __fput+0x408/0xab0 fs/file_table.c:384 __fput_sync+0x4c/0x60 fs/file_table.c:465 __do_sys_close fs/open.c:1580 [inline] __se_sys_close+0x68/0xd0 fs/open.c:1565 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x59/0x110 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x78/0xe2
Second to last potentially related work creation: kasan_save_stack+0x20/0x40 mm/kasan/common.c:45 __kasan_record_aux_stack+0x94/0xa0 mm/kasan/generic.c:492 __call_rcu_common.constprop.0+0xc3/0xa10 kernel/rcu/tree.c:2713 netlink_release+0x620/0xc20 net/netlink/af_netlink.c:802 __sock_release+0xb5/0x270 net/socket.c:663 sock_close+0x1e/0x30 net/socket.c:1425 __fput+0x408/0xab0 fs/file_table.c:384 task_work_run+0x154/0x240 kernel/task_work.c:239 exit_task_work include/linux/task_work.h:45 [inline] do_exit+0x8e5/0x1320 kernel/exit.c:874 do_group_exit+0xcd/0x280 kernel/exit.c:1023 get_signal+0x1675/0x1850 kernel/signal.c:2905 arch_do_signal_or_restart+0x80/0x3b0 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x1b3/0x1e0 kernel/entry/common.c:218 do_syscall_64+0x66/0x110 arch/x86/ent ---truncated---
- Record
GHSA-28hg-q873-p4hv- Updated
- 2026-11-02
NVD No score
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
- Record
CVE-2025-38213- Updated
- 2026-11-02
OSVCLSA-2025-1757963029 No score
kernel-uek: Fix of 195 CVEs
- rds: tcp: block BH in TCP callbacks
- kexec: Improve & fix crash_exclude_mem_range() to handle overlapping ranges
- module: correctly exit module_kallsyms_on_each_symbol when fn() != 0
- module: potential uninitialized return in module_kallsyms_on_each_symbol()
- module: use RCU to synchronize find_module
- kallsyms: refactor {,module_}kallsyms_on_each_symbol
- LTS tag: v5.4.295
- scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops
- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() {CVE-2025-38320}
- perf: Fix sample vs do_exit() {CVE-2025-38424}
- s390/pci: Fix __pcilg_mio_inuser() inline assembly
- rtc: test: Fix invalid format specifier.
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() {CVE-2025-38337}
- mm/huge_memory: fix dereferencing invalid pmd migration entry {CVE-2025-37958}
- rtc: Make rtc_time64_to_tm() support dates before 1970
- rtc: Improve performance of rtc_time64_to_tm(). Add tests.
- xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create {CVE-2022-48773}
- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
- ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms
- ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
- ARM: dts: am335x-bone-common: Add GPIO PHY reset on revision C3 board
- net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180}
- net: atm: add lec_mutex {CVE-2025-38323}
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). {CVE-2025-38181}
- tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer {CVE-2025-38184}
- tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior
- atm: atmtcp: Free invalid length skb in atmtcp_c_send(). {CVE-2025-38185}
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). {CVE-2025-38324}
- wifi: carl9170: do not ping device which has failed to load firmware {CVE-2025-38420}
- aoe: clean device rq_list in aoedev_downdev() {CVE-2025-38326}
- hwmon: (occ) fix unaligned accesses
- drm/nouveau/bl: increase buffer size to avoid truncate warning
- erofs: remove unused trace event erofs_destroy_inode
- ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
- ALSA: hda/intel: Add Thinkpad E15 to PM deny list
- Input: sparcspkr - avoid unannotated fall-through
- HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
- atm: Revert atm_account_tx() if copy_from_iter_full() fails. {CVE-2025-38190}
- selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
- scsi: s390: zfcp: Ensure synchronous unit_add
- scsi: storvsc: Increase the timeouts to storvsc_timeout
- jffs2: check jffs2_prealloc_raw_node_refs() result in few other places {CVE-2025-38328}
- jffs2: check that raw node were preallocated before writing summary {CVE-2025-38194}
- drivers/rapidio/rio_cm.c: prevent possible heap overwrite {CVE-2025-38090}
- powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery
- platform/x86: dell_rbu: Stop overwriting data buffer
- platform: Add Surface platform directory
- Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first"
- tee: Prevent size calculation wraparound on 32-bit kernels
- ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY
- bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
- watchdog: da9052_wdt: respect TWDMIN
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
- sock: Correct error checking condition for (assign|release)_proto_idx()
- scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
- vxlan: Do not treat dst cache initialization errors as fatal
- clk: rockchip: rk3036: mark ddrphy as critical
- wifi: mac80211: do not offer a mesh path if forwarding is disabled
- net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info
- pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get()
- pinctrl: armada-37xx:…
- Record
CLSA-2025-1757963029- Updated
- 2026-11-02
OSV No score
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
- Record
CVE-2025-38213- Updated
- 2026-11-02
Show 32 moreShow less
OSVMGASA-2025-0218 No score
Updated kernel-linus packages fix security vulnerabilities
Vanilla upstream kernel version 6.6.101 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.
- Record
MGASA-2025-0218- Updated
- 2026-11-02
OSVMGASA-2025-0219 No score
Updated kernel, kmod-virtualbox, kmod-xtables-addons & wireless-regdb packages fix security vulnerabilities
Upstream kernel version 6.6.101 fixes bugs and vulnerabilities. The kmod-virtualbox, kmod-xtables-addons & wireless-regdb packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.
- Record
MGASA-2025-0219- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:20081-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
- CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
- CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
- CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
- CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
- CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
- CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
- CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
- CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
- CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
- CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
- CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
- CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
- CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
- CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
- CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
- CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
- CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
- CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
- CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
- CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
- CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
- CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
- CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
- CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
- CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
- CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
- CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
- CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
- CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
- CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
- CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
- CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
- CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
- CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
- CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
- CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
- CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
- CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
- CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
- CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…
- Record
openSUSE-SU-2025:20081-1- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2025-38213 No score
CVE-2025-38213 in linux - Patched by Root
Root has patched CVE-2025-38213 in the linux package for Root:Debian:11. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-11-CVE-2025-38213- Updated
- 2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2025-38213 No score
CVE-2025-38213 in linux - Patched by Root
Root has patched CVE-2025-38213 in the linux package for Root:Debian:12. Multiple fixed versions available.
- Record
ROOT-OS-DEBIAN-12-CVE-2025-38213- Updated
- 2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2025-38213 No score
CVE-2025-38213 in linux - Patched by Root
Root has patched CVE-2025-38213 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.
- Record
ROOT-OS-UBUNTU-2204-CVE-2025-38213- Updated
- 2026-11-06
OSVSUSE-SU-2025:02588-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
- CVE-2023-52923: netfilter: nf_tables: split async and sync catchall in two functions (bsc#1236104).
- CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
- CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
- CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
- CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
- CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245217).
- CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246000).
- CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (bsc#1246045).
- CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246073).
- CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246029).
- CVE-2025-38213: vgacon: Add check for vc_origin address range in vgacon_scroll() (bsc#1246037).
- CVE-2025-38257: s390/pkey: Prevent overflow in size calculation for memdup_user() (bsc#1246186).
- CVE-2025-38289: scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (bsc#1246287).
The following non-security bugs were fixed:
- Revert 'hugetlb: unshare some PMDs when splitting VMAs (bsc#1245431).'
- Revert 'mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race'
- Revert 'mm/hugetlb: unshare page tables during VMA split, not before'
- bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (bsc#1244523).
- net: usb: usbnet: restore usb%d name exception for local mac addresses (bsc#1234480 bsc#1246555).
- Record
SUSE-SU-2025:02588-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02844-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2022-50211: md-raid10: fix KASAN warning (bsc#1245140).
- CVE-2023-53117: fs: prevent out-of-bounds array speculation when closing a file descriptor (bsc#1242780).
- CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1240799).
- CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245217).
- CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (bsc#1246045).
- CVE-2025-38213: vgacon: Add check for vc_origin address range in vgacon_scroll() (bsc#1246037).
- Record
SUSE-SU-2025:02844-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02844-2 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2022-50211: md-raid10: fix KASAN warning (bsc#1245140).
- CVE-2023-53117: fs: prevent out-of-bounds array speculation when closing a file descriptor (bsc#1242780).
- CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1240799).
- CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245217).
- CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (bsc#1246045).
- CVE-2025-38213: vgacon: Add check for vc_origin address range in vgacon_scroll() (bsc#1246037).
- Record
SUSE-SU-2025:02844-2- Updated
- 2026-11-02
OSVSUSE-SU-2025:02846-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2021-46984: Fixed an out of bounds access in kyber_bio_merge() in kyber (bsc#1220631).
- CVE-2021-46987: btrfs: fix deadlock when cloning inline extents and using qgroups (bsc#1220704).
- CVE-2022-4129: Fixed a denial of service with the Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference (bsc#1205711).
- CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
- CVE-2022-49319: iommu/arm-smmu-v3: check return value after calling platform_get_resource() (bsc#1238374).
- CVE-2022-49323: iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (bsc#1238400).
- CVE-2022-49768: 9p/fd: fix issue of list_del corruption in p9_fd_cancel() (bsc#1242446).
- CVE-2022-49825: ata: libata-transport: fix error handling in ata_tport_add() (bsc#1242548).
- CVE-2022-49934: wifi: mac80211: Fix UAF in ieee80211_scan_rx() (bsc#1245051).
- CVE-2022-49948: vt: Clear selection before changing the font (bsc#1245058).
- CVE-2022-49969: drm/amd/display: clear optc underflow before turn off odm clock (bsc#1245060).
- CVE-2022-49993: loop: Check for overflow while configuring loop (bsc#1245121).
- CVE-2022-50025: cxl: Fix a memory leak in an error handling path (bsc#1245132).
- CVE-2022-50027: scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE (bsc#1245073).
- CVE-2022-50030: scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input (bsc#1245265).
- CVE-2022-50033: usb: host: ohci-ppc-of: Fix refcount leak bug (bsc#1245139).
- CVE-2022-50103: sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed (bsc#1244840).
- CVE-2022-50149: driver core: fix potential deadlock in __driver_attach (bsc#1244883).
- CVE-2022-50226: crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak (bsc#1244860).
- CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210629).
- CVE-2023-52878: can: dev: can_put_echo_skb(): do not crash kernel if can_priv::echo_skb is accessed out of bounds (bsc#1225000).
- CVE-2023-53020: l2tp: close all race conditions in l2tp_tunnel_register() (bsc#1240224).
- CVE-2023-53117: fs: prevent out-of-bounds array speculation when closing a file descriptor (bsc#1242780).
- CVE-2023-53118: scsi: core: Fix a procfs host directory removal regression (bsc#1242365).
- CVE-2024-26974: crypto: qat - resolve race condition during AER recovery (bsc#1223638).
- CVE-2024-26982: Fixed Squashfs inode number check not to be an invalid value of zero (bsc#1223634).
- CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
- CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581).
- CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
- CVE-2025-21731: nbd: do not allow reconnect after disconnect (bsc#1237881).
- CVE-2025-21928: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (bsc#1240722).
- CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
- CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
- CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
- CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
- CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
- CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
- CVE-2025-38040: serial: mctrl_gpio: split disable_ms into sync and no_sync APIs (bsc#1245078).
- CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
- CVE-2025-38058: __legitimize_mnt(): check for…
- Record
SUSE-SU-2025:02846-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02848-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2022-50211: md-raid10: fix KASAN warning (bsc#1245140).
- CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210629).
- CVE-2023-52923: netfilter: nf_tables: split async and sync catchall in two functions (bsc#1236104).
- CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
- CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
- CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245217).
- CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246000).
- CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (bsc#1246045).
- CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246029).
- CVE-2025-38213: vgacon: Add check for vc_origin address range in vgacon_scroll() (bsc#1246037).
- CVE-2025-38257: s390/pkey: Prevent overflow in size calculation for memdup_user() (bsc#1246186).
- CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247349).
- CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID (bsc#1247348).
- CVE-2025-38497: usb: gadget: configfs: Fix OOB read on empty string write (bsc#1247347).
- Record
SUSE-SU-2025:02848-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02849-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
- CVE-2023-52923: netfilter: nf_tables: split async and sync catchall in two functions (bsc#1236104).
- CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
- CVE-2023-53117: fs: prevent out-of-bounds array speculation when closing a file descriptor (bsc#1242780).
- CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
- CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
- CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1240799).
- CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245217).
- CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246000).
- CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (bsc#1246045).
- CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246073).
- CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246029).
- CVE-2025-38213: vgacon: Add check for vc_origin address range in vgacon_scroll() (bsc#1246037).
- CVE-2025-38257: s390/pkey: Prevent overflow in size calculation for memdup_user() (bsc#1246186).
- CVE-2025-38350: net/sched: Always pass notifications when child class becomes empty (bsc#1246781).
- CVE-2025-38468: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (bsc#1247437).
- CVE-2025-38477: net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (bsc#1247314).
- CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247349).
- CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID (bsc#1247348).
- CVE-2025-38497: usb: gadget: configfs: Fix OOB read on empty string write (bsc#1247347).
The following non-security bugs were fixed:
- Revert 'hugetlb: unshare some PMDs when splitting VMAs (bsc#1245431).'
- Revert 'mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race'
- Revert 'mm/hugetlb: unshare page tables during VMA split, not before'
- Record
SUSE-SU-2025:02849-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02850-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
- CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
- CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
- CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245217).
- CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246000).
- CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (bsc#1246045).
- CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246029).
- CVE-2025-38213: vgacon: Add check for vc_origin address range in vgacon_scroll() (bsc#1246037).
- CVE-2025-38257: s390/pkey: Prevent overflow in size calculation for memdup_user() (bsc#1246186).
- CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247349).
- CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID (bsc#1247348).
- CVE-2025-38497: usb: gadget: configfs: Fix OOB read on empty string write (bsc#1247347).
- Record
SUSE-SU-2025:02850-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02851-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
- CVE-2023-52923: netfilter: nf_tables: split async and sync catchall in two functions (bsc#1236104).
- CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
- CVE-2023-53117: fs: prevent out-of-bounds array speculation when closing a file descriptor (bsc#1242780).
- CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
- CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2025-21881: uprobes: Reject the shared zeropage in uprobe_write_opcode() (bsc#1240185).
- CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1240799).
- CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245217).
- CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246000).
- CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (bsc#1246045).
- CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246073).
- CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246029).
- CVE-2025-38213: vgacon: Add check for vc_origin address range in vgacon_scroll() (bsc#1246037).
- CVE-2025-38257: s390/pkey: Prevent overflow in size calculation for memdup_user() (bsc#1246186).
- CVE-2025-38350: net/sched: Always pass notifications when child class becomes empty (bsc#1246781).
- CVE-2025-38468: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (bsc#1247437).
- CVE-2025-38477: net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (bsc#1247314).
- CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247349).
- CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID (bsc#1247348).
- CVE-2025-38497: usb: gadget: configfs: Fix OOB read on empty string write (bsc#1247347).
The following non-security bugs were fixed:
- Revert 'hugetlb: unshare some PMDs when splitting VMAs (bsc#1245431).'
- Revert 'mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race'
- Revert 'mm/hugetlb: unshare page tables during VMA split, not before'
- Record
SUSE-SU-2025:02851-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02852-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
- CVE-2023-52923: netfilter: nf_tables: split async and sync catchall in two functions (bsc#1236104).
- CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
- CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
- CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1237164).
- CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1240799).
- CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
- CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245217).
- CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246000).
- CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (bsc#1246045).
- CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246073).
- CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246029).
- CVE-2025-38213: vgacon: Add check for vc_origin address range in vgacon_scroll() (bsc#1246037).
- CVE-2025-38257: s390/pkey: Prevent overflow in size calculation for memdup_user() (bsc#1246186).
- CVE-2025-38289: scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (bsc#1246287).
- CVE-2025-38350: net/sched: Always pass notifications when child class becomes empty (bsc#1246781).
- CVE-2025-38468: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (bsc#1247437).
- CVE-2025-38477: net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (bsc#1247314).
- CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247349).
- CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID (bsc#1247348).
- CVE-2025-38497: usb: gadget: configfs: Fix OOB read on empty string write (bsc#1247347).
The following non-security bugs were fixed:
- Revert 'hugetlb: unshare some PMDs when splitting VMAs' (bsc#1245431).
- Revert 'mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race'
- Revert 'mm/hugetlb: unshare page tables during VMA split, not before'
- bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (bsc#1244523).
- net: usb: usbnet: restore usb%d name exception for local mac addresses (bsc#1234480 bsc#1246555).
- Record
SUSE-SU-2025:02852-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02853-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
- CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
- CVE-2024-42134: virtio-pci: Check if is_avq is NULL (bsc#1228664 bsc#1247831).
- CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
- CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
- CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
- CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
- CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
- CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
- CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
- CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
- CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
- CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
- CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
- CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
- CVE-2025-38047: x86/fred: Fix system hang during S4 resume with FRED enabled (bsc#1245084).
- CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
- CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
- CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
- CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
- CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
- CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
- CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
- CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
- CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
- CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
- CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
- CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
- CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
- CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
- CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
- CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
- CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
- CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
- CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
- CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
- CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
- CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
- CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
- CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
- CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
- CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in…
- Record
SUSE-SU-2025:02853-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02923-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2019-11135: TSX Asynchronous Abort condition (bsc#1139073).
- CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
- CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
- CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
- CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
- CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
- CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
- CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
- CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
- CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
- CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
- CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
- CVE-2025-38244: smb: client: fix potential deadlock when reconnecting channels (bsc#1246183).
- CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1246911).
- CVE-2025-38371: drm/v3d: Disable interrupts before resetting the GPU (bsc#1247178).
- CVE-2025-38392: idpf: convert control queue mutex to a spinlock (bsc#1247169).
- CVE-2025-38399: scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() (bsc#1247097).
- CVE-2025-38426: drm/amdgpu: Add basic validation for RAS header (bsc#1247252).
- CVE-2025-38457: net/sched: Abort __tc_modify_qdisc if parent class does not exist (bsc#1247098).
- CVE-2025-38460: atm: clip: Fix potential null-ptr-deref in to_atmarpd() (bsc#1247143).
- CVE-2025-38465: netlink: make sure we allow at least one dump skb (bsc#1247118).
- CVE-2025-38470: kABI fix for net: vlan: fix VLAN 0 refcount imbalance of toggling (bsc#1247288).
- CVE-2025-38471: tls: always refresh the queue when reading sock (bsc#1247450).
- CVE-2025-38490: net: libwx: remove duplicate page_pool_put_full_page() (bsc#1247243).
- CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247374).
- CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
- CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
- CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
- CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
- CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
- CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
- CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
- CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
- CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
- CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
- CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
- CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
- CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
- CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
- CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
- CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
- CVE-2025-23163: net:…
- Record
SUSE-SU-2025:02923-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02969-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
- CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
- CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
- CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
- CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
- CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
- CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
- CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
- CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
- CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
- CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
- CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
- CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
- CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
- CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
- CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
- CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
- CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
- CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
- CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
- CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
- CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
- CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
- CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
- CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
- CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
- CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
- CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
- CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
- CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
- CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
- CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
- CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
- CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
- CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
- CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
- CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
- CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
- CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
- CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
- CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
- CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in…
- Record
SUSE-SU-2025:02969-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02996-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
- CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
- CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (1230216).
- CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
- CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
- CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
- CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
- CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
- CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
- CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
- CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
- CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
- CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
- CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
- CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
- CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
- CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
- CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
- CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
- CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
- CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
- CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
- CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
- CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
- CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
- CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
- CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
- CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
- CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
- CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
- CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
- CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
- CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
- CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
- CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
- CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
- CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
- CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
- CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
- CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
- CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
- CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in…
- Record
SUSE-SU-2025:02996-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:02997-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2019-11135: enabled CONFIG_X86_INTEL_TSX_MODE_AUTO (bsc#1139073, bsc#1246695)
- CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
- CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
- CVE-2024-39298:mm/memory-failure: fix handling of dissolved but not taken off from buddy pages (bsc#1227082).
- CVE-2024-42134: virtio-pci: Check if is_avq is NULL (bsc#1228664).
- CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
- CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
- CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
- CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
- CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
- CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
- CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
- CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
- CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
- CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
- CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
- CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
- CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
- CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
- CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
- CVE-2025-38047: x86/fred: Fix system hang during S4 resume with FRED enabled (bsc#1245084).
- CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
- CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
- CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
- CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
- CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
- CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
- CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
- CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
- CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
- CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
- CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
- CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
- CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
- CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
- CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
- CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
- CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
- CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
- CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
- CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
- CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma…
- Record
SUSE-SU-2025:02997-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:03011-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2019-11135: enabled CONFIG_X86_INTEL_TSX_MODE_AUTO (bsc#1139073, bsc#1246695).
- CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
- CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
- CVE-2024-39298:mm/memory-failure: fix handling of dissolved but not taken off from buddy pages (bsc#1227082).
- CVE-2024-42134: virtio-pci: Check if is_avq is NULL (bsc#1228664 bsc#1247831).
- CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
- CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
- CVE-2024-49996: cifs: Fix buffer overflow when parsing NFS reparse points (bsc#1232089).
- CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
- CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
- CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
- CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
- CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
- CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
- CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
- CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
- CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
- CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
- CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
- CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
- CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
- CVE-2025-38047: x86/fred: Fix system hang during S4 resume with FRED enabled (bsc#1245084).
- CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
- CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
- CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
- CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
- CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
- CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
- CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
- CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
- CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
- CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
- CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
- CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
- CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
- CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
- CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
- CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
- CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
- CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
- CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
- CVE-2025-38147:…
- Record
SUSE-SU-2025:03011-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:03023-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may (bsc#1139073)
- CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
- CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
- CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
- CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
- CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
- CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
- CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
- CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
- CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
- CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
- CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
- CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
- CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
- CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
- CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
- CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
- CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
- CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
- CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
- CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
- CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
- CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
- CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
- CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
- CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
- CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
- CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
- CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
- CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
- CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
- CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
- CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
- CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
- CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
- CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
- CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
- CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
- CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
- CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
- CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
- CVE-2025-38188:…
- Record
SUSE-SU-2025:03023-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20577-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
- CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
- CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
- CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
- CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
- CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
- CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
- CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
- CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
- CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
- CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
- CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
- CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
- CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
- CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
- CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
- CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
- CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
- CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
- CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
- CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
- CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
- CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
- CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
- CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
- CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
- CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
- CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
- CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
- CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
- CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
- CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
- CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
- CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
- CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
- CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
- CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
- CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
- CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
- CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
- CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
- CVE-2025-38188:…
- Record
SUSE-SU-2025:20577-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20586-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
- CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
- CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
- CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
- CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
- CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
- CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
- CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
- CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
- CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
- CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
- CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
- CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
- CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
- CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
- CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
- CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
- CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
- CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
- CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
- CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
- CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
- CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
- CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
- CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
- CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
- CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
- CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
- CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
- CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
- CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
- CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
- CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
- CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
- CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
- CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
- CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
- CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
- CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
- CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
- CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
- CVE-2025-38188:…
- Record
SUSE-SU-2025:20586-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20601-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
- CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
- CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
- CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
- CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
- CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
- CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
- CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
- CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
- CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
- CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
- CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
- CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
- CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
- CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
- CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
- CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
- CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
- CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
- CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
- CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
- CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
- CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
- CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
- CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
- CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
- CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
- CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
- CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
- CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
- CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
- CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
- CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
- CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
- CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
- CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
- CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
- CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
- CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
- CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
- CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
- CVE-2025-38188:…
- Record
SUSE-SU-2025:20601-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:20602-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
- CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
- CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
- CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
- CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
- CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
- CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
- CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
- CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
- CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
- CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
- CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
- CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
- CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
- CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
- CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
- CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
- CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
- CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
- CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
- CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
- CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
- CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
- CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
- CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
- CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
- CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
- CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
- CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
- CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
- CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
- CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
- CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
- CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
- CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
- CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
- CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
- CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
- CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
- CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
- CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
- CVE-2025-38188:…
- Record
SUSE-SU-2025:20602-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:21074-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
- CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
- CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
- CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
- CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
- CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
- CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
- CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
- CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
- CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
- CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
- CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
- CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
- CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
- CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
- CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
- CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
- CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
- CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
- CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
- CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
- CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
- CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
- CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
- CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
- CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
- CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
- CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
- CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
- CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
- CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
- CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
- CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
- CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
- CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
- CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
- CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
- CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
- CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
- CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
- CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…
- Record
SUSE-SU-2025:21074-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:21139-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
- CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
- CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
- CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
- CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
- CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
- CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
- CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
- CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
- CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
- CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
- CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
- CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
- CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
- CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
- CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
- CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
- CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
- CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
- CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
- CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
- CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
- CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
- CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
- CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
- CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
- CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
- CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
- CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
- CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
- CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
- CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
- CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
- CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
- CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
- CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
- CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
- CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
- CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
- CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
- CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…
- Record
SUSE-SU-2025:21139-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:21179-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
- CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
- CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
- CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
- CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
- CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
- CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
- CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
- CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
- CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
- CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
- CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
- CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
- CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
- CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
- CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
- CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
- CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
- CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
- CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
- CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
- CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
- CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
- CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
- CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
- CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
- CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
- CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
- CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
- CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
- CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
- CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
- CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
- CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
- CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
- CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
- CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
- CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
- CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
- CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
- CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…
- Record
SUSE-SU-2025:21179-1- Updated
- 2026-11-02
OSVSUSE-SU-2025:2588-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
- CVE-2023-52923: netfilter: nf_tables: split async and sync catchall in two functions (bsc#1236104).
- CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
- CVE-2024-26643: Fixed mark set as dead when unbinding anonymous set with timeout (bsc#1221829).
- CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
- CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
- CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245217).
- CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246000).
- CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (bsc#1246045).
- CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246073).
- CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246029).
- CVE-2025-38213: vgacon: Add check for vc_origin address range in vgacon_scroll() (bsc#1246037).
- CVE-2025-38257: s390/pkey: Prevent overflow in size calculation for memdup_user() (bsc#1246186).
- CVE-2025-38289: scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (bsc#1246287).
The following non-security bugs were fixed:
- Revert 'hugetlb: unshare some PMDs when splitting VMAs (bsc#1245431).'
- Revert 'mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race'
- Revert 'mm/hugetlb: unshare page tables during VMA split, not before'
- bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (bsc#1244523).
- net: usb: usbnet: restore usb%d name exception for local mac addresses (bsc#1234480 bsc#1246555).
- Record
SUSE-SU-2025:2588-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:20560-1 No score
Security update for the Linux Kernel
The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
- CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
- CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
- CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
- CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
- CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
- CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
- CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
- CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
- CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
- CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
- CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
- CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
- CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
- CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
- CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
- CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
- CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
- CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
- CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
- CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
- CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
- CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
- CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
- CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
- CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
- CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
- CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
- CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
- CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
- CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
- CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
- CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
- CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
- CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
- CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
- CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
- CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
- CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
- CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
- CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
- CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…
- Record
SUSE-SU-2026:20560-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-38213 No score
In the Linux kernel, the following vulnerability has been resolved: vgacon: Add check for vc_origin address range in vgacon_scroll() Our in-house Syzkaller reported the following BUG (twice), which we believed was the same issue with [1]: ================================================================== BUG: KASAN: slab-out-of-bounds in vcs_scr_readw+0xc2/0xd0 drivers/tty/vt/vt.c:4740 Read of size 2 at addr ffff88800f5bef60 by task syz.7.2620/12393 ... Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x72/0xa0 lib/dump_stack.c:106 print_address_description.constprop.0+0x6b/0x3d0 mm/kasan/report.c:364 print_report+0xba/0x280 mm/kasan/report.c:475 kasan_report+0xa9/0xe0 mm/kasan/report.c:588 vcs_scr_readw+0xc2/0xd0 drivers/tty/vt/vt.c:4740 vcs_write_buf_noattr drivers/tty/vt/vc_screen.c:493 [inline] vcs_write+0x586/0x840 drivers/tty/vt/vc_screen.c:690 vfs_write+0x219/0x960 fs/read_write.c:584 ksys_write+0x12e/0x260 fs/read_write.c:639 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x59/0x110 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x78/0xe2 ... </TASK> Allocated by task 5614: kasan_save_stack+0x20/0x40 mm/kasan/common.c:45 kasan_set_track+0x25/0x30 mm/kasan/common.c:52 ____kasan_kmalloc mm/kasan/common.c:374 [inline] __kasan_kmalloc+0x8f/0xa0 mm/kasan/common.c:383 kasan_kmalloc include/linux/kasan.h:201 [inline] __do_kmalloc_node mm/slab_common.c:1007 [inline] __kmalloc+0x62/0x140 mm/slab_common.c:1020 kmalloc include/linux/slab.h:604 [inline] kzalloc include/linux/slab.h:721 [inline] vc_do_resize+0x235/0xf40 drivers/tty/vt/vt.c:1193 vgacon_adjust_height+0x2d4/0x350 drivers/video/console/vgacon.c:1007 vgacon_font_set+0x1f7/0x240 drivers/video/console/vgacon.c:1031 con_font_set drivers/tty/vt/vt.c:4628 [inline] con_font_op+0x4da/0xa20 drivers/tty/vt/vt.c:4675 vt_k_ioctl+0xa10/0xb30 drivers/tty/vt/vt_ioctl.c:474 vt_ioctl+0x14c/0x1870 drivers/tty/vt/vt_ioctl.c:752 tty_ioctl+0x655/0x1510 drivers/tty/tty_io.c:2779 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:871 [inline] __se_sys_ioctl+0x12d/0x190 fs/ioctl.c:857 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x59/0x110 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x78/0xe2 Last potentially related work creation: kasan_save_stack+0x20/0x40 mm/kasan/common.c:45 __kasan_record_aux_stack+0x94/0xa0 mm/kasan/generic.c:492 __call_rcu_common.constprop.0+0xc3/0xa10 kernel/rcu/tree.c:2713 netlink_release+0x620/0xc20 net/netlink/af_netlink.c:802 __sock_release+0xb5/0x270 net/socket.c:663 sock_close+0x1e/0x30 net/socket.c:1425 __fput+0x408/0xab0 fs/file_table.c:384 __fput_sync+0x4c/0x60 fs/file_table.c:465 __do_sys_close fs/open.c:1580 [inline] __se_sys_close+0x68/0xd0 fs/open.c:1565 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x59/0x110 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x78/0xe2 Second to last potentially related work creation: kasan_save_stack+0x20/0x40 mm/kasan/common.c:45 __kasan_record_aux_stack+0x94/0xa0 mm/kasan/generic.c:492 __call_rcu_common.constprop.0+0xc3/0xa10 kernel/rcu/tree.c:2713 netlink_release+0x620/0xc20 net/netlink/af_netlink.c:802 __sock_release+0xb5/0x270 net/socket.c:663 sock_close+0x1e/0x30 net/socket.c:1425 __fput+0x408/0xab0 fs/file_table.c:384 task_work_run+0x154/0x240 kernel/task_work.c:239 exit_task_work include/linux/task_work.h:45 [inline] do_exit+0x8e5/0x1320 kernel/exit.c:874 do_group_exit+0xcd/0x280 kernel/exit.c:1023 get_signal+0x1675/0x1850 kernel/signal.c:2905 arch_do_signal_or_restart+0x80/0x3b0 arch/x86/kernel/signal.c:310 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:328 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x1b3/0x1e0 kernel/entry/common.c:218 do_syscall_64+0x66/0x110 arch/x86/ent ---truncated---
- Record
UBUNTU-CVE-2025-38213- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-ltsAlpaquita:23 |
6.1.141-r0 up to 6.1.143-r1 | 6.1.143-r1 |
linux-ltsAlpaquita:stream |
6.6.94-r0 up to 6.6.96-r1 | 6.6.96-r1 |
bpftoolTuxCare:OracleLinux:7 From an advisory covering 194 CVEs |
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 |
kernel-uekTuxCare:OracleLinux:7 From an advisory covering 194 CVEs |
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 |
kernel-uek-containerTuxCare:OracleLinux:7 From an advisory covering 194 CVEs |
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 |
kernel-uek-container-debugTuxCare:OracleLinux:7 From an advisory covering 194 CVEs |
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 |
kernel-uek-debugTuxCare:OracleLinux:7 From an advisory covering 194 CVEs |
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 |
kernel-uek-debug-develTuxCare:OracleLinux:7 From an advisory covering 194 CVEs |
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 |
kernel-uek-develTuxCare:OracleLinux:7 From an advisory covering 194 CVEs |
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 |
kernel-uek-headersTuxCare:OracleLinux:7 From an advisory covering 194 CVEs |
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 |
Show 256 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-uek-toolsTuxCare:OracleLinux:7 From an advisory covering 194 CVEs |
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 |
perfTuxCare:OracleLinux:7 From an advisory covering 194 CVEs |
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 |
python-perfTuxCare:OracleLinux:7 From an advisory covering 194 CVEs |
before 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 | 5.4.17-2136.338.4.2.el7uek.tuxcare.els2 |
kernel-linusMageia:9 From an advisory covering 237 CVEs |
before 6.6.101-1.mga9 | 6.6.101-1.mga9 |
kernelMageia:9 From an advisory covering 237 CVEs |
before 6.6.101-1.mga9 | 6.6.101-1.mga9 |
kmod-virtualboxMageia:9 From an advisory covering 237 CVEs |
before 7.1.10-7.mga9 | 7.1.10-7.mga9 |
kmod-xtables-addonsMageia:9 From an advisory covering 237 CVEs |
before 3.24-83.mga9 | 3.24-83.mga9 |
wireless-regdbMageia:9 From an advisory covering 237 CVEs |
before 20250710-1.mga9 | 20250710-1.mga9 |
linuxRoot:Debian:11 |
before 5.10.262-1.aikido.113 | 5.10.262-1.aikido.1135.10.262-1.aikido.114 |
rootio-linuxRoot:Debian:11 |
before 5.10.262-1.aikido.113 | 5.10.262-1.aikido.1135.10.262-1.aikido.114 |
linuxRoot:Debian:12 |
before 6.1.190-1.aikido.167 | 6.1.190-1.aikido.167 |
rootio-linuxRoot:Debian:12 |
before 6.1.190-1.aikido.167 | 6.1.190-1.aikido.167 |
linuxRoot:Ubuntu:22.04 |
before 5.15.0-203.213.aikido.119 | 5.15.0-203.213.aikido.119 |
rootio-linuxRoot:Ubuntu:22.04 |
before 5.15.0-203.213.aikido.119 | 5.15.0-203.213.aikido.119 |
kernel-defaultSUSE:Linux Enterprise Micro 5.5 From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-default-baseSUSE:Linux Enterprise Micro 5.5 From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1.150500.6.55.1 | 5.14.21-150500.55.116.1.150500.6.55.1 |
kernel-sourceSUSE:Linux Enterprise Micro 5.5 From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-livepatch-SLE15-SP5_Update_29SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 17 CVEs |
before 1-150500.11.3.1 | 1-150500.11.3.1 |
kernel-64kbSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-defaultSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-default-baseSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1.150500.6.55.1 | 5.14.21-150500.55.116.1.150500.6.55.1 |
kernel-docsSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-obs-buildSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-sourceSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-symsSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-64kbSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-defaultSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-default-baseSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1.150500.6.55.1 | 5.14.21-150500.55.116.1.150500.6.55.1 |
kernel-docsSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-obs-buildSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-sourceSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-symsSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-64kbSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-defaultSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-default-baseSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1.150500.6.55.1 | 5.14.21-150500.55.116.1.150500.6.55.1 |
kernel-docsSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-obs-buildSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-sourceSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-symsSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-defaultSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-default-baseSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1.150500.6.55.1 | 5.14.21-150500.55.116.1.150500.6.55.1 |
kernel-docsSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-obs-buildSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-sourceSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-symsSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 17 CVEs |
before 5.14.21-150500.55.116.1 | 5.14.21-150500.55.116.1 |
kernel-defaultSUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE From an advisory covering 8 CVEs |
before 3.0.101-108.189.1 | 3.0.101-108.189.1 |
kernel-docsSUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE From an advisory covering 8 CVEs |
before 3.0.101-108.189.1 | 3.0.101-108.189.1 |
kernel-ec2SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE From an advisory covering 8 CVEs |
before 3.0.101-108.189.1 | 3.0.101-108.189.1 |
kernel-sourceSUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE From an advisory covering 8 CVEs |
before 3.0.101-108.189.1 | 3.0.101-108.189.1 |
kernel-symsSUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE From an advisory covering 8 CVEs |
before 3.0.101-108.189.1 | 3.0.101-108.189.1 |
kernel-traceSUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE From an advisory covering 8 CVEs |
before 3.0.101-108.189.1 | 3.0.101-108.189.1 |
kernel-xenSUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE From an advisory covering 8 CVEs |
before 3.0.101-108.189.1 | 3.0.101-108.189.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 83 CVEs |
before 4.12.14-122.269.1 | 4.12.14-122.269.1 |
kgraft-patch-SLE12-SP5_Update_71SUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 83 CVEs |
before 1-8.3.1 | 1-8.3.1 |
kernel-defaultSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 83 CVEs |
before 4.12.14-122.269.1 | 4.12.14-122.269.1 |
kernel-sourceSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 83 CVEs |
before 4.12.14-122.269.1 | 4.12.14-122.269.1 |
kernel-symsSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 83 CVEs |
before 4.12.14-122.269.1 | 4.12.14-122.269.1 |
kernel-defaultSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 83 CVEs |
before 4.12.14-122.269.1 | 4.12.14-122.269.1 |
kernel-sourceSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 83 CVEs |
before 4.12.14-122.269.1 | 4.12.14-122.269.1 |
kernel-symsSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 83 CVEs |
before 4.12.14-122.269.1 | 4.12.14-122.269.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP3 From an advisory covering 20 CVEs |
before 5.3.18-150300.59.215.1 | 5.3.18-150300.59.215.1 |
kernel-livepatch-SLE15-SP3_Update_60SUSE:Linux Enterprise Live Patching 15 SP3 From an advisory covering 20 CVEs |
before 1-150300.7.3.1 | 1-150300.7.3.1 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 15 SP3 From an advisory covering 20 CVEs |
before 5.3.18-150300.59.215.1 | 5.3.18-150300.59.215.1 |
kernel-64kbSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 20 CVEs |
before 5.3.18-150300.59.215.1 | 5.3.18-150300.59.215.1 |
kernel-defaultSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 20 CVEs |
before 5.3.18-150300.59.215.1 | 5.3.18-150300.59.215.1 |
kernel-default-baseSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 20 CVEs |
before 5.3.18-150300.59.215.1.150300.18.128.1 | 5.3.18-150300.59.215.1.150300.18.128.1 |
kernel-docsSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 20 CVEs |
before 5.3.18-150300.59.215.1 | 5.3.18-150300.59.215.1 |
kernel-obs-buildSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 20 CVEs |
before 5.3.18-150300.59.215.1 | 5.3.18-150300.59.215.1 |
kernel-preemptSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 20 CVEs |
before 5.3.18-150300.59.215.1 | 5.3.18-150300.59.215.1 |
kernel-sourceSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 20 CVEs |
before 5.3.18-150300.59.215.1 | 5.3.18-150300.59.215.1 |
kernel-symsSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 20 CVEs |
before 5.3.18-150300.59.215.1 | 5.3.18-150300.59.215.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 20 CVEs |
before 5.3.18-150300.59.215.1 | 5.3.18-150300.59.215.1 |
kernel-defaultSUSE:Linux Enterprise Micro 5.1 From an advisory covering 20 CVEs |
before 5.3.18-150300.59.215.1 | 5.3.18-150300.59.215.1 |
kernel-default-baseSUSE:Linux Enterprise Micro 5.1 From an advisory covering 20 CVEs |
before 5.3.18-150300.59.215.1.150300.18.128.1 | 5.3.18-150300.59.215.1.150300.18.128.1 |
kernel-defaultSUSE:Linux Enterprise Micro 5.2 From an advisory covering 20 CVEs |
before 5.3.18-150300.59.215.1 | 5.3.18-150300.59.215.1 |
kernel-default-baseSUSE:Linux Enterprise Micro 5.2 From an advisory covering 20 CVEs |
before 5.3.18-150300.59.215.1.150300.18.128.1 | 5.3.18-150300.59.215.1.150300.18.128.1 |
kernel-64kbSUSE:Enterprise Storage 7.1 From an advisory covering 20 CVEs |
before 5.3.18-150300.59.215.1 | 5.3.18-150300.59.215.1 |
kernel-defaultSUSE:Enterprise Storage 7.1 From an advisory covering 20 CVEs |
before 5.3.18-150300.59.215.1 | 5.3.18-150300.59.215.1 |
kernel-default-baseSUSE:Enterprise Storage 7.1 From an advisory covering 20 CVEs |
before 5.3.18-150300.59.215.1.150300.18.128.1 | 5.3.18-150300.59.215.1.150300.18.128.1 |
kernel-docsSUSE:Enterprise Storage 7.1 From an advisory covering 20 CVEs |
before 5.3.18-150300.59.215.1 | 5.3.18-150300.59.215.1 |
kernel-obs-buildSUSE:Enterprise Storage 7.1 From an advisory covering 20 CVEs |
before 5.3.18-150300.59.215.1 | 5.3.18-150300.59.215.1 |
kernel-preemptSUSE:Enterprise Storage 7.1 From an advisory covering 20 CVEs |
before 5.3.18-150300.59.215.1 | 5.3.18-150300.59.215.1 |
kernel-sourceSUSE:Enterprise Storage 7.1 From an advisory covering 20 CVEs |
before 5.3.18-150300.59.215.1 | 5.3.18-150300.59.215.1 |
kernel-symsSUSE:Enterprise Storage 7.1 From an advisory covering 20 CVEs |
before 5.3.18-150300.59.215.1 | 5.3.18-150300.59.215.1 |
kernel-defaultSUSE:Linux Enterprise Micro 5.3 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-default-baseSUSE:Linux Enterprise Micro 5.3 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1.150400.24.88.1 | 5.14.21-150400.24.173.1.150400.24.88.1 |
kernel-defaultSUSE:Linux Enterprise Micro 5.4 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-default-baseSUSE:Linux Enterprise Micro 5.4 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1.150400.24.88.1 | 5.14.21-150400.24.173.1.150400.24.88.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-livepatch-SLE15-SP4_Update_43SUSE:Linux Enterprise Live Patching 15 SP4 From an advisory covering 28 CVEs |
before 1-150400.9.3.1 | 1-150400.9.3.1 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 15 SP4 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-64kbSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-defaultSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-default-baseSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1.150400.24.88.1 | 5.14.21-150400.24.173.1.150400.24.88.1 |
kernel-docsSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-obs-buildSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-sourceSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-symsSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-64kbSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-defaultSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-default-baseSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1.150400.24.88.1 | 5.14.21-150400.24.173.1.150400.24.88.1 |
kernel-docsSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-obs-buildSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-sourceSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-symsSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-64kbSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-defaultSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-default-baseSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1.150400.24.88.1 | 5.14.21-150400.24.173.1.150400.24.88.1 |
kernel-docsSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-obs-buildSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-sourceSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-symsSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-defaultSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-default-baseSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1.150400.24.88.1 | 5.14.21-150400.24.173.1.150400.24.88.1 |
kernel-docsSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-obs-buildSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-sourceSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-symsSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-defaultSUSE:Manager Proxy LTS 4.3 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-default-baseSUSE:Manager Proxy LTS 4.3 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1.150400.24.88.1 | 5.14.21-150400.24.173.1.150400.24.88.1 |
kernel-sourceSUSE:Manager Proxy LTS 4.3 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-symsSUSE:Manager Proxy LTS 4.3 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-defaultSUSE:Manager Server LTS 4.3 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-default-baseSUSE:Manager Server LTS 4.3 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1.150400.24.88.1 | 5.14.21-150400.24.173.1.150400.24.88.1 |
kernel-sourceSUSE:Manager Server LTS 4.3 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-symsSUSE:Manager Server LTS 4.3 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-zfcpdumpSUSE:Manager Server LTS 4.3 From an advisory covering 28 CVEs |
before 5.14.21-150400.24.173.1 | 5.14.21-150400.24.173.1 |
kernel-rtSUSE:Linux Enterprise Micro 5.1 From an advisory covering 17 CVEs |
before 5.3.18-150300.217.1 | 5.3.18-150300.217.1 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.1 From an advisory covering 17 CVEs |
before 5.3.18-150300.217.1 | 5.3.18-150300.217.1 |
kernel-rtSUSE:Linux Enterprise Micro 5.2 From an advisory covering 17 CVEs |
before 5.3.18-150300.217.1 | 5.3.18-150300.217.1 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.2 From an advisory covering 17 CVEs |
before 5.3.18-150300.217.1 | 5.3.18-150300.217.1 |
kernel-rtSUSE:Linux Enterprise Micro 5.3 From an advisory covering 28 CVEs |
before 5.14.21-150400.15.127.1 | 5.14.21-150400.15.127.1 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.3 From an advisory covering 28 CVEs |
before 5.14.21-150400.15.127.1 | 5.14.21-150400.15.127.1 |
kernel-rtSUSE:Linux Enterprise Micro 5.4 From an advisory covering 28 CVEs |
before 5.14.21-150400.15.127.1 | 5.14.21-150400.15.127.1 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.4 From an advisory covering 28 CVEs |
before 5.14.21-150400.15.127.1 | 5.14.21-150400.15.127.1 |
kernel-rtSUSE:Linux Enterprise Micro 5.5 From an advisory covering 29 CVEs |
before 5.14.21-150500.13.103.2 | 5.14.21-150500.13.103.2 |
kernel-source-rtSUSE:Linux Enterprise Micro 5.5 From an advisory covering 29 CVEs |
before 5.14.21-150500.13.103.2 | 5.14.21-150500.13.103.2 |
kernel-livepatch-SLE15-SP7-RT_Update_3SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 260 CVEs |
before 1-150700.1.5.1 | 1-150700.1.5.1 |
kernel-rtSUSE:Real Time Module 15 SP7 From an advisory covering 260 CVEs |
before 6.4.0-150700.7.13.1 | 6.4.0-150700.7.13.1 |
kernel-source-rtSUSE:Real Time Module 15 SP7 From an advisory covering 260 CVEs |
before 6.4.0-150700.7.13.1 | 6.4.0-150700.7.13.1 |
kernel-syms-rtSUSE:Real Time Module 15 SP7 From an advisory covering 260 CVEs |
before 6.4.0-150700.7.13.1 | 6.4.0-150700.7.13.1 |
kernel-cocoSUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 447 CVEs |
before 6.4.0-15061.28.coco15sp6.1 | 6.4.0-15061.28.coco15sp6.1 |
kernel-coco_debugSUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 447 CVEs |
before 6.4.0-15061.28.coco15sp6.1 | 6.4.0-15061.28.coco15sp6.1 |
kernel-source-cocoSUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 447 CVEs |
before 6.4.0-15061.28.coco15sp6.1 | 6.4.0-15061.28.coco15sp6.1 |
kernel-syms-cocoSUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 447 CVEs |
before 6.4.0-15061.28.coco15sp6.1 | 6.4.0-15061.28.coco15sp6.1 |
kernel-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 238 CVEs |
before 6.4.0-150600.8.48.1 | 6.4.0-150600.8.48.1 |
kernel-source-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 238 CVEs |
before 6.4.0-150600.8.48.1 | 6.4.0-150600.8.48.1 |
kernel-syms-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 238 CVEs |
before 6.4.0-150600.8.48.1 | 6.4.0-150600.8.48.1 |
kernel-azureopenSUSE:Leap 15.6 From an advisory covering 238 CVEs |
before 6.4.0-150600.8.48.1 | 6.4.0-150600.8.48.1 |
kernel-source-azureopenSUSE:Leap 15.6 From an advisory covering 238 CVEs |
before 6.4.0-150600.8.48.1 | 6.4.0-150600.8.48.1 |
kernel-syms-azureopenSUSE:Leap 15.6 From an advisory covering 238 CVEs |
before 6.4.0-150600.8.48.1 | 6.4.0-150600.8.48.1 |
kernel-64kbSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 238 CVEs |
before 6.4.0-150600.23.65.1 | 6.4.0-150600.23.65.1 |
kernel-defaultSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 238 CVEs |
before 6.4.0-150600.23.65.1 | 6.4.0-150600.23.65.1 |
kernel-default-baseSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 238 CVEs |
before 6.4.0-150600.23.65.1.150600.12.28.4 | 6.4.0-150600.23.65.1.150600.12.28.4 |
kernel-sourceSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 238 CVEs |
before 6.4.0-150600.23.65.1 | 6.4.0-150600.23.65.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 238 CVEs |
before 6.4.0-150600.23.65.1 | 6.4.0-150600.23.65.1 |
kernel-docsSUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 238 CVEs |
before 6.4.0-150600.23.65.1 | 6.4.0-150600.23.65.1 |
kernel-obs-buildSUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 238 CVEs |
before 6.4.0-150600.23.65.1 | 6.4.0-150600.23.65.1 |
kernel-sourceSUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 238 CVEs |
before 6.4.0-150600.23.65.1 | 6.4.0-150600.23.65.1 |
kernel-symsSUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 238 CVEs |
before 6.4.0-150600.23.65.1 | 6.4.0-150600.23.65.1 |
kernel-defaultSUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 238 CVEs |
before 6.4.0-150600.23.65.1 | 6.4.0-150600.23.65.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 238 CVEs |
before 6.4.0-150600.23.65.1 | 6.4.0-150600.23.65.1 |
kernel-livepatch-SLE15-SP6_Update_14SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 238 CVEs |
before 1-150600.13.3.4 | 1-150600.13.3.4 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 238 CVEs |
before 6.4.0-150600.23.65.1 | 6.4.0-150600.23.65.1 |
kernel-defaultSUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 238 CVEs |
before 6.4.0-150600.23.65.1 | 6.4.0-150600.23.65.1 |
dtb-aarch64openSUSE:Leap 15.6 From an advisory covering 238 CVEs |
before 6.4.0-150600.23.65.1 | 6.4.0-150600.23.65.1 |
kernel-64kbopenSUSE:Leap 15.6 From an advisory covering 238 CVEs |
before 6.4.0-150600.23.65.1 | 6.4.0-150600.23.65.1 |
kernel-debugopenSUSE:Leap 15.6 From an advisory covering 238 CVEs |
before 6.4.0-150600.23.65.1 | 6.4.0-150600.23.65.1 |
kernel-defaultopenSUSE:Leap 15.6 From an advisory covering 238 CVEs |
before 6.4.0-150600.23.65.1 | 6.4.0-150600.23.65.1 |
kernel-default-baseopenSUSE:Leap 15.6 From an advisory covering 238 CVEs |
before 6.4.0-150600.23.65.1.150600.12.28.4 | 6.4.0-150600.23.65.1.150600.12.28.4 |
kernel-docsopenSUSE:Leap 15.6 From an advisory covering 238 CVEs |
before 6.4.0-150600.23.65.1 | 6.4.0-150600.23.65.1 |
kernel-kvmsmallopenSUSE:Leap 15.6 From an advisory covering 238 CVEs |
before 6.4.0-150600.23.65.1 | 6.4.0-150600.23.65.1 |
kernel-obs-buildopenSUSE:Leap 15.6 From an advisory covering 238 CVEs |
before 6.4.0-150600.23.65.1 | 6.4.0-150600.23.65.1 |
kernel-obs-qaopenSUSE:Leap 15.6 From an advisory covering 238 CVEs |
before 6.4.0-150600.23.65.1 | 6.4.0-150600.23.65.1 |
kernel-sourceopenSUSE:Leap 15.6 From an advisory covering 238 CVEs |
before 6.4.0-150600.23.65.1 | 6.4.0-150600.23.65.1 |
kernel-symsopenSUSE:Leap 15.6 From an advisory covering 238 CVEs |
before 6.4.0-150600.23.65.1 | 6.4.0-150600.23.65.1 |
kernel-zfcpdumpopenSUSE:Leap 15.6 From an advisory covering 238 CVEs |
before 6.4.0-150600.23.65.1 | 6.4.0-150600.23.65.1 |
kernel-64kbSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 264 CVEs |
before 6.4.0-150700.53.11.1 | 6.4.0-150700.53.11.1 |
kernel-defaultSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 264 CVEs |
before 6.4.0-150700.53.11.1 | 6.4.0-150700.53.11.1 |
kernel-default-baseSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 264 CVEs |
before 6.4.0-150700.53.11.1.150700.17.9.4 | 6.4.0-150700.53.11.1.150700.17.9.4 |
kernel-sourceSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 264 CVEs |
before 6.4.0-150700.53.11.1 | 6.4.0-150700.53.11.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 264 CVEs |
before 6.4.0-150700.53.11.1 | 6.4.0-150700.53.11.1 |
kernel-docsSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 264 CVEs |
before 6.4.0-150700.53.11.3 | 6.4.0-150700.53.11.3 |
kernel-obs-buildSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 264 CVEs |
before 6.4.0-150700.53.11.1 | 6.4.0-150700.53.11.1 |
kernel-sourceSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 264 CVEs |
before 6.4.0-150700.53.11.1 | 6.4.0-150700.53.11.1 |
kernel-symsSUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 264 CVEs |
before 6.4.0-150700.53.11.1 | 6.4.0-150700.53.11.1 |
kernel-defaultSUSE:Linux Enterprise Module for Legacy 15 SP7 From an advisory covering 264 CVEs |
before 6.4.0-150700.53.11.1 | 6.4.0-150700.53.11.1 |
kernel-defaultSUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 264 CVEs |
before 6.4.0-150700.53.11.1 | 6.4.0-150700.53.11.1 |
kernel-livepatch-SLE15-SP7_Update_3SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 264 CVEs |
before 1-150700.15.3.4 | 1-150700.15.3.4 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 15 SP7 From an advisory covering 264 CVEs |
before 6.4.0-150700.53.11.1 | 6.4.0-150700.53.11.1 |
kernel-defaultSUSE:Linux Enterprise Workstation Extension 15 SP7 From an advisory covering 264 CVEs |
before 6.4.0-150700.53.11.1 | 6.4.0-150700.53.11.1 |
kernel-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 265 CVEs |
before 6.4.0-150700.20.11.1 | 6.4.0-150700.20.11.1 |
kernel-source-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 265 CVEs |
before 6.4.0-150700.20.11.1 | 6.4.0-150700.20.11.1 |
kernel-syms-azureSUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 265 CVEs |
before 6.4.0-150700.20.11.1 | 6.4.0-150700.20.11.1 |
kernel-livepatch-SLE15-SP6-RT_Update_14SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 235 CVEs |
before 1-150600.1.5.1 | 1-150600.1.5.1 |
kernel-rtSUSE:Real Time Module 15 SP6 From an advisory covering 235 CVEs |
before 6.4.0-150600.10.49.1 | 6.4.0-150600.10.49.1 |
kernel-rt_debugSUSE:Real Time Module 15 SP6 From an advisory covering 235 CVEs |
before 6.4.0-150600.10.49.1 | 6.4.0-150600.10.49.1 |
kernel-source-rtSUSE:Real Time Module 15 SP6 From an advisory covering 235 CVEs |
before 6.4.0-150600.10.49.1 | 6.4.0-150600.10.49.1 |
kernel-syms-rtSUSE:Real Time Module 15 SP6 From an advisory covering 235 CVEs |
before 6.4.0-150600.10.49.1 | 6.4.0-150600.10.49.1 |
kernel-rtopenSUSE:Leap 15.6 From an advisory covering 235 CVEs |
before 6.4.0-150600.10.49.1 | 6.4.0-150600.10.49.1 |
kernel-rt_debugopenSUSE:Leap 15.6 From an advisory covering 235 CVEs |
before 6.4.0-150600.10.49.1 | 6.4.0-150600.10.49.1 |
kernel-source-rtopenSUSE:Leap 15.6 From an advisory covering 235 CVEs |
before 6.4.0-150600.10.49.1 | 6.4.0-150600.10.49.1 |
kernel-syms-rtopenSUSE:Leap 15.6 From an advisory covering 235 CVEs |
before 6.4.0-150600.10.49.1 | 6.4.0-150600.10.49.1 |
kernel-rtSUSE:Linux Micro 6.0 From an advisory covering 235 CVEs |
before 6.4.0-35.1 | 6.4.0-35.1 |
kernel-source-rtSUSE:Linux Micro 6.0 From an advisory covering 235 CVEs |
before 6.4.0-35.1 | 6.4.0-35.1 |
kernel-defaultSUSE:Linux Micro 6.0 From an advisory covering 235 CVEs |
before 6.4.0-32.1 | 6.4.0-32.1 |
kernel-default-baseSUSE:Linux Micro 6.0 From an advisory covering 235 CVEs |
before 6.4.0-32.1.21.10 | 6.4.0-32.1.21.10 |
kernel-kvmsmallSUSE:Linux Micro 6.0 From an advisory covering 235 CVEs |
before 6.4.0-32.1 | 6.4.0-32.1 |
kernel-sourceSUSE:Linux Micro 6.0 From an advisory covering 235 CVEs |
before 6.4.0-32.1 | 6.4.0-32.1 |
kernel-rtSUSE:Linux Micro 6.1 From an advisory covering 235 CVEs |
before 6.4.0-35.1 | 6.4.0-35.1 |
kernel-source-rtSUSE:Linux Micro 6.1 From an advisory covering 235 CVEs |
before 6.4.0-35.1 | 6.4.0-35.1 |
kernel-defaultSUSE:Linux Micro 6.1 From an advisory covering 235 CVEs |
before 6.4.0-32.1 | 6.4.0-32.1 |
kernel-default-baseSUSE:Linux Micro 6.1 From an advisory covering 235 CVEs |
before 6.4.0-32.1.21.10 | 6.4.0-32.1.21.10 |
kernel-kvmsmallSUSE:Linux Micro 6.1 From an advisory covering 235 CVEs |
before 6.4.0-32.1 | 6.4.0-32.1 |
kernel-sourceSUSE:Linux Micro 6.1 From an advisory covering 235 CVEs |
before 6.4.0-32.1 | 6.4.0-32.1 |
kernel-64kbSUSE:Linux Micro 6.2 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-defaultSUSE:Linux Micro 6.2 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-default-baseSUSE:Linux Micro 6.2 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1.160000.2.4 | 6.12.0-160000.6.1.160000.2.4 |
kernel-rtSUSE:Linux Micro 6.2 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-sourceSUSE:Linux Micro 6.2 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-64kbSUSE:Linux Enterprise Server 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-defaultSUSE:Linux Enterprise Server 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-default-baseSUSE:Linux Enterprise Server 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1.160000.2.4 | 6.12.0-160000.6.1.160000.2.4 |
kernel-docsSUSE:Linux Enterprise Server 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-kvmsmallSUSE:Linux Enterprise Server 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-obs-qaSUSE:Linux Enterprise Server 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-sourceSUSE:Linux Enterprise Server 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-symsSUSE:Linux Enterprise Server 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Server 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-64kbSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-defaultSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-default-baseSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1.160000.2.4 | 6.12.0-160000.6.1.160000.2.4 |
kernel-docsSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-kvmsmallSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-obs-qaSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-sourceSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-symsSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-zfcpdumpSUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-defaultSUSE:Linux Enterprise High Availability Extension 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-obs-buildSUSE:Linux Micro Extras 6.2 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-symsSUSE:Linux Micro Extras 6.2 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
dtb-aarch64openSUSE:Leap 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-64kbopenSUSE:Leap 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-defaultopenSUSE:Leap 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-default-baseopenSUSE:Leap 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1.160000.2.4 | 6.12.0-160000.6.1.160000.2.4 |
kernel-docsopenSUSE:Leap 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-kvmsmallopenSUSE:Leap 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-obs-buildopenSUSE:Leap 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-obs-qaopenSUSE:Leap 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-rtopenSUSE:Leap 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-sourceopenSUSE:Leap 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-symsopenSUSE:Leap 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
kernel-zfcpdumpopenSUSE:Leap 16.0 From an advisory covering 573 CVEs |
before 6.12.0-160000.6.1 | 6.12.0-160000.6.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| affected, facts | ||
| affected | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-38213 has been rejected by its source and should not be treated as a live vulnerability, published July 4, 2025. Fixed in linux-lts 6.1.143-r1.
References
nvd.nist.gov/vuln/detail/CVE-2025-38213
git.kernel.org/stable/c/2f4040a5855a59e48296f1b5a7cc0fceea3195b1
Show 194 moreShow less
github.com/advisories/GHSA-28hg-q873-p4hv
docs.bell-sw.com/security/cves/CVE-2025-38213
errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2025-1757963029.html
security-tracker.debian.org/tracker/CVE-2025-38213
advisories.mageia.org/MGASA-2025-0218.html
bugs.mageia.org/show_bug.cgi?id=34530
cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.94
suse.com/support/update/announcement/2025/suse-su-202502588-1
bugzilla.suse.com/1206051
ubuntu.com/security/CVE-2025-38213
cve.org/CVERecord?id=CVE-2025-38213
This page doesn't list everything
Left out here: 1,980 references and the rest of 18 source descriptions. The JSON record has them.