Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2025-20091-1 Final 1 1 2025-11-26T17:04:24Z current 2025-11-26T17:04:24Z 2025-11-26T17:04:24Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472). - CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630). - CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161). - CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302). - CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317). - CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512). - CVE-2025-39779: btrfs: subpage: keep TOWRITE tag until folio is cleaned (bsc#1249495). - CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202). - CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455). - CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400). - CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379). - CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721). - CVE-2025-39903: of_numa: fix uninitialized memory nodes causing kernel panic (bsc#1250749). - CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704). - CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232). - CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233). - CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177). - CVE-2025-39950: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (bsc#1251176). - CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804). - CVE-2025-39956: igc: don't fail igc_probe() on LED setup error (bsc#1251809). - CVE-2025-39963: io_uring: fix incorrect io_kiocb reference in io_link_skb (bsc#1251819). - CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047). - CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044). - CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051). - CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052). - CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039). - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035). - CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069). - CVE-2025-39979: net/mlx5: fs, add API for sharing HWS action by refcount (bsc#1252067). - CVE-2025-39984: net: tun: Update napi->skb after XDP process (bsc#1252081). - CVE-2025-39992: mm: swap: check for stable address space before operating on the VMA (bsc#1252076). - CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062). - CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349). - CVE-2025-40012: net/smc: fix warning in smc_rx_splice() when calling get_page() (bsc#1252330). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688). - CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780). - CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858). - CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826). - CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848). - CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr (bsc#1252789). - CVE-2025-40080: nbd: restrict sockets to TCP and UDP (bsc#1252774). - CVE-2025-40100: btrfs: do not assert we found block group item when creating free space tree (bsc#1252918). The following non security issues were fixed: - add bug reference to existing hv_netvsc change (bsc#1252265) - amd-pstate-ut: Reset amd-pstate driver mode after running selftests (bsc#1249226). - cgroup/cpuset: Remove remote_partition_check() & make update_cpumasks_hier() handle remote partition (bsc#1241166). - cpuset: Use new excpus for nocpu error check when enabling root partition (bsc#1241166). - cpuset: fix failure to enable isolated partition when containing isolcpus (bsc#1241166). - doc/README.SUSE: Correct the character used for TAINT_NO_SUPPORT The character was previously 'N', but upstream used it for TAINT_TEST, which prompted the change of TAINT_NO_SUPPORT to 'n'. - dpll: zl3073x: Add firmware loading functionality (bsc#1252253). - dpll: zl3073x: Add functions to access hardware registers (bsc#1252253). - dpll: zl3073x: Add low-level flash functions (bsc#1252253). - dpll: zl3073x: Add support to get fractional frequency offset (bsc#1252253). - dpll: zl3073x: Add support to get phase offset on connected input pin (bsc#1252253). - dpll: zl3073x: Add support to get/set esync on pins (bsc#1252253). - dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (bsc#1252253). - dpll: zl3073x: Handle missing or corrupted flash configuration (bsc#1252253). - dpll: zl3073x: Implement devlink flash callback (bsc#1252253). - dpll: zl3073x: Increase maximum size of flash utility (bsc#1252253). - dpll: zl3073x: Refactor DPLL initialization (bsc#1252253). - drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table() (git-fixes). - drm/xe/guc: Prepare GuC register list and update ADS size for error capture (stable-fixes). - ixgbe: handle IXGBE_VF_FEATURES_NEGOTIATE mbox cmd (bsc#1247222). - ixgbe: handle IXGBE_VF_GET_PF_LINK_STATE mailbox operation (bsc#1247222). - ixgbevf: fix getting link speed data for E610 devices (bsc#1247222). - ixgbevf: fix mailbox API compatibility by negotiating supported features (bsc#1247222). - kbuild/modfinal: Link livepatches with module-common.o (bsc#1218644, bsc#1252270). - kdb: Replace deprecated strcpy() with memmove() in vkdb_printf() (bsc#1252939). - kernel-subpackage-spec: Do not doubly-sign modules (bsc#1251930). - nvme-auth: update sc_c in host response (git-fixes bsc#1249397). - perf hwmon_pmu: Fix uninitialized variable warning (perf-sle16-v6.13-userspace-update, git-fixes). - phy: cadence: cdns-dphy: Update calibration wait time for startup state machine (git-fixes). - powerpc/fadump: skip parameter area allocation when fadump is disabled (jsc#PED-9891 git-fixes). - proc: fix missing pde_set_flags() for net proc files (bsc#1248630) - proc: fix type confusion in pde_set_flags() (bsc#1248630) - rpm/check-for-config-changes: ignore CONFIG_SCHED_PROXY_EXEC, too (bsc#1250946) - scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (bsc#1252267). - x86/microcode/AMD: Limit Entrysign signature checking to known generations (bsc#1252725). - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID (bsc#1252734). - x86/resctrl: Refactor resctrl_arch_rmid_read() (bsc#1252734). - x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (jsc#PED-348). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Leap-16.0-58 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1218644 SUSE Bug 1218644 https://bugzilla.suse.com/1238472 SUSE Bug 1238472 https://bugzilla.suse.com/1239206 SUSE Bug 1239206 https://bugzilla.suse.com/1241166 SUSE Bug 1241166 https://bugzilla.suse.com/1241637 SUSE Bug 1241637 https://bugzilla.suse.com/1247222 SUSE Bug 1247222 https://bugzilla.suse.com/1248630 SUSE Bug 1248630 https://bugzilla.suse.com/1249161 SUSE Bug 1249161 https://bugzilla.suse.com/1249226 SUSE Bug 1249226 https://bugzilla.suse.com/1249302 SUSE Bug 1249302 https://bugzilla.suse.com/1249317 SUSE Bug 1249317 https://bugzilla.suse.com/1249397 SUSE Bug 1249397 https://bugzilla.suse.com/1249398 SUSE Bug 1249398 https://bugzilla.suse.com/1249495 SUSE Bug 1249495 https://bugzilla.suse.com/1249512 SUSE Bug 1249512 https://bugzilla.suse.com/1249608 SUSE Bug 1249608 https://bugzilla.suse.com/1249735 SUSE Bug 1249735 https://bugzilla.suse.com/1250202 SUSE Bug 1250202 https://bugzilla.suse.com/1250379 SUSE Bug 1250379 https://bugzilla.suse.com/1250400 SUSE Bug 1250400 https://bugzilla.suse.com/1250455 SUSE Bug 1250455 https://bugzilla.suse.com/1250491 SUSE Bug 1250491 https://bugzilla.suse.com/1250704 SUSE Bug 1250704 https://bugzilla.suse.com/1250721 SUSE Bug 1250721 https://bugzilla.suse.com/1250749 SUSE Bug 1250749 https://bugzilla.suse.com/1250946 SUSE Bug 1250946 https://bugzilla.suse.com/1251176 SUSE Bug 1251176 https://bugzilla.suse.com/1251177 SUSE Bug 1251177 https://bugzilla.suse.com/1251232 SUSE Bug 1251232 https://bugzilla.suse.com/1251233 SUSE Bug 1251233 https://bugzilla.suse.com/1251804 SUSE Bug 1251804 https://bugzilla.suse.com/1251809 SUSE Bug 1251809 https://bugzilla.suse.com/1251819 SUSE Bug 1251819 https://bugzilla.suse.com/1251930 SUSE Bug 1251930 https://bugzilla.suse.com/1251967 SUSE Bug 1251967 https://bugzilla.suse.com/1252033 SUSE Bug 1252033 https://bugzilla.suse.com/1252035 SUSE Bug 1252035 https://bugzilla.suse.com/1252039 SUSE Bug 1252039 https://bugzilla.suse.com/1252044 SUSE Bug 1252044 https://bugzilla.suse.com/1252047 SUSE Bug 1252047 https://bugzilla.suse.com/1252051 SUSE Bug 1252051 https://bugzilla.suse.com/1252052 SUSE Bug 1252052 https://bugzilla.suse.com/1252056 SUSE Bug 1252056 https://bugzilla.suse.com/1252060 SUSE Bug 1252060 https://bugzilla.suse.com/1252062 SUSE Bug 1252062 https://bugzilla.suse.com/1252064 SUSE Bug 1252064 https://bugzilla.suse.com/1252065 SUSE Bug 1252065 https://bugzilla.suse.com/1252067 SUSE Bug 1252067 https://bugzilla.suse.com/1252069 SUSE Bug 1252069 https://bugzilla.suse.com/1252070 SUSE Bug 1252070 https://bugzilla.suse.com/1252072 SUSE Bug 1252072 https://bugzilla.suse.com/1252074 SUSE Bug 1252074 https://bugzilla.suse.com/1252075 SUSE Bug 1252075 https://bugzilla.suse.com/1252076 SUSE Bug 1252076 https://bugzilla.suse.com/1252078 SUSE Bug 1252078 https://bugzilla.suse.com/1252079 SUSE Bug 1252079 https://bugzilla.suse.com/1252081 SUSE Bug 1252081 https://bugzilla.suse.com/1252082 SUSE Bug 1252082 https://bugzilla.suse.com/1252083 SUSE Bug 1252083 https://bugzilla.suse.com/1252253 SUSE Bug 1252253 https://bugzilla.suse.com/1252265 SUSE Bug 1252265 https://bugzilla.suse.com/1252267 SUSE Bug 1252267 https://bugzilla.suse.com/1252270 SUSE Bug 1252270 https://bugzilla.suse.com/1252330 SUSE Bug 1252330 https://bugzilla.suse.com/1252333 SUSE Bug 1252333 https://bugzilla.suse.com/1252336 SUSE Bug 1252336 https://bugzilla.suse.com/1252346 SUSE Bug 1252346 https://bugzilla.suse.com/1252348 SUSE Bug 1252348 https://bugzilla.suse.com/1252349 SUSE Bug 1252349 https://bugzilla.suse.com/1252678 SUSE Bug 1252678 https://bugzilla.suse.com/1252679 SUSE Bug 1252679 https://bugzilla.suse.com/1252688 SUSE Bug 1252688 https://bugzilla.suse.com/1252725 SUSE Bug 1252725 https://bugzilla.suse.com/1252734 SUSE Bug 1252734 https://bugzilla.suse.com/1252772 SUSE Bug 1252772 https://bugzilla.suse.com/1252774 SUSE Bug 1252774 https://bugzilla.suse.com/1252780 SUSE Bug 1252780 https://bugzilla.suse.com/1252785 SUSE Bug 1252785 https://bugzilla.suse.com/1252787 SUSE Bug 1252787 https://bugzilla.suse.com/1252789 SUSE Bug 1252789 https://bugzilla.suse.com/1252797 SUSE Bug 1252797 https://bugzilla.suse.com/1252819 SUSE Bug 1252819 https://bugzilla.suse.com/1252822 SUSE Bug 1252822 https://bugzilla.suse.com/1252826 SUSE Bug 1252826 https://bugzilla.suse.com/1252841 SUSE Bug 1252841 https://bugzilla.suse.com/1252848 SUSE Bug 1252848 https://bugzilla.suse.com/1252849 SUSE Bug 1252849 https://bugzilla.suse.com/1252850 SUSE Bug 1252850 https://bugzilla.suse.com/1252851 SUSE Bug 1252851 https://bugzilla.suse.com/1252854 SUSE Bug 1252854 https://bugzilla.suse.com/1252858 SUSE Bug 1252858 https://bugzilla.suse.com/1252862 SUSE Bug 1252862 https://bugzilla.suse.com/1252865 SUSE Bug 1252865 https://bugzilla.suse.com/1252866 SUSE Bug 1252866 https://bugzilla.suse.com/1252873 SUSE Bug 1252873 https://bugzilla.suse.com/1252902 SUSE Bug 1252902 https://bugzilla.suse.com/1252909 SUSE Bug 1252909 https://bugzilla.suse.com/1252915 SUSE Bug 1252915 https://bugzilla.suse.com/1252918 SUSE Bug 1252918 https://bugzilla.suse.com/1252921 SUSE Bug 1252921 https://bugzilla.suse.com/1252939 SUSE Bug 1252939 https://www.suse.com/security/cve/CVE-2025-21816/ SUSE CVE CVE-2025-21816 page https://www.suse.com/security/cve/CVE-2025-38653/ SUSE CVE CVE-2025-38653 page https://www.suse.com/security/cve/CVE-2025-38718/ SUSE CVE CVE-2025-38718 page https://www.suse.com/security/cve/CVE-2025-39676/ SUSE CVE CVE-2025-39676 page https://www.suse.com/security/cve/CVE-2025-39702/ SUSE CVE CVE-2025-39702 page https://www.suse.com/security/cve/CVE-2025-39756/ SUSE CVE CVE-2025-39756 page https://www.suse.com/security/cve/CVE-2025-39779/ SUSE CVE CVE-2025-39779 page https://www.suse.com/security/cve/CVE-2025-39797/ SUSE CVE CVE-2025-39797 page https://www.suse.com/security/cve/CVE-2025-39812/ SUSE CVE CVE-2025-39812 page https://www.suse.com/security/cve/CVE-2025-39866/ SUSE CVE CVE-2025-39866 page https://www.suse.com/security/cve/CVE-2025-39876/ SUSE CVE CVE-2025-39876 page https://www.suse.com/security/cve/CVE-2025-39881/ SUSE CVE CVE-2025-39881 page https://www.suse.com/security/cve/CVE-2025-39895/ SUSE CVE CVE-2025-39895 page https://www.suse.com/security/cve/CVE-2025-39903/ SUSE CVE CVE-2025-39903 page https://www.suse.com/security/cve/CVE-2025-39911/ SUSE CVE CVE-2025-39911 page https://www.suse.com/security/cve/CVE-2025-39947/ SUSE CVE CVE-2025-39947 page https://www.suse.com/security/cve/CVE-2025-39948/ SUSE CVE CVE-2025-39948 page https://www.suse.com/security/cve/CVE-2025-39949/ SUSE CVE CVE-2025-39949 page https://www.suse.com/security/cve/CVE-2025-39950/ SUSE CVE CVE-2025-39950 page https://www.suse.com/security/cve/CVE-2025-39955/ SUSE CVE CVE-2025-39955 page https://www.suse.com/security/cve/CVE-2025-39956/ SUSE CVE CVE-2025-39956 page https://www.suse.com/security/cve/CVE-2025-39963/ SUSE CVE CVE-2025-39963 page https://www.suse.com/security/cve/CVE-2025-39965/ SUSE CVE CVE-2025-39965 page https://www.suse.com/security/cve/CVE-2025-39967/ SUSE CVE CVE-2025-39967 page https://www.suse.com/security/cve/CVE-2025-39968/ SUSE CVE CVE-2025-39968 page https://www.suse.com/security/cve/CVE-2025-39969/ SUSE CVE CVE-2025-39969 page https://www.suse.com/security/cve/CVE-2025-39970/ SUSE CVE CVE-2025-39970 page https://www.suse.com/security/cve/CVE-2025-39971/ SUSE CVE CVE-2025-39971 page https://www.suse.com/security/cve/CVE-2025-39972/ SUSE CVE CVE-2025-39972 page https://www.suse.com/security/cve/CVE-2025-39973/ SUSE CVE CVE-2025-39973 page https://www.suse.com/security/cve/CVE-2025-39978/ SUSE CVE CVE-2025-39978 page https://www.suse.com/security/cve/CVE-2025-39979/ SUSE CVE CVE-2025-39979 page https://www.suse.com/security/cve/CVE-2025-39981/ SUSE CVE CVE-2025-39981 page https://www.suse.com/security/cve/CVE-2025-39982/ SUSE CVE CVE-2025-39982 page https://www.suse.com/security/cve/CVE-2025-39984/ SUSE CVE CVE-2025-39984 page https://www.suse.com/security/cve/CVE-2025-39985/ SUSE CVE CVE-2025-39985 page https://www.suse.com/security/cve/CVE-2025-39986/ SUSE CVE CVE-2025-39986 page https://www.suse.com/security/cve/CVE-2025-39987/ SUSE CVE CVE-2025-39987 page https://www.suse.com/security/cve/CVE-2025-39988/ SUSE CVE CVE-2025-39988 page https://www.suse.com/security/cve/CVE-2025-39991/ SUSE CVE CVE-2025-39991 page https://www.suse.com/security/cve/CVE-2025-39992/ SUSE CVE CVE-2025-39992 page https://www.suse.com/security/cve/CVE-2025-39993/ SUSE CVE CVE-2025-39993 page https://www.suse.com/security/cve/CVE-2025-39994/ SUSE CVE CVE-2025-39994 page https://www.suse.com/security/cve/CVE-2025-39995/ SUSE CVE CVE-2025-39995 page https://www.suse.com/security/cve/CVE-2025-39996/ SUSE CVE CVE-2025-39996 page https://www.suse.com/security/cve/CVE-2025-39997/ SUSE CVE CVE-2025-39997 page https://www.suse.com/security/cve/CVE-2025-40000/ SUSE CVE CVE-2025-40000 page https://www.suse.com/security/cve/CVE-2025-40005/ SUSE CVE CVE-2025-40005 page https://www.suse.com/security/cve/CVE-2025-40009/ SUSE CVE CVE-2025-40009 page https://www.suse.com/security/cve/CVE-2025-40011/ SUSE CVE CVE-2025-40011 page https://www.suse.com/security/cve/CVE-2025-40012/ SUSE CVE CVE-2025-40012 page https://www.suse.com/security/cve/CVE-2025-40013/ SUSE CVE CVE-2025-40013 page https://www.suse.com/security/cve/CVE-2025-40016/ SUSE CVE CVE-2025-40016 page https://www.suse.com/security/cve/CVE-2025-40018/ SUSE CVE CVE-2025-40018 page https://www.suse.com/security/cve/CVE-2025-40019/ SUSE CVE CVE-2025-40019 page https://www.suse.com/security/cve/CVE-2025-40020/ SUSE CVE CVE-2025-40020 page https://www.suse.com/security/cve/CVE-2025-40029/ SUSE CVE CVE-2025-40029 page https://www.suse.com/security/cve/CVE-2025-40032/ SUSE CVE CVE-2025-40032 page https://www.suse.com/security/cve/CVE-2025-40035/ SUSE CVE CVE-2025-40035 page https://www.suse.com/security/cve/CVE-2025-40036/ SUSE CVE CVE-2025-40036 page https://www.suse.com/security/cve/CVE-2025-40037/ SUSE CVE CVE-2025-40037 page https://www.suse.com/security/cve/CVE-2025-40040/ SUSE CVE CVE-2025-40040 page https://www.suse.com/security/cve/CVE-2025-40043/ SUSE CVE CVE-2025-40043 page https://www.suse.com/security/cve/CVE-2025-40044/ SUSE CVE CVE-2025-40044 page https://www.suse.com/security/cve/CVE-2025-40048/ SUSE CVE CVE-2025-40048 page https://www.suse.com/security/cve/CVE-2025-40049/ SUSE CVE CVE-2025-40049 page https://www.suse.com/security/cve/CVE-2025-40051/ SUSE CVE CVE-2025-40051 page https://www.suse.com/security/cve/CVE-2025-40052/ SUSE CVE CVE-2025-40052 page https://www.suse.com/security/cve/CVE-2025-40056/ SUSE CVE CVE-2025-40056 page https://www.suse.com/security/cve/CVE-2025-40058/ SUSE CVE CVE-2025-40058 page https://www.suse.com/security/cve/CVE-2025-40060/ SUSE CVE CVE-2025-40060 page https://www.suse.com/security/cve/CVE-2025-40061/ SUSE CVE CVE-2025-40061 page https://www.suse.com/security/cve/CVE-2025-40062/ SUSE CVE CVE-2025-40062 page https://www.suse.com/security/cve/CVE-2025-40071/ SUSE CVE CVE-2025-40071 page https://www.suse.com/security/cve/CVE-2025-40078/ SUSE CVE CVE-2025-40078 page https://www.suse.com/security/cve/CVE-2025-40080/ SUSE CVE CVE-2025-40080 page https://www.suse.com/security/cve/CVE-2025-40085/ SUSE CVE CVE-2025-40085 page https://www.suse.com/security/cve/CVE-2025-40087/ SUSE CVE CVE-2025-40087 page https://www.suse.com/security/cve/CVE-2025-40091/ SUSE CVE CVE-2025-40091 page https://www.suse.com/security/cve/CVE-2025-40096/ SUSE CVE CVE-2025-40096 page https://www.suse.com/security/cve/CVE-2025-40100/ SUSE CVE CVE-2025-40100 page https://www.suse.com/security/cve/CVE-2025-40104/ SUSE CVE CVE-2025-40104 page https://www.suse.com/security/cve/CVE-2025-40364/ SUSE CVE CVE-2025-40364 page openSUSE Leap 16.0 cluster-md-kmp-64kb-6.12.0-160000.7.1 cluster-md-kmp-default-6.12.0-160000.7.1 cluster-md-kmp-rt-6.12.0-160000.7.1 dlm-kmp-64kb-6.12.0-160000.7.1 dlm-kmp-default-6.12.0-160000.7.1 dlm-kmp-rt-6.12.0-160000.7.1 dtb-allwinner-6.12.0-160000.7.1 dtb-altera-6.12.0-160000.7.1 dtb-amazon-6.12.0-160000.7.1 dtb-amd-6.12.0-160000.7.1 dtb-amlogic-6.12.0-160000.7.1 dtb-apm-6.12.0-160000.7.1 dtb-apple-6.12.0-160000.7.1 dtb-arm-6.12.0-160000.7.1 dtb-broadcom-6.12.0-160000.7.1 dtb-cavium-6.12.0-160000.7.1 dtb-exynos-6.12.0-160000.7.1 dtb-freescale-6.12.0-160000.7.1 dtb-hisilicon-6.12.0-160000.7.1 dtb-lg-6.12.0-160000.7.1 dtb-marvell-6.12.0-160000.7.1 dtb-mediatek-6.12.0-160000.7.1 dtb-nvidia-6.12.0-160000.7.1 dtb-qcom-6.12.0-160000.7.1 dtb-renesas-6.12.0-160000.7.1 dtb-rockchip-6.12.0-160000.7.1 dtb-socionext-6.12.0-160000.7.1 dtb-sprd-6.12.0-160000.7.1 dtb-xilinx-6.12.0-160000.7.1 gfs2-kmp-64kb-6.12.0-160000.7.1 gfs2-kmp-default-6.12.0-160000.7.1 gfs2-kmp-rt-6.12.0-160000.7.1 kernel-64kb-6.12.0-160000.7.1 kernel-64kb-devel-6.12.0-160000.7.1 kernel-64kb-extra-6.12.0-160000.7.1 kernel-64kb-optional-6.12.0-160000.7.1 kernel-default-6.12.0-160000.7.1 kernel-default-base-6.12.0-160000.6.1.160000.2.4 kernel-default-devel-6.12.0-160000.7.1 kernel-default-extra-6.12.0-160000.7.1 kernel-default-optional-6.12.0-160000.7.1 kernel-default-vdso-6.12.0-160000.7.1 kernel-devel-6.12.0-160000.7.1 kernel-docs-6.12.0-160000.7.1 kernel-docs-html-6.12.0-160000.7.1 kernel-kvmsmall-6.12.0-160000.7.1 kernel-kvmsmall-devel-6.12.0-160000.7.1 kernel-kvmsmall-vdso-6.12.0-160000.7.1 kernel-macros-6.12.0-160000.7.1 kernel-obs-build-6.12.0-160000.7.1 kernel-obs-qa-6.12.0-160000.7.1 kernel-rt-6.12.0-160000.7.1 kernel-rt-devel-6.12.0-160000.7.1 kernel-rt-extra-6.12.0-160000.7.1 kernel-rt-optional-6.12.0-160000.7.1 kernel-rt-vdso-6.12.0-160000.7.1 kernel-source-6.12.0-160000.7.1 kernel-source-vanilla-6.12.0-160000.7.1 kernel-syms-6.12.0-160000.7.1 kernel-zfcpdump-6.12.0-160000.7.1 kselftests-kmp-64kb-6.12.0-160000.7.1 kselftests-kmp-default-6.12.0-160000.7.1 kselftests-kmp-rt-6.12.0-160000.7.1 ocfs2-kmp-64kb-6.12.0-160000.7.1 ocfs2-kmp-default-6.12.0-160000.7.1 ocfs2-kmp-rt-6.12.0-160000.7.1 cluster-md-kmp-64kb-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 cluster-md-kmp-default-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 cluster-md-kmp-rt-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dlm-kmp-64kb-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dlm-kmp-default-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dlm-kmp-rt-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dtb-allwinner-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dtb-altera-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dtb-amazon-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dtb-amd-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dtb-amlogic-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dtb-apm-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dtb-apple-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dtb-arm-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dtb-broadcom-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dtb-cavium-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dtb-exynos-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dtb-freescale-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dtb-hisilicon-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dtb-lg-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dtb-marvell-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dtb-mediatek-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dtb-nvidia-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dtb-qcom-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dtb-renesas-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dtb-rockchip-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dtb-socionext-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dtb-sprd-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 dtb-xilinx-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 gfs2-kmp-64kb-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 gfs2-kmp-default-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 gfs2-kmp-rt-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-64kb-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-64kb-devel-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-64kb-extra-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-64kb-optional-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-default-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-default-base-6.12.0-160000.6.1.160000.2.4 as a component of openSUSE Leap 16.0 kernel-default-devel-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-default-extra-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-default-optional-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-default-vdso-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-devel-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-docs-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-docs-html-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-kvmsmall-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-kvmsmall-devel-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-kvmsmall-vdso-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-macros-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-obs-build-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-obs-qa-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-rt-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-rt-devel-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-rt-extra-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-rt-optional-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-rt-vdso-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-source-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-source-vanilla-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-syms-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kernel-zfcpdump-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kselftests-kmp-64kb-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kselftests-kmp-default-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 kselftests-kmp-rt-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 ocfs2-kmp-64kb-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 ocfs2-kmp-default-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 ocfs2-kmp-rt-6.12.0-160000.7.1 as a component of openSUSE Leap 16.0 In the Linux kernel, the following vulnerability has been resolved: hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING hrtimers are migrated away from the dying CPU to any online target at the CPUHP_AP_HRTIMERS_DYING stage in order not to delay bandwidth timers handling tasks involved in the CPU hotplug forward progress. However wakeups can still be performed by the outgoing CPU after CPUHP_AP_HRTIMERS_DYING. Those can result again in bandwidth timers being armed. Depending on several considerations (crystal ball power management based election, earliest timer already enqueued, timer migration enabled or not), the target may eventually be the current CPU even if offline. If that happens, the timer is eventually ignored. The most notable example is RCU which had to deal with each and every of those wake-ups by deferring them to an online CPU, along with related workarounds: _ e787644caf76 (rcu: Defer RCU kthreads wakeup when CPU is dying) _ 9139f93209d1 (rcu/nocb: Fix RT throttling hrtimer armed from offline CPU) _ f7345ccc62a4 (rcu/nocb: Fix rcuog wake-up from offline softirq) The problem isn't confined to RCU though as the stop machine kthread (which runs CPUHP_AP_HRTIMERS_DYING) reports its completion at the end of its work through cpu_stop_signal_done() and performs a wake up that eventually arms the deadline server timer: WARNING: CPU: 94 PID: 588 at kernel/time/hrtimer.c:1086 hrtimer_start_range_ns+0x289/0x2d0 CPU: 94 UID: 0 PID: 588 Comm: migration/94 Not tainted Stopper: multi_cpu_stop+0x0/0x120 <- stop_machine_cpuslocked+0x66/0xc0 RIP: 0010:hrtimer_start_range_ns+0x289/0x2d0 Call Trace: <TASK> start_dl_timer enqueue_dl_entity dl_server_start enqueue_task_fair enqueue_task ttwu_do_activate try_to_wake_up complete cpu_stopper_thread Instead of providing yet another bandaid to work around the situation, fix it in the hrtimers infrastructure instead: always migrate away a timer to an online target whenever it is enqueued from an offline CPU. This will also allow to revert all the above RCU disgraceful hacks. CVE-2025-21816 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-21816.html CVE-2025-21816 https://bugzilla.suse.com/1238472 SUSE Bug 1238472 In the Linux kernel, the following vulnerability has been resolved: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al Check pde->proc_ops->proc_lseek directly may cause UAF in rmmod scenario. It's a gap in proc_reg_open() after commit 654b33ada4ab("proc: fix UAF in proc_get_inode()"). Followed by AI Viro's suggestion, fix it in same manner. CVE-2025-38653 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38653.html CVE-2025-38653 https://bugzilla.suse.com/1248630 SUSE Bug 1248630 In the Linux kernel, the following vulnerability has been resolved: sctp: linearize cloned gso packets in sctp_rcv A cloned head skb still shares these frag skbs in fraglist with the original head skb. It's not safe to access these frag skbs. syzbot reported two use-of-uninitialized-memory bugs caused by this: BUG: KMSAN: uninit-value in sctp_inq_pop+0x15b7/0x1920 net/sctp/inqueue.c:211 sctp_inq_pop+0x15b7/0x1920 net/sctp/inqueue.c:211 sctp_assoc_bh_rcv+0x1a7/0xc50 net/sctp/associola.c:998 sctp_inq_push+0x2ef/0x380 net/sctp/inqueue.c:88 sctp_backlog_rcv+0x397/0xdb0 net/sctp/input.c:331 sk_backlog_rcv+0x13b/0x420 include/net/sock.h:1122 __release_sock+0x1da/0x330 net/core/sock.c:3106 release_sock+0x6b/0x250 net/core/sock.c:3660 sctp_wait_for_connect+0x487/0x820 net/sctp/socket.c:9360 sctp_sendmsg_to_asoc+0x1ec1/0x1f00 net/sctp/socket.c:1885 sctp_sendmsg+0x32b9/0x4a80 net/sctp/socket.c:2031 inet_sendmsg+0x25a/0x280 net/ipv4/af_inet.c:851 sock_sendmsg_nosec net/socket.c:718 [inline] and BUG: KMSAN: uninit-value in sctp_assoc_bh_rcv+0x34e/0xbc0 net/sctp/associola.c:987 sctp_assoc_bh_rcv+0x34e/0xbc0 net/sctp/associola.c:987 sctp_inq_push+0x2a3/0x350 net/sctp/inqueue.c:88 sctp_backlog_rcv+0x3c7/0xda0 net/sctp/input.c:331 sk_backlog_rcv+0x142/0x420 include/net/sock.h:1148 __release_sock+0x1d3/0x330 net/core/sock.c:3213 release_sock+0x6b/0x270 net/core/sock.c:3767 sctp_wait_for_connect+0x458/0x820 net/sctp/socket.c:9367 sctp_sendmsg_to_asoc+0x223a/0x2260 net/sctp/socket.c:1886 sctp_sendmsg+0x3910/0x49f0 net/sctp/socket.c:2032 inet_sendmsg+0x269/0x2a0 net/ipv4/af_inet.c:851 sock_sendmsg_nosec net/socket.c:712 [inline] This patch fixes it by linearizing cloned gso packets in sctp_rcv(). CVE-2025-38718 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38718.html CVE-2025-38718 https://bugzilla.suse.com/1249161 SUSE Bug 1249161 In the Linux kernel, the following vulnerability has been resolved: scsi: qla4xxx: Prevent a potential error pointer dereference The qla4xxx_get_ep_fwdb() function is supposed to return NULL on error, but qla4xxx_ep_connect() returns error pointers. Propagating the error pointers will lead to an Oops in the caller, so change the error pointers to NULL. CVE-2025-39676 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39676.html CVE-2025-39676 https://bugzilla.suse.com/1249302 SUSE Bug 1249302 In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this. CVE-2025-39702 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39702.html CVE-2025-39702 https://bugzilla.suse.com/1249317 SUSE Bug 1249317 In the Linux kernel, the following vulnerability has been resolved: fs: Prevent file descriptor table allocations exceeding INT_MAX When sysctl_nr_open is set to a very high value (for example, 1073741816 as set by systemd), processes attempting to use file descriptors near the limit can trigger massive memory allocation attempts that exceed INT_MAX, resulting in a WARNING in mm/slub.c: WARNING: CPU: 0 PID: 44 at mm/slub.c:5027 __kvmalloc_node_noprof+0x21a/0x288 This happens because kvmalloc_array() and kvmalloc() check if the requested size exceeds INT_MAX and emit a warning when the allocation is not flagged with __GFP_NOWARN. Specifically, when nr_open is set to 1073741816 (0x3ffffff8) and a process calls dup2(oldfd, 1073741880), the kernel attempts to allocate: - File descriptor array: 1073741880 * 8 bytes = 8,589,935,040 bytes - Multiple bitmaps: ~400MB - Total allocation size: > 8GB (exceeding INT_MAX = 2,147,483,647) Reproducer: 1. Set /proc/sys/fs/nr_open to 1073741816: # echo 1073741816 > /proc/sys/fs/nr_open 2. Run a program that uses a high file descriptor: #include <unistd.h> #include <sys/resource.h> int main() { struct rlimit rlim = {1073741824, 1073741824}; setrlimit(RLIMIT_NOFILE, &rlim); dup2(2, 1073741880); // Triggers the warning return 0; } 3. Observe WARNING in dmesg at mm/slub.c:5027 systemd commit a8b627a introduced automatic bumping of fs.nr_open to the maximum possible value. The rationale was that systems with memory control groups (memcg) no longer need separate file descriptor limits since memory is properly accounted. However, this change overlooked that: 1. The kernel's allocation functions still enforce INT_MAX as a maximum size regardless of memcg accounting 2. Programs and tests that legitimately test file descriptor limits can inadvertently trigger massive allocations 3. The resulting allocations (>8GB) are impractical and will always fail systemd's algorithm starts with INT_MAX and keeps halving the value until the kernel accepts it. On most systems, this results in nr_open being set to 1073741816 (0x3ffffff8), which is just under 1GB of file descriptors. While processes rarely use file descriptors near this limit in normal operation, certain selftests (like tools/testing/selftests/core/unshare_test.c) and programs that test file descriptor limits can trigger this issue. Fix this by adding a check in alloc_fdtable() to ensure the requested allocation size does not exceed INT_MAX. This causes the operation to fail with -EMFILE instead of triggering a kernel warning and avoids the impractical >8GB memory allocation request. CVE-2025-39756 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39756.html CVE-2025-39756 https://bugzilla.suse.com/1249512 SUSE Bug 1249512 In the Linux kernel, the following vulnerability has been resolved: btrfs: subpage: keep TOWRITE tag until folio is cleaned btrfs_subpage_set_writeback() calls folio_start_writeback() the first time a folio is written back, and it also clears the PAGECACHE_TAG_TOWRITE tag even if there are still dirty blocks in the folio. This can break ordering guarantees, such as those required by btrfs_wait_ordered_extents(). That ordering breakage leads to a real failure. For example, running generic/464 on a zoned setup will hit the following ASSERT. This happens because the broken ordering fails to flush existing dirty pages before the file size is truncated. assertion failed: !list_empty(&ordered->list) :: 0, in fs/btrfs/zoned.c:1899 ------------[ cut here ]------------ kernel BUG at fs/btrfs/zoned.c:1899! Oops: invalid opcode: 0000 [#1] SMP NOPTI CPU: 2 UID: 0 PID: 1906169 Comm: kworker/u130:2 Kdump: loaded Not tainted 6.16.0-rc6-BTRFS-ZNS+ #554 PREEMPT(voluntary) Hardware name: Supermicro Super Server/H12SSL-NT, BIOS 2.0 02/22/2021 Workqueue: btrfs-endio-write btrfs_work_helper [btrfs] RIP: 0010:btrfs_finish_ordered_zoned.cold+0x50/0x52 [btrfs] RSP: 0018:ffffc9002efdbd60 EFLAGS: 00010246 RAX: 000000000000004c RBX: ffff88811923c4e0 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff827e38b1 RDI: 00000000ffffffff RBP: ffff88810005d000 R08: 00000000ffffdfff R09: ffffffff831051c8 R10: ffffffff83055220 R11: 0000000000000000 R12: ffff8881c2458c00 R13: ffff88811923c540 R14: ffff88811923c5e8 R15: ffff8881c1bd9680 FS: 0000000000000000(0000) GS:ffff88a04acd0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f907c7a918c CR3: 0000000004024000 CR4: 0000000000350ef0 Call Trace: <TASK> ? srso_return_thunk+0x5/0x5f btrfs_finish_ordered_io+0x4a/0x60 [btrfs] btrfs_work_helper+0xf9/0x490 [btrfs] process_one_work+0x204/0x590 ? srso_return_thunk+0x5/0x5f worker_thread+0x1d6/0x3d0 ? __pfx_worker_thread+0x10/0x10 kthread+0x118/0x230 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x205/0x260 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK> Consider process A calling writepages() with WB_SYNC_NONE. In zoned mode or for compressed writes, it locks several folios for delalloc and starts writing them out. Let's call the last locked folio folio X. Suppose the write range only partially covers folio X, leaving some pages dirty. Process A calls btrfs_subpage_set_writeback() when building a bio. This function call clears the TOWRITE tag of folio X, whose size = 8K and the block size = 4K. It is following state. 0 4K 8K |/////|/////| (flag: DIRTY, tag: DIRTY) <-----> Process A will write this range. Now suppose process B concurrently calls writepages() with WB_SYNC_ALL. It calls tag_pages_for_writeback() to tag dirty folios with PAGECACHE_TAG_TOWRITE. Since folio X is still dirty, it gets tagged. Then, B collects tagged folios using filemap_get_folios_tag() and must wait for folio X to be written before returning from writepages(). 0 4K 8K |/////|/////| (flag: DIRTY, tag: DIRTY|TOWRITE) However, between tagging and collecting, process A may call btrfs_subpage_set_writeback() and clear folio X's TOWRITE tag. 0 4K 8K | |/////| (flag: DIRTY|WRITEBACK, tag: DIRTY) As a result, process B won't see folio X in its batch, and returns without waiting for it. This breaks the WB_SYNC_ALL ordering requirement. Fix this by using btrfs_subpage_set_writeback_keepwrite(), which retains the TOWRITE tag. We now manually clear the tag only after the folio becomes clean, via the xas operation. CVE-2025-39779 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39779.html CVE-2025-39779 https://bugzilla.suse.com/1249495 SUSE Bug 1249495 In the Linux kernel, the following vulnerability has been resolved: xfrm: Duplicate SPI Handling The issue originates when Strongswan initiates an XFRM_MSG_ALLOCSPI Netlink message, which triggers the kernel function xfrm_alloc_spi(). This function is expected to ensure uniqueness of the Security Parameter Index (SPI) for inbound Security Associations (SAs). However, it can return success even when the requested SPI is already in use, leading to duplicate SPIs assigned to multiple inbound SAs, differentiated only by their destination addresses. This behavior causes inconsistencies during SPI lookups for inbound packets. Since the lookup may return an arbitrary SA among those with the same SPI, packet processing can fail, resulting in packet drops. According to RFC 4301 section 4.4.2 , for inbound processing a unicast SA is uniquely identified by the SPI and optionally protocol. Reproducing the Issue Reliably: To consistently reproduce the problem, restrict the available SPI range in charon.conf : spi_min = 0x10000000 spi_max = 0x10000002 This limits the system to only 2 usable SPI values. Next, create more than 2 Child SA. each using unique pair of src/dst address. As soon as the 3rd Child SA is initiated, it will be assigned a duplicate SPI, since the SPI pool is already exhausted. With a narrow SPI range, the issue is consistently reproducible. With a broader/default range, it becomes rare and unpredictable. Current implementation: xfrm_spi_hash() lookup function computes hash using daddr, proto, and family. So if two SAs have the same SPI but different destination addresses, then they will: a. Hash into different buckets b. Be stored in different linked lists (byspi + h) c. Not be seen in the same hlist_for_each_entry_rcu() iteration. As a result, the lookup will result in NULL and kernel allows that Duplicate SPI Proposed Change: xfrm_state_lookup_spi_proto() does a truly global search - across all states, regardless of hash bucket and matches SPI and proto. CVE-2025-39797 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39797.html CVE-2025-39797 https://bugzilla.suse.com/1249608 SUSE Bug 1249608 In the Linux kernel, the following vulnerability has been resolved: sctp: initialize more fields in sctp_v6_from_sk() syzbot found that sin6_scope_id was not properly initialized, leading to undefined behavior. Clear sin6_scope_id and sin6_flowinfo. BUG: KMSAN: uninit-value in __sctp_v6_cmp_addr+0x887/0x8c0 net/sctp/ipv6.c:649 __sctp_v6_cmp_addr+0x887/0x8c0 net/sctp/ipv6.c:649 sctp_inet6_cmp_addr+0x4f2/0x510 net/sctp/ipv6.c:983 sctp_bind_addr_conflict+0x22a/0x3b0 net/sctp/bind_addr.c:390 sctp_get_port_local+0x21eb/0x2440 net/sctp/socket.c:8452 sctp_get_port net/sctp/socket.c:8523 [inline] sctp_listen_start net/sctp/socket.c:8567 [inline] sctp_inet_listen+0x710/0xfd0 net/sctp/socket.c:8636 __sys_listen_socket net/socket.c:1912 [inline] __sys_listen net/socket.c:1927 [inline] __do_sys_listen net/socket.c:1932 [inline] __se_sys_listen net/socket.c:1930 [inline] __x64_sys_listen+0x343/0x4c0 net/socket.c:1930 x64_sys_call+0x271d/0x3e20 arch/x86/include/generated/asm/syscalls_64.h:51 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xd9/0x210 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Local variable addr.i.i created at: sctp_get_port net/sctp/socket.c:8515 [inline] sctp_listen_start net/sctp/socket.c:8567 [inline] sctp_inet_listen+0x650/0xfd0 net/sctp/socket.c:8636 __sys_listen_socket net/socket.c:1912 [inline] __sys_listen net/socket.c:1927 [inline] __do_sys_listen net/socket.c:1932 [inline] __se_sys_listen net/socket.c:1930 [inline] __x64_sys_listen+0x343/0x4c0 net/socket.c:1930 CVE-2025-39812 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39812.html CVE-2025-39812 https://bugzilla.suse.com/1250202 SUSE Bug 1250202 In the Linux kernel, the following vulnerability has been resolved: fs: writeback: fix use-after-free in __mark_inode_dirty() An use-after-free issue occurred when __mark_inode_dirty() get the bdi_writeback that was in the progress of switching. CPU: 1 PID: 562 Comm: systemd-random- Not tainted 6.6.56-gb4403bd46a8e #1 ...... pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : __mark_inode_dirty+0x124/0x418 lr : __mark_inode_dirty+0x118/0x418 sp : ffffffc08c9dbbc0 ........ Call trace: __mark_inode_dirty+0x124/0x418 generic_update_time+0x4c/0x60 file_modified+0xcc/0xd0 ext4_buffered_write_iter+0x58/0x124 ext4_file_write_iter+0x54/0x704 vfs_write+0x1c0/0x308 ksys_write+0x74/0x10c __arm64_sys_write+0x1c/0x28 invoke_syscall+0x48/0x114 el0_svc_common.constprop.0+0xc0/0xe0 do_el0_svc+0x1c/0x28 el0_svc+0x40/0xe4 el0t_64_sync_handler+0x120/0x12c el0t_64_sync+0x194/0x198 Root cause is: systemd-random-seed kworker ---------------------------------------------------------------------- ___mark_inode_dirty inode_switch_wbs_work_fn spin_lock(&inode->i_lock); inode_attach_wb locked_inode_to_wb_and_lock_list get inode->i_wb spin_unlock(&inode->i_lock); spin_lock(&wb->list_lock) spin_lock(&inode->i_lock) inode_io_list_move_locked spin_unlock(&wb->list_lock) spin_unlock(&inode->i_lock) spin_lock(&old_wb->list_lock) inode_do_switch_wbs spin_lock(&inode->i_lock) inode->i_wb = new_wb spin_unlock(&inode->i_lock) spin_unlock(&old_wb->list_lock) wb_put_many(old_wb, nr_switched) cgwb_release old wb released wb_wakeup_delayed() accesses wb, then trigger the use-after-free issue Fix this race condition by holding inode spinlock until wb_wakeup_delayed() finished. CVE-2025-39866 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39866.html CVE-2025-39866 https://bugzilla.suse.com/1250455 SUSE Bug 1250455 In the Linux kernel, the following vulnerability has been resolved: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() The function of_phy_find_device may return NULL, so we need to take care before dereferencing phy_dev. CVE-2025-39876 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39876.html CVE-2025-39876 https://bugzilla.suse.com/1250400 SUSE Bug 1250400 In the Linux kernel, the following vulnerability has been resolved: kernfs: Fix UAF in polling when open file is released A use-after-free (UAF) vulnerability was identified in the PSI (Pressure Stall Information) monitoring mechanism: BUG: KASAN: slab-use-after-free in psi_trigger_poll+0x3c/0x140 Read of size 8 at addr ffff3de3d50bd308 by task systemd/1 psi_trigger_poll+0x3c/0x140 cgroup_pressure_poll+0x70/0xa0 cgroup_file_poll+0x8c/0x100 kernfs_fop_poll+0x11c/0x1c0 ep_item_poll.isra.0+0x188/0x2c0 Allocated by task 1: cgroup_file_open+0x88/0x388 kernfs_fop_open+0x73c/0xaf0 do_dentry_open+0x5fc/0x1200 vfs_open+0xa0/0x3f0 do_open+0x7e8/0xd08 path_openat+0x2fc/0x6b0 do_filp_open+0x174/0x368 Freed by task 8462: cgroup_file_release+0x130/0x1f8 kernfs_drain_open_files+0x17c/0x440 kernfs_drain+0x2dc/0x360 kernfs_show+0x1b8/0x288 cgroup_file_show+0x150/0x268 cgroup_pressure_write+0x1dc/0x340 cgroup_file_write+0x274/0x548 Reproduction Steps: 1. Open test/cpu.pressure and establish epoll monitoring 2. Disable monitoring: echo 0 > test/cgroup.pressure 3. Re-enable monitoring: echo 1 > test/cgroup.pressure The race condition occurs because: 1. When cgroup.pressure is disabled (echo 0 > cgroup.pressure), it: - Releases PSI triggers via cgroup_file_release() - Frees of->priv through kernfs_drain_open_files() 2. While epoll still holds reference to the file and continues polling 3. Re-enabling (echo 1 > cgroup.pressure) accesses freed of->priv epolling disable/enable cgroup.pressure fd=open(cpu.pressure) while(1) ... epoll_wait kernfs_fop_poll kernfs_get_active = true echo 0 > cgroup.pressure ... cgroup_file_show kernfs_show // inactive kn kernfs_drain_open_files cft->release(of); kfree(ctx); ... kernfs_get_active = false echo 1 > cgroup.pressure kernfs_show kernfs_activate_one(kn); kernfs_fop_poll kernfs_get_active = true cgroup_file_poll psi_trigger_poll // UAF ... end: close(fd) To address this issue, introduce kernfs_get_active_of() for kernfs open files to obtain active references. This function will fail if the open file has been released. Replace kernfs_get_active() with kernfs_get_active_of() to prevent further operations on released file descriptors. CVE-2025-39881 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39881.html CVE-2025-39881 https://bugzilla.suse.com/1250379 SUSE Bug 1250379 In the Linux kernel, the following vulnerability has been resolved: sched: Fix sched_numa_find_nth_cpu() if mask offline sched_numa_find_nth_cpu() uses a bsearch to look for the 'closest' CPU in sched_domains_numa_masks and given cpus mask. However they might not intersect if all CPUs in the cpus mask are offline. bsearch will return NULL in that case, bail out instead of dereferencing a bogus pointer. The previous behaviour lead to this bug when using maxcpus=4 on an rk3399 (LLLLbb) (i.e. booting with all big CPUs offline): [ 1.422922] Unable to handle kernel paging request at virtual address ffffff8000000000 [ 1.423635] Mem abort info: [ 1.423889] ESR = 0x0000000096000006 [ 1.424227] EC = 0x25: DABT (current EL), IL = 32 bits [ 1.424715] SET = 0, FnV = 0 [ 1.424995] EA = 0, S1PTW = 0 [ 1.425279] FSC = 0x06: level 2 translation fault [ 1.425735] Data abort info: [ 1.425998] ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000 [ 1.426499] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 1.426952] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 1.427428] swapper pgtable: 4k pages, 39-bit VAs, pgdp=0000000004a9f000 [ 1.428038] [ffffff8000000000] pgd=18000000f7fff403, p4d=18000000f7fff403, pud=18000000f7fff403, pmd=0000000000000000 [ 1.429014] Internal error: Oops: 0000000096000006 [#1] SMP [ 1.429525] Modules linked in: [ 1.429813] CPU: 3 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.17.0-rc4-dirty #343 PREEMPT [ 1.430559] Hardware name: Pine64 RockPro64 v2.1 (DT) [ 1.431012] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1.431634] pc : sched_numa_find_nth_cpu+0x2a0/0x488 [ 1.432094] lr : sched_numa_find_nth_cpu+0x284/0x488 [ 1.432543] sp : ffffffc084e1b960 [ 1.432843] x29: ffffffc084e1b960 x28: ffffff80078a8800 x27: ffffffc0846eb1d0 [ 1.433495] x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000000 [ 1.434144] x23: 0000000000000000 x22: fffffffffff7f093 x21: ffffffc081de6378 [ 1.434792] x20: 0000000000000000 x19: 0000000ffff7f093 x18: 00000000ffffffff [ 1.435441] x17: 3030303866666666 x16: 66663d736b73616d x15: ffffffc104e1b5b7 [ 1.436091] x14: 0000000000000000 x13: ffffffc084712860 x12: 0000000000000372 [ 1.436739] x11: 0000000000000126 x10: ffffffc08476a860 x9 : ffffffc084712860 [ 1.437389] x8 : 00000000ffffefff x7 : ffffffc08476a860 x6 : 0000000000000000 [ 1.438036] x5 : 000000000000bff4 x4 : 0000000000000000 x3 : 0000000000000000 [ 1.438683] x2 : 0000000000000000 x1 : ffffffc0846eb000 x0 : ffffff8000407b68 [ 1.439332] Call trace: [ 1.439559] sched_numa_find_nth_cpu+0x2a0/0x488 (P) [ 1.440016] smp_call_function_any+0xc8/0xd0 [ 1.440416] armv8_pmu_init+0x58/0x27c [ 1.440770] armv8_cortex_a72_pmu_init+0x20/0x2c [ 1.441199] arm_pmu_device_probe+0x1e4/0x5e8 [ 1.441603] armv8_pmu_device_probe+0x1c/0x28 [ 1.442007] platform_probe+0x5c/0xac [ 1.442347] really_probe+0xbc/0x298 [ 1.442683] __driver_probe_device+0x78/0x12c [ 1.443087] driver_probe_device+0xdc/0x160 [ 1.443475] __driver_attach+0x94/0x19c [ 1.443833] bus_for_each_dev+0x74/0xd4 [ 1.444190] driver_attach+0x24/0x30 [ 1.444525] bus_add_driver+0xe4/0x208 [ 1.444874] driver_register+0x60/0x128 [ 1.445233] __platform_driver_register+0x24/0x30 [ 1.445662] armv8_pmu_driver_init+0x28/0x4c [ 1.446059] do_one_initcall+0x44/0x25c [ 1.446416] kernel_init_freeable+0x1dc/0x3bc [ 1.446820] kernel_init+0x20/0x1d8 [ 1.447151] ret_from_fork+0x10/0x20 [ 1.447493] Code: 90022e21 f000e5f5 910de2b5 2a1703e2 (f8767803) [ 1.448040] ---[ end trace 0000000000000000 ]--- [ 1.448483] note: swapper/0[1] exited with preempt_count 1 [ 1.449047] Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b [ 1.449741] SMP: stopping secondary CPUs [ 1.450105] Kernel Offset: disabled [ 1.450419] CPU features: 0x000000,00080000,20002001,0400421b [ ---truncated--- CVE-2025-39895 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39895.html CVE-2025-39895 https://bugzilla.suse.com/1250721 SUSE Bug 1250721 In the Linux kernel, the following vulnerability has been resolved: of_numa: fix uninitialized memory nodes causing kernel panic When there are memory-only nodes (nodes without CPUs), these nodes are not properly initialized, causing kernel panic during boot. of_numa_init of_numa_parse_cpu_nodes node_set(nid, numa_nodes_parsed); of_numa_parse_memory_nodes In of_numa_parse_cpu_nodes, numa_nodes_parsed gets updated only for nodes containing CPUs. Memory-only nodes should have been updated in of_numa_parse_memory_nodes, but they weren't. Subsequently, when free_area_init() attempts to access NODE_DATA() for these uninitialized memory nodes, the kernel panics due to NULL pointer dereference. This can be reproduced on ARM64 QEMU with 1 CPU and 2 memory nodes: qemu-system-aarch64 \ -cpu host -nographic \ -m 4G -smp 1 \ -machine virt,accel=kvm,gic-version=3,iommu=smmuv3 \ -object memory-backend-ram,size=2G,id=mem0 \ -object memory-backend-ram,size=2G,id=mem1 \ -numa node,nodeid=0,memdev=mem0 \ -numa node,nodeid=1,memdev=mem1 \ -kernel $IMAGE \ -hda $DISK \ -append "console=ttyAMA0 root=/dev/vda rw earlycon" [ 0.000000] Booting Linux on physical CPU 0x0000000000 [0x481fd010] [ 0.000000] Linux version 6.17.0-rc1-00001-gabb4b3daf18c-dirty (yintirui@local) (gcc (GCC) 12.3.1, GNU ld (GNU Binutils) 2.41) #52 SMP PREEMPT Mon Aug 18 09:49:40 CST 2025 [ 0.000000] KASLR enabled [ 0.000000] random: crng init done [ 0.000000] Machine model: linux,dummy-virt [ 0.000000] efi: UEFI not found. [ 0.000000] earlycon: pl11 at MMIO 0x0000000009000000 (options '') [ 0.000000] printk: legacy bootconsole [pl11] enabled [ 0.000000] OF: reserved mem: Reserved memory: No reserved-memory node in the DT [ 0.000000] NODE_DATA(0) allocated [mem 0xbfffd9c0-0xbfffffff] [ 0.000000] node 1 must be removed before remove section 23 [ 0.000000] Zone ranges: [ 0.000000] DMA [mem 0x0000000040000000-0x00000000ffffffff] [ 0.000000] DMA32 empty [ 0.000000] Normal [mem 0x0000000100000000-0x000000013fffffff] [ 0.000000] Movable zone start for each node [ 0.000000] Early memory node ranges [ 0.000000] node 0: [mem 0x0000000040000000-0x00000000bfffffff] [ 0.000000] node 1: [mem 0x00000000c0000000-0x000000013fffffff] [ 0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x00000000bfffffff] [ 0.000000] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000a0 [ 0.000000] Mem abort info: [ 0.000000] ESR = 0x0000000096000004 [ 0.000000] EC = 0x25: DABT (current EL), IL = 32 bits [ 0.000000] SET = 0, FnV = 0 [ 0.000000] EA = 0, S1PTW = 0 [ 0.000000] FSC = 0x04: level 0 translation fault [ 0.000000] Data abort info: [ 0.000000] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 [ 0.000000] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 0.000000] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 0.000000] [00000000000000a0] user address but active_mm is swapper [ 0.000000] Internal error: Oops: 0000000096000004 [#1] SMP [ 0.000000] Modules linked in: [ 0.000000] CPU: 0 UID: 0 PID: 0 Comm: swapper Not tainted 6.17.0-rc1-00001-g760c6dabf762-dirty #54 PREEMPT [ 0.000000] Hardware name: linux,dummy-virt (DT) [ 0.000000] pstate: 800000c5 (Nzcv daIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 0.000000] pc : free_area_init+0x50c/0xf9c [ 0.000000] lr : free_area_init+0x5c0/0xf9c [ 0.000000] sp : ffffa02ca0f33c00 [ 0.000000] x29: ffffa02ca0f33cb0 x28: 0000000000000000 x27: 0000000000000000 [ 0.000000] x26: 4ec4ec4ec4ec4ec5 x25: 00000000000c0000 x24: 00000000000c0000 [ 0.000000] x23: 0000000000040000 x22: 0000000000000000 x21: ffffa02ca0f3b368 [ 0.000000] x20: ffffa02ca14c7b98 x19: 0000000000000000 x18: 0000000000000002 [ 0.000000] x17: 000000000000cacc x16: 0000000000000001 x15: 0000000000000001 [ 0.000000] x14: 0000000080000000 x13: 0000000000000018 x12: 0000000000000002 [ 0.0 ---truncated--- CVE-2025-39903 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39903.html CVE-2025-39903 https://bugzilla.suse.com/1250749 SUSE Bug 1250749 In the Linux kernel, the following vulnerability has been resolved: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path If request_irq() in i40e_vsi_request_irq_msix() fails in an iteration later than the first, the error path wants to free the IRQs requested so far. However, it uses the wrong dev_id argument for free_irq(), so it does not free the IRQs correctly and instead triggers the warning: Trying to free already-free IRQ 173 WARNING: CPU: 25 PID: 1091 at kernel/irq/manage.c:1829 __free_irq+0x192/0x2c0 Modules linked in: i40e(+) [...] CPU: 25 UID: 0 PID: 1091 Comm: NetworkManager Not tainted 6.17.0-rc1+ #1 PREEMPT(lazy) Hardware name: [...] RIP: 0010:__free_irq+0x192/0x2c0 [...] Call Trace: <TASK> free_irq+0x32/0x70 i40e_vsi_request_irq_msix.cold+0x63/0x8b [i40e] i40e_vsi_request_irq+0x79/0x80 [i40e] i40e_vsi_open+0x21f/0x2f0 [i40e] i40e_open+0x63/0x130 [i40e] __dev_open+0xfc/0x210 __dev_change_flags+0x1fc/0x240 netif_change_flags+0x27/0x70 do_setlink.isra.0+0x341/0xc70 rtnl_newlink+0x468/0x860 rtnetlink_rcv_msg+0x375/0x450 netlink_rcv_skb+0x5c/0x110 netlink_unicast+0x288/0x3c0 netlink_sendmsg+0x20d/0x430 ____sys_sendmsg+0x3a2/0x3d0 ___sys_sendmsg+0x99/0xe0 __sys_sendmsg+0x8a/0xf0 do_syscall_64+0x82/0x2c0 entry_SYSCALL_64_after_hwframe+0x76/0x7e [...] </TASK> ---[ end trace 0000000000000000 ]--- Use the same dev_id for free_irq() as for request_irq(). I tested this with inserting code to fail intentionally. CVE-2025-39911 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39911.html CVE-2025-39911 https://bugzilla.suse.com/1250704 SUSE Bug 1250704 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Harden uplink netdev access against device unbind The function mlx5_uplink_netdev_get() gets the uplink netdevice pointer from mdev->mlx5e_res.uplink_netdev. However, the netdevice can be removed and its pointer cleared when unbound from the mlx5_core.eth driver. This results in a NULL pointer, causing a kernel panic. BUG: unable to handle page fault for address: 0000000000001300 at RIP: 0010:mlx5e_vport_rep_load+0x22a/0x270 [mlx5_core] Call Trace: <TASK> mlx5_esw_offloads_rep_load+0x68/0xe0 [mlx5_core] esw_offloads_enable+0x593/0x910 [mlx5_core] mlx5_eswitch_enable_locked+0x341/0x420 [mlx5_core] mlx5_devlink_eswitch_mode_set+0x17e/0x3a0 [mlx5_core] devlink_nl_eswitch_set_doit+0x60/0xd0 genl_family_rcv_msg_doit+0xe0/0x130 genl_rcv_msg+0x183/0x290 netlink_rcv_skb+0x4b/0xf0 genl_rcv+0x24/0x40 netlink_unicast+0x255/0x380 netlink_sendmsg+0x1f3/0x420 __sock_sendmsg+0x38/0x60 __sys_sendto+0x119/0x180 do_syscall_64+0x53/0x1d0 entry_SYSCALL_64_after_hwframe+0x4b/0x53 Ensure the pointer is valid before use by checking it for NULL. If it is valid, immediately call netdev_hold() to take a reference, and preventing the netdevice from being freed while it is in use. CVE-2025-39947 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39947.html CVE-2025-39947 https://bugzilla.suse.com/1251232 SUSE Bug 1251232 In the Linux kernel, the following vulnerability has been resolved: ice: fix Rx page leak on multi-buffer frames The ice_put_rx_mbuf() function handles calling ice_put_rx_buf() for each buffer in the current frame. This function was introduced as part of handling multi-buffer XDP support in the ice driver. It works by iterating over the buffers from first_desc up to 1 plus the total number of fragments in the frame, cached from before the XDP program was executed. If the hardware posts a descriptor with a size of 0, the logic used in ice_put_rx_mbuf() breaks. Such descriptors get skipped and don't get added as fragments in ice_add_xdp_frag. Since the buffer isn't counted as a fragment, we do not iterate over it in ice_put_rx_mbuf(), and thus we don't call ice_put_rx_buf(). Because we don't call ice_put_rx_buf(), we don't attempt to re-use the page or free it. This leaves a stale page in the ring, as we don't increment next_to_alloc. The ice_reuse_rx_page() assumes that the next_to_alloc has been incremented properly, and that it always points to a buffer with a NULL page. Since this function doesn't check, it will happily recycle a page over the top of the next_to_alloc buffer, losing track of the old page. Note that this leak only occurs for multi-buffer frames. The ice_put_rx_mbuf() function always handles at least one buffer, so a single-buffer frame will always get handled correctly. It is not clear precisely why the hardware hands us descriptors with a size of 0 sometimes, but it happens somewhat regularly with "jumbo frames" used by 9K MTU. To fix ice_put_rx_mbuf(), we need to make sure to call ice_put_rx_buf() on all buffers between first_desc and next_to_clean. Borrow the logic of a similar function in i40e used for this same purpose. Use the same logic also in ice_get_pgcnts(). Instead of iterating over just the number of fragments, use a loop which iterates until the current index reaches to the next_to_clean element just past the current frame. Unlike i40e, the ice_put_rx_mbuf() function does call ice_put_rx_buf() on the last buffer of the frame indicating the end of packet. For non-linear (multi-buffer) frames, we need to take care when adjusting the pagecnt_bias. An XDP program might release fragments from the tail of the frame, in which case that fragment page is already released. Only update the pagecnt_bias for the first descriptor and fragments still remaining post-XDP program. Take care to only access the shared info for fragmented buffers, as this avoids a significant cache miss. The xdp_xmit value only needs to be updated if an XDP program is run, and only once per packet. Drop the xdp_xmit pointer argument from ice_put_rx_mbuf(). Instead, set xdp_xmit in the ice_clean_rx_irq() function directly. This avoids needing to pass the argument and avoids an extra bit-wise OR for each buffer in the frame. Move the increment of the ntc local variable to ensure its updated *before* all calls to ice_get_pgcnts() or ice_put_rx_mbuf(), as the loop logic requires the index of the element just after the current frame. Now that we use an index pointer in the ring to identify the packet, we no longer need to track or cache the number of fragments in the rx_ring. CVE-2025-39948 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39948.html CVE-2025-39948 https://bugzilla.suse.com/1251233 SUSE Bug 1251233 In the Linux kernel, the following vulnerability has been resolved: qed: Don't collect too many protection override GRC elements In the protection override dump path, the firmware can return far too many GRC elements, resulting in attempting to write past the end of the previously-kmalloc'ed dump buffer. This will result in a kernel panic with reason: BUG: unable to handle kernel paging request at ADDRESS where "ADDRESS" is just past the end of the protection override dump buffer. The start address of the buffer is: p_hwfn->cdev->dbg_features[DBG_FEATURE_PROTECTION_OVERRIDE].dump_buf and the size of the buffer is buf_size in the same data structure. The panic can be arrived at from either the qede Ethernet driver path: [exception RIP: qed_grc_dump_addr_range+0x108] qed_protection_override_dump at ffffffffc02662ed [qed] qed_dbg_protection_override_dump at ffffffffc0267792 [qed] qed_dbg_feature at ffffffffc026aa8f [qed] qed_dbg_all_data at ffffffffc026b211 [qed] qed_fw_fatal_reporter_dump at ffffffffc027298a [qed] devlink_health_do_dump at ffffffff82497f61 devlink_health_report at ffffffff8249cf29 qed_report_fatal_error at ffffffffc0272baf [qed] qede_sp_task at ffffffffc045ed32 [qede] process_one_work at ffffffff81d19783 or the qedf storage driver path: [exception RIP: qed_grc_dump_addr_range+0x108] qed_protection_override_dump at ffffffffc068b2ed [qed] qed_dbg_protection_override_dump at ffffffffc068c792 [qed] qed_dbg_feature at ffffffffc068fa8f [qed] qed_dbg_all_data at ffffffffc0690211 [qed] qed_fw_fatal_reporter_dump at ffffffffc069798a [qed] devlink_health_do_dump at ffffffff8aa95e51 devlink_health_report at ffffffff8aa9ae19 qed_report_fatal_error at ffffffffc0697baf [qed] qed_hw_err_notify at ffffffffc06d32d7 [qed] qed_spq_post at ffffffffc06b1011 [qed] qed_fcoe_destroy_conn at ffffffffc06b2e91 [qed] qedf_cleanup_fcport at ffffffffc05e7597 [qedf] qedf_rport_event_handler at ffffffffc05e7bf7 [qedf] fc_rport_work at ffffffffc02da715 [libfc] process_one_work at ffffffff8a319663 Resolve this by clamping the firmware's return value to the maximum number of legal elements the firmware should return. CVE-2025-39949 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39949.html CVE-2025-39949 https://bugzilla.suse.com/1251177 SUSE Bug 1251177 In the Linux kernel, the following vulnerability has been resolved: net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR A NULL pointer dereference can occur in tcp_ao_finish_connect() during a connect() system call on a socket with a TCP-AO key added and TCP_REPAIR enabled. The function is called with skb being NULL and attempts to dereference it on tcp_hdr(skb)->seq without a prior skb validation. Fix this by checking if skb is NULL before dereferencing it. The commentary is taken from bpf_skops_established(), which is also called in the same flow. Unlike the function being patched, bpf_skops_established() validates the skb before dereferencing it. int main(void){ struct sockaddr_in sockaddr; struct tcp_ao_add tcp_ao; int sk; int one = 1; memset(&sockaddr,'\0',sizeof(sockaddr)); memset(&tcp_ao,'\0',sizeof(tcp_ao)); sk = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP); sockaddr.sin_family = AF_INET; memcpy(tcp_ao.alg_name,"cmac(aes128)",12); memcpy(tcp_ao.key,"ABCDEFGHABCDEFGH",16); tcp_ao.keylen = 16; memcpy(&tcp_ao.addr,&sockaddr,sizeof(sockaddr)); setsockopt(sk, IPPROTO_TCP, TCP_AO_ADD_KEY, &tcp_ao, sizeof(tcp_ao)); setsockopt(sk, IPPROTO_TCP, TCP_REPAIR, &one, sizeof(one)); sockaddr.sin_family = AF_INET; sockaddr.sin_port = htobe16(123); inet_aton("127.0.0.1", &sockaddr.sin_addr); connect(sk,(struct sockaddr *)&sockaddr,sizeof(sockaddr)); return 0; } $ gcc tcp-ao-nullptr.c -o tcp-ao-nullptr -Wall $ unshare -Urn BUG: kernel NULL pointer dereference, address: 00000000000000b6 PGD 1f648d067 P4D 1f648d067 PUD 1982e8067 PMD 0 Oops: Oops: 0000 [#1] SMP NOPTI Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020 RIP: 0010:tcp_ao_finish_connect (net/ipv4/tcp_ao.c:1182) CVE-2025-39950 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39950.html CVE-2025-39950 https://bugzilla.suse.com/1251176 SUSE Bug 1251176 In the Linux kernel, the following vulnerability has been resolved: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). syzbot reported the splat below where a socket had tcp_sk(sk)->fastopen_rsk in the TCP_ESTABLISHED state. [0] syzbot reused the server-side TCP Fast Open socket as a new client before the TFO socket completes 3WHS: 1. accept() 2. connect(AF_UNSPEC) 3. connect() to another destination As of accept(), sk->sk_state is TCP_SYN_RECV, and tcp_disconnect() changes it to TCP_CLOSE and makes connect() possible, which restarts timers. Since tcp_disconnect() forgot to clear tcp_sk(sk)->fastopen_rsk, the retransmit timer triggered the warning and the intended packet was not retransmitted. Let's call reqsk_fastopen_remove() in tcp_disconnect(). [0]: WARNING: CPU: 2 PID: 0 at net/ipv4/tcp_timer.c:542 tcp_retransmit_timer (net/ipv4/tcp_timer.c:542 (discriminator 7)) Modules linked in: CPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted 6.17.0-rc5-g201825fb4278 #62 PREEMPT(voluntary) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:tcp_retransmit_timer (net/ipv4/tcp_timer.c:542 (discriminator 7)) Code: 41 55 41 54 55 53 48 8b af b8 08 00 00 48 89 fb 48 85 ed 0f 84 55 01 00 00 0f b6 47 12 3c 03 74 0c 0f b6 47 12 3c 04 74 04 90 <0f> 0b 90 48 8b 85 c0 00 00 00 48 89 ef 48 8b 40 30 e8 6a 4f 06 3e RSP: 0018:ffffc900002f8d40 EFLAGS: 00010293 RAX: 0000000000000002 RBX: ffff888106911400 RCX: 0000000000000017 RDX: 0000000002517619 RSI: ffffffff83764080 RDI: ffff888106911400 RBP: ffff888106d5c000 R08: 0000000000000001 R09: ffffc900002f8de8 R10: 00000000000000c2 R11: ffffc900002f8ff8 R12: ffff888106911540 R13: ffff888106911480 R14: ffff888106911840 R15: ffffc900002f8de0 FS: 0000000000000000(0000) GS:ffff88907b768000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8044d69d90 CR3: 0000000002c30003 CR4: 0000000000370ef0 Call Trace: <IRQ> tcp_write_timer (net/ipv4/tcp_timer.c:738) call_timer_fn (kernel/time/timer.c:1747) __run_timers (kernel/time/timer.c:1799 kernel/time/timer.c:2372) timer_expire_remote (kernel/time/timer.c:2385 kernel/time/timer.c:2376 kernel/time/timer.c:2135) tmigr_handle_remote_up (kernel/time/timer_migration.c:944 kernel/time/timer_migration.c:1035) __walk_groups.isra.0 (kernel/time/timer_migration.c:533 (discriminator 1)) tmigr_handle_remote (kernel/time/timer_migration.c:1096) handle_softirqs (./arch/x86/include/asm/jump_label.h:36 ./include/trace/events/irq.h:142 kernel/softirq.c:580) irq_exit_rcu (kernel/softirq.c:614 kernel/softirq.c:453 kernel/softirq.c:680 kernel/softirq.c:696) sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1050 (discriminator 35) arch/x86/kernel/apic/apic.c:1050 (discriminator 35)) </IRQ> CVE-2025-39955 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39955.html CVE-2025-39955 https://bugzilla.suse.com/1251804 SUSE Bug 1251804 In the Linux kernel, the following vulnerability has been resolved: igc: don't fail igc_probe() on LED setup error When igc_led_setup() fails, igc_probe() fails and triggers kernel panic in free_netdev() since unregister_netdev() is not called. [1] This behavior can be tested using fault-injection framework, especially the failslab feature. [2] Since LED support is not mandatory, treat LED setup failures as non-fatal and continue probe with a warning message, consequently avoiding the kernel panic. [1] kernel BUG at net/core/dev.c:12047! Oops: invalid opcode: 0000 [#1] SMP NOPTI CPU: 0 UID: 0 PID: 937 Comm: repro-igc-led-e Not tainted 6.17.0-rc4-enjuk-tnguy-00865-gc4940196ab02 #64 PREEMPT(voluntary) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:free_netdev+0x278/0x2b0 [...] Call Trace: <TASK> igc_probe+0x370/0x910 local_pci_probe+0x3a/0x80 pci_device_probe+0xd1/0x200 [...] [2] #!/bin/bash -ex FAILSLAB_PATH=/sys/kernel/debug/failslab/ DEVICE=0000:00:05.0 START_ADDR=$(grep " igc_led_setup" /proc/kallsyms \ | awk '{printf("0x%s", $1)}') END_ADDR=$(printf "0x%x" $((START_ADDR + 0x100))) echo $START_ADDR > $FAILSLAB_PATH/require-start echo $END_ADDR > $FAILSLAB_PATH/require-end echo 1 > $FAILSLAB_PATH/times echo 100 > $FAILSLAB_PATH/probability echo N > $FAILSLAB_PATH/ignore-gfp-wait echo $DEVICE > /sys/bus/pci/drivers/igc/bind CVE-2025-39956 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39956.html CVE-2025-39956 https://bugzilla.suse.com/1251809 SUSE Bug 1251809 In the Linux kernel, the following vulnerability has been resolved: io_uring: fix incorrect io_kiocb reference in io_link_skb In io_link_skb function, there is a bug where prev_notif is incorrectly assigned using 'nd' instead of 'prev_nd'. This causes the context validation check to compare the current notification with itself instead of comparing it with the previous notification. Fix by using the correct prev_nd parameter when obtaining prev_notif. CVE-2025-39963 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39963.html CVE-2025-39963 https://bugzilla.suse.com/1251819 SUSE Bug 1251819 https://bugzilla.suse.com/1251982 SUSE Bug 1251982 In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_alloc_spi shouldn't use 0 as SPI x->id.spi == 0 means "no SPI assigned", but since commit 94f39804d891 ("xfrm: Duplicate SPI Handling"), we now create states and add them to the byspi list with this value. __xfrm_state_delete doesn't remove those states from the byspi list, since they shouldn't be there, and this shows up as a UAF the next time we go through the byspi list. CVE-2025-39965 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39965.html CVE-2025-39965 https://bugzilla.suse.com/1251967 SUSE Bug 1251967 In the Linux kernel, the following vulnerability has been resolved: fbcon: fix integer overflow in fbcon_do_set_font Fix integer overflow vulnerabilities in fbcon_do_set_font() where font size calculations could overflow when handling user-controlled font parameters. The vulnerabilities occur when: 1. CALC_FONTSZ(h, pitch, charcount) performs h * pith * charcount multiplication with user-controlled values that can overflow. 2. FONT_EXTRA_WORDS * sizeof(int) + size addition can also overflow 3. This results in smaller allocations than expected, leading to buffer overflows during font data copying. Add explicit overflow checking using check_mul_overflow() and check_add_overflow() kernel helpers to safety validate all size calculations before allocation. CVE-2025-39967 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39967.html CVE-2025-39967 https://bugzilla.suse.com/1252033 SUSE Bug 1252033 In the Linux kernel, the following vulnerability has been resolved: i40e: add max boundary check for VF filters There is no check for max filters that VF can request. Add it. CVE-2025-39968 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39968.html CVE-2025-39968 https://bugzilla.suse.com/1252047 SUSE Bug 1252047 In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40E_VF_STATE_ACTIVE is not the only state in which VF is actually active so it should not be used to determine if a VF is allowed to obtain resources. Use I40E_VF_STATE_RESOURCES_LOADED that is set only in i40e_vc_get_vf_resources_msg() and cleared during reset. CVE-2025-39969 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39969.html CVE-2025-39969 https://bugzilla.suse.com/1252044 SUSE Bug 1252044 In the Linux kernel, the following vulnerability has been resolved: i40e: fix input validation logic for action_meta Fix condition to check 'greater or equal' to prevent OOB dereference. CVE-2025-39970 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39970.html CVE-2025-39970 https://bugzilla.suse.com/1252051 SUSE Bug 1252051 In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in config queues msg Ensure idx is within range of active/initialized TCs when iterating over vf->ch[idx] in i40e_vc_config_queues_msg(). CVE-2025-39971 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39971.html CVE-2025-39971 https://bugzilla.suse.com/1252052 SUSE Bug 1252052 In the Linux kernel, the following vulnerability has been resolved: i40e: fix idx validation in i40e_validate_queue_map Ensure idx is within range of active/initialized TCs when iterating over vf->ch[idx] in i40e_validate_queue_map(). CVE-2025-39972 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39972.html CVE-2025-39972 https://bugzilla.suse.com/1252039 SUSE Bug 1252039 In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ring_len param The `ring_len` parameter provided by the virtual function (VF) is assigned directly to the hardware memory context (HMC) without any validation. To address this, introduce an upper boundary check for both Tx and Rx queue lengths. The maximum number of descriptors supported by the hardware is 8k-32. Additionally, enforce alignment constraints: Tx rings must be a multiple of 8, and Rx rings must be a multiple of 32. CVE-2025-39973 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39973.html CVE-2025-39973 https://bugzilla.suse.com/1247374 SUSE Bug 1247374 https://bugzilla.suse.com/1252035 SUSE Bug 1252035 https://bugzilla.suse.com/1252036 SUSE Bug 1252036 In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() This code calls kfree_rcu(new_node, rcu) and then dereferences "new_node" and then dereferences it on the next line. Two lines later, we take a mutex so I don't think this is an RCU safe region. Re-order it to do the dereferences before queuing up the free. CVE-2025-39978 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39978.html CVE-2025-39978 https://bugzilla.suse.com/1252069 SUSE Bug 1252069 https://bugzilla.suse.com/1252071 SUSE Bug 1252071 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fs, fix UAF in flow counter release Fix a kernel trace [1] caused by releasing an HWS action of a local flow counter in mlx5_cmd_hws_delete_fte(), where the HWS action refcount and mutex were not initialized and the counter struct could already be freed when deleting the rule. Fix it by adding the missing initializations and adding refcount for the local flow counter struct. [1] Kernel log: Call Trace: <TASK> dump_stack_lvl+0x34/0x48 mlx5_fs_put_hws_action.part.0.cold+0x21/0x94 [mlx5_core] mlx5_fc_put_hws_action+0x96/0xad [mlx5_core] mlx5_fs_destroy_fs_actions+0x8b/0x152 [mlx5_core] mlx5_cmd_hws_delete_fte+0x5a/0xa0 [mlx5_core] del_hw_fte+0x1ce/0x260 [mlx5_core] mlx5_del_flow_rules+0x12d/0x240 [mlx5_core] ? ttwu_queue_wakelist+0xf4/0x110 mlx5_ib_destroy_flow+0x103/0x1b0 [mlx5_ib] uverbs_free_flow+0x20/0x50 [ib_uverbs] destroy_hw_idr_uobject+0x1b/0x50 [ib_uverbs] uverbs_destroy_uobject+0x34/0x1a0 [ib_uverbs] uobj_destroy+0x3c/0x80 [ib_uverbs] ib_uverbs_run_method+0x23e/0x360 [ib_uverbs] ? uverbs_finalize_object+0x60/0x60 [ib_uverbs] ib_uverbs_cmd_verbs+0x14f/0x2c0 [ib_uverbs] ? do_tty_write+0x1a9/0x270 ? file_tty_write.constprop.0+0x98/0xc0 ? new_sync_write+0xfc/0x190 ib_uverbs_ioctl+0xd7/0x160 [ib_uverbs] __x64_sys_ioctl+0x87/0xc0 do_syscall_64+0x59/0x90 CVE-2025-39979 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39979.html CVE-2025-39979 https://bugzilla.suse.com/1252067 SUSE Bug 1252067 https://bugzilla.suse.com/1252068 SUSE Bug 1252068 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix possible UAFs This attemps to fix possible UAFs caused by struct mgmt_pending being freed while still being processed like in the following trace, in order to fix mgmt_pending_valid is introduce and use to check if the mgmt_pending hasn't been removed from the pending list, on the complete callbacks it is used to check and in addtion remove the cmd from the list while holding mgmt_pending_lock to avoid TOCTOU problems since if the cmd is left on the list it can still be accessed and freed. BUG: KASAN: slab-use-after-free in mgmt_add_adv_patterns_monitor_sync+0x35/0x50 net/bluetooth/mgmt.c:5223 Read of size 8 at addr ffff8880709d4dc0 by task kworker/u11:0/55 CPU: 0 UID: 0 PID: 55 Comm: kworker/u11:0 Not tainted 6.16.4 #2 PREEMPT(full) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1ubuntu1 04/01/2014 Workqueue: hci0 hci_cmd_sync_work Call Trace: <TASK> dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xca/0x240 mm/kasan/report.c:482 kasan_report+0x118/0x150 mm/kasan/report.c:595 mgmt_add_adv_patterns_monitor_sync+0x35/0x50 net/bluetooth/mgmt.c:5223 hci_cmd_sync_work+0x210/0x3a0 net/bluetooth/hci_sync.c:332 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3321 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3402 kthread+0x711/0x8a0 kernel/kthread.c:464 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 home/kwqcheii/source/fuzzing/kernel/kasan/linux-6.16.4/arch/x86/entry/entry_64.S:245 </TASK> Allocated by task 12210: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:394 kasan_kmalloc include/linux/kasan.h:260 [inline] __kmalloc_cache_noprof+0x230/0x3d0 mm/slub.c:4364 kmalloc_noprof include/linux/slab.h:905 [inline] kzalloc_noprof include/linux/slab.h:1039 [inline] mgmt_pending_new+0x65/0x1e0 net/bluetooth/mgmt_util.c:269 mgmt_pending_add+0x35/0x140 net/bluetooth/mgmt_util.c:296 __add_adv_patterns_monitor+0x130/0x200 net/bluetooth/mgmt.c:5247 add_adv_patterns_monitor+0x214/0x360 net/bluetooth/mgmt.c:5364 hci_mgmt_cmd+0x9c9/0xef0 net/bluetooth/hci_sock.c:1719 hci_sock_sendmsg+0x6ca/0xef0 net/bluetooth/hci_sock.c:1839 sock_sendmsg_nosec net/socket.c:714 [inline] __sock_sendmsg+0x219/0x270 net/socket.c:729 sock_write_iter+0x258/0x330 net/socket.c:1133 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x5c9/0xb30 fs/read_write.c:686 ksys_write+0x145/0x250 fs/read_write.c:738 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 12221: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:68 kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:576 poison_slab_object mm/kasan/common.c:247 [inline] __kasan_slab_free+0x62/0x70 mm/kasan/common.c:264 kasan_slab_free include/linux/kasan.h:233 [inline] slab_free_hook mm/slub.c:2381 [inline] slab_free mm/slub.c:4648 [inline] kfree+0x18e/0x440 mm/slub.c:4847 mgmt_pending_free net/bluetooth/mgmt_util.c:311 [inline] mgmt_pending_foreach+0x30d/0x380 net/bluetooth/mgmt_util.c:257 __mgmt_power_off+0x169/0x350 net/bluetooth/mgmt.c:9444 hci_dev_close_sync+0x754/0x1330 net/bluetooth/hci_sync.c:5290 hci_dev_do_close net/bluetooth/hci_core.c:501 [inline] hci_dev_close+0x108/0x200 net/bluetooth/hci_core.c:526 sock_do_ioctl+0xd9/0x300 net/socket.c:1192 sock_ioctl+0x576/0x790 net/socket.c:1313 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0xf9/0x170 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xf ---truncated--- CVE-2025-39981 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39981.html CVE-2025-39981 https://bugzilla.suse.com/1252060 SUSE Bug 1252060 https://bugzilla.suse.com/1252061 SUSE Bug 1252061 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync This fixes the following UFA in hci_acl_create_conn_sync where a connection still pending is command submission (conn->state == BT_OPEN) maybe freed, also since this also can happen with the likes of hci_le_create_conn_sync fix it as well: BUG: KASAN: slab-use-after-free in hci_acl_create_conn_sync+0x5ef/0x790 net/bluetooth/hci_sync.c:6861 Write of size 2 at addr ffff88805ffcc038 by task kworker/u11:2/9541 CPU: 1 UID: 0 PID: 9541 Comm: kworker/u11:2 Not tainted 6.16.0-rc7 #3 PREEMPT(full) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1ubuntu1 04/01/2014 Workqueue: hci3 hci_cmd_sync_work Call Trace: <TASK> dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xca/0x230 mm/kasan/report.c:480 kasan_report+0x118/0x150 mm/kasan/report.c:593 hci_acl_create_conn_sync+0x5ef/0x790 net/bluetooth/hci_sync.c:6861 hci_cmd_sync_work+0x210/0x3a0 net/bluetooth/hci_sync.c:332 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3321 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3402 kthread+0x70e/0x8a0 kernel/kthread.c:464 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 home/kwqcheii/source/fuzzing/kernel/kasan/linux-6.16-rc7/arch/x86/entry/entry_64.S:245 </TASK> Allocated by task 123736: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:377 [inline] __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:394 kasan_kmalloc include/linux/kasan.h:260 [inline] __kmalloc_cache_noprof+0x230/0x3d0 mm/slub.c:4359 kmalloc_noprof include/linux/slab.h:905 [inline] kzalloc_noprof include/linux/slab.h:1039 [inline] __hci_conn_add+0x233/0x1b30 net/bluetooth/hci_conn.c:939 hci_conn_add_unset net/bluetooth/hci_conn.c:1051 [inline] hci_connect_acl+0x16c/0x4e0 net/bluetooth/hci_conn.c:1634 pair_device+0x418/0xa70 net/bluetooth/mgmt.c:3556 hci_mgmt_cmd+0x9c9/0xef0 net/bluetooth/hci_sock.c:1719 hci_sock_sendmsg+0x6ca/0xef0 net/bluetooth/hci_sock.c:1839 sock_sendmsg_nosec net/socket.c:712 [inline] __sock_sendmsg+0x219/0x270 net/socket.c:727 sock_write_iter+0x258/0x330 net/socket.c:1131 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x54b/0xa90 fs/read_write.c:686 ksys_write+0x145/0x250 fs/read_write.c:738 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 103680: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:68 kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:576 poison_slab_object mm/kasan/common.c:247 [inline] __kasan_slab_free+0x62/0x70 mm/kasan/common.c:264 kasan_slab_free include/linux/kasan.h:233 [inline] slab_free_hook mm/slub.c:2381 [inline] slab_free mm/slub.c:4643 [inline] kfree+0x18e/0x440 mm/slub.c:4842 device_release+0x9c/0x1c0 kobject_cleanup lib/kobject.c:689 [inline] kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0x22b/0x480 lib/kobject.c:737 hci_conn_cleanup net/bluetooth/hci_conn.c:175 [inline] hci_conn_del+0x8ff/0xcb0 net/bluetooth/hci_conn.c:1173 hci_conn_complete_evt+0x3c7/0x1040 net/bluetooth/hci_event.c:3199 hci_event_func net/bluetooth/hci_event.c:7477 [inline] hci_event_packet+0x7e0/0x1200 net/bluetooth/hci_event.c:7531 hci_rx_work+0x46a/0xe80 net/bluetooth/hci_core.c:4070 process_one_work kernel/workqueue.c:3238 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3321 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3402 kthread+0x70e/0x8a0 kernel/kthread.c:464 ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 home/kwqcheii/sour ---truncated--- CVE-2025-39982 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39982.html CVE-2025-39982 https://bugzilla.suse.com/1252083 SUSE Bug 1252083 In the Linux kernel, the following vulnerability has been resolved: net: tun: Update napi->skb after XDP process The syzbot report a UAF issue: BUG: KASAN: slab-use-after-free in skb_reset_mac_header include/linux/skbuff.h:3150 [inline] BUG: KASAN: slab-use-after-free in napi_frags_skb net/core/gro.c:723 [inline] BUG: KASAN: slab-use-after-free in napi_gro_frags+0x6e/0x1030 net/core/gro.c:758 Read of size 8 at addr ffff88802ef22c18 by task syz.0.17/6079 CPU: 0 UID: 0 PID: 6079 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) Call Trace: <TASK> dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xca/0x240 mm/kasan/report.c:482 kasan_report+0x118/0x150 mm/kasan/report.c:595 skb_reset_mac_header include/linux/skbuff.h:3150 [inline] napi_frags_skb net/core/gro.c:723 [inline] napi_gro_frags+0x6e/0x1030 net/core/gro.c:758 tun_get_user+0x28cb/0x3e20 drivers/net/tun.c:1920 tun_chr_write_iter+0x113/0x200 drivers/net/tun.c:1996 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x5c9/0xb30 fs/read_write.c:686 ksys_write+0x145/0x250 fs/read_write.c:738 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f </TASK> Allocated by task 6079: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:68 unpoison_slab_object mm/kasan/common.c:330 [inline] __kasan_mempool_unpoison_object+0xa0/0x170 mm/kasan/common.c:558 kasan_mempool_unpoison_object include/linux/kasan.h:388 [inline] napi_skb_cache_get+0x37b/0x6d0 net/core/skbuff.c:295 __alloc_skb+0x11e/0x2d0 net/core/skbuff.c:657 napi_alloc_skb+0x84/0x7d0 net/core/skbuff.c:811 napi_get_frags+0x69/0x140 net/core/gro.c:673 tun_napi_alloc_frags drivers/net/tun.c:1404 [inline] tun_get_user+0x77c/0x3e20 drivers/net/tun.c:1784 tun_chr_write_iter+0x113/0x200 drivers/net/tun.c:1996 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x5c9/0xb30 fs/read_write.c:686 ksys_write+0x145/0x250 fs/read_write.c:738 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 6079: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:68 kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:576 poison_slab_object mm/kasan/common.c:243 [inline] __kasan_slab_free+0x5b/0x80 mm/kasan/common.c:275 kasan_slab_free include/linux/kasan.h:233 [inline] slab_free_hook mm/slub.c:2422 [inline] slab_free mm/slub.c:4695 [inline] kmem_cache_free+0x18f/0x400 mm/slub.c:4797 skb_pp_cow_data+0xdd8/0x13e0 net/core/skbuff.c:969 netif_skb_check_for_xdp net/core/dev.c:5390 [inline] netif_receive_generic_xdp net/core/dev.c:5431 [inline] do_xdp_generic+0x699/0x11a0 net/core/dev.c:5499 tun_get_user+0x2523/0x3e20 drivers/net/tun.c:1872 tun_chr_write_iter+0x113/0x200 drivers/net/tun.c:1996 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x5c9/0xb30 fs/read_write.c:686 ksys_write+0x145/0x250 fs/read_write.c:738 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f After commit e6d5dbdd20aa ("xdp: add multi-buff support for xdp running in generic mode"), the original skb may be freed in skb_pp_cow_data() when XDP program was attached, which was allocated in tun_napi_alloc_frags(). However, the napi->skb still point to the original skb, update it after XDP process. CVE-2025-39984 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39984.html CVE-2025-39984 https://bugzilla.suse.com/1252081 SUSE Bug 1252081 In the Linux kernel, the following vulnerability has been resolved: can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow Sending an PF_PACKET allows to bypass the CAN framework logic and to directly reach the xmit() function of a CAN driver. The only check which is performed by the PF_PACKET framework is to make sure that skb->len fits the interface's MTU. Unfortunately, because the mcba_usb driver does not populate its net_device_ops->ndo_change_mtu(), it is possible for an attacker to configure an invalid MTU by doing, for example: $ ip link set can0 mtu 9999 After doing so, the attacker could open a PF_PACKET socket using the ETH_P_CANXL protocol: socket(PF_PACKET, SOCK_RAW, htons(ETH_P_CANXL)) to inject a malicious CAN XL frames. For example: struct canxl_frame frame = { .flags = 0xff, .len = 2048, }; The CAN drivers' xmit() function are calling can_dev_dropped_skb() to check that the skb is valid, unfortunately under above conditions, the malicious packet is able to go through can_dev_dropped_skb() checks: 1. the skb->protocol is set to ETH_P_CANXL which is valid (the function does not check the actual device capabilities). 2. the length is a valid CAN XL length. And so, mcba_usb_start_xmit() receives a CAN XL frame which it is not able to correctly handle and will thus misinterpret it as a CAN frame. This can result in a buffer overflow. The driver will consume cf->len as-is with no further checks on these lines: usb_msg.dlc = cf->len; memcpy(usb_msg.data, cf->data, usb_msg.dlc); Here, cf->len corresponds to the flags field of the CAN XL frame. In our previous example, we set canxl_frame->flags to 0xff. Because the maximum expected length is 8, a buffer overflow of 247 bytes occurs! Populate net_device_ops->ndo_change_mtu() to ensure that the interface's MTU can not be set to anything bigger than CAN_MTU. By fixing the root cause, this prevents the buffer overflow. CVE-2025-39985 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39985.html CVE-2025-39985 https://bugzilla.suse.com/1252082 SUSE Bug 1252082 In the Linux kernel, the following vulnerability has been resolved: can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow Sending an PF_PACKET allows to bypass the CAN framework logic and to directly reach the xmit() function of a CAN driver. The only check which is performed by the PF_PACKET framework is to make sure that skb->len fits the interface's MTU. Unfortunately, because the sun4i_can driver does not populate its net_device_ops->ndo_change_mtu(), it is possible for an attacker to configure an invalid MTU by doing, for example: $ ip link set can0 mtu 9999 After doing so, the attacker could open a PF_PACKET socket using the ETH_P_CANXL protocol: socket(PF_PACKET, SOCK_RAW, htons(ETH_P_CANXL)) to inject a malicious CAN XL frames. For example: struct canxl_frame frame = { .flags = 0xff, .len = 2048, }; The CAN drivers' xmit() function are calling can_dev_dropped_skb() to check that the skb is valid, unfortunately under above conditions, the malicious packet is able to go through can_dev_dropped_skb() checks: 1. the skb->protocol is set to ETH_P_CANXL which is valid (the function does not check the actual device capabilities). 2. the length is a valid CAN XL length. And so, sun4ican_start_xmit() receives a CAN XL frame which it is not able to correctly handle and will thus misinterpret it as a CAN frame. This can result in a buffer overflow. The driver will consume cf->len as-is with no further checks on this line: dlc = cf->len; Here, cf->len corresponds to the flags field of the CAN XL frame. In our previous example, we set canxl_frame->flags to 0xff. Because the maximum expected length is 8, a buffer overflow of 247 bytes occurs a couple line below when doing: for (i = 0; i < dlc; i++) writel(cf->data[i], priv->base + (dreg + i * 4)); Populate net_device_ops->ndo_change_mtu() to ensure that the interface's MTU can not be set to anything bigger than CAN_MTU. By fixing the root cause, this prevents the buffer overflow. CVE-2025-39986 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39986.html CVE-2025-39986 https://bugzilla.suse.com/1252078 SUSE Bug 1252078 In the Linux kernel, the following vulnerability has been resolved: can: hi311x: populate ndo_change_mtu() to prevent buffer overflow Sending an PF_PACKET allows to bypass the CAN framework logic and to directly reach the xmit() function of a CAN driver. The only check which is performed by the PF_PACKET framework is to make sure that skb->len fits the interface's MTU. Unfortunately, because the sun4i_can driver does not populate its net_device_ops->ndo_change_mtu(), it is possible for an attacker to configure an invalid MTU by doing, for example: $ ip link set can0 mtu 9999 After doing so, the attacker could open a PF_PACKET socket using the ETH_P_CANXL protocol: socket(PF_PACKET, SOCK_RAW, htons(ETH_P_CANXL)) to inject a malicious CAN XL frames. For example: struct canxl_frame frame = { .flags = 0xff, .len = 2048, }; The CAN drivers' xmit() function are calling can_dev_dropped_skb() to check that the skb is valid, unfortunately under above conditions, the malicious packet is able to go through can_dev_dropped_skb() checks: 1. the skb->protocol is set to ETH_P_CANXL which is valid (the function does not check the actual device capabilities). 2. the length is a valid CAN XL length. And so, hi3110_hard_start_xmit() receives a CAN XL frame which it is not able to correctly handle and will thus misinterpret it as a CAN frame. The driver will consume frame->len as-is with no further checks. This can result in a buffer overflow later on in hi3110_hw_tx() on this line: memcpy(buf + HI3110_FIFO_EXT_DATA_OFF, frame->data, frame->len); Here, frame->len corresponds to the flags field of the CAN XL frame. In our previous example, we set canxl_frame->flags to 0xff. Because the maximum expected length is 8, a buffer overflow of 247 bytes occurs! Populate net_device_ops->ndo_change_mtu() to ensure that the interface's MTU can not be set to anything bigger than CAN_MTU. By fixing the root cause, this prevents the buffer overflow. CVE-2025-39987 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39987.html CVE-2025-39987 https://bugzilla.suse.com/1252079 SUSE Bug 1252079 In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow Sending an PF_PACKET allows to bypass the CAN framework logic and to directly reach the xmit() function of a CAN driver. The only check which is performed by the PF_PACKET framework is to make sure that skb->len fits the interface's MTU. Unfortunately, because the etas_es58x driver does not populate its net_device_ops->ndo_change_mtu(), it is possible for an attacker to configure an invalid MTU by doing, for example: $ ip link set can0 mtu 9999 After doing so, the attacker could open a PF_PACKET socket using the ETH_P_CANXL protocol: socket(PF_PACKET, SOCK_RAW, htons(ETH_P_CANXL)); to inject a malicious CAN XL frames. For example: struct canxl_frame frame = { .flags = 0xff, .len = 2048, }; The CAN drivers' xmit() function are calling can_dev_dropped_skb() to check that the skb is valid, unfortunately under above conditions, the malicious packet is able to go through can_dev_dropped_skb() checks: 1. the skb->protocol is set to ETH_P_CANXL which is valid (the function does not check the actual device capabilities). 2. the length is a valid CAN XL length. And so, es58x_start_xmit() receives a CAN XL frame which it is not able to correctly handle and will thus misinterpret it as a CAN(FD) frame. This can result in a buffer overflow. For example, using the es581.4 variant, the frame will be dispatched to es581_4_tx_can_msg(), go through the last check at the beginning of this function: if (can_is_canfd_skb(skb)) return -EMSGSIZE; and reach this line: memcpy(tx_can_msg->data, cf->data, cf->len); Here, cf->len corresponds to the flags field of the CAN XL frame. In our previous example, we set canxl_frame->flags to 0xff. Because the maximum expected length is 8, a buffer overflow of 247 bytes occurs! Populate net_device_ops->ndo_change_mtu() to ensure that the interface's MTU can not be set to anything bigger than CAN_MTU or CANFD_MTU (depending on the device capabilities). By fixing the root cause, this prevents the buffer overflow. CVE-2025-39988 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39988.html CVE-2025-39988 https://bugzilla.suse.com/1252074 SUSE Bug 1252074 In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load() If ab->fw.m3_data points to data, then fw pointer remains null. Further, if m3_mem is not allocated, then fw is dereferenced to be passed to ath11k_err function. Replace fw->size by m3_len. Found by Linux Verification Center (linuxtesting.org) with SVACE. CVE-2025-39991 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39991.html CVE-2025-39991 https://bugzilla.suse.com/1252075 SUSE Bug 1252075 In the Linux kernel, the following vulnerability has been resolved: mm: swap: check for stable address space before operating on the VMA It is possible to hit a zero entry while traversing the vmas in unuse_mm() called from swapoff path and accessing it causes the OOPS: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000446--> Loading the memory from offset 0x40 on the XA_ZERO_ENTRY as address. Mem abort info: ESR = 0x0000000096000005 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x05: level 1 translation fault The issue is manifested from the below race between the fork() on a process and swapoff: fork(dup_mmap()) swapoff(unuse_mm) --------------- ----------------- 1) Identical mtree is built using __mt_dup(). 2) copy_pte_range()--> copy_nonpresent_pte(): The dst mm is added into the mmlist to be visible to the swapoff operation. 3) Fatal signal is sent to the parent process(which is the current during the fork) thus skip the duplication of the vmas and mark the vma range with XA_ZERO_ENTRY as a marker for this process that helps during exit_mmap(). 4) swapoff is tried on the 'mm' added to the 'mmlist' as part of the 2. 5) unuse_mm(), that iterates through the vma's of this 'mm' will hit the non-NULL zero entry and operating on this zero entry as a vma is resulting into the oops. The proper fix would be around not exposing this partially-valid tree to others when droping the mmap lock, which is being solved with [1]. A simpler solution would be checking for MMF_UNSTABLE, as it is set if mm_struct is not fully initialized in dup_mmap(). Thanks to Liam/Lorenzo/David for all the suggestions in fixing this issue. CVE-2025-39992 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39992.html CVE-2025-39992 https://bugzilla.suse.com/1252076 SUSE Bug 1252076 In the Linux kernel, the following vulnerability has been resolved: media: rc: fix races with imon_disconnect() Syzbot reports a KASAN issue as below: BUG: KASAN: use-after-free in __create_pipe include/linux/usb.h:1945 [inline] BUG: KASAN: use-after-free in send_packet+0xa2d/0xbc0 drivers/media/rc/imon.c:627 Read of size 4 at addr ffff8880256fb000 by task syz-executor314/4465 CPU: 2 PID: 4465 Comm: syz-executor314 Not tainted 6.0.0-rc1-syzkaller #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 print_address_description mm/kasan/report.c:317 [inline] print_report.cold+0x2ba/0x6e9 mm/kasan/report.c:433 kasan_report+0xb1/0x1e0 mm/kasan/report.c:495 __create_pipe include/linux/usb.h:1945 [inline] send_packet+0xa2d/0xbc0 drivers/media/rc/imon.c:627 vfd_write+0x2d9/0x550 drivers/media/rc/imon.c:991 vfs_write+0x2d7/0xdd0 fs/read_write.c:576 ksys_write+0x127/0x250 fs/read_write.c:631 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd The iMON driver improperly releases the usb_device reference in imon_disconnect without coordinating with active users of the device. Specifically, the fields usbdev_intf0 and usbdev_intf1 are not protected by the users counter (ictx->users). During probe, imon_init_intf0 or imon_init_intf1 increments the usb_device reference count depending on the interface. However, during disconnect, usb_put_dev is called unconditionally, regardless of actual usage. As a result, if vfd_write or other operations are still in progress after disconnect, this can lead to a use-after-free of the usb_device pointer. Thread 1 vfd_write Thread 2 imon_disconnect ... if usb_put_dev(ictx->usbdev_intf0) else usb_put_dev(ictx->usbdev_intf1) ... while send_packet if pipe = usb_sndintpipe( ictx->usbdev_intf0) UAF else pipe = usb_sndctrlpipe( ictx->usbdev_intf0, 0) UAF Guard access to usbdev_intf0 and usbdev_intf1 after disconnect by checking ictx->disconnected in all writer paths. Add early return with -ENODEV in send_packet(), vfd_write(), lcd_write() and display_open() if the device is no longer present. Set and read ictx->disconnected under ictx->lock to ensure memory synchronization. Acquire the lock in imon_disconnect() before setting the flag to synchronize with any ongoing operations. Ensure writers exit early and safely after disconnect before the USB core proceeds with cleanup. Found by Linux Verification Center (linuxtesting.org) with Syzkaller. CVE-2025-39993 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39993.html CVE-2025-39993 https://bugzilla.suse.com/1252070 SUSE Bug 1252070 In the Linux kernel, the following vulnerability has been resolved: media: tuner: xc5000: Fix use-after-free in xc5000_release The original code uses cancel_delayed_work() in xc5000_release(), which does not guarantee that the delayed work item timer_sleep has fully completed if it was already running. This leads to use-after-free scenarios where xc5000_release() may free the xc5000_priv while timer_sleep is still active and attempts to dereference the xc5000_priv. A typical race condition is illustrated below: CPU 0 (release thread) | CPU 1 (delayed work callback) xc5000_release() | xc5000_do_timer_sleep() cancel_delayed_work() | hybrid_tuner_release_state(priv) | kfree(priv) | | priv = container_of() // UAF Replace cancel_delayed_work() with cancel_delayed_work_sync() to ensure that the timer_sleep is properly canceled before the xc5000_priv memory is deallocated. A deadlock concern was considered: xc5000_release() is called in a process context and is not holding any locks that the timer_sleep work item might also need. Therefore, the use of the _sync() variant is safe here. This bug was initially identified through static analysis. [hverkuil: fix typo in Subject: tunner -> tuner] CVE-2025-39994 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39994.html CVE-2025-39994 https://bugzilla.suse.com/1252072 SUSE Bug 1252072 In the Linux kernel, the following vulnerability has been resolved: media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe The state->timer is a cyclic timer that schedules work_i2c_poll and delayed_work_enable_hotplug, while rearming itself. Using timer_delete() fails to guarantee the timer isn't still running when destroyed, similarly cancel_delayed_work() cannot ensure delayed_work_enable_hotplug has terminated if already executing. During probe failure after timer initialization, these may continue running as orphans and reference the already-freed tc358743_state object through tc358743_irq_poll_timer. The following is the trace captured by KASAN. BUG: KASAN: slab-use-after-free in __run_timer_base.part.0+0x7d7/0x8c0 Write of size 8 at addr ffff88800ded83c8 by task swapper/1/0 ... Call Trace: <IRQ> dump_stack_lvl+0x55/0x70 print_report+0xcf/0x610 ? __pfx_sched_balance_find_src_group+0x10/0x10 ? __run_timer_base.part.0+0x7d7/0x8c0 kasan_report+0xb8/0xf0 ? __run_timer_base.part.0+0x7d7/0x8c0 __run_timer_base.part.0+0x7d7/0x8c0 ? rcu_sched_clock_irq+0xb06/0x27d0 ? __pfx___run_timer_base.part.0+0x10/0x10 ? try_to_wake_up+0xb15/0x1960 ? tmigr_update_events+0x280/0x740 ? _raw_spin_lock_irq+0x80/0xe0 ? __pfx__raw_spin_lock_irq+0x10/0x10 tmigr_handle_remote_up+0x603/0x7e0 ? __pfx_tmigr_handle_remote_up+0x10/0x10 ? sched_balance_trigger+0x98/0x9f0 ? sched_tick+0x221/0x5a0 ? _raw_spin_lock_irq+0x80/0xe0 ? __pfx__raw_spin_lock_irq+0x10/0x10 ? tick_nohz_handler+0x339/0x440 ? __pfx_tmigr_handle_remote_up+0x10/0x10 __walk_groups.isra.0+0x42/0x150 tmigr_handle_remote+0x1f4/0x2e0 ? __pfx_tmigr_handle_remote+0x10/0x10 ? ktime_get+0x60/0x140 ? lapic_next_event+0x11/0x20 ? clockevents_program_event+0x1d4/0x2a0 ? hrtimer_interrupt+0x322/0x780 handle_softirqs+0x16a/0x550 irq_exit_rcu+0xaf/0xe0 sysvec_apic_timer_interrupt+0x70/0x80 </IRQ> ... Allocated by task 141: kasan_save_stack+0x24/0x50 kasan_save_track+0x14/0x30 __kasan_kmalloc+0x7f/0x90 __kmalloc_node_track_caller_noprof+0x198/0x430 devm_kmalloc+0x7b/0x1e0 tc358743_probe+0xb7/0x610 i2c_device_probe+0x51d/0x880 really_probe+0x1ca/0x5c0 __driver_probe_device+0x248/0x310 driver_probe_device+0x44/0x120 __device_attach_driver+0x174/0x220 bus_for_each_drv+0x100/0x190 __device_attach+0x206/0x370 bus_probe_device+0x123/0x170 device_add+0xd25/0x1470 i2c_new_client_device+0x7a0/0xcd0 do_one_initcall+0x89/0x300 do_init_module+0x29d/0x7f0 load_module+0x4f48/0x69e0 init_module_from_file+0xe4/0x150 idempotent_init_module+0x320/0x670 __x64_sys_finit_module+0xbd/0x120 do_syscall_64+0xac/0x280 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 141: kasan_save_stack+0x24/0x50 kasan_save_track+0x14/0x30 kasan_save_free_info+0x3a/0x60 __kasan_slab_free+0x3f/0x50 kfree+0x137/0x370 release_nodes+0xa4/0x100 devres_release_group+0x1b2/0x380 i2c_device_probe+0x694/0x880 really_probe+0x1ca/0x5c0 __driver_probe_device+0x248/0x310 driver_probe_device+0x44/0x120 __device_attach_driver+0x174/0x220 bus_for_each_drv+0x100/0x190 __device_attach+0x206/0x370 bus_probe_device+0x123/0x170 device_add+0xd25/0x1470 i2c_new_client_device+0x7a0/0xcd0 do_one_initcall+0x89/0x300 do_init_module+0x29d/0x7f0 load_module+0x4f48/0x69e0 init_module_from_file+0xe4/0x150 idempotent_init_module+0x320/0x670 __x64_sys_finit_module+0xbd/0x120 do_syscall_64+0xac/0x280 entry_SYSCALL_64_after_hwframe+0x77/0x7f ... Replace timer_delete() with timer_delete_sync() and cancel_delayed_work() with cancel_delayed_work_sync() to ensure proper termination of timer and work items before resource cleanup. This bug was initially identified through static analysis. For reproduction and testing, I created a functional emulation of the tc358743 device via a kernel module and introduced faults through the debugfs interface. CVE-2025-39995 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39995.html CVE-2025-39995 https://bugzilla.suse.com/1252064 SUSE Bug 1252064 In the Linux kernel, the following vulnerability has been resolved: media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove The original code uses cancel_delayed_work() in flexcop_pci_remove(), which does not guarantee that the delayed work item irq_check_work has fully completed if it was already running. This leads to use-after-free scenarios where flexcop_pci_remove() may free the flexcop_device while irq_check_work is still active and attempts to dereference the device. A typical race condition is illustrated below: CPU 0 (remove) | CPU 1 (delayed work callback) flexcop_pci_remove() | flexcop_pci_irq_check_work() cancel_delayed_work() | flexcop_device_kfree(fc_pci->fc_dev) | | fc = fc_pci->fc_dev; // UAF This is confirmed by a KASAN report: ================================================================== BUG: KASAN: slab-use-after-free in __run_timer_base.part.0+0x7d7/0x8c0 Write of size 8 at addr ffff8880093aa8c8 by task bash/135 ... Call Trace: <IRQ> dump_stack_lvl+0x55/0x70 print_report+0xcf/0x610 ? __run_timer_base.part.0+0x7d7/0x8c0 kasan_report+0xb8/0xf0 ? __run_timer_base.part.0+0x7d7/0x8c0 __run_timer_base.part.0+0x7d7/0x8c0 ? __pfx___run_timer_base.part.0+0x10/0x10 ? __pfx_read_tsc+0x10/0x10 ? ktime_get+0x60/0x140 ? lapic_next_event+0x11/0x20 ? clockevents_program_event+0x1d4/0x2a0 run_timer_softirq+0xd1/0x190 handle_softirqs+0x16a/0x550 irq_exit_rcu+0xaf/0xe0 sysvec_apic_timer_interrupt+0x70/0x80 </IRQ> ... Allocated by task 1: kasan_save_stack+0x24/0x50 kasan_save_track+0x14/0x30 __kasan_kmalloc+0x7f/0x90 __kmalloc_noprof+0x1be/0x460 flexcop_device_kmalloc+0x54/0xe0 flexcop_pci_probe+0x1f/0x9d0 local_pci_probe+0xdc/0x190 pci_device_probe+0x2fe/0x470 really_probe+0x1ca/0x5c0 __driver_probe_device+0x248/0x310 driver_probe_device+0x44/0x120 __driver_attach+0xd2/0x310 bus_for_each_dev+0xed/0x170 bus_add_driver+0x208/0x500 driver_register+0x132/0x460 do_one_initcall+0x89/0x300 kernel_init_freeable+0x40d/0x720 kernel_init+0x1a/0x150 ret_from_fork+0x10c/0x1a0 ret_from_fork_asm+0x1a/0x30 Freed by task 135: kasan_save_stack+0x24/0x50 kasan_save_track+0x14/0x30 kasan_save_free_info+0x3a/0x60 __kasan_slab_free+0x3f/0x50 kfree+0x137/0x370 flexcop_device_kfree+0x32/0x50 pci_device_remove+0xa6/0x1d0 device_release_driver_internal+0xf8/0x210 pci_stop_bus_device+0x105/0x150 pci_stop_and_remove_bus_device_locked+0x15/0x30 remove_store+0xcc/0xe0 kernfs_fop_write_iter+0x2c3/0x440 vfs_write+0x871/0xd70 ksys_write+0xee/0x1c0 do_syscall_64+0xac/0x280 entry_SYSCALL_64_after_hwframe+0x77/0x7f ... Replace cancel_delayed_work() with cancel_delayed_work_sync() to ensure that the delayed work item is properly canceled and any executing delayed work has finished before the device memory is deallocated. This bug was initially identified through static analysis. To reproduce and test it, I simulated the B2C2 FlexCop PCI device in QEMU and introduced artificial delays within the flexcop_pci_irq_check_work() function to increase the likelihood of triggering the bug. CVE-2025-39996 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39996.html CVE-2025-39996 https://bugzilla.suse.com/1252065 SUSE Bug 1252065 In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free The previous commit 0718a78f6a9f ("ALSA: usb-audio: Kill timer properly at removal") patched a UAF issue caused by the error timer. However, because the error timer kill added in this patch occurs after the endpoint delete, a race condition to UAF still occurs, albeit rarely. Additionally, since kill-cleanup for urb is also missing, freed memory can be accessed in interrupt context related to urb, which can cause UAF. Therefore, to prevent this, error timer and urb must be killed before freeing the heap memory. CVE-2025-39997 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39997.html CVE-2025-39997 https://bugzilla.suse.com/1252056 SUSE Bug 1252056 In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() There is a bug observed when rtw89_core_tx_kick_off_and_wait() tries to access already freed skb_data: BUG: KFENCE: use-after-free write in rtw89_core_tx_kick_off_and_wait drivers/net/wireless/realtek/rtw89/core.c:1110 CPU: 6 UID: 0 PID: 41377 Comm: kworker/u64:24 Not tainted 6.17.0-rc1+ #1 PREEMPT(lazy) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS edk2-20250523-14.fc42 05/23/2025 Workqueue: events_unbound cfg80211_wiphy_work [cfg80211] Use-after-free write at 0x0000000020309d9d (in kfence-#251): rtw89_core_tx_kick_off_and_wait drivers/net/wireless/realtek/rtw89/core.c:1110 rtw89_core_scan_complete drivers/net/wireless/realtek/rtw89/core.c:5338 rtw89_hw_scan_complete_cb drivers/net/wireless/realtek/rtw89/fw.c:7979 rtw89_chanctx_proceed_cb drivers/net/wireless/realtek/rtw89/chan.c:3165 rtw89_chanctx_proceed drivers/net/wireless/realtek/rtw89/chan.h:141 rtw89_hw_scan_complete drivers/net/wireless/realtek/rtw89/fw.c:8012 rtw89_mac_c2h_scanofld_rsp drivers/net/wireless/realtek/rtw89/mac.c:5059 rtw89_fw_c2h_work drivers/net/wireless/realtek/rtw89/fw.c:6758 process_one_work kernel/workqueue.c:3241 worker_thread kernel/workqueue.c:3400 kthread kernel/kthread.c:463 ret_from_fork arch/x86/kernel/process.c:154 ret_from_fork_asm arch/x86/entry/entry_64.S:258 kfence-#251: 0x0000000056e2393d-0x000000009943cb62, size=232, cache=skbuff_head_cache allocated by task 41377 on cpu 6 at 77869.159548s (0.009551s ago): __alloc_skb net/core/skbuff.c:659 __netdev_alloc_skb net/core/skbuff.c:734 ieee80211_nullfunc_get net/mac80211/tx.c:5844 rtw89_core_send_nullfunc drivers/net/wireless/realtek/rtw89/core.c:3431 rtw89_core_scan_complete drivers/net/wireless/realtek/rtw89/core.c:5338 rtw89_hw_scan_complete_cb drivers/net/wireless/realtek/rtw89/fw.c:7979 rtw89_chanctx_proceed_cb drivers/net/wireless/realtek/rtw89/chan.c:3165 rtw89_chanctx_proceed drivers/net/wireless/realtek/rtw89/chan.c:3194 rtw89_hw_scan_complete drivers/net/wireless/realtek/rtw89/fw.c:8012 rtw89_mac_c2h_scanofld_rsp drivers/net/wireless/realtek/rtw89/mac.c:5059 rtw89_fw_c2h_work drivers/net/wireless/realtek/rtw89/fw.c:6758 process_one_work kernel/workqueue.c:3241 worker_thread kernel/workqueue.c:3400 kthread kernel/kthread.c:463 ret_from_fork arch/x86/kernel/process.c:154 ret_from_fork_asm arch/x86/entry/entry_64.S:258 freed by task 1045 on cpu 9 at 77869.168393s (0.001557s ago): ieee80211_tx_status_skb net/mac80211/status.c:1117 rtw89_pci_release_txwd_skb drivers/net/wireless/realtek/rtw89/pci.c:564 rtw89_pci_release_tx_skbs.isra.0 drivers/net/wireless/realtek/rtw89/pci.c:651 rtw89_pci_release_tx drivers/net/wireless/realtek/rtw89/pci.c:676 rtw89_pci_napi_poll drivers/net/wireless/realtek/rtw89/pci.c:4238 __napi_poll net/core/dev.c:7495 net_rx_action net/core/dev.c:7557 net/core/dev.c:7684 handle_softirqs kernel/softirq.c:580 do_softirq.part.0 kernel/softirq.c:480 __local_bh_enable_ip kernel/softirq.c:407 rtw89_pci_interrupt_threadfn drivers/net/wireless/realtek/rtw89/pci.c:927 irq_thread_fn kernel/irq/manage.c:1133 irq_thread kernel/irq/manage.c:1257 kthread kernel/kthread.c:463 ret_from_fork arch/x86/kernel/process.c:154 ret_from_fork_asm arch/x86/entry/entry_64.S:258 It is a consequence of a race between the waiting and the signaling side of the completion: Waiting thread Completing thread rtw89_core_tx_kick_off_and_wait() rcu_assign_pointer(skb_data->wait, wait) /* start waiting */ wait_for_completion_timeout() rtw89_pci_tx_status() rtw89_core_tx_wait_complete() rcu_read_lock() /* signals completion and ---truncated--- CVE-2025-40000 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40000.html CVE-2025-40000 https://bugzilla.suse.com/1252062 SUSE Bug 1252062 In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Implement refcount to handle unbind during busy driver support indirect read and indirect write operation with assumption no force device removal(unbind) operation. However force device removal(removal) is still available to root superuser. Unbinding driver during operation causes kernel crash. This changes ensure driver able to handle such operation for indirect read and indirect write by implementing refcount to track attached devices to the controller and gracefully wait and until attached devices remove operation completed before proceed with removal operation. CVE-2025-40005 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40005.html CVE-2025-40005 https://bugzilla.suse.com/1252349 SUSE Bug 1252349 In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: check p->vec_buf for NULL When the PAGEMAP_SCAN ioctl is invoked with vec_len = 0 reaches pagemap_scan_backout_range(), kernel panics with null-ptr-deref: [ 44.936808] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP DEBUG_PAGEALLOC KASAN NOPTI [ 44.937797] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 44.938391] CPU: 1 UID: 0 PID: 2480 Comm: reproducer Not tainted 6.17.0-rc6 #22 PREEMPT(none) [ 44.939062] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 44.939935] RIP: 0010:pagemap_scan_thp_entry.isra.0+0x741/0xa80 <snip registers, unreliable trace> [ 44.946828] Call Trace: [ 44.947030] <TASK> [ 44.949219] pagemap_scan_pmd_entry+0xec/0xfa0 [ 44.952593] walk_pmd_range.isra.0+0x302/0x910 [ 44.954069] walk_pud_range.isra.0+0x419/0x790 [ 44.954427] walk_p4d_range+0x41e/0x620 [ 44.954743] walk_pgd_range+0x31e/0x630 [ 44.955057] __walk_page_range+0x160/0x670 [ 44.956883] walk_page_range_mm+0x408/0x980 [ 44.958677] walk_page_range+0x66/0x90 [ 44.958984] do_pagemap_scan+0x28d/0x9c0 [ 44.961833] do_pagemap_cmd+0x59/0x80 [ 44.962484] __x64_sys_ioctl+0x18d/0x210 [ 44.962804] do_syscall_64+0x5b/0x290 [ 44.963111] entry_SYSCALL_64_after_hwframe+0x76/0x7e vec_len = 0 in pagemap_scan_init_bounce_buffer() means no buffers are allocated and p->vec_buf remains set to NULL. This breaks an assumption made later in pagemap_scan_backout_range(), that page_region is always allocated for p->vec_buf_index. Fix it by explicitly checking p->vec_buf for NULL before dereferencing. Other sites that might run into same deref-issue are already (directly or transitively) protected by checking p->vec_buf. Note: From PAGEMAP_SCAN man page, it seems vec_len = 0 is valid when no output is requested and it's only the side effects caller is interested in, hence it passes check in pagemap_scan_get_args(). This issue was found by syzkaller. CVE-2025-40009 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40009.html CVE-2025-40009 https://bugzilla.suse.com/1252333 SUSE Bug 1252333 In the Linux kernel, the following vulnerability has been resolved: drm/gma500: Fix null dereference in hdmi teardown pci_set_drvdata sets the value of pdev->driver_data to NULL, after which the driver_data obtained from the same dev is dereferenced in oaktrail_hdmi_i2c_exit, and the i2c_dev is extracted from it. To prevent this, swap these calls. Found by Linux Verification Center (linuxtesting.org) with Svacer. CVE-2025-40011 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40011.html CVE-2025-40011 https://bugzilla.suse.com/1252336 SUSE Bug 1252336 In the Linux kernel, the following vulnerability has been resolved: net/smc: fix warning in smc_rx_splice() when calling get_page() smc_lo_register_dmb() allocates DMB buffers with kzalloc(), which are later passed to get_page() in smc_rx_splice(). Since kmalloc memory is not page-backed, this triggers WARN_ON_ONCE() in get_page() and prevents holding a refcount on the buffer. This can lead to use-after-free if the memory is released before splice_to_pipe() completes. Use folio_alloc() instead, ensuring DMBs are page-backed and safe for get_page(). WARNING: CPU: 18 PID: 12152 at ./include/linux/mm.h:1330 smc_rx_splice+0xaf8/0xe20 [smc] CPU: 18 UID: 0 PID: 12152 Comm: smcapp Kdump: loaded Not tainted 6.17.0-rc3-11705-g9cf4672ecfee #10 NONE Hardware name: IBM 3931 A01 704 (z/VM 7.4.0) Krnl PSW : 0704e00180000000 000793161032696c (smc_rx_splice+0xafc/0xe20 [smc]) R:0 T:1 IO:1 EX:1 Key:0 M:1 W:0 P:0 AS:3 CC:2 PM:0 RI:0 EA:3 Krnl GPRS: 0000000000000000 001cee80007d3001 00077400000000f8 0000000000000005 0000000000000001 001cee80007d3006 0007740000001000 001c000000000000 000000009b0c99e0 0000000000001000 001c0000000000f8 001c000000000000 000003ffcc6f7c88 0007740003e98000 0007931600000005 000792969b2ff7b8 Krnl Code: 0007931610326960: af000000 mc 0,0 0007931610326964: a7f4ff43 brc 15,00079316103267ea #0007931610326968: af000000 mc 0,0 >000793161032696c: a7f4ff3f brc 15,00079316103267ea 0007931610326970: e320f1000004 lg %r2,256(%r15) 0007931610326976: c0e53fd1b5f5 brasl %r14,000793168fd5d560 000793161032697c: a7f4fbb5 brc 15,00079316103260e6 0007931610326980: b904002b lgr %r2,%r11 Call Trace: smc_rx_splice+0xafc/0xe20 [smc] smc_rx_splice+0x756/0xe20 [smc]) smc_rx_recvmsg+0xa74/0xe00 [smc] smc_splice_read+0x1ce/0x3b0 [smc] sock_splice_read+0xa2/0xf0 do_splice_read+0x198/0x240 splice_file_to_pipe+0x7e/0x110 do_splice+0x59e/0xde0 __do_splice+0x11a/0x2d0 __s390x_sys_splice+0x140/0x1f0 __do_syscall+0x122/0x280 system_call+0x6e/0x90 Last Breaking-Event-Address: smc_rx_splice+0x960/0xe20 [smc] ---[ end trace 0000000000000000 ]--- CVE-2025-40012 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40012.html CVE-2025-40012 https://bugzilla.suse.com/1252330 SUSE Bug 1252330 In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: audioreach: fix potential null pointer dereference It is possible that the topology parsing function audioreach_widget_load_module_common() could return NULL or an error pointer. Add missing NULL check so that we do not dereference it. CVE-2025-40013 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40013.html CVE-2025-40013 https://bugzilla.suse.com/1252348 SUSE Bug 1252348 In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID Per UVC 1.1+ specification 3.7.2, units and terminals must have a non-zero unique ID. ``` Each Unit and Terminal within the video function is assigned a unique identification number, the Unit ID (UID) or Terminal ID (TID), contained in the bUnitID or bTerminalID field of the descriptor. The value 0x00 is reserved for undefined ID, ``` If we add a new entity with id 0 or a duplicated ID, it will be marked as UVC_INVALID_ENTITY_ID. In a previous attempt commit 3dd075fe8ebb ("media: uvcvideo: Require entities to have a non-zero unique ID"), we ignored all the invalid units, this broke a lot of non-compatible cameras. Hopefully we are more lucky this time. This also prevents some syzkaller reproducers from triggering warnings due to a chain of entities referring to themselves. In one particular case, an Output Unit is connected to an Input Unit, both with the same ID of 1. But when looking up for the source ID of the Output Unit, that same entity is found instead of the input entity, which leads to such warnings. In another case, a backward chain was considered finished as the source ID was 0. Later on, that entity was found, but its pads were not valid. Here is a sample stack trace for one of those cases. [ 20.650953] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 20.830206] usb 1-1: Using ep0 maxpacket: 8 [ 20.833501] usb 1-1: config 0 descriptor?? [ 21.038518] usb 1-1: string descriptor 0 read error: -71 [ 21.038893] usb 1-1: Found UVC 0.00 device <unnamed> (2833:0201) [ 21.039299] uvcvideo 1-1:0.0: Entity type for entity Output 1 was not initialized! [ 21.041583] uvcvideo 1-1:0.0: Entity type for entity Input 1 was not initialized! [ 21.042218] ------------[ cut here ]------------ [ 21.042536] WARNING: CPU: 0 PID: 9 at drivers/media/mc/mc-entity.c:1147 media_create_pad_link+0x2c4/0x2e0 [ 21.043195] Modules linked in: [ 21.043535] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.11.0-rc7-00030-g3480e43aeccf #444 [ 21.044101] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.15.0-1 04/01/2014 [ 21.044639] Workqueue: usb_hub_wq hub_event [ 21.045100] RIP: 0010:media_create_pad_link+0x2c4/0x2e0 [ 21.045508] Code: fe e8 20 01 00 00 b8 f4 ff ff ff 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 0f 0b eb e9 0f 0b eb 0a 0f 0b eb 06 <0f> 0b eb 02 0f 0b b8 ea ff ff ff eb d4 66 2e 0f 1f 84 00 00 00 00 [ 21.046801] RSP: 0018:ffffc9000004b318 EFLAGS: 00010246 [ 21.047227] RAX: ffff888004e5d458 RBX: 0000000000000000 RCX: ffffffff818fccf1 [ 21.047719] RDX: 000000000000007b RSI: 0000000000000000 RDI: ffff888004313290 [ 21.048241] RBP: ffff888004313290 R08: 0001ffffffffffff R09: 0000000000000000 [ 21.048701] R10: 0000000000000013 R11: 0001888004313290 R12: 0000000000000003 [ 21.049138] R13: ffff888004313080 R14: ffff888004313080 R15: 0000000000000000 [ 21.049648] FS: 0000000000000000(0000) GS:ffff88803ec00000(0000) knlGS:0000000000000000 [ 21.050271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.050688] CR2: 0000592cc27635b0 CR3: 000000000431c000 CR4: 0000000000750ef0 [ 21.051136] PKRU: 55555554 [ 21.051331] Call Trace: [ 21.051480] <TASK> [ 21.051611] ? __warn+0xc4/0x210 [ 21.051861] ? media_create_pad_link+0x2c4/0x2e0 [ 21.052252] ? report_bug+0x11b/0x1a0 [ 21.052540] ? trace_hardirqs_on+0x31/0x40 [ 21.052901] ? handle_bug+0x3d/0x70 [ 21.053197] ? exc_invalid_op+0x1a/0x50 [ 21.053511] ? asm_exc_invalid_op+0x1a/0x20 [ 21.053924] ? media_create_pad_link+0x91/0x2e0 [ 21.054364] ? media_create_pad_link+0x2c4/0x2e0 [ 21.054834] ? media_create_pad_link+0x91/0x2e0 [ 21.055131] ? _raw_spin_unlock+0x1e/0x40 [ 21.055441] ? __v4l2_device_register_subdev+0x202/0x210 [ 21.055837] uvc_mc_register_entities+0x358/0x400 [ 21.056144] uvc_register_chains+0x1 ---truncated--- CVE-2025-40016 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40016.html CVE-2025-40016 https://bugzilla.suse.com/1252346 SUSE Bug 1252346 In the Linux kernel, the following vulnerability has been resolved: ipvs: Defer ip_vs_ftp unregister during netns cleanup On the netns cleanup path, __ip_vs_ftp_exit() may unregister ip_vs_ftp before connections with valid cp->app pointers are flushed, leading to a use-after-free. Fix this by introducing a global `exiting_module` flag, set to true in ip_vs_ftp_exit() before unregistering the pernet subsystem. In __ip_vs_ftp_exit(), skip ip_vs_ftp unregister if called during netns cleanup (when exiting_module is false) and defer it to __ip_vs_cleanup_batch(), which unregisters all apps after all connections are flushed. If called during module exit, unregister ip_vs_ftp immediately. CVE-2025-40018 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40018.html CVE-2025-40018 https://bugzilla.suse.com/1247374 SUSE Bug 1247374 https://bugzilla.suse.com/1252688 SUSE Bug 1252688 https://bugzilla.suse.com/1252689 SUSE Bug 1252689 https://bugzilla.suse.com/1253291 SUSE Bug 1253291 In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Check ssize for decryption and in-place encryption Move the ssize check to the start in essiv_aead_crypt so that it's also checked for decryption and in-place encryption. CVE-2025-40019 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40019.html CVE-2025-40019 https://bugzilla.suse.com/1252678 SUSE Bug 1252678 https://bugzilla.suse.com/1252719 SUSE Bug 1252719 In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: fix shift-out-of-bounds issue Explicitly uses a 64-bit constant when the number of bits used for its shifting is 32 (which is the case for PC CAN FD interfaces supported by this driver). [mkl: update subject, apply manually] CVE-2025-40020 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40020.html CVE-2025-40020 https://bugzilla.suse.com/1252679 SUSE Bug 1252679 In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: Check return value of platform_get_resource() platform_get_resource() returns NULL in case of failure, so check its return value and propagate the error in order to prevent NULL pointer dereference. CVE-2025-40029 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40029.html CVE-2025-40029 https://bugzilla.suse.com/1252772 SUSE Bug 1252772 In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release The fields dma_chan_tx and dma_chan_rx of the struct pci_epf_test can be NULL even after EPF initialization. Then it is prudent to check that they have non-NULL values before releasing the channels. Add the checks in pci_epf_test_clean_dma_chan(). Without the checks, NULL pointer dereferences happen and they can lead to a kernel panic in some cases: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000050 Call trace: dma_release_channel+0x2c/0x120 (P) pci_epf_test_epc_deinit+0x94/0xc0 [pci_epf_test] pci_epc_deinit_notify+0x74/0xc0 tegra_pcie_ep_pex_rst_irq+0x250/0x5d8 irq_thread_fn+0x34/0xb8 irq_thread+0x18c/0x2e8 kthread+0x14c/0x210 ret_from_fork+0x10/0x20 [mani: trimmed the stack trace] CVE-2025-40032 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40032.html CVE-2025-40032 https://bugzilla.suse.com/1252841 SUSE Bug 1252841 In the Linux kernel, the following vulnerability has been resolved: Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak Struct ff_effect_compat is embedded twice inside uinput_ff_upload_compat, contains internal padding. In particular, there is a hole after struct ff_replay to satisfy alignment requirements for the following union member. Without clearing the structure, copy_to_user() may leak stack data to userspace. Initialize ff_up_compat to zero before filling valid fields. CVE-2025-40035 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40035.html CVE-2025-40035 https://bugzilla.suse.com/1252866 SUSE Bug 1252866 In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: fix possible map leak in fastrpc_put_args copy_to_user() failure would cause an early return without cleaning up the fdlist, which has been updated by the DSP. This could lead to map leak. Fix this by redirecting to a cleanup path on failure, ensuring that all mapped buffers are properly released before returning. CVE-2025-40036 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40036.html CVE-2025-40036 https://bugzilla.suse.com/1252865 SUSE Bug 1252865 In the Linux kernel, the following vulnerability has been resolved: fbdev: simplefb: Fix use after free in simplefb_detach_genpds() The pm_domain cleanup can not be devres managed as it uses struct simplefb_par which is allocated within struct fb_info by framebuffer_alloc(). This allocation is explicitly freed by unregister_framebuffer() in simplefb_remove(). Devres managed cleanup runs after the device remove call and thus can no longer access struct simplefb_par. Call simplefb_detach_genpds() explicitly from simplefb_destroy() like the cleanup functions for clocks and regulators. Fixes an use after free on M2 Mac mini during aperture_remove_conflicting_devices() using the downstream asahi kernel with Debian's kernel config. For unknown reasons this started to consistently dereference an invalid pointer in v6.16.3 based kernels. [ 6.736134] BUG: KASAN: slab-use-after-free in simplefb_detach_genpds+0x58/0x220 [ 6.743545] Read of size 4 at addr ffff8000304743f0 by task (udev-worker)/227 [ 6.750697] [ 6.752182] CPU: 6 UID: 0 PID: 227 Comm: (udev-worker) Tainted: G S 6.16.3-asahi+ #16 PREEMPTLAZY [ 6.752186] Tainted: [S]=CPU_OUT_OF_SPEC [ 6.752187] Hardware name: Apple Mac mini (M2, 2023) (DT) [ 6.752189] Call trace: [ 6.752190] show_stack+0x34/0x98 (C) [ 6.752194] dump_stack_lvl+0x60/0x80 [ 6.752197] print_report+0x17c/0x4d8 [ 6.752201] kasan_report+0xb4/0x100 [ 6.752206] __asan_report_load4_noabort+0x20/0x30 [ 6.752209] simplefb_detach_genpds+0x58/0x220 [ 6.752213] devm_action_release+0x50/0x98 [ 6.752216] release_nodes+0xd0/0x2c8 [ 6.752219] devres_release_all+0xfc/0x178 [ 6.752221] device_unbind_cleanup+0x28/0x168 [ 6.752224] device_release_driver_internal+0x34c/0x470 [ 6.752228] device_release_driver+0x20/0x38 [ 6.752231] bus_remove_device+0x1b0/0x380 [ 6.752234] device_del+0x314/0x820 [ 6.752238] platform_device_del+0x3c/0x1e8 [ 6.752242] platform_device_unregister+0x20/0x50 [ 6.752246] aperture_detach_platform_device+0x1c/0x30 [ 6.752250] aperture_detach_devices+0x16c/0x290 [ 6.752253] aperture_remove_conflicting_devices+0x34/0x50 ... [ 6.752343] [ 6.967409] Allocated by task 62: [ 6.970724] kasan_save_stack+0x3c/0x70 [ 6.974560] kasan_save_track+0x20/0x40 [ 6.978397] kasan_save_alloc_info+0x40/0x58 [ 6.982670] __kasan_kmalloc+0xd4/0xd8 [ 6.986420] __kmalloc_noprof+0x194/0x540 [ 6.990432] framebuffer_alloc+0xc8/0x130 [ 6.994444] simplefb_probe+0x258/0x2378 ... [ 7.054356] [ 7.055838] Freed by task 227: [ 7.058891] kasan_save_stack+0x3c/0x70 [ 7.062727] kasan_save_track+0x20/0x40 [ 7.066565] kasan_save_free_info+0x4c/0x80 [ 7.070751] __kasan_slab_free+0x6c/0xa0 [ 7.074675] kfree+0x10c/0x380 [ 7.077727] framebuffer_release+0x5c/0x90 [ 7.081826] simplefb_destroy+0x1b4/0x2c0 [ 7.085837] put_fb_info+0x98/0x100 [ 7.089326] unregister_framebuffer+0x178/0x320 [ 7.093861] simplefb_remove+0x3c/0x60 [ 7.097611] platform_remove+0x60/0x98 [ 7.101361] device_remove+0xb8/0x160 [ 7.105024] device_release_driver_internal+0x2fc/0x470 [ 7.110256] device_release_driver+0x20/0x38 [ 7.114529] bus_remove_device+0x1b0/0x380 [ 7.118628] device_del+0x314/0x820 [ 7.122116] platform_device_del+0x3c/0x1e8 [ 7.126302] platform_device_unregister+0x20/0x50 [ 7.131012] aperture_detach_platform_device+0x1c/0x30 [ 7.136157] aperture_detach_devices+0x16c/0x290 [ 7.140779] aperture_remove_conflicting_devices+0x34/0x50 ... CVE-2025-40037 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40037.html CVE-2025-40037 https://bugzilla.suse.com/1252819 SUSE Bug 1252819 In the Linux kernel, the following vulnerability has been resolved: mm/ksm: fix flag-dropping behavior in ksm_madvise syzkaller discovered the following crash: (kernel BUG) [ 44.607039] ------------[ cut here ]------------ [ 44.607422] kernel BUG at mm/userfaultfd.c:2067! [ 44.608148] Oops: invalid opcode: 0000 [#1] SMP DEBUG_PAGEALLOC KASAN NOPTI [ 44.608814] CPU: 1 UID: 0 PID: 2475 Comm: reproducer Not tainted 6.16.0-rc6 #1 PREEMPT(none) [ 44.609635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 44.610695] RIP: 0010:userfaultfd_release_all+0x3a8/0x460 <snip other registers, drop unreliable trace> [ 44.617726] Call Trace: [ 44.617926] <TASK> [ 44.619284] userfaultfd_release+0xef/0x1b0 [ 44.620976] __fput+0x3f9/0xb60 [ 44.621240] fput_close_sync+0x110/0x210 [ 44.622222] __x64_sys_close+0x8f/0x120 [ 44.622530] do_syscall_64+0x5b/0x2f0 [ 44.622840] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.623244] RIP: 0033:0x7f365bb3f227 Kernel panics because it detects UFFD inconsistency during userfaultfd_release_all(). Specifically, a VMA which has a valid pointer to vma->vm_userfaultfd_ctx, but no UFFD flags in vma->vm_flags. The inconsistency is caused in ksm_madvise(): when user calls madvise() with MADV_UNMEARGEABLE on a VMA that is registered for UFFD in MINOR mode, it accidentally clears all flags stored in the upper 32 bits of vma->vm_flags. Assuming x86_64 kernel build, unsigned long is 64-bit and unsigned int and int are 32-bit wide. This setup causes the following mishap during the &= ~VM_MERGEABLE assignment. VM_MERGEABLE is a 32-bit constant of type unsigned int, 0x8000'0000. After ~ is applied, it becomes 0x7fff'ffff unsigned int, which is then promoted to unsigned long before the & operation. This promotion fills upper 32 bits with leading 0s, as we're doing unsigned conversion (and even for a signed conversion, this wouldn't help as the leading bit is 0). & operation thus ends up AND-ing vm_flags with 0x0000'0000'7fff'ffff instead of intended 0xffff'ffff'7fff'ffff and hence accidentally clears the upper 32-bits of its value. Fix it by changing `VM_MERGEABLE` constant to unsigned long, using the BIT() macro. Note: other VM_* flags are not affected: This only happens to the VM_MERGEABLE flag, as the other VM_* flags are all constants of type int and after ~ operation, they end up with leading 1 and are thus converted to unsigned long with leading 1s. Note 2: After commit 31defc3b01d9 ("userfaultfd: remove (VM_)BUG_ON()s"), this is no longer a kernel BUG, but a WARNING at the same place: [ 45.595973] WARNING: CPU: 1 PID: 2474 at mm/userfaultfd.c:2067 but the root-cause (flag-drop) remains the same. [akpm@linux-foundation.org: rust bindgen wasn't able to handle BIT(), from Miguel] CVE-2025-40040 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40040.html CVE-2025-40040 https://bugzilla.suse.com/1252780 SUSE Bug 1252780 In the Linux kernel, the following vulnerability has been resolved: net: nfc: nci: Add parameter validation for packet data Syzbot reported an uninitialized value bug in nci_init_req, which was introduced by commit 5aca7966d2a7 ("Merge tag 'perf-tools-fixes-for-v6.17-2025-09-16' of git://git.kernel.org/pub/scm/linux/kernel/git/perf/perf-tools"). This bug arises due to very limited and poor input validation that was done at nic_valid_size(). This validation only validates the skb->len (directly reflects size provided at the userspace interface) with the length provided in the buffer itself (interpreted as NCI_HEADER). This leads to the processing of memory content at the address assuming the correct layout per what opcode requires there. This leads to the accesses to buffer of `skb_buff->data` which is not assigned anything yet. Following the same silent drop of packets of invalid sizes at `nic_valid_size()`, add validation of the data in the respective handlers and return error values in case of failure. Release the skb if error values are returned from handlers in `nci_nft_packet` and effectively do a silent drop Possible TODO: because we silently drop the packets, the call to `nci_request` will be waiting for completion of request and will face timeouts. These timeouts can get excessively logged in the dmesg. A proper handling of them may require to export `nci_request_cancel` (or propagate error handling from the nft packets handlers). CVE-2025-40043 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40043.html CVE-2025-40043 https://bugzilla.suse.com/1252787 SUSE Bug 1252787 In the Linux kernel, the following vulnerability has been resolved: fs: udf: fix OOB read in lengthAllocDescs handling When parsing Allocation Extent Descriptor, lengthAllocDescs comes from on-disk data and must be validated against the block size. Crafted or corrupted images may set lengthAllocDescs so that the total descriptor length (sizeof(allocExtDesc) + lengthAllocDescs) exceeds the buffer, leading udf_update_tag() to call crc_itu_t() on out-of-bounds memory and trigger a KASAN use-after-free read. BUG: KASAN: use-after-free in crc_itu_t+0x1d5/0x2b0 lib/crc-itu-t.c:60 Read of size 1 at addr ffff888041e7d000 by task syz-executor317/5309 CPU: 0 UID: 0 PID: 5309 Comm: syz-executor317 Not tainted 6.12.0-rc4-syzkaller-00261-g850925a8133c #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:377 [inline] print_report+0x169/0x550 mm/kasan/report.c:488 kasan_report+0x143/0x180 mm/kasan/report.c:601 crc_itu_t+0x1d5/0x2b0 lib/crc-itu-t.c:60 udf_update_tag+0x70/0x6a0 fs/udf/misc.c:261 udf_write_aext+0x4d8/0x7b0 fs/udf/inode.c:2179 extent_trunc+0x2f7/0x4a0 fs/udf/truncate.c:46 udf_truncate_tail_extent+0x527/0x7e0 fs/udf/truncate.c:106 udf_release_file+0xc1/0x120 fs/udf/file.c:185 __fput+0x23f/0x880 fs/file_table.c:431 task_work_run+0x24f/0x310 kernel/task_work.c:239 exit_task_work include/linux/task_work.h:43 [inline] do_exit+0xa2f/0x28e0 kernel/exit.c:939 do_group_exit+0x207/0x2c0 kernel/exit.c:1088 __do_sys_exit_group kernel/exit.c:1099 [inline] __se_sys_exit_group kernel/exit.c:1097 [inline] __x64_sys_exit_group+0x3f/0x40 kernel/exit.c:1097 x64_sys_call+0x2634/0x2640 arch/x86/include/generated/asm/syscalls_64.h:232 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f </TASK> Validate the computed total length against epos->bh->b_size. Found by Linux Verification Center (linuxtesting.org) with Syzkaller. CVE-2025-40044 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40044.html CVE-2025-40044 https://bugzilla.suse.com/1252785 SUSE Bug 1252785 In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Let userspace take care of interrupt mask Remove the logic to set interrupt mask by default in uio_hv_generic driver as the interrupt mask value is supposed to be controlled completely by the user space. If the mask bit gets changed by the driver, concurrently with user mode operating on the ring, the mask bit may be set when it is supposed to be clear, and the user-mode driver will miss an interrupt which will cause a hang. For eg- when the driver sets inbound ring buffer interrupt mask to 1, the host does not interrupt the guest on the UIO VMBus channel. However, setting the mask does not prevent the host from putting a message in the inbound ring buffer. So let's assume that happens, the host puts a message into the ring buffer but does not interrupt. Subsequently, the user space code in the guest sets the inbound ring buffer interrupt mask to 0, saying "Hey, I'm ready for interrupts". User space code then calls pread() to wait for an interrupt. Then one of two things happens: * The host never sends another message. So the pread() waits forever. * The host does send another message. But because there's already a message in the ring buffer, it doesn't generate an interrupt. This is the correct behavior, because the host should only send an interrupt when the inbound ring buffer transitions from empty to not-empty. Adding an additional message to a ring buffer that is not empty is not supposed to generate an interrupt on the guest. Since the guest is waiting in pread() and not removing messages from the ring buffer, the pread() waits forever. This could be easily reproduced in hv_fcopy_uio_daemon if we delay setting interrupt mask to 0. Similarly if hv_uio_channel_cb() sets the interrupt_mask to 1, there's a race condition. Once user space empties the inbound ring buffer, but before user space sets interrupt_mask to 0, the host could put another message in the ring buffer but it wouldn't interrupt. Then the next pread() would hang. Fix these by removing all instances where interrupt_mask is changed, while keeping the one in set_event() unchanged to enable userspace control the interrupt mask by writing 0/1 to /dev/uioX. CVE-2025-40048 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40048.html CVE-2025-40048 https://bugzilla.suse.com/1252862 SUSE Bug 1252862 In the Linux kernel, the following vulnerability has been resolved: Squashfs: fix uninit-value in squashfs_get_parent Syzkaller reports a "KMSAN: uninit-value in squashfs_get_parent" bug. This is caused by open_by_handle_at() being called with a file handle containing an invalid parent inode number. In particular the inode number is that of a symbolic link, rather than a directory. Squashfs_get_parent() gets called with that symbolic link inode, and accesses the parent member field. unsigned int parent_ino = squashfs_i(inode)->parent; Because non-directory inodes in Squashfs do not have a parent value, this is uninitialised, and this causes an uninitialised value access. The fix is to initialise parent with the invalid inode 0, which will cause an EINVAL error to be returned. Regular inodes used to share the parent field with the block_list_start field. This is removed in this commit to enable the parent field to contain the invalid inode number 0. CVE-2025-40049 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40049.html CVE-2025-40049 https://bugzilla.suse.com/1252822 SUSE Bug 1252822 In the Linux kernel, the following vulnerability has been resolved: vhost: vringh: Modify the return value check The return value of copy_from_iter and copy_to_iter can't be negative, check whether the copied lengths are equal. CVE-2025-40051 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40051.html CVE-2025-40051 https://bugzilla.suse.com/1252858 SUSE Bug 1252858 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix crypto buffers in non-linear memory The crypto API, through the scatterlist API, expects input buffers to be in linear memory. We handle this with the cifs_sg_set_buf() helper that converts vmalloc'd memory to their corresponding pages. However, when we allocate our aead_request buffer (@creq in smb2ops.c::crypt_message()), we do so with kvzalloc(), which possibly puts aead_request->__ctx in vmalloc area. AEAD algorithm then uses ->__ctx for its private/internal data and operations, and uses sg_set_buf() for such data on a few places. This works fine as long as @creq falls into kmalloc zone (small requests) or vmalloc'd memory is still within linear range. Tasks' stacks are vmalloc'd by default (CONFIG_VMAP_STACK=y), so too many tasks will increment the base stacks' addresses to a point where virt_addr_valid(buf) will fail (BUG() in sg_set_buf()) when that happens. In practice: too many parallel reads and writes on an encrypted mount will trigger this bug. To fix this, always alloc @creq with kmalloc() instead. Also drop the @sensitive_size variable/arguments since kfree_sensitive() doesn't need it. Backtrace: [ 945.272081] ------------[ cut here ]------------ [ 945.272774] kernel BUG at include/linux/scatterlist.h:209! [ 945.273520] Oops: invalid opcode: 0000 [#1] SMP DEBUG_PAGEALLOC NOPTI [ 945.274412] CPU: 7 UID: 0 PID: 56 Comm: kworker/u33:0 Kdump: loaded Not tainted 6.15.0-lku-11779-g8e9d6efccdd7-dirty #1 PREEMPT(voluntary) [ 945.275736] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-2-gc13ff2cd-prebuilt.qemu.org 04/01/2014 [ 945.276877] Workqueue: writeback wb_workfn (flush-cifs-2) [ 945.277457] RIP: 0010:crypto_gcm_init_common+0x1f9/0x220 [ 945.278018] Code: b0 00 00 00 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 48 c7 c0 00 00 00 80 48 2b 05 5c 58 e5 00 e9 58 ff ff ff <0f> 0b 0f 0b 0f 0b 0f 0b 0f 0b 0f 0b 48 c7 04 24 01 00 00 00 48 8b [ 945.279992] RSP: 0018:ffffc90000a27360 EFLAGS: 00010246 [ 945.280578] RAX: 0000000000000000 RBX: ffffc90001d85060 RCX: 0000000000000030 [ 945.281376] RDX: 0000000000080000 RSI: 0000000000000000 RDI: ffffc90081d85070 [ 945.282145] RBP: ffffc90001d85010 R08: ffffc90001d85000 R09: 0000000000000000 [ 945.282898] R10: ffffc90001d85090 R11: 0000000000001000 R12: ffffc90001d85070 [ 945.283656] R13: ffff888113522948 R14: ffffc90001d85060 R15: ffffc90001d85010 [ 945.284407] FS: 0000000000000000(0000) GS:ffff8882e66cf000(0000) knlGS:0000000000000000 [ 945.285262] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 945.285884] CR2: 00007fa7ffdd31f4 CR3: 000000010540d000 CR4: 0000000000350ef0 [ 945.286683] Call Trace: [ 945.286952] <TASK> [ 945.287184] ? crypt_message+0x33f/0xad0 [cifs] [ 945.287719] crypto_gcm_encrypt+0x36/0xe0 [ 945.288152] crypt_message+0x54a/0xad0 [cifs] [ 945.288724] smb3_init_transform_rq+0x277/0x300 [cifs] [ 945.289300] smb_send_rqst+0xa3/0x160 [cifs] [ 945.289944] cifs_call_async+0x178/0x340 [cifs] [ 945.290514] ? __pfx_smb2_writev_callback+0x10/0x10 [cifs] [ 945.291177] smb2_async_writev+0x3e3/0x670 [cifs] [ 945.291759] ? find_held_lock+0x32/0x90 [ 945.292212] ? netfs_advance_write+0xf2/0x310 [ 945.292723] netfs_advance_write+0xf2/0x310 [ 945.293210] netfs_write_folio+0x346/0xcc0 [ 945.293689] ? __pfx__raw_spin_unlock_irq+0x10/0x10 [ 945.294250] netfs_writepages+0x117/0x460 [ 945.294724] do_writepages+0xbe/0x170 [ 945.295152] ? find_held_lock+0x32/0x90 [ 945.295600] ? kvm_sched_clock_read+0x11/0x20 [ 945.296103] __writeback_single_inode+0x56/0x4b0 [ 945.296643] writeback_sb_inodes+0x229/0x550 [ 945.297140] __writeback_inodes_wb+0x4c/0xe0 [ 945.297642] wb_writeback+0x2f1/0x3f0 [ 945.298069] wb_workfn+0x300/0x490 [ 945.298472] process_one_work+0x1fe/0x590 [ 945.298949] worker_thread+0x1ce/0x3c0 [ 945.299397] ? __pfx_worker_thread+0x10/0x10 [ 945.299900] kthr ---truncated--- CVE-2025-40052 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40052.html CVE-2025-40052 https://bugzilla.suse.com/1252851 SUSE Bug 1252851 In the Linux kernel, the following vulnerability has been resolved: vhost: vringh: Fix copy_to_iter return value check The return value of copy_to_iter can't be negative, check whether the copied length is equal to the requested length instead of checking for negative values. CVE-2025-40056 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40056.html CVE-2025-40056 https://bugzilla.suse.com/1252826 SUSE Bug 1252826 In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Disallow dirty tracking if incoherent page walk Dirty page tracking relies on the IOMMU atomically updating the dirty bit in the paging-structure entry. For this operation to succeed, the paging- structure memory must be coherent between the IOMMU and the CPU. In another word, if the iommu page walk is incoherent, dirty page tracking doesn't work. The Intel VT-d specification, Section 3.10 "Snoop Behavior" states: "Remapping hardware encountering the need to atomically update A/EA/D bits in a paging-structure entry that is not snooped will result in a non- recoverable fault." To prevent an IOMMU from being incorrectly configured for dirty page tracking when it is operating in an incoherent mode, mark SSADS as supported only when both ecap_slads and ecap_smpwc are supported. CVE-2025-40058 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40058.html CVE-2025-40058 https://bugzilla.suse.com/1252854 SUSE Bug 1252854 In the Linux kernel, the following vulnerability has been resolved: coresight: trbe: Return NULL pointer for allocation failures When the TRBE driver fails to allocate a buffer, it currently returns the error code "-ENOMEM". However, the caller etm_setup_aux() only checks for a NULL pointer, so it misses the error. As a result, the driver continues and eventually causes a kernel panic. Fix this by returning a NULL pointer from arm_trbe_alloc_buffer() on allocation failures. This allows that the callers can properly handle the failure. CVE-2025-40060 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40060.html CVE-2025-40060 https://bugzilla.suse.com/1252848 SUSE Bug 1252848 In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix race in do_task() when draining When do_task() exhausts its iteration budget (!ret), it sets the state to TASK_STATE_IDLE to reschedule, without a secondary check on the current task->state. This can overwrite the TASK_STATE_DRAINING state set by a concurrent call to rxe_cleanup_task() or rxe_disable_task(). While state changes are protected by a spinlock, both rxe_cleanup_task() and rxe_disable_task() release the lock while waiting for the task to finish draining in the while(!is_done(task)) loop. The race occurs if do_task() hits its iteration limit and acquires the lock in this window. The cleanup logic may then proceed while the task incorrectly reschedules itself, leading to a potential use-after-free. This bug was introduced during the migration from tasklets to workqueues, where the special handling for the draining case was lost. Fix this by restoring the original pre-migration behavior. If the state is TASK_STATE_DRAINING when iterations are exhausted, set cont to 1 to force a new loop iteration. This allows the task to finish its work, so that a subsequent iteration can reach the switch statement and correctly transition the state to TASK_STATE_DRAINED, stopping the task as intended. CVE-2025-40061 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40061.html CVE-2025-40061 https://bugzilla.suse.com/1252849 SUSE Bug 1252849 In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs When the initialization of qm->debug.acc_diff_reg fails, the probe process does not exit. However, after qm->debug.qm_diff_regs is freed, it is not set to NULL. This can lead to a double free when the remove process attempts to free it again. Therefore, qm->debug.qm_diff_regs should be set to NULL after it is freed. CVE-2025-40062 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40062.html CVE-2025-40062 https://bugzilla.suse.com/1252850 SUSE Bug 1252850 In the Linux kernel, the following vulnerability has been resolved: tty: n_gsm: Don't block input queue by waiting MSC Currently gsm_queue() processes incoming frames and when opening a DLC channel it calls gsm_dlci_open() which calls gsm_modem_update(). If basic mode is used it calls gsm_modem_upd_via_msc() and it cannot block the input queue by waiting the response to come into the same input queue. Instead allow sending Modem Status Command without waiting for remote end to respond. Define a new function gsm_modem_send_initial_msc() for this purpose. As MSC is only valid for basic encoding, it does not do anything for advanced or when convergence layer type 2 is used. CVE-2025-40071 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40071.html CVE-2025-40071 https://bugzilla.suse.com/1252797 SUSE Bug 1252797 In the Linux kernel, the following vulnerability has been resolved: bpf: Explicitly check accesses to bpf_sock_addr Syzkaller found a kernel warning on the following sock_addr program: 0: r0 = 0 1: r2 = *(u32 *)(r1 +60) 2: exit which triggers: verifier bug: error during ctx access conversion (0) This is happening because offset 60 in bpf_sock_addr corresponds to an implicit padding of 4 bytes, right after msg_src_ip4. Access to this padding isn't rejected in sock_addr_is_valid_access and it thus later fails to convert the access. This patch fixes it by explicitly checking the various fields of bpf_sock_addr in sock_addr_is_valid_access. I checked the other ctx structures and is_valid_access functions and didn't find any other similar cases. Other cases of (properly handled) padding are covered in new tests in a subsequent patch. CVE-2025-40078 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40078.html CVE-2025-40078 https://bugzilla.suse.com/1252789 SUSE Bug 1252789 In the Linux kernel, the following vulnerability has been resolved: nbd: restrict sockets to TCP and UDP Recently, syzbot started to abuse NBD with all kinds of sockets. Commit cf1b2326b734 ("nbd: verify socket is supported during setup") made sure the socket supported a shutdown() method. Explicitely accept TCP and UNIX stream sockets. CVE-2025-40080 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40080.html CVE-2025-40080 https://bugzilla.suse.com/1252774 SUSE Bug 1252774 In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card In try_to_register_card(), the return value of usb_ifnum_to_if() is passed directly to usb_interface_claimed() without a NULL check, which will lead to a NULL pointer dereference when creating an invalid USB audio device. Fix this by adding a check to ensure the interface pointer is valid before passing it to usb_interface_claimed(). CVE-2025-40085 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40085.html CVE-2025-40085 https://bugzilla.suse.com/1252873 SUSE Bug 1252873 In the Linux kernel, the following vulnerability has been resolved: NFSD: Define a proc_layoutcommit for the FlexFiles layout type Avoid a crash if a pNFS client should happen to send a LAYOUTCOMMIT operation on a FlexFiles layout. CVE-2025-40087 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40087.html CVE-2025-40087 https://bugzilla.suse.com/1252909 SUSE Bug 1252909 In the Linux kernel, the following vulnerability has been resolved: ixgbe: fix too early devlink_free() in ixgbe_remove() Since ixgbe_adapter is embedded in devlink, calling devlink_free() prematurely in the ixgbe_remove() path can lead to UAF. Move devlink_free() to the end. KASAN report: BUG: KASAN: use-after-free in ixgbe_reset_interrupt_capability+0x140/0x180 [ixgbe] Read of size 8 at addr ffff0000adf813e0 by task bash/2095 CPU: 1 UID: 0 PID: 2095 Comm: bash Tainted: G S 6.17.0-rc2-tnguy.net-queue+ #1 PREEMPT(full) [...] Call trace: show_stack+0x30/0x90 (C) dump_stack_lvl+0x9c/0xd0 print_address_description.constprop.0+0x90/0x310 print_report+0x104/0x1f0 kasan_report+0x88/0x180 __asan_report_load8_noabort+0x20/0x30 ixgbe_reset_interrupt_capability+0x140/0x180 [ixgbe] ixgbe_clear_interrupt_scheme+0xf8/0x130 [ixgbe] ixgbe_remove+0x2d0/0x8c0 [ixgbe] pci_device_remove+0xa0/0x220 device_remove+0xb8/0x170 device_release_driver_internal+0x318/0x490 device_driver_detach+0x40/0x68 unbind_store+0xec/0x118 drv_attr_store+0x64/0xb8 sysfs_kf_write+0xcc/0x138 kernfs_fop_write_iter+0x294/0x440 new_sync_write+0x1fc/0x588 vfs_write+0x480/0x6a0 ksys_write+0xf0/0x1e0 __arm64_sys_write+0x70/0xc0 invoke_syscall.constprop.0+0xcc/0x280 el0_svc_common.constprop.0+0xa8/0x248 do_el0_svc+0x44/0x68 el0_svc+0x54/0x160 el0t_64_sync_handler+0xa0/0xe8 el0t_64_sync+0x1b0/0x1b8 CVE-2025-40091 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40091.html CVE-2025-40091 https://bugzilla.suse.com/1252915 SUSE Bug 1252915 In the Linux kernel, the following vulnerability has been resolved: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies When adding dependencies with drm_sched_job_add_dependency(), that function consumes the fence reference both on success and failure, so in the latter case the dma_fence_put() on the error path (xarray failed to expand) is a double free. Interestingly this bug appears to have been present ever since commit ebd5f74255b9 ("drm/sched: Add dependency tracking"), since the code back then looked like this: drm_sched_job_add_implicit_dependencies(): ... for (i = 0; i < fence_count; i++) { ret = drm_sched_job_add_dependency(job, fences[i]); if (ret) break; } for (; i < fence_count; i++) dma_fence_put(fences[i]); Which means for the failing 'i' the dma_fence_put was already a double free. Possibly there were no users at that time, or the test cases were insufficient to hit it. The bug was then only noticed and fixed after commit 9c2ba265352a ("drm/scheduler: use new iterator in drm_sched_job_add_implicit_dependencies v2") landed, with its fixup of commit 4eaf02d6076c ("drm/scheduler: fix drm_sched_job_add_implicit_dependencies"). At that point it was a slightly different flavour of a double free, which commit 963d0b356935 ("drm/scheduler: fix drm_sched_job_add_implicit_dependencies harder") noticed and attempted to fix. But it only moved the double free from happening inside the drm_sched_job_add_dependency(), when releasing the reference not yet obtained, to the caller, when releasing the reference already released by the former in the failure case. As such it is not easy to identify the right target for the fixes tag so lets keep it simple and just continue the chain. While fixing we also improve the comment and explain the reason for taking the reference and not dropping it. CVE-2025-40096 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40096.html CVE-2025-40096 https://bugzilla.suse.com/1252902 SUSE Bug 1252902 In the Linux kernel, the following vulnerability has been resolved: btrfs: do not assert we found block group item when creating free space tree Currently, when building a free space tree at populate_free_space_tree(), if we are not using the block group tree feature, we always expect to find block group items (either extent items or a block group item with key type BTRFS_BLOCK_GROUP_ITEM_KEY) when we search the extent tree with btrfs_search_slot_for_read(), so we assert that we found an item. However this expectation is wrong since we can have a new block group created in the current transaction which is still empty and for which we still have not added the block group's item to the extent tree, in which case we do not have any items in the extent tree associated to the block group. The insertion of a new block group's block group item in the extent tree happens at btrfs_create_pending_block_groups() when it calls the helper insert_block_group_item(). This typically is done when a transaction handle is released, committed or when running delayed refs (either as part of a transaction commit or when serving tickets for space reservation if we are low on free space). So remove the assertion at populate_free_space_tree() even when the block group tree feature is not enabled and update the comment to mention this case. Syzbot reported this with the following stack trace: BTRFS info (device loop3 state M): rebuilding free space tree assertion failed: ret == 0 :: 0, in fs/btrfs/free-space-tree.c:1115 ------------[ cut here ]------------ kernel BUG at fs/btrfs/free-space-tree.c:1115! Oops: invalid opcode: 0000 [#1] SMP KASAN PTI CPU: 1 UID: 0 PID: 6352 Comm: syz.3.25 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 RIP: 0010:populate_free_space_tree+0x700/0x710 fs/btrfs/free-space-tree.c:1115 Code: ff ff e8 d3 (...) RSP: 0018:ffffc9000430f780 EFLAGS: 00010246 RAX: 0000000000000043 RBX: ffff88805b709630 RCX: fea61d0e2e79d000 RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 RBP: ffffc9000430f8b0 R08: ffffc9000430f4a7 R09: 1ffff92000861e94 R10: dffffc0000000000 R11: fffff52000861e95 R12: 0000000000000001 R13: 1ffff92000861f00 R14: dffffc0000000000 R15: 0000000000000000 FS: 00007f424d9fe6c0(0000) GS:ffff888125afc000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fd78ad212c0 CR3: 0000000076d68000 CR4: 00000000003526f0 Call Trace: <TASK> btrfs_rebuild_free_space_tree+0x1ba/0x6d0 fs/btrfs/free-space-tree.c:1364 btrfs_start_pre_rw_mount+0x128f/0x1bf0 fs/btrfs/disk-io.c:3062 btrfs_remount_rw fs/btrfs/super.c:1334 [inline] btrfs_reconfigure+0xaed/0x2160 fs/btrfs/super.c:1559 reconfigure_super+0x227/0x890 fs/super.c:1076 do_remount fs/namespace.c:3279 [inline] path_mount+0xd1a/0xfe0 fs/namespace.c:4027 do_mount fs/namespace.c:4048 [inline] __do_sys_mount fs/namespace.c:4236 [inline] __se_sys_mount+0x313/0x410 fs/namespace.c:4213 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f424e39066a Code: d8 64 89 02 (...) RSP: 002b:00007f424d9fde68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 RAX: ffffffffffffffda RBX: 00007f424d9fdef0 RCX: 00007f424e39066a RDX: 0000200000000180 RSI: 0000200000000380 RDI: 0000000000000000 RBP: 0000200000000180 R08: 00007f424d9fdef0 R09: 0000000000000020 R10: 0000000000000020 R11: 0000000000000246 R12: 0000200000000380 R13: 00007f424d9fdeb0 R14: 0000000000000000 R15: 00002000000002c0 </TASK> Modules linked in: ---[ end trace 0000000000000000 ]--- CVE-2025-40100 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40100.html CVE-2025-40100 https://bugzilla.suse.com/1252918 SUSE Bug 1252918 In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix mailbox API compatibility by negotiating supported features There was backward compatibility in the terms of mailbox API. Various drivers from various OSes supporting 10G adapters from Intel portfolio could easily negotiate mailbox API. This convention has been broken since introducing API 1.4. Commit 0062e7cc955e ("ixgbevf: add VF IPsec offload code") added support for IPSec which is specific only for the kernel ixgbe driver. None of the rest of the Intel 10G PF/VF drivers supports it. And actually lack of support was not included in the IPSec implementation - there were no such code paths. No possibility to negotiate support for the feature was introduced along with introduction of the feature itself. Commit 339f28964147 ("ixgbevf: Add support for new mailbox communication between PF and VF") increasing API version to 1.5 did the same - it introduced code supported specifically by the PF ESX driver. It altered API version for the VF driver in the same time not touching the version defined for the PF ixgbe driver. It led to additional discrepancies, as the code provided within API 1.6 cannot be supported for Linux ixgbe driver as it causes crashes. The issue was noticed some time ago and mitigated by Jake within the commit d0725312adf5 ("ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5"). As a result we have regression for IPsec support and after increasing API to version 1.6 ixgbevf driver stopped to support ESX MBX. To fix this mess add new mailbox op asking PF driver about supported features. Basing on a response determine whether to set support for IPSec and ESX-specific enhanced mailbox. New mailbox op, for compatibility purposes, must be added within new API revision, as API version of OOT PF & VF drivers is already increased to 1.6 and doesn't incorporate features negotiate op. Features negotiation mechanism gives possibility to be extended with new features when needed in the future. CVE-2025-40104 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40104.html CVE-2025-40104 https://bugzilla.suse.com/1252921 SUSE Bug 1252921 In the Linux kernel, the following vulnerability has been resolved: io_uring: fix io_req_prep_async with provided buffers io_req_prep_async() can import provided buffers, commit the ring state by giving up on that before, it'll be reimported later if needed. CVE-2025-40364 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.7.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.6.1.160000.2.4 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.7.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.7.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.7.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40364.html CVE-2025-40364 https://bugzilla.suse.com/1241637 SUSE Bug 1241637