Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team openSUSE-SU-2026:20287-1 Final 1 1 2026-02-27T13:03:55Z current 2026-02-27T13:03:55Z 2026-02-27T13:03:55Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 16.0 and SL MIxro 6.2 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-40147: blk-throttle: fix access race during throttle policy activation (bsc#1253344). - CVE-2025-40257: mptcp: fix a race in mptcp_pm_del_add_timer() (bsc#1254842). - CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845). - CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (bsc#1254839). - CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102). - CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327). - CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266). - CVE-2025-68188: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() (bsc#1255269). - CVE-2025-68200: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241). - CVE-2025-68211: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (bsc#1255319). - CVE-2025-68218: nvme-multipath: fix lockdep WARN due to partition scan work (bsc#1255245). - CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216). - CVE-2025-68241: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (bsc#1255157). - CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268). - CVE-2025-68261: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (bsc#1255164). - CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128). - CVE-2025-68297: ceph: fix crash in process_v2_sparse_read() for encrypted directories (bsc#1255403). - CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172). - CVE-2025-68325: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417). - CVE-2025-68337: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (bsc#1255482). - CVE-2025-68341: veth: reduce XDP no_direct return section to fix race (bsc#1255506). - CVE-2025-68348: block: fix memory leak in __blkdev_issue_zero_pages (bsc#1255694). - CVE-2025-68349: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (bsc#1255544). - CVE-2025-68356: gfs2: Prevent recursive memory reclaim (bsc#1255593). - CVE-2025-68359: btrfs: fix double free of qgroup record after failure to add delayed ref head (bsc#1255542). - CVE-2025-68360: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks (bsc#1255536). - CVE-2025-68361: erofs: limit the level of fs stacking for file-backed mounts (bsc#1255526). - CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect (bsc#1255622). - CVE-2025-68367: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547). - CVE-2025-68368: md: init bioset in mddev_init (bsc#1255527). - CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537). - CVE-2025-68374: md: fix rcu protection in md_wakeup_thread (bsc#1255530). - CVE-2025-68376: coresight: ETR: Fix ETR buffer use-after-free issue (bsc#1255529). - CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695). - CVE-2025-68735: drm/panthor: Prevent potential UAF in group creation (bsc#1255811). - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703). - CVE-2025-68743: mshv: Fix create memory region overlap check (bsc#1255708). - CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930). - CVE-2025-68768: inet: frags: add inet_frag_queue_flush() (bsc#1256579). - CVE-2025-68770: bnxt_en: Fix XDP_TX path (bsc#1256584). - CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2_find_victim_chain (bsc#1256582). - CVE-2025-68775: net/handshake: duplicate handshake cancellations leak socket (bsc#1256665). - CVE-2025-68776: net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (bsc#1256659). - CVE-2025-68784: xfs: fix a UAF problem in xattr repair (bsc#1256793). - CVE-2025-68788: fsnotify: do not generate ACCESS/MODIFY events on child for special files (bsc#1256638). - CVE-2025-68792: tpm2-sessions: Fix out of range indexing in name_size (bsc#1256656). - CVE-2025-68795: ethtool: Avoid overflowing userspace buffer on stats query (bsc#1256688). - CVE-2025-68798: perf/x86/amd: Check event before enable to avoid GPF (bsc#1256689). - CVE-2025-68799: caif: fix integer underflow in cffrml_receive() (bsc#1256643). - CVE-2025-68800: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (bsc#1256646). - CVE-2025-68801: mlxsw: spectrum_router: Fix neighbour use-after-free (bsc#1256653). - CVE-2025-68803: NFSD: NFSv4 file creation neglects setting ACL (bsc#1256770). - CVE-2025-68811: svcrdma: use rc_pageoff for memcpy byte offset (bsc#1256677). - CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256641). - CVE-2025-68814: io_uring: fix filename leak in __io_openat_prep() (bsc#1256651). - CVE-2025-68815: net/sched: ets: Remove drr class from the active list if it changes to strict (bsc#1256680). - CVE-2025-68816: net/mlx5: fw_tracer, Validate format string parameters (bsc#1256674). - CVE-2025-68820: ext4: xattr: fix null pointer deref in ext4_raw_inode() (bsc#1256754). - CVE-2025-68821: fuse: fix readahead reclaim deadlock (bsc#1256667). - CVE-2025-71064: net: hns3: using the num_tqps in the vf driver to apply for resources (bsc#1256654). - CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (bsc#1256645). - CVE-2025-71077: tpm: Cap the number of PCR banks (bsc#1256613). - CVE-2025-71080: ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT (bsc#1256608). - CVE-2025-71084: RDMA/cm: Fix leaking the multicast GID table reference (bsc#1256622). - CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623). - CVE-2025-71087: iavf: fix off-by-one issues in iavf_config_rss_reg() (bsc#1256628). - CVE-2025-71088: mptcp: fallback earlier on simult connection (bsc#1256630). - CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256612). - CVE-2025-71091: team: fix check for port enabled in team_queue_override_port_prio_changed() (bsc#1256773). - CVE-2025-71093: e1000: fix OOB in e1000_tbi_should_accept() (bsc#1256777). - CVE-2025-71094: net: usb: asix: ax88772: Increase phy_name size (bsc#1256597). - CVE-2025-71095: net: stmmac: fix the crash issue for zero copy XDP_TX action (bsc#1256605). - CVE-2025-71097: ipv4: Fix reference count leak when using error routes with nexthop objects (bsc#1256607). - CVE-2025-71098: ip6_gre: make ip6gre_header() robust (bsc#1256591). - CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726). - CVE-2025-71116: libceph: make decode_pool() more resilient against corrupted osdmaps (bsc#1256744). - CVE-2025-71120: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (bsc#1256779). - CVE-2025-71123: ext4: fix string copying in parse_apply_sb_mount_options() (bsc#1256757). - CVE-2025-71126: mptcp: avoid deadlock on fallback while reinjecting (bsc#1256755). - CVE-2025-71132: smc91x: fix broken irq-context in PREEMPT_RT (bsc#1256737). - CVE-2025-71133: RDMA/irdma: avoid invalid read in irdma_net_event (bsc#1256733). - CVE-2025-71135: md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt() (bsc#1256761). - CVE-2025-71137: octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" (bsc#1256760). - CVE-2025-71148: net/handshake: restore destructor on submit failure (bsc#1257159). - CVE-2025-71149: io_uring/poll: correctly handle io_poll_add() return value on update (bsc#1257164). - CVE-2025-71156: gve: defer interrupt enabling until NAPI registration (bsc#1257167). - CVE-2025-71157: RDMA/core: always drop device refcount in ib_del_sub_device_and_put() (bsc#1257168). - CVE-2026-22976: net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset (bsc#1257035). - CVE-2026-22977: net: sock: fix hardened usercopy panic in sock_recv_errqueue (bsc#1257053). - CVE-2026-22981: idpf: detach and close netdevs while handling a reset (bsc#1257225). - CVE-2026-22982: net: mscc: ocelot: Fix crash when adding interface under a lag (bsc#1257179). - CVE-2026-22984: libceph: prevent potential out-of-bounds reads in handle_auth_done() (bsc#1257217). - CVE-2026-22986: gpiolib: fix race condition for gdev->srcu (bsc#1257276). - CVE-2026-22990: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (bsc#1257221). - CVE-2026-22991: libceph: make free_choose_arg_map() resilient to partial allocation (bsc#1257220). - CVE-2026-22992: libceph: return the handler error from mon_handle_auth_done() (bsc#1257218). - CVE-2026-22993: idpf: Fix RSS LUT NULL pointer crash on early ethtool operations (bsc#1257180). - CVE-2026-22996: net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv. - CVE-2026-22999: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257236). - CVE-2026-23000: net/mlx5e: Fix crash on profile change rollback failure (bsc#1257234). - CVE-2026-23001: macvlan: fix possible UAF in macvlan_forward_source() (bsc#1257232). - CVE-2026-23005: x86/fpu: Clear XSTATE_BV in guest XSAVE state whenever XFD[i]=1 (bsc#1257245). - CVE-2026-23011: ipv4: ip_gre: make ipgre_header() robust (bsc#1257207). The following non security issues were fixed: - ALSA: usb-audio: Update for native DSD support quirks (stable-fixes). - Add bugnumber to an existing hv_netvsc change (bsc#1257473). - Fix locking issue introduced by a CVE backport (bsc#1256975 bsc#1254977). - Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792) - arm64: Update config files. Disable DEVPORT (bsc#1256792) - bpf/selftests: test_select_reuseport_kern: Remove unused header (bsc#1257603). - bpf: Do not let BPF test infra emit invalid GSO types to stack (bsc#1255569). - btrfs: pass fs_info to btrfs_delete_ref_head() (git-fixes). - btrfs: scrub: always update btrfs_scrub_progress::last_physical (git-fixes). - bus: fsl-mc: Constify fsl_mc_device_match() (jsc#PED-10906 git-fixes). - drm/imagination: Wait for FW trace update command completion (git-fixes). - drm/msm/a6xx: fix bogus hwcg register updates (git-fixes). - ice: use netif_get_num_default_rss_queues() (bsc#1247712). - libbpf: Fix -Wdiscarded-qualifiers under C23 (bsc#1257309). - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (bsc#1254447 bsc#1253087). - net: mana: Fix incorrect speed reported by debugfs (bsc#1255232). - net: mana: Support HW link state events (bsc#1253049). - nfsd: adjust WARN_ON_ONCE in revoke_delegation (bsc#1257015). - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (git-fixes). - powerpc/addnote: Fix overflow on 32-bit builds (bsc#1215199). - sched/fair: Disable scheduler feature NEXT_BUDDY (bsc#1255459). - scsi: lpfc: Rework lpfc_sli4_fcf_rr_next_index_get() (bsc#1256864). - scsi: lpfc: Update lpfc version to 14.4.0.13 (bsc#1256864). - scsi: qla2xxx: Add Speed in SFP print information (bsc#1256865 bsc#1256867 jsc#PED-14156). - scsi: qla2xxx: Add bsg interface to support firmware img validation (bsc#1256865 bsc#1256867 jsc#PED-14156). - scsi: qla2xxx: Add load flash firmware mailbox support for 28xxx (bsc#1256865 bsc#1256867 jsc#PED-14156). - scsi: qla2xxx: Add support for 64G SFP speed (bsc#1256865 bsc#1256867 jsc#PED-14156). - scsi: qla2xxx: Allow recovery for tape devices (bsc#1256865 bsc#1256867 jsc#PED-14156). - scsi: qla2xxx: Delay module unload while fabric scan in progress (bsc#1256865 bsc#1256867 jsc#PED-14156). - scsi: qla2xxx: Fix bsg_done() causing double free (bsc#1256865 bsc#1256867 jsc#PED-14156). - scsi: qla2xxx: Free sp in error path to fix system crash (bsc#1256865 bsc#1256867 jsc#PED-14156). - scsi: qla2xxx: Query FW again before proceeding with login (bsc#1256865 bsc#1256867 jsc#PED-14156). - scsi: qla2xxx: Update version to 10.02.10.100-k (bsc#1256865 bsc#1256867 jsc#PED-14156). - scsi: qla2xxx: Validate MCU signature before executing MBC 03h (bsc#1256865 bsc#1256867 jsc#PED-14156). - scsi: qla2xxx: Validate sp before freeing associated memory (bsc#1256865 bsc#1256867 jsc#PED-14156). - scsi: storvsc: Process unsupported MODE_SENSE_10 (bsc#1257296). - selftests: net: fib-onlink-tests: Convert to use namespaces by default (bsc#1255346). - slimbus: core: Constify slim_eaddr_equal() (jsc#PED-10906 git-fixes). - smb: client: split cached_fid bitfields to avoid shared-byte RMW races (bsc#1250748,bsc#1257154). - smb: client: update cfid->last_access_time in open_cached_dir_by_dentry() (git-fixes). - smb: improve directory cache reuse for readdir operations (bsc#1252712). - tsm-mr: Add TVM Measurement Register support (bsc#1257504). - tsm-mr: Add tsm-mr sample code (bsc#1257504). - virt: tdx-guest: Expose TDX MRs as sysfs attributes (bsc#1257504). - virt: tdx-guest: Refactor and streamline TDREPORT generation (bsc#1257504). - virt: tdx-guest: Transition to scoped_cond_guard for mutex operations (bsc#1257504). - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() (git-fixes). - x86/tdx: Add tdx_mcall_extend_rtmr() interface (bsc#1257504). - x86/tdx: tdx_mcall_get_report0: Return -EBUSY on TDCALL_OPERAND_BUSY error (bsc#1257504). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). openSUSE-Leap-16.0-325 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1205462 SUSE Bug 1205462 https://bugzilla.suse.com/1214285 SUSE Bug 1214285 https://bugzilla.suse.com/1215199 SUSE Bug 1215199 https://bugzilla.suse.com/1235905 SUSE Bug 1235905 https://bugzilla.suse.com/1242505 SUSE Bug 1242505 https://bugzilla.suse.com/1242974 SUSE Bug 1242974 https://bugzilla.suse.com/1242986 SUSE Bug 1242986 https://bugzilla.suse.com/1243452 SUSE Bug 1243452 https://bugzilla.suse.com/1243507 SUSE Bug 1243507 https://bugzilla.suse.com/1243662 SUSE Bug 1243662 https://bugzilla.suse.com/1246184 SUSE Bug 1246184 https://bugzilla.suse.com/1246282 SUSE Bug 1246282 https://bugzilla.suse.com/1247030 SUSE Bug 1247030 https://bugzilla.suse.com/1247292 SUSE Bug 1247292 https://bugzilla.suse.com/1247712 SUSE Bug 1247712 https://bugzilla.suse.com/1248166 SUSE Bug 1248166 https://bugzilla.suse.com/1248175 SUSE Bug 1248175 https://bugzilla.suse.com/1248178 SUSE Bug 1248178 https://bugzilla.suse.com/1248179 SUSE Bug 1248179 https://bugzilla.suse.com/1248185 SUSE Bug 1248185 https://bugzilla.suse.com/1248188 SUSE Bug 1248188 https://bugzilla.suse.com/1248196 SUSE Bug 1248196 https://bugzilla.suse.com/1248206 SUSE Bug 1248206 https://bugzilla.suse.com/1248208 SUSE Bug 1248208 https://bugzilla.suse.com/1248209 SUSE Bug 1248209 https://bugzilla.suse.com/1248211 SUSE Bug 1248211 https://bugzilla.suse.com/1248212 SUSE Bug 1248212 https://bugzilla.suse.com/1248213 SUSE Bug 1248213 https://bugzilla.suse.com/1248214 SUSE Bug 1248214 https://bugzilla.suse.com/1248216 SUSE Bug 1248216 https://bugzilla.suse.com/1248217 SUSE Bug 1248217 https://bugzilla.suse.com/1248222 SUSE Bug 1248222 https://bugzilla.suse.com/1248227 SUSE Bug 1248227 https://bugzilla.suse.com/1248228 SUSE Bug 1248228 https://bugzilla.suse.com/1248229 SUSE Bug 1248229 https://bugzilla.suse.com/1248232 SUSE Bug 1248232 https://bugzilla.suse.com/1248234 SUSE Bug 1248234 https://bugzilla.suse.com/1248240 SUSE Bug 1248240 https://bugzilla.suse.com/1248360 SUSE Bug 1248360 https://bugzilla.suse.com/1248366 SUSE Bug 1248366 https://bugzilla.suse.com/1248384 SUSE Bug 1248384 https://bugzilla.suse.com/1248626 SUSE Bug 1248626 https://bugzilla.suse.com/1249307 SUSE Bug 1249307 https://bugzilla.suse.com/1249609 SUSE Bug 1249609 https://bugzilla.suse.com/1249895 SUSE Bug 1249895 https://bugzilla.suse.com/1249998 SUSE Bug 1249998 https://bugzilla.suse.com/1250032 SUSE Bug 1250032 https://bugzilla.suse.com/1250082 SUSE Bug 1250082 https://bugzilla.suse.com/1250388 SUSE Bug 1250388 https://bugzilla.suse.com/1250705 SUSE Bug 1250705 https://bugzilla.suse.com/1250738 SUSE Bug 1250738 https://bugzilla.suse.com/1250748 SUSE Bug 1250748 https://bugzilla.suse.com/1252712 SUSE Bug 1252712 https://bugzilla.suse.com/1252773 SUSE Bug 1252773 https://bugzilla.suse.com/1252784 SUSE Bug 1252784 https://bugzilla.suse.com/1252891 SUSE Bug 1252891 https://bugzilla.suse.com/1252900 SUSE Bug 1252900 https://bugzilla.suse.com/1253049 SUSE Bug 1253049 https://bugzilla.suse.com/1253078 SUSE Bug 1253078 https://bugzilla.suse.com/1253079 SUSE Bug 1253079 https://bugzilla.suse.com/1253087 SUSE Bug 1253087 https://bugzilla.suse.com/1253344 SUSE Bug 1253344 https://bugzilla.suse.com/1253500 SUSE Bug 1253500 https://bugzilla.suse.com/1253739 SUSE Bug 1253739 https://bugzilla.suse.com/1254244 SUSE Bug 1254244 https://bugzilla.suse.com/1254308 SUSE Bug 1254308 https://bugzilla.suse.com/1254447 SUSE Bug 1254447 https://bugzilla.suse.com/1254839 SUSE Bug 1254839 https://bugzilla.suse.com/1254842 SUSE Bug 1254842 https://bugzilla.suse.com/1254845 SUSE Bug 1254845 https://bugzilla.suse.com/1254977 SUSE Bug 1254977 https://bugzilla.suse.com/1255102 SUSE Bug 1255102 https://bugzilla.suse.com/1255128 SUSE Bug 1255128 https://bugzilla.suse.com/1255157 SUSE Bug 1255157 https://bugzilla.suse.com/1255164 SUSE Bug 1255164 https://bugzilla.suse.com/1255172 SUSE Bug 1255172 https://bugzilla.suse.com/1255216 SUSE Bug 1255216 https://bugzilla.suse.com/1255232 SUSE Bug 1255232 https://bugzilla.suse.com/1255241 SUSE Bug 1255241 https://bugzilla.suse.com/1255245 SUSE Bug 1255245 https://bugzilla.suse.com/1255266 SUSE Bug 1255266 https://bugzilla.suse.com/1255268 SUSE Bug 1255268 https://bugzilla.suse.com/1255269 SUSE Bug 1255269 https://bugzilla.suse.com/1255319 SUSE Bug 1255319 https://bugzilla.suse.com/1255327 SUSE Bug 1255327 https://bugzilla.suse.com/1255346 SUSE Bug 1255346 https://bugzilla.suse.com/1255403 SUSE Bug 1255403 https://bugzilla.suse.com/1255417 SUSE Bug 1255417 https://bugzilla.suse.com/1255459 SUSE Bug 1255459 https://bugzilla.suse.com/1255482 SUSE Bug 1255482 https://bugzilla.suse.com/1255506 SUSE Bug 1255506 https://bugzilla.suse.com/1255526 SUSE Bug 1255526 https://bugzilla.suse.com/1255527 SUSE Bug 1255527 https://bugzilla.suse.com/1255529 SUSE Bug 1255529 https://bugzilla.suse.com/1255530 SUSE Bug 1255530 https://bugzilla.suse.com/1255536 SUSE Bug 1255536 https://bugzilla.suse.com/1255537 SUSE Bug 1255537 https://bugzilla.suse.com/1255542 SUSE Bug 1255542 https://bugzilla.suse.com/1255544 SUSE Bug 1255544 https://bugzilla.suse.com/1255547 SUSE Bug 1255547 https://bugzilla.suse.com/1255569 SUSE Bug 1255569 https://bugzilla.suse.com/1255593 SUSE Bug 1255593 https://bugzilla.suse.com/1255622 SUSE Bug 1255622 https://bugzilla.suse.com/1255694 SUSE Bug 1255694 https://bugzilla.suse.com/1255695 SUSE Bug 1255695 https://bugzilla.suse.com/1255703 SUSE Bug 1255703 https://bugzilla.suse.com/1255708 SUSE Bug 1255708 https://bugzilla.suse.com/1255811 SUSE Bug 1255811 https://bugzilla.suse.com/1255930 SUSE Bug 1255930 https://bugzilla.suse.com/1256579 SUSE Bug 1256579 https://bugzilla.suse.com/1256582 SUSE Bug 1256582 https://bugzilla.suse.com/1256584 SUSE Bug 1256584 https://bugzilla.suse.com/1256586 SUSE Bug 1256586 https://bugzilla.suse.com/1256591 SUSE Bug 1256591 https://bugzilla.suse.com/1256592 SUSE Bug 1256592 https://bugzilla.suse.com/1256593 SUSE Bug 1256593 https://bugzilla.suse.com/1256594 SUSE Bug 1256594 https://bugzilla.suse.com/1256597 SUSE Bug 1256597 https://bugzilla.suse.com/1256605 SUSE Bug 1256605 https://bugzilla.suse.com/1256607 SUSE Bug 1256607 https://bugzilla.suse.com/1256608 SUSE Bug 1256608 https://bugzilla.suse.com/1256609 SUSE Bug 1256609 https://bugzilla.suse.com/1256610 SUSE Bug 1256610 https://bugzilla.suse.com/1256611 SUSE Bug 1256611 https://bugzilla.suse.com/1256612 SUSE Bug 1256612 https://bugzilla.suse.com/1256613 SUSE Bug 1256613 https://bugzilla.suse.com/1256616 SUSE Bug 1256616 https://bugzilla.suse.com/1256617 SUSE Bug 1256617 https://bugzilla.suse.com/1256619 SUSE Bug 1256619 https://bugzilla.suse.com/1256622 SUSE Bug 1256622 https://bugzilla.suse.com/1256623 SUSE Bug 1256623 https://bugzilla.suse.com/1256625 SUSE Bug 1256625 https://bugzilla.suse.com/1256627 SUSE Bug 1256627 https://bugzilla.suse.com/1256628 SUSE Bug 1256628 https://bugzilla.suse.com/1256630 SUSE Bug 1256630 https://bugzilla.suse.com/1256632 SUSE Bug 1256632 https://bugzilla.suse.com/1256638 SUSE Bug 1256638 https://bugzilla.suse.com/1256641 SUSE Bug 1256641 https://bugzilla.suse.com/1256643 SUSE Bug 1256643 https://bugzilla.suse.com/1256645 SUSE Bug 1256645 https://bugzilla.suse.com/1256646 SUSE Bug 1256646 https://bugzilla.suse.com/1256650 SUSE Bug 1256650 https://bugzilla.suse.com/1256651 SUSE Bug 1256651 https://bugzilla.suse.com/1256653 SUSE Bug 1256653 https://bugzilla.suse.com/1256654 SUSE Bug 1256654 https://bugzilla.suse.com/1256655 SUSE Bug 1256655 https://bugzilla.suse.com/1256656 SUSE Bug 1256656 https://bugzilla.suse.com/1256659 SUSE Bug 1256659 https://bugzilla.suse.com/1256660 SUSE Bug 1256660 https://bugzilla.suse.com/1256661 SUSE Bug 1256661 https://bugzilla.suse.com/1256664 SUSE Bug 1256664 https://bugzilla.suse.com/1256665 SUSE Bug 1256665 https://bugzilla.suse.com/1256667 SUSE Bug 1256667 https://bugzilla.suse.com/1256668 SUSE Bug 1256668 https://bugzilla.suse.com/1256674 SUSE Bug 1256674 https://bugzilla.suse.com/1256677 SUSE Bug 1256677 https://bugzilla.suse.com/1256680 SUSE Bug 1256680 https://bugzilla.suse.com/1256682 SUSE Bug 1256682 https://bugzilla.suse.com/1256683 SUSE Bug 1256683 https://bugzilla.suse.com/1256688 SUSE Bug 1256688 https://bugzilla.suse.com/1256689 SUSE Bug 1256689 https://bugzilla.suse.com/1256716 SUSE Bug 1256716 https://bugzilla.suse.com/1256726 SUSE Bug 1256726 https://bugzilla.suse.com/1256728 SUSE Bug 1256728 https://bugzilla.suse.com/1256730 SUSE Bug 1256730 https://bugzilla.suse.com/1256733 SUSE Bug 1256733 https://bugzilla.suse.com/1256737 SUSE Bug 1256737 https://bugzilla.suse.com/1256741 SUSE Bug 1256741 https://bugzilla.suse.com/1256742 SUSE Bug 1256742 https://bugzilla.suse.com/1256744 SUSE Bug 1256744 https://bugzilla.suse.com/1256748 SUSE Bug 1256748 https://bugzilla.suse.com/1256749 SUSE Bug 1256749 https://bugzilla.suse.com/1256752 SUSE Bug 1256752 https://bugzilla.suse.com/1256754 SUSE Bug 1256754 https://bugzilla.suse.com/1256755 SUSE Bug 1256755 https://bugzilla.suse.com/1256756 SUSE Bug 1256756 https://bugzilla.suse.com/1256757 SUSE Bug 1256757 https://bugzilla.suse.com/1256759 SUSE Bug 1256759 https://bugzilla.suse.com/1256760 SUSE Bug 1256760 https://bugzilla.suse.com/1256761 SUSE Bug 1256761 https://bugzilla.suse.com/1256763 SUSE Bug 1256763 https://bugzilla.suse.com/1256770 SUSE Bug 1256770 https://bugzilla.suse.com/1256773 SUSE Bug 1256773 https://bugzilla.suse.com/1256774 SUSE Bug 1256774 https://bugzilla.suse.com/1256777 SUSE Bug 1256777 https://bugzilla.suse.com/1256779 SUSE Bug 1256779 https://bugzilla.suse.com/1256781 SUSE Bug 1256781 https://bugzilla.suse.com/1256785 SUSE Bug 1256785 https://bugzilla.suse.com/1256792 SUSE Bug 1256792 https://bugzilla.suse.com/1256793 SUSE Bug 1256793 https://bugzilla.suse.com/1256794 SUSE Bug 1256794 https://bugzilla.suse.com/1256864 SUSE Bug 1256864 https://bugzilla.suse.com/1256865 SUSE Bug 1256865 https://bugzilla.suse.com/1256867 SUSE Bug 1256867 https://bugzilla.suse.com/1256975 SUSE Bug 1256975 https://bugzilla.suse.com/1257015 SUSE Bug 1257015 https://bugzilla.suse.com/1257035 SUSE Bug 1257035 https://bugzilla.suse.com/1257053 SUSE Bug 1257053 https://bugzilla.suse.com/1257154 SUSE Bug 1257154 https://bugzilla.suse.com/1257155 SUSE Bug 1257155 https://bugzilla.suse.com/1257158 SUSE Bug 1257158 https://bugzilla.suse.com/1257159 SUSE Bug 1257159 https://bugzilla.suse.com/1257163 SUSE Bug 1257163 https://bugzilla.suse.com/1257164 SUSE Bug 1257164 https://bugzilla.suse.com/1257167 SUSE Bug 1257167 https://bugzilla.suse.com/1257168 SUSE Bug 1257168 https://bugzilla.suse.com/1257179 SUSE Bug 1257179 https://bugzilla.suse.com/1257180 SUSE Bug 1257180 https://bugzilla.suse.com/1257202 SUSE Bug 1257202 https://bugzilla.suse.com/1257204 SUSE Bug 1257204 https://bugzilla.suse.com/1257207 SUSE Bug 1257207 https://bugzilla.suse.com/1257208 SUSE Bug 1257208 https://bugzilla.suse.com/1257215 SUSE Bug 1257215 https://bugzilla.suse.com/1257217 SUSE Bug 1257217 https://bugzilla.suse.com/1257218 SUSE Bug 1257218 https://bugzilla.suse.com/1257220 SUSE Bug 1257220 https://bugzilla.suse.com/1257221 SUSE Bug 1257221 https://bugzilla.suse.com/1257225 SUSE Bug 1257225 https://bugzilla.suse.com/1257227 SUSE Bug 1257227 https://bugzilla.suse.com/1257232 SUSE Bug 1257232 https://bugzilla.suse.com/1257234 SUSE Bug 1257234 https://bugzilla.suse.com/1257236 SUSE Bug 1257236 https://bugzilla.suse.com/1257243 SUSE Bug 1257243 https://bugzilla.suse.com/1257245 SUSE Bug 1257245 https://bugzilla.suse.com/1257276 SUSE Bug 1257276 https://bugzilla.suse.com/1257277 SUSE Bug 1257277 https://bugzilla.suse.com/1257279 SUSE Bug 1257279 https://bugzilla.suse.com/1257282 SUSE Bug 1257282 https://bugzilla.suse.com/1257296 SUSE Bug 1257296 https://bugzilla.suse.com/1257309 SUSE Bug 1257309 https://bugzilla.suse.com/1257473 SUSE Bug 1257473 https://bugzilla.suse.com/1257504 SUSE Bug 1257504 https://bugzilla.suse.com/1257603 SUSE Bug 1257603 https://www.suse.com/security/cve/CVE-2024-54031/ SUSE CVE CVE-2024-54031 page https://www.suse.com/security/cve/CVE-2025-37744/ SUSE CVE CVE-2025-37744 page https://www.suse.com/security/cve/CVE-2025-37751/ SUSE CVE CVE-2025-37751 page https://www.suse.com/security/cve/CVE-2025-37841/ SUSE CVE CVE-2025-37841 page https://www.suse.com/security/cve/CVE-2025-37845/ SUSE CVE CVE-2025-37845 page https://www.suse.com/security/cve/CVE-2025-37904/ SUSE CVE CVE-2025-37904 page https://www.suse.com/security/cve/CVE-2025-37955/ SUSE CVE CVE-2025-37955 page https://www.suse.com/security/cve/CVE-2025-38243/ SUSE CVE CVE-2025-38243 page https://www.suse.com/security/cve/CVE-2025-38262/ SUSE CVE CVE-2025-38262 page https://www.suse.com/security/cve/CVE-2025-38297/ SUSE CVE CVE-2025-38297 page https://www.suse.com/security/cve/CVE-2025-38298/ SUSE CVE CVE-2025-38298 page https://www.suse.com/security/cve/CVE-2025-38379/ SUSE CVE CVE-2025-38379 page https://www.suse.com/security/cve/CVE-2025-38423/ SUSE CVE CVE-2025-38423 page https://www.suse.com/security/cve/CVE-2025-38505/ SUSE CVE CVE-2025-38505 page https://www.suse.com/security/cve/CVE-2025-38507/ SUSE CVE CVE-2025-38507 page https://www.suse.com/security/cve/CVE-2025-38510/ SUSE CVE CVE-2025-38510 page https://www.suse.com/security/cve/CVE-2025-38511/ SUSE CVE CVE-2025-38511 page https://www.suse.com/security/cve/CVE-2025-38512/ SUSE CVE CVE-2025-38512 page https://www.suse.com/security/cve/CVE-2025-38513/ SUSE CVE CVE-2025-38513 page https://www.suse.com/security/cve/CVE-2025-38515/ SUSE CVE CVE-2025-38515 page https://www.suse.com/security/cve/CVE-2025-38516/ SUSE CVE CVE-2025-38516 page https://www.suse.com/security/cve/CVE-2025-38520/ SUSE CVE CVE-2025-38520 page https://www.suse.com/security/cve/CVE-2025-38521/ SUSE CVE CVE-2025-38521 page https://www.suse.com/security/cve/CVE-2025-38529/ SUSE CVE CVE-2025-38529 page https://www.suse.com/security/cve/CVE-2025-38530/ SUSE CVE CVE-2025-38530 page https://www.suse.com/security/cve/CVE-2025-38535/ SUSE CVE CVE-2025-38535 page https://www.suse.com/security/cve/CVE-2025-38537/ SUSE CVE CVE-2025-38537 page https://www.suse.com/security/cve/CVE-2025-38538/ SUSE CVE CVE-2025-38538 page https://www.suse.com/security/cve/CVE-2025-38539/ SUSE CVE CVE-2025-38539 page https://www.suse.com/security/cve/CVE-2025-38540/ SUSE CVE CVE-2025-38540 page https://www.suse.com/security/cve/CVE-2025-38541/ SUSE CVE CVE-2025-38541 page https://www.suse.com/security/cve/CVE-2025-38543/ SUSE CVE CVE-2025-38543 page https://www.suse.com/security/cve/CVE-2025-38547/ SUSE CVE CVE-2025-38547 page https://www.suse.com/security/cve/CVE-2025-38548/ SUSE CVE CVE-2025-38548 page https://www.suse.com/security/cve/CVE-2025-38550/ SUSE CVE CVE-2025-38550 page https://www.suse.com/security/cve/CVE-2025-38551/ SUSE CVE CVE-2025-38551 page https://www.suse.com/security/cve/CVE-2025-38569/ SUSE CVE CVE-2025-38569 page https://www.suse.com/security/cve/CVE-2025-38589/ SUSE CVE CVE-2025-38589 page https://www.suse.com/security/cve/CVE-2025-38590/ SUSE CVE CVE-2025-38590 page https://www.suse.com/security/cve/CVE-2025-38645/ SUSE CVE CVE-2025-38645 page https://www.suse.com/security/cve/CVE-2025-39689/ SUSE CVE CVE-2025-39689 page https://www.suse.com/security/cve/CVE-2025-39795/ SUSE CVE CVE-2025-39795 page https://www.suse.com/security/cve/CVE-2025-39813/ SUSE CVE CVE-2025-39813 page https://www.suse.com/security/cve/CVE-2025-39814/ SUSE CVE CVE-2025-39814 page https://www.suse.com/security/cve/CVE-2025-39817/ SUSE CVE CVE-2025-39817 page https://www.suse.com/security/cve/CVE-2025-39829/ SUSE CVE CVE-2025-39829 page https://www.suse.com/security/cve/CVE-2025-39880/ SUSE CVE CVE-2025-39880 page https://www.suse.com/security/cve/CVE-2025-39913/ SUSE CVE CVE-2025-39913 page https://www.suse.com/security/cve/CVE-2025-39927/ SUSE CVE CVE-2025-39927 page https://www.suse.com/security/cve/CVE-2025-40030/ SUSE CVE CVE-2025-40030 page https://www.suse.com/security/cve/CVE-2025-40045/ SUSE CVE CVE-2025-40045 page https://www.suse.com/security/cve/CVE-2025-40097/ SUSE CVE CVE-2025-40097 page https://www.suse.com/security/cve/CVE-2025-40106/ SUSE CVE CVE-2025-40106 page https://www.suse.com/security/cve/CVE-2025-40147/ SUSE CVE CVE-2025-40147 page https://www.suse.com/security/cve/CVE-2025-40195/ SUSE CVE CVE-2025-40195 page https://www.suse.com/security/cve/CVE-2025-40257/ SUSE CVE CVE-2025-40257 page https://www.suse.com/security/cve/CVE-2025-40259/ SUSE CVE CVE-2025-40259 page https://www.suse.com/security/cve/CVE-2025-40261/ SUSE CVE CVE-2025-40261 page https://www.suse.com/security/cve/CVE-2025-40363/ SUSE CVE CVE-2025-40363 page https://www.suse.com/security/cve/CVE-2025-68174/ SUSE CVE CVE-2025-68174 page https://www.suse.com/security/cve/CVE-2025-68178/ SUSE CVE CVE-2025-68178 page https://www.suse.com/security/cve/CVE-2025-68188/ SUSE CVE CVE-2025-68188 page https://www.suse.com/security/cve/CVE-2025-68200/ SUSE CVE CVE-2025-68200 page https://www.suse.com/security/cve/CVE-2025-68211/ SUSE CVE CVE-2025-68211 page https://www.suse.com/security/cve/CVE-2025-68218/ SUSE CVE CVE-2025-68218 page https://www.suse.com/security/cve/CVE-2025-68227/ SUSE CVE CVE-2025-68227 page https://www.suse.com/security/cve/CVE-2025-68241/ SUSE CVE CVE-2025-68241 page https://www.suse.com/security/cve/CVE-2025-68245/ SUSE CVE CVE-2025-68245 page https://www.suse.com/security/cve/CVE-2025-68261/ SUSE CVE CVE-2025-68261 page https://www.suse.com/security/cve/CVE-2025-68296/ SUSE CVE CVE-2025-68296 page https://www.suse.com/security/cve/CVE-2025-68297/ SUSE CVE CVE-2025-68297 page https://www.suse.com/security/cve/CVE-2025-68320/ SUSE CVE CVE-2025-68320 page https://www.suse.com/security/cve/CVE-2025-68325/ SUSE CVE CVE-2025-68325 page https://www.suse.com/security/cve/CVE-2025-68337/ SUSE CVE CVE-2025-68337 page https://www.suse.com/security/cve/CVE-2025-68341/ SUSE CVE CVE-2025-68341 page https://www.suse.com/security/cve/CVE-2025-68348/ SUSE CVE CVE-2025-68348 page https://www.suse.com/security/cve/CVE-2025-68349/ SUSE CVE CVE-2025-68349 page https://www.suse.com/security/cve/CVE-2025-68356/ SUSE CVE CVE-2025-68356 page https://www.suse.com/security/cve/CVE-2025-68359/ SUSE CVE CVE-2025-68359 page https://www.suse.com/security/cve/CVE-2025-68360/ SUSE CVE CVE-2025-68360 page https://www.suse.com/security/cve/CVE-2025-68361/ SUSE CVE CVE-2025-68361 page https://www.suse.com/security/cve/CVE-2025-68366/ SUSE CVE CVE-2025-68366 page https://www.suse.com/security/cve/CVE-2025-68367/ SUSE CVE CVE-2025-68367 page https://www.suse.com/security/cve/CVE-2025-68368/ SUSE CVE CVE-2025-68368 page https://www.suse.com/security/cve/CVE-2025-68372/ SUSE CVE CVE-2025-68372 page https://www.suse.com/security/cve/CVE-2025-68374/ SUSE CVE CVE-2025-68374 page https://www.suse.com/security/cve/CVE-2025-68376/ SUSE CVE CVE-2025-68376 page https://www.suse.com/security/cve/CVE-2025-68379/ SUSE CVE CVE-2025-68379 page https://www.suse.com/security/cve/CVE-2025-68725/ SUSE CVE CVE-2025-68725 page https://www.suse.com/security/cve/CVE-2025-68735/ SUSE CVE CVE-2025-68735 page https://www.suse.com/security/cve/CVE-2025-68741/ SUSE CVE CVE-2025-68741 page https://www.suse.com/security/cve/CVE-2025-68743/ SUSE CVE CVE-2025-68743 page https://www.suse.com/security/cve/CVE-2025-68764/ SUSE CVE CVE-2025-68764 page https://www.suse.com/security/cve/CVE-2025-68768/ SUSE CVE CVE-2025-68768 page https://www.suse.com/security/cve/CVE-2025-68770/ SUSE CVE CVE-2025-68770 page https://www.suse.com/security/cve/CVE-2025-68771/ SUSE CVE CVE-2025-68771 page https://www.suse.com/security/cve/CVE-2025-68773/ SUSE CVE CVE-2025-68773 page https://www.suse.com/security/cve/CVE-2025-68775/ SUSE CVE CVE-2025-68775 page https://www.suse.com/security/cve/CVE-2025-68776/ SUSE CVE CVE-2025-68776 page https://www.suse.com/security/cve/CVE-2025-68777/ SUSE CVE CVE-2025-68777 page https://www.suse.com/security/cve/CVE-2025-68778/ SUSE CVE CVE-2025-68778 page https://www.suse.com/security/cve/CVE-2025-68783/ SUSE CVE CVE-2025-68783 page https://www.suse.com/security/cve/CVE-2025-68784/ SUSE CVE CVE-2025-68784 page https://www.suse.com/security/cve/CVE-2025-68788/ SUSE CVE CVE-2025-68788 page https://www.suse.com/security/cve/CVE-2025-68789/ SUSE CVE CVE-2025-68789 page https://www.suse.com/security/cve/CVE-2025-68792/ SUSE CVE CVE-2025-68792 page https://www.suse.com/security/cve/CVE-2025-68795/ SUSE CVE CVE-2025-68795 page https://www.suse.com/security/cve/CVE-2025-68797/ SUSE CVE CVE-2025-68797 page https://www.suse.com/security/cve/CVE-2025-68798/ SUSE CVE CVE-2025-68798 page https://www.suse.com/security/cve/CVE-2025-68799/ SUSE CVE CVE-2025-68799 page https://www.suse.com/security/cve/CVE-2025-68800/ SUSE CVE CVE-2025-68800 page https://www.suse.com/security/cve/CVE-2025-68801/ SUSE CVE CVE-2025-68801 page https://www.suse.com/security/cve/CVE-2025-68802/ SUSE CVE CVE-2025-68802 page https://www.suse.com/security/cve/CVE-2025-68803/ SUSE CVE CVE-2025-68803 page https://www.suse.com/security/cve/CVE-2025-68804/ SUSE CVE CVE-2025-68804 page https://www.suse.com/security/cve/CVE-2025-68808/ SUSE CVE CVE-2025-68808 page https://www.suse.com/security/cve/CVE-2025-68811/ SUSE CVE CVE-2025-68811 page https://www.suse.com/security/cve/CVE-2025-68813/ SUSE CVE CVE-2025-68813 page https://www.suse.com/security/cve/CVE-2025-68814/ SUSE CVE CVE-2025-68814 page https://www.suse.com/security/cve/CVE-2025-68815/ SUSE CVE CVE-2025-68815 page https://www.suse.com/security/cve/CVE-2025-68816/ SUSE CVE CVE-2025-68816 page https://www.suse.com/security/cve/CVE-2025-68819/ SUSE CVE CVE-2025-68819 page https://www.suse.com/security/cve/CVE-2025-68820/ SUSE CVE CVE-2025-68820 page https://www.suse.com/security/cve/CVE-2025-68821/ SUSE CVE CVE-2025-68821 page https://www.suse.com/security/cve/CVE-2025-68822/ SUSE CVE CVE-2025-68822 page https://www.suse.com/security/cve/CVE-2025-71064/ SUSE CVE CVE-2025-71064 page https://www.suse.com/security/cve/CVE-2025-71066/ SUSE CVE CVE-2025-71066 page https://www.suse.com/security/cve/CVE-2025-71073/ SUSE CVE CVE-2025-71073 page https://www.suse.com/security/cve/CVE-2025-71076/ SUSE CVE CVE-2025-71076 page https://www.suse.com/security/cve/CVE-2025-71077/ SUSE CVE CVE-2025-71077 page https://www.suse.com/security/cve/CVE-2025-71078/ SUSE CVE CVE-2025-71078 page https://www.suse.com/security/cve/CVE-2025-71079/ SUSE CVE CVE-2025-71079 page https://www.suse.com/security/cve/CVE-2025-71080/ SUSE CVE CVE-2025-71080 page https://www.suse.com/security/cve/CVE-2025-71081/ SUSE CVE CVE-2025-71081 page https://www.suse.com/security/cve/CVE-2025-71082/ SUSE CVE CVE-2025-71082 page https://www.suse.com/security/cve/CVE-2025-71083/ SUSE CVE CVE-2025-71083 page https://www.suse.com/security/cve/CVE-2025-71084/ SUSE CVE CVE-2025-71084 page https://www.suse.com/security/cve/CVE-2025-71085/ SUSE CVE CVE-2025-71085 page https://www.suse.com/security/cve/CVE-2025-71086/ SUSE CVE CVE-2025-71086 page https://www.suse.com/security/cve/CVE-2025-71087/ SUSE CVE CVE-2025-71087 page https://www.suse.com/security/cve/CVE-2025-71088/ SUSE CVE CVE-2025-71088 page https://www.suse.com/security/cve/CVE-2025-71089/ SUSE CVE CVE-2025-71089 page https://www.suse.com/security/cve/CVE-2025-71091/ SUSE CVE CVE-2025-71091 page https://www.suse.com/security/cve/CVE-2025-71093/ SUSE CVE CVE-2025-71093 page https://www.suse.com/security/cve/CVE-2025-71094/ SUSE CVE CVE-2025-71094 page https://www.suse.com/security/cve/CVE-2025-71095/ SUSE CVE CVE-2025-71095 page https://www.suse.com/security/cve/CVE-2025-71097/ SUSE CVE CVE-2025-71097 page https://www.suse.com/security/cve/CVE-2025-71098/ SUSE CVE CVE-2025-71098 page https://www.suse.com/security/cve/CVE-2025-71099/ SUSE CVE CVE-2025-71099 page https://www.suse.com/security/cve/CVE-2025-71100/ SUSE CVE CVE-2025-71100 page https://www.suse.com/security/cve/CVE-2025-71101/ SUSE CVE CVE-2025-71101 page https://www.suse.com/security/cve/CVE-2025-71108/ SUSE CVE CVE-2025-71108 page https://www.suse.com/security/cve/CVE-2025-71111/ SUSE CVE CVE-2025-71111 page https://www.suse.com/security/cve/CVE-2025-71112/ SUSE CVE CVE-2025-71112 page https://www.suse.com/security/cve/CVE-2025-71113/ SUSE CVE CVE-2025-71113 page https://www.suse.com/security/cve/CVE-2025-71114/ SUSE CVE CVE-2025-71114 page https://www.suse.com/security/cve/CVE-2025-71116/ SUSE CVE CVE-2025-71116 page https://www.suse.com/security/cve/CVE-2025-71118/ SUSE CVE CVE-2025-71118 page https://www.suse.com/security/cve/CVE-2025-71119/ SUSE CVE CVE-2025-71119 page https://www.suse.com/security/cve/CVE-2025-71120/ SUSE CVE CVE-2025-71120 page https://www.suse.com/security/cve/CVE-2025-71123/ SUSE CVE CVE-2025-71123 page https://www.suse.com/security/cve/CVE-2025-71126/ SUSE CVE CVE-2025-71126 page https://www.suse.com/security/cve/CVE-2025-71130/ SUSE CVE CVE-2025-71130 page https://www.suse.com/security/cve/CVE-2025-71131/ SUSE CVE CVE-2025-71131 page https://www.suse.com/security/cve/CVE-2025-71132/ SUSE CVE CVE-2025-71132 page https://www.suse.com/security/cve/CVE-2025-71133/ SUSE CVE CVE-2025-71133 page https://www.suse.com/security/cve/CVE-2025-71135/ SUSE CVE CVE-2025-71135 page https://www.suse.com/security/cve/CVE-2025-71136/ SUSE CVE CVE-2025-71136 page https://www.suse.com/security/cve/CVE-2025-71137/ SUSE CVE CVE-2025-71137 page https://www.suse.com/security/cve/CVE-2025-71138/ SUSE CVE CVE-2025-71138 page https://www.suse.com/security/cve/CVE-2025-71141/ SUSE CVE CVE-2025-71141 page https://www.suse.com/security/cve/CVE-2025-71142/ SUSE CVE CVE-2025-71142 page https://www.suse.com/security/cve/CVE-2025-71143/ SUSE CVE CVE-2025-71143 page https://www.suse.com/security/cve/CVE-2025-71145/ SUSE CVE CVE-2025-71145 page https://www.suse.com/security/cve/CVE-2025-71147/ SUSE CVE CVE-2025-71147 page https://www.suse.com/security/cve/CVE-2025-71148/ SUSE CVE CVE-2025-71148 page https://www.suse.com/security/cve/CVE-2025-71149/ SUSE CVE CVE-2025-71149 page https://www.suse.com/security/cve/CVE-2025-71154/ SUSE CVE CVE-2025-71154 page https://www.suse.com/security/cve/CVE-2025-71156/ SUSE CVE CVE-2025-71156 page https://www.suse.com/security/cve/CVE-2025-71157/ SUSE CVE CVE-2025-71157 page https://www.suse.com/security/cve/CVE-2025-71162/ SUSE CVE CVE-2025-71162 page https://www.suse.com/security/cve/CVE-2025-71163/ SUSE CVE CVE-2025-71163 page https://www.suse.com/security/cve/CVE-2026-22976/ SUSE CVE CVE-2026-22976 page https://www.suse.com/security/cve/CVE-2026-22977/ SUSE CVE CVE-2026-22977 page https://www.suse.com/security/cve/CVE-2026-22978/ SUSE CVE CVE-2026-22978 page https://www.suse.com/security/cve/CVE-2026-22981/ SUSE CVE CVE-2026-22981 page https://www.suse.com/security/cve/CVE-2026-22982/ SUSE CVE CVE-2026-22982 page https://www.suse.com/security/cve/CVE-2026-22984/ SUSE CVE CVE-2026-22984 page https://www.suse.com/security/cve/CVE-2026-22985/ SUSE CVE CVE-2026-22985 page https://www.suse.com/security/cve/CVE-2026-22986/ SUSE CVE CVE-2026-22986 page https://www.suse.com/security/cve/CVE-2026-22988/ SUSE CVE CVE-2026-22988 page https://www.suse.com/security/cve/CVE-2026-22989/ SUSE CVE CVE-2026-22989 page https://www.suse.com/security/cve/CVE-2026-22990/ SUSE CVE CVE-2026-22990 page https://www.suse.com/security/cve/CVE-2026-22991/ SUSE CVE CVE-2026-22991 page https://www.suse.com/security/cve/CVE-2026-22992/ SUSE CVE CVE-2026-22992 page https://www.suse.com/security/cve/CVE-2026-22993/ SUSE CVE CVE-2026-22993 page https://www.suse.com/security/cve/CVE-2026-22996/ SUSE CVE CVE-2026-22996 page https://www.suse.com/security/cve/CVE-2026-22997/ SUSE CVE CVE-2026-22997 page https://www.suse.com/security/cve/CVE-2026-22999/ SUSE CVE CVE-2026-22999 page https://www.suse.com/security/cve/CVE-2026-23000/ SUSE CVE CVE-2026-23000 page https://www.suse.com/security/cve/CVE-2026-23001/ SUSE CVE CVE-2026-23001 page https://www.suse.com/security/cve/CVE-2026-23002/ SUSE CVE CVE-2026-23002 page https://www.suse.com/security/cve/CVE-2026-23005/ SUSE CVE CVE-2026-23005 page https://www.suse.com/security/cve/CVE-2026-23006/ SUSE CVE CVE-2026-23006 page https://www.suse.com/security/cve/CVE-2026-23011/ SUSE CVE CVE-2026-23011 page openSUSE Leap 16.0 cluster-md-kmp-64kb-6.12.0-160000.26.1 cluster-md-kmp-azure-6.12.0-160000.26.1 cluster-md-kmp-default-6.12.0-160000.26.1 cluster-md-kmp-rt-6.12.0-160000.26.1 dlm-kmp-64kb-6.12.0-160000.26.1 dlm-kmp-azure-6.12.0-160000.26.1 dlm-kmp-default-6.12.0-160000.26.1 dlm-kmp-rt-6.12.0-160000.26.1 dtb-allwinner-6.12.0-160000.26.1 dtb-altera-6.12.0-160000.26.1 dtb-amazon-6.12.0-160000.26.1 dtb-amd-6.12.0-160000.26.1 dtb-amlogic-6.12.0-160000.26.1 dtb-apm-6.12.0-160000.26.1 dtb-apple-6.12.0-160000.26.1 dtb-arm-6.12.0-160000.26.1 dtb-broadcom-6.12.0-160000.26.1 dtb-cavium-6.12.0-160000.26.1 dtb-exynos-6.12.0-160000.26.1 dtb-freescale-6.12.0-160000.26.1 dtb-hisilicon-6.12.0-160000.26.1 dtb-lg-6.12.0-160000.26.1 dtb-marvell-6.12.0-160000.26.1 dtb-mediatek-6.12.0-160000.26.1 dtb-nvidia-6.12.0-160000.26.1 dtb-qcom-6.12.0-160000.26.1 dtb-renesas-6.12.0-160000.26.1 dtb-rockchip-6.12.0-160000.26.1 dtb-socionext-6.12.0-160000.26.1 dtb-sprd-6.12.0-160000.26.1 dtb-xilinx-6.12.0-160000.26.1 gfs2-kmp-64kb-6.12.0-160000.26.1 gfs2-kmp-azure-6.12.0-160000.26.1 gfs2-kmp-default-6.12.0-160000.26.1 gfs2-kmp-rt-6.12.0-160000.26.1 kernel-64kb-6.12.0-160000.26.1 kernel-64kb-devel-6.12.0-160000.26.1 kernel-64kb-extra-6.12.0-160000.26.1 kernel-64kb-optional-6.12.0-160000.26.1 kernel-azure-6.12.0-160000.26.1 kernel-azure-devel-6.12.0-160000.26.1 kernel-azure-extra-6.12.0-160000.26.1 kernel-azure-optional-6.12.0-160000.26.1 kernel-azure-vdso-6.12.0-160000.26.1 kernel-default-6.12.0-160000.26.1 kernel-default-base-6.12.0-160000.26.1.160000.2.7 kernel-default-devel-6.12.0-160000.26.1 kernel-default-extra-6.12.0-160000.26.1 kernel-default-optional-6.12.0-160000.26.1 kernel-default-vdso-6.12.0-160000.26.1 kernel-devel-6.12.0-160000.26.1 kernel-docs-6.12.0-160000.26.1 kernel-docs-html-6.12.0-160000.26.1 kernel-kvmsmall-6.12.0-160000.26.1 kernel-kvmsmall-devel-6.12.0-160000.26.1 kernel-kvmsmall-vdso-6.12.0-160000.26.1 kernel-macros-6.12.0-160000.26.1 kernel-obs-build-6.12.0-160000.26.1 kernel-obs-qa-6.12.0-160000.26.1 kernel-rt-6.12.0-160000.26.1 kernel-rt-devel-6.12.0-160000.26.1 kernel-rt-extra-6.12.0-160000.26.1 kernel-rt-optional-6.12.0-160000.26.1 kernel-rt-vdso-6.12.0-160000.26.1 kernel-source-6.12.0-160000.26.1 kernel-source-vanilla-6.12.0-160000.26.1 kernel-syms-6.12.0-160000.26.1 kernel-zfcpdump-6.12.0-160000.26.1 kselftests-kmp-64kb-6.12.0-160000.26.1 kselftests-kmp-azure-6.12.0-160000.26.1 kselftests-kmp-default-6.12.0-160000.26.1 kselftests-kmp-rt-6.12.0-160000.26.1 ocfs2-kmp-64kb-6.12.0-160000.26.1 ocfs2-kmp-azure-6.12.0-160000.26.1 ocfs2-kmp-default-6.12.0-160000.26.1 ocfs2-kmp-rt-6.12.0-160000.26.1 cluster-md-kmp-64kb-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 cluster-md-kmp-azure-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 cluster-md-kmp-default-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 cluster-md-kmp-rt-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dlm-kmp-64kb-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dlm-kmp-azure-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dlm-kmp-default-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dlm-kmp-rt-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-allwinner-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-altera-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-amazon-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-amd-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-amlogic-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-apm-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-apple-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-arm-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-broadcom-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-cavium-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-exynos-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-freescale-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-hisilicon-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-lg-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-marvell-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-mediatek-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-nvidia-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-qcom-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-renesas-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-rockchip-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-socionext-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-sprd-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-xilinx-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 gfs2-kmp-64kb-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 gfs2-kmp-azure-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 gfs2-kmp-default-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 gfs2-kmp-rt-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-64kb-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-64kb-devel-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-64kb-extra-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-64kb-optional-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-azure-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-azure-devel-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-azure-extra-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-azure-optional-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-azure-vdso-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-default-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-default-base-6.12.0-160000.26.1.160000.2.7 as a component of openSUSE Leap 16.0 kernel-default-devel-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-default-extra-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-default-optional-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-default-vdso-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-devel-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-docs-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-docs-html-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-kvmsmall-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-kvmsmall-devel-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-kvmsmall-vdso-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-macros-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-obs-build-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-obs-qa-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-rt-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-rt-devel-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-rt-extra-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-rt-optional-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-rt-vdso-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-source-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-source-vanilla-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-syms-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-zfcpdump-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kselftests-kmp-64kb-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kselftests-kmp-azure-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kselftests-kmp-default-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kselftests-kmp-rt-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 ocfs2-kmp-64kb-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 ocfs2-kmp-azure-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 ocfs2-kmp-default-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 ocfs2-kmp-rt-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext Access to genmask field in struct nft_set_ext results in unaligned atomic read: [ 72.130109] Unable to handle kernel paging request at virtual address ffff0000c2bb708c [ 72.131036] Mem abort info: [ 72.131213] ESR = 0x0000000096000021 [ 72.131446] EC = 0x25: DABT (current EL), IL = 32 bits [ 72.132209] SET = 0, FnV = 0 [ 72.133216] EA = 0, S1PTW = 0 [ 72.134080] FSC = 0x21: alignment fault [ 72.135593] Data abort info: [ 72.137194] ISV = 0, ISS = 0x00000021, ISS2 = 0x00000000 [ 72.142351] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 72.145989] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 72.150115] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000237d27000 [ 72.154893] [ffff0000c2bb708c] pgd=0000000000000000, p4d=180000023ffff403, pud=180000023f84b403, pmd=180000023f835403, +pte=0068000102bb7707 [ 72.163021] Internal error: Oops: 0000000096000021 [#1] SMP [...] [ 72.170041] CPU: 7 UID: 0 PID: 54 Comm: kworker/7:0 Tainted: G E 6.13.0-rc3+ #2 [ 72.170509] Tainted: [E]=UNSIGNED_MODULE [ 72.170720] Hardware name: QEMU QEMU Virtual Machine, BIOS edk2-stable202302-for-qemu 03/01/2023 [ 72.171192] Workqueue: events_power_efficient nft_rhash_gc [nf_tables] [ 72.171552] pstate: 21400005 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) [ 72.171915] pc : nft_rhash_gc+0x200/0x2d8 [nf_tables] [ 72.172166] lr : nft_rhash_gc+0x128/0x2d8 [nf_tables] [ 72.172546] sp : ffff800081f2bce0 [ 72.172724] x29: ffff800081f2bd40 x28: ffff0000c2bb708c x27: 0000000000000038 [ 72.173078] x26: ffff0000c6780ef0 x25: ffff0000c643df00 x24: ffff0000c6778f78 [ 72.173431] x23: 000000000000001a x22: ffff0000c4b1f000 x21: ffff0000c6780f78 [ 72.173782] x20: ffff0000c2bb70dc x19: ffff0000c2bb7080 x18: 0000000000000000 [ 72.174135] x17: ffff0000c0a4e1c0 x16: 0000000000003000 x15: 0000ac26d173b978 [ 72.174485] x14: ffffffffffffffff x13: 0000000000000030 x12: ffff0000c6780ef0 [ 72.174841] x11: 0000000000000000 x10: ffff800081f2bcf8 x9 : ffff0000c3000000 [ 72.175193] x8 : 00000000000004be x7 : 0000000000000000 x6 : 0000000000000000 [ 72.175544] x5 : 0000000000000040 x4 : ffff0000c3000010 x3 : 0000000000000000 [ 72.175871] x2 : 0000000000003a98 x1 : ffff0000c2bb708c x0 : 0000000000000004 [ 72.176207] Call trace: [ 72.176316] nft_rhash_gc+0x200/0x2d8 [nf_tables] (P) [ 72.176653] process_one_work+0x178/0x3d0 [ 72.176831] worker_thread+0x200/0x3f0 [ 72.176995] kthread+0xe8/0xf8 [ 72.177130] ret_from_fork+0x10/0x20 [ 72.177289] Code: 54fff984 d503201f d2800080 91003261 (f820303f) [ 72.177557] ---[ end trace 0000000000000000 ]--- Align struct nft_set_ext to word size to address this and documentation it. pahole reports that this increases the size of elements for rhash and pipapo in 8 bytes on x86_64. CVE-2024-54031 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2024-54031.html CVE-2024-54031 https://bugzilla.suse.com/1235905 SUSE Bug 1235905 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12k_pci_remove() Kmemleak reported this error: unreferenced object 0xffff1c165cec3060 (size 32): comm "insmod", pid 560, jiffies 4296964570 (age 235.596s) backtrace: [<000000005434db68>] __kmem_cache_alloc_node+0x1f4/0x2c0 [<000000001203b155>] kmalloc_trace+0x40/0x88 [<0000000028adc9c8>] _request_firmware+0xb8/0x608 [<00000000cad1aef7>] firmware_request_nowarn+0x50/0x80 [<000000005011a682>] local_pci_probe+0x48/0xd0 [<00000000077cd295>] pci_device_probe+0xb4/0x200 [<0000000087184c94>] really_probe+0x150/0x2c0 The firmware memory was allocated in ath12k_pci_probe(), but not freed in ath12k_pci_remove() in case ATH12K_FLAG_QMI_FAIL bit is set. So call ath12k_fw_unmap() to free the memory. Tested-on: WCN7850 hw2.0 PCI WLAN.HMT.2.0-02280-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1 CVE-2025-37744 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-37744.html CVE-2025-37744 https://bugzilla.suse.com/1243662 SUSE Bug 1243662 In the Linux kernel, the following vulnerability has been resolved: x86/cpu: Avoid running off the end of an AMD erratum table The NULL array terminator at the end of erratum_1386_microcode was removed during the switch from x86_cpu_desc to x86_cpu_id. This causes readers to run off the end of the array. Replace the NULL. CVE-2025-37751 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-37751.html CVE-2025-37751 https://bugzilla.suse.com/1242505 SUSE Bug 1242505 In the Linux kernel, the following vulnerability has been resolved: pm: cpupower: bench: Prevent NULL dereference on malloc failure If malloc returns NULL due to low memory, 'config' pointer can be NULL. Add a check to prevent NULL dereference. CVE-2025-37841 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-37841.html CVE-2025-37841 https://bugzilla.suse.com/1242974 SUSE Bug 1242974 In the Linux kernel, the following vulnerability has been resolved: tracing: fprobe events: Fix possible UAF on modules Commit ac91052f0ae5 ("tracing: tprobe-events: Fix leakage of module refcount") moved try_module_get() from __find_tracepoint_module_cb() to find_tracepoint() caller, but that introduced a possible UAF because the module can be unloaded before try_module_get(). In this case, the module object should be freed too. Thus, try_module_get() does not only fail but may access to the freed object. To avoid that, try_module_get() in __find_tracepoint_module_cb() again. CVE-2025-37845 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-37845.html CVE-2025-37845 https://bugzilla.suse.com/1242986 SUSE Bug 1242986 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix the inode leak in btrfs_iget() [BUG] There is a bug report that a syzbot reproducer can lead to the following busy inode at unmount time: BTRFS info (device loop1): last unmount of filesystem 1680000e-3c1e-4c46-84b6-56bd3909af50 VFS: Busy inodes after unmount of loop1 (btrfs) ------------[ cut here ]------------ kernel BUG at fs/super.c:650! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 0 UID: 0 PID: 48168 Comm: syz-executor Not tainted 6.15.0-rc2-00471-g119009db2674 #2 PREEMPT(full) Hardware name: QEMU Ubuntu 24.04 PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:generic_shutdown_super+0x2e9/0x390 fs/super.c:650 Call Trace: <TASK> kill_anon_super+0x3a/0x60 fs/super.c:1237 btrfs_kill_super+0x3b/0x50 fs/btrfs/super.c:2099 deactivate_locked_super+0xbe/0x1a0 fs/super.c:473 deactivate_super fs/super.c:506 [inline] deactivate_super+0xe2/0x100 fs/super.c:502 cleanup_mnt+0x21f/0x440 fs/namespace.c:1435 task_work_run+0x14d/0x240 kernel/task_work.c:227 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline] exit_to_user_mode_loop kernel/entry/common.c:114 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:329 [inline] __syscall_exit_to_user_mode_work kernel/entry/common.c:207 [inline] syscall_exit_to_user_mode+0x269/0x290 kernel/entry/common.c:218 do_syscall_64+0xd4/0x250 arch/x86/entry/syscall_64.c:100 entry_SYSCALL_64_after_hwframe+0x77/0x7f </TASK> [CAUSE] When btrfs_alloc_path() failed, btrfs_iget() directly returned without releasing the inode already allocated by btrfs_iget_locked(). This results the above busy inode and trigger the kernel BUG. [FIX] Fix it by calling iget_failed() if btrfs_alloc_path() failed. If we hit error inside btrfs_read_locked_inode(), it will properly call iget_failed(), so nothing to worry about. Although the iget_failed() cleanup inside btrfs_read_locked_inode() is a break of the normal error handling scheme, let's fix the obvious bug and backport first, then rework the error handling later. CVE-2025-37904 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-37904.html CVE-2025-37904 https://bugzilla.suse.com/1243452 SUSE Bug 1243452 In the Linux kernel, the following vulnerability has been resolved: virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable() The selftests added to our CI by Bui Quang Minh recently reveals that there is a mem leak on the error path of virtnet_xsk_pool_enable(): unreferenced object 0xffff88800a68a000 (size 2048): comm "xdp_helper", pid 318, jiffies 4294692778 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 0): __kvmalloc_node_noprof+0x402/0x570 virtnet_xsk_pool_enable+0x293/0x6a0 (drivers/net/virtio_net.c:5882) xp_assign_dev+0x369/0x670 (net/xdp/xsk_buff_pool.c:226) xsk_bind+0x6a5/0x1ae0 __sys_bind+0x15e/0x230 __x64_sys_bind+0x72/0xb0 do_syscall_64+0xc1/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f CVE-2025-37955 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-37955.html CVE-2025-37955 https://bugzilla.suse.com/1243507 SUSE Bug 1243507 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid inode pointer dereferences during log replay In a few places where we call read_one_inode(), if we get a NULL pointer we end up jumping into an error path, or fallthrough in case of __add_inode_ref(), where we then do something like this: iput(&inode->vfs_inode); which results in an invalid inode pointer that triggers an invalid memory access, resulting in a crash. Fix this by making sure we don't do such dereferences. CVE-2025-38243 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38243.html CVE-2025-38243 https://bugzilla.suse.com/1246184 SUSE Bug 1246184 In the Linux kernel, the following vulnerability has been resolved: tty: serial: uartlite: register uart driver in init When two instances of uart devices are probing, a concurrency race can occur. If one thread calls uart_register_driver function, which first allocates and assigns memory to 'uart_state' member of uart_driver structure, the other instance can bypass uart driver registration and call ulite_assign. This calls uart_add_one_port, which expects the uart driver to be fully initialized. This leads to a kernel panic due to a null pointer dereference: [ 8.143581] BUG: kernel NULL pointer dereference, address: 00000000000002b8 [ 8.156982] #PF: supervisor write access in kernel mode [ 8.156984] #PF: error_code(0x0002) - not-present page [ 8.156986] PGD 0 P4D 0 ... [ 8.180668] RIP: 0010:mutex_lock+0x19/0x30 [ 8.188624] Call Trace: [ 8.188629] ? __die_body.cold+0x1a/0x1f [ 8.195260] ? page_fault_oops+0x15c/0x290 [ 8.209183] ? __irq_resolve_mapping+0x47/0x80 [ 8.209187] ? exc_page_fault+0x64/0x140 [ 8.209190] ? asm_exc_page_fault+0x22/0x30 [ 8.209196] ? mutex_lock+0x19/0x30 [ 8.223116] uart_add_one_port+0x60/0x440 [ 8.223122] ? proc_tty_register_driver+0x43/0x50 [ 8.223126] ? tty_register_driver+0x1ca/0x1e0 [ 8.246250] ulite_probe+0x357/0x4b0 [uartlite] To prevent it, move uart driver registration in to init function. This will ensure that uart_driver is always registered when probe function is called. CVE-2025-38262 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38262.html CVE-2025-38262 https://bugzilla.suse.com/1246282 SUSE Bug 1246282 In the Linux kernel, the following vulnerability has been resolved: PM: EM: Fix potential division-by-zero error in em_compute_costs() When the device is of a non-CPU type, table[i].performance won't be initialized in the previous em_init_performance(), resulting in division by zero when calculating costs in em_compute_costs(). Since the 'cost' algorithm is only used for EAS energy efficiency calculations and is currently not utilized by other device drivers, we should add the _is_cpu_device(dev) check to prevent this division-by-zero issue. CVE-2025-38297 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38297.html CVE-2025-38297 https://bugzilla.suse.com/1253078 SUSE Bug 1253078 In the Linux kernel, the following vulnerability has been resolved: EDAC/skx_common: Fix general protection fault After loading i10nm_edac (which automatically loads skx_edac_common), if unload only i10nm_edac, then reload it and perform error injection testing, a general protection fault may occur: mce: [Hardware Error]: Machine check events logged Oops: general protection fault ... ... Workqueue: events mce_gen_pool_process RIP: 0010:string+0x53/0xe0 ... Call Trace: <TASK> ? die_addr+0x37/0x90 ? exc_general_protection+0x1e7/0x3f0 ? asm_exc_general_protection+0x26/0x30 ? string+0x53/0xe0 vsnprintf+0x23e/0x4c0 snprintf+0x4d/0x70 skx_adxl_decode+0x16a/0x330 [skx_edac_common] skx_mce_check_error.part.0+0xf8/0x220 [skx_edac_common] skx_mce_check_error+0x17/0x20 [skx_edac_common] ... The issue arose was because the variable 'adxl_component_count' (inside skx_edac_common), which counts the ADXL components, was not reset. During the reloading of i10nm_edac, the count was incremented by the actual number of ADXL components again, resulting in a count that was double the real number of ADXL components. This led to an out-of-bounds reference to the ADXL component array, causing the general protection fault above. Fix this issue by resetting the 'adxl_component_count' in adxl_put(), which is called during the unloading of {skx,i10nm}_edac. CVE-2025-38298 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38298.html CVE-2025-38298 https://bugzilla.suse.com/1253079 SUSE Bug 1253079 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix warning when reconnecting channel When reconnecting a channel in smb2_reconnect_server(), a dummy tcon is passed down to smb2_reconnect() with ->query_interface uninitialized, so we can't call queue_delayed_work() on it. Fix the following warning by ensuring that we're queueing the delayed worker from correct tcon. WARNING: CPU: 4 PID: 1126 at kernel/workqueue.c:2498 __queue_delayed_work+0x1d2/0x200 Modules linked in: cifs cifs_arc4 nls_ucs2_utils cifs_md4 [last unloaded: cifs] CPU: 4 UID: 0 PID: 1126 Comm: kworker/4:0 Not tainted 6.16.0-rc3 #5 PREEMPT(voluntary) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-4.fc42 04/01/2014 Workqueue: cifsiod smb2_reconnect_server [cifs] RIP: 0010:__queue_delayed_work+0x1d2/0x200 Code: 41 5e 41 5f e9 7f ee ff ff 90 0f 0b 90 e9 5d ff ff ff bf 02 00 00 00 e8 6c f3 07 00 89 c3 eb bd 90 0f 0b 90 e9 57 f> 0b 90 e9 65 fe ff ff 90 0f 0b 90 e9 72 fe ff ff 90 0f 0b 90 e9 RSP: 0018:ffffc900014afad8 EFLAGS: 00010003 RAX: 0000000000000000 RBX: ffff888124d99988 RCX: ffffffff81399cc1 RDX: dffffc0000000000 RSI: ffff888114326e00 RDI: ffff888124d999f0 RBP: 000000000000ea60 R08: 0000000000000001 R09: ffffed10249b3331 R10: ffff888124d9998f R11: 0000000000000004 R12: 0000000000000040 R13: ffff888114326e00 R14: ffff888124d999d8 R15: ffff888114939020 FS: 0000000000000000(0000) GS:ffff88829f7fe000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffe7a2b4038 CR3: 0000000120a6f000 CR4: 0000000000750ef0 PKRU: 55555554 Call Trace: <TASK> queue_delayed_work_on+0xb4/0xc0 smb2_reconnect+0xb22/0xf50 [cifs] smb2_reconnect_server+0x413/0xd40 [cifs] ? __pfx_smb2_reconnect_server+0x10/0x10 [cifs] ? local_clock_noinstr+0xd/0xd0 ? local_clock+0x15/0x30 ? lock_release+0x29b/0x390 process_one_work+0x4c5/0xa10 ? __pfx_process_one_work+0x10/0x10 ? __list_add_valid_or_report+0x37/0x120 worker_thread+0x2f1/0x5a0 ? __kthread_parkme+0xde/0x100 ? __pfx_worker_thread+0x10/0x10 kthread+0x1fe/0x380 ? kthread+0x10f/0x380 ? __pfx_kthread+0x10/0x10 ? local_clock_noinstr+0xd/0xd0 ? ret_from_fork+0x1b/0x1f0 ? local_clock+0x15/0x30 ? lock_release+0x29b/0x390 ? rcu_is_watching+0x20/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x15b/0x1f0 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK> irq event stamp: 1116206 hardirqs last enabled at (1116205): [<ffffffff8143af42>] __up_console_sem+0x52/0x60 hardirqs last disabled at (1116206): [<ffffffff81399f0e>] queue_delayed_work_on+0x6e/0xc0 softirqs last enabled at (1116138): [<ffffffffc04562fd>] __smb_send_rqst+0x42d/0x950 [cifs] softirqs last disabled at (1116136): [<ffffffff823d35e1>] release_sock+0x21/0xf0 CVE-2025-38379 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38379.html CVE-2025-38379 https://bugzilla.suse.com/1247030 SUSE Bug 1247030 In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd9375: Fix double free of regulator supplies Driver gets regulator supplies in probe path with devm_regulator_bulk_get(), so should not call regulator_bulk_free() in error and remove paths to avoid double free. CVE-2025-38423 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38423.html CVE-2025-38423 https://bugzilla.suse.com/1247292 SUSE Bug 1247292 In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: discard erroneous disassoc frames on STA interface When operating in concurrent STA/AP mode with host MLME enabled, the firmware incorrectly sends disassociation frames to the STA interface when clients disconnect from the AP interface. This causes kernel warnings as the STA interface processes disconnect events that don't apply to it: [ 1303.240540] WARNING: CPU: 0 PID: 513 at net/wireless/mlme.c:141 cfg80211_process_disassoc+0x78/0xec [cfg80211] [ 1303.250861] Modules linked in: 8021q garp stp mrp llc rfcomm bnep btnxpuart nls_iso8859_1 nls_cp437 onboard_us [ 1303.327651] CPU: 0 UID: 0 PID: 513 Comm: kworker/u9:2 Not tainted 6.16.0-rc1+ #3 PREEMPT [ 1303.335937] Hardware name: Toradex Verdin AM62 WB on Verdin Development Board (DT) [ 1303.343588] Workqueue: MWIFIEX_RX_WORK_QUEUE mwifiex_rx_work_queue [mwifiex] [ 1303.350856] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1303.357904] pc : cfg80211_process_disassoc+0x78/0xec [cfg80211] [ 1303.364065] lr : cfg80211_process_disassoc+0x70/0xec [cfg80211] [ 1303.370221] sp : ffff800083053be0 [ 1303.373590] x29: ffff800083053be0 x28: 0000000000000000 x27: 0000000000000000 [ 1303.380855] x26: 0000000000000000 x25: 00000000ffffffff x24: ffff000002c5b8ae [ 1303.388120] x23: ffff000002c5b884 x22: 0000000000000001 x21: 0000000000000008 [ 1303.395382] x20: ffff000002c5b8ae x19: ffff0000064dd408 x18: 0000000000000006 [ 1303.402646] x17: 3a36333a61623a30 x16: 32206d6f72662063 x15: ffff800080bfe048 [ 1303.409910] x14: ffff000003625300 x13: 0000000000000001 x12: 0000000000000000 [ 1303.417173] x11: 0000000000000002 x10: ffff000003958600 x9 : ffff000003625300 [ 1303.424434] x8 : ffff00003fd9ef40 x7 : ffff0000039fc280 x6 : 0000000000000002 [ 1303.431695] x5 : ffff0000038976d4 x4 : 0000000000000000 x3 : 0000000000003186 [ 1303.438956] x2 : 000000004836ba20 x1 : 0000000000006986 x0 : 00000000d00479de [ 1303.446221] Call trace: [ 1303.448722] cfg80211_process_disassoc+0x78/0xec [cfg80211] (P) [ 1303.454894] cfg80211_rx_mlme_mgmt+0x64/0xf8 [cfg80211] [ 1303.460362] mwifiex_process_mgmt_packet+0x1ec/0x460 [mwifiex] [ 1303.466380] mwifiex_process_sta_rx_packet+0x1bc/0x2a0 [mwifiex] [ 1303.472573] mwifiex_handle_rx_packet+0xb4/0x13c [mwifiex] [ 1303.478243] mwifiex_rx_work_queue+0x158/0x198 [mwifiex] [ 1303.483734] process_one_work+0x14c/0x28c [ 1303.487845] worker_thread+0x2cc/0x3d4 [ 1303.491680] kthread+0x12c/0x208 [ 1303.495014] ret_from_fork+0x10/0x20 Add validation in the STA receive path to verify that disassoc/deauth frames originate from the connected AP. Frames that fail this check are discarded early, preventing them from reaching the MLME layer and triggering WARN_ON(). This filtering logic is similar with that used in the ieee80211_rx_mgmt_disassoc() function in mac80211, which drops disassoc frames that don't match the current BSSID (!ether_addr_equal(mgmt->bssid, sdata->vif.cfg.ap_addr)), ensuring only relevant frames are processed. Tested on: - 8997 with FW 16.68.1.p197 CVE-2025-38505 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38505.html CVE-2025-38505 https://bugzilla.suse.com/1248185 SUSE Bug 1248185 In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: avoid bluetooth suspend/resume stalls Ensure we don't stall or panic the kernel when using bluetooth-connected controllers. This was reported as an issue on android devices using kernel 6.6 due to the resume hook which had been added for usb joycons. First, set a new state value to JOYCON_CTLR_STATE_SUSPENDED in a newly-added nintendo_hid_suspend. This makes sure we will not stall out the kernel waiting for input reports during led classdev suspend. The stalls could happen if connectivity is unreliable or lost to the controller prior to suspend. Second, since we lose connectivity during suspend, do not try joycon_init() for bluetooth controllers in the nintendo_hid_resume path. Tested via multiple suspend/resume flows when using the controller both in USB and bluetooth modes. CVE-2025-38507 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38507.html CVE-2025-38507 https://bugzilla.suse.com/1248188 SUSE Bug 1248188 In the Linux kernel, the following vulnerability has been resolved: kasan: remove kasan_find_vm_area() to prevent possible deadlock find_vm_area() couldn't be called in atomic_context. If find_vm_area() is called to reports vm area information, kasan can trigger deadlock like: CPU0 CPU1 vmalloc(); alloc_vmap_area(); spin_lock(&vn->busy.lock) spin_lock_bh(&some_lock); <interrupt occurs> <in softirq> spin_lock(&some_lock); <access invalid address> kasan_report(); print_report(); print_address_description(); kasan_find_vm_area(); find_vm_area(); spin_lock(&vn->busy.lock) // deadlock! To prevent possible deadlock while kasan reports, remove kasan_find_vm_area(). CVE-2025-38510 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38510.html CVE-2025-38510 https://bugzilla.suse.com/1248166 SUSE Bug 1248166 In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Clear all LMTT pages on alloc Our LMEM buffer objects are not cleared by default on alloc and during VF provisioning we only setup LMTT PTEs for the actually provisioned LMEM range. But beyond that valid range we might leave some stale data that could either point to some other VFs allocations or even to the PF pages. Explicitly clear all new LMTT page to avoid the risk that a malicious VF would try to exploit that gap. While around add asserts to catch any undesired PTE overwrites and low-level debug traces to track LMTT PT life-cycle. (cherry picked from commit 3fae6918a3e27cce20ded2551f863fb05d4bef8d) CVE-2025-38511 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38511.html CVE-2025-38511 https://bugzilla.suse.com/1248175 SUSE Bug 1248175 https://bugzilla.suse.com/1248176 SUSE Bug 1248176 In the Linux kernel, the following vulnerability has been resolved: wifi: prevent A-MSDU attacks in mesh networks This patch is a mitigation to prevent the A-MSDU spoofing vulnerability for mesh networks. The initial update to the IEEE 802.11 standard, in response to the FragAttacks, missed this case (CVE-2025-27558). It can be considered a variant of CVE-2020-24588 but for mesh networks. This patch tries to detect if a standard MSDU was turned into an A-MSDU by an adversary. This is done by parsing a received A-MSDU as a standard MSDU, calculating the length of the Mesh Control header, and seeing if the 6 bytes after this header equal the start of an rfc1042 header. If equal, this is a strong indication of an ongoing attack attempt. This defense was tested with mac80211_hwsim against a mesh network that uses an empty Mesh Address Extension field, i.e., when four addresses are used, and when using a 12-byte Mesh Address Extension field, i.e., when six addresses are used. Functionality of normal MSDUs and A-MSDUs was also tested, and confirmed working, when using both an empty and 12-byte Mesh Address Extension field. It was also tested with mac80211_hwsim that A-MSDU attacks in non-mesh networks keep being detected and prevented. Note that the vulnerability being patched, and the defense being implemented, was also discussed in the following paper and in the following IEEE 802.11 presentation: https://papers.mathyvanhoef.com/wisec2025.pdf https://mentor.ieee.org/802.11/dcn/25/11-25-0949-00-000m-a-msdu-mesh-spoof-protection.docx CVE-2025-38512 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38512.html CVE-2025-38512 https://bugzilla.suse.com/1248178 SUSE Bug 1248178 In the Linux kernel, the following vulnerability has been resolved: wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() There is a potential NULL pointer dereference in zd_mac_tx_to_dev(). For example, the following is possible: T0 T1 zd_mac_tx_to_dev() /* len == skb_queue_len(q) */ while (len > ZD_MAC_MAX_ACK_WAITERS) { filter_ack() spin_lock_irqsave(&q->lock, flags); /* position == skb_queue_len(q) */ for (i=1; i<position; i++) skb = __skb_dequeue(q) if (mac->type == NL80211_IFTYPE_AP) skb = __skb_dequeue(q); spin_unlock_irqrestore(&q->lock, flags); skb_dequeue() -> NULL Since there is a small gap between checking skb queue length and skb being unconditionally dequeued in zd_mac_tx_to_dev(), skb_dequeue() can return NULL. Then the pointer is passed to zd_mac_tx_status() where it is dereferenced. In order to avoid potential NULL pointer dereference due to situations like above, check if skb is not NULL before passing it to zd_mac_tx_status(). Found by Linux Verification Center (linuxtesting.org) with SVACE. CVE-2025-38513 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38513.html CVE-2025-38513 https://bugzilla.suse.com/1248179 SUSE Bug 1248179 In the Linux kernel, the following vulnerability has been resolved: drm/sched: Increment job count before swapping tail spsc queue A small race exists between spsc_queue_push and the run-job worker, in which spsc_queue_push may return not-first while the run-job worker has already idled due to the job count being zero. If this race occurs, job scheduling stops, leading to hangs while waiting on the job's DMA fences. Seal this race by incrementing the job count before appending to the SPSC queue. This race was observed on a drm-tip 6.16-rc1 build with the Xe driver in an SVM test case. CVE-2025-38515 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38515.html CVE-2025-38515 https://bugzilla.suse.com/1248212 SUSE Bug 1248212 In the Linux kernel, the following vulnerability has been resolved: pinctrl: qcom: msm: mark certain pins as invalid for interrupts On some platforms, the UFS-reset pin has no interrupt logic in TLMM but is nevertheless registered as a GPIO in the kernel. This enables the user-space to trigger a BUG() in the pinctrl-msm driver by running, for example: `gpiomon -c 0 113` on RB2. The exact culprit is requesting pins whose intr_detection_width setting is not 1 or 2 for interrupts. This hits a BUG() in msm_gpio_irq_set_type(). Potentially crashing the kernel due to an invalid request from user-space is not optimal, so let's go through the pins and mark those that would fail the check as invalid for the irq chip as we should not even register them as available irqs. This function can be extended if we determine that there are more corner-cases like this. CVE-2025-38516 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38516.html CVE-2025-38516 https://bugzilla.suse.com/1248209 SUSE Bug 1248209 In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Don't call mmput from MMU notifier callback If the process is exiting, the mmput inside mmu notifier callback from compactd or fork or numa balancing could release the last reference of mm struct to call exit_mmap and free_pgtable, this triggers deadlock with below backtrace. The deadlock will leak kfd process as mmu notifier release is not called and cause VRAM leaking. The fix is to take mm reference mmget_non_zero when adding prange to the deferred list to pair with mmput in deferred list work. If prange split and add into pchild list, the pchild work_item.mm is not used, so remove the mm parameter from svm_range_unmap_split and svm_range_add_child. The backtrace of hung task: INFO: task python:348105 blocked for more than 64512 seconds. Call Trace: __schedule+0x1c3/0x550 schedule+0x46/0xb0 rwsem_down_write_slowpath+0x24b/0x4c0 unlink_anon_vmas+0xb1/0x1c0 free_pgtables+0xa9/0x130 exit_mmap+0xbc/0x1a0 mmput+0x5a/0x140 svm_range_cpu_invalidate_pagetables+0x2b/0x40 [amdgpu] mn_itree_invalidate+0x72/0xc0 __mmu_notifier_invalidate_range_start+0x48/0x60 try_to_unmap_one+0x10fa/0x1400 rmap_walk_anon+0x196/0x460 try_to_unmap+0xbb/0x210 migrate_page_unmap+0x54d/0x7e0 migrate_pages_batch+0x1c3/0xae0 migrate_pages_sync+0x98/0x240 migrate_pages+0x25c/0x520 compact_zone+0x29d/0x590 compact_zone_order+0xb6/0xf0 try_to_compact_pages+0xbe/0x220 __alloc_pages_direct_compact+0x96/0x1a0 __alloc_pages_slowpath+0x410/0x930 __alloc_pages_nodemask+0x3a9/0x3e0 do_huge_pmd_anonymous_page+0xd7/0x3e0 __handle_mm_fault+0x5e3/0x5f0 handle_mm_fault+0xf7/0x2e0 hmm_vma_fault.isra.0+0x4d/0xa0 walk_pmd_range.isra.0+0xa8/0x310 walk_pud_range+0x167/0x240 walk_pgd_range+0x55/0x100 __walk_page_range+0x87/0x90 walk_page_range+0xf6/0x160 hmm_range_fault+0x4f/0x90 amdgpu_hmm_range_get_pages+0x123/0x230 [amdgpu] amdgpu_ttm_tt_get_user_pages+0xb1/0x150 [amdgpu] init_user_pages+0xb1/0x2a0 [amdgpu] amdgpu_amdkfd_gpuvm_alloc_memory_of_gpu+0x543/0x7d0 [amdgpu] kfd_ioctl_alloc_memory_of_gpu+0x24c/0x4e0 [amdgpu] kfd_ioctl+0x29d/0x500 [amdgpu] (cherry picked from commit a29e067bd38946f752b0ef855f3dfff87e77bec7) CVE-2025-38520 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38520.html CVE-2025-38520 https://bugzilla.suse.com/1248217 SUSE Bug 1248217 In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix kernel crash when hard resetting the GPU The GPU hard reset sequence calls pm_runtime_force_suspend() and pm_runtime_force_resume(), which according to their documentation should only be used during system-wide PM transitions to sleep states. The main issue though is that depending on some internal runtime PM state as seen by pm_runtime_force_suspend() (whether the usage count is <= 1), pm_runtime_force_resume() might not resume the device unless needed. If that happens, the runtime PM resume callback pvr_power_device_resume() is not called, the GPU clocks are not re-enabled, and the kernel crashes on the next attempt to access GPU registers as part of the power-on sequence. Replace calls to pm_runtime_force_suspend() and pm_runtime_force_resume() with direct calls to the driver's runtime PM callbacks, pvr_power_device_suspend() and pvr_power_device_resume(), to ensure clocks are re-enabled and avoid the kernel crash. CVE-2025-38521 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38521.html CVE-2025-38521 https://bugzilla.suse.com/1248232 SUSE Bug 1248232 In the Linux kernel, the following vulnerability has been resolved: comedi: aio_iiro_16: Fix bit shift out of bounds When checking for a supported IRQ number, the following test is used: if ((1 << it->options[1]) & 0xdcfc) { However, `it->options[i]` is an unchecked `int` value from userspace, so the shift amount could be negative or out of bounds. Fix the test by requiring `it->options[1]` to be within bounds before proceeding with the original test. Valid `it->options[1]` values that select the IRQ will be in the range [1,15]. The value 0 explicitly disables the use of interrupts. CVE-2025-38529 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38529.html CVE-2025-38529 https://bugzilla.suse.com/1248196 SUSE Bug 1248196 In the Linux kernel, the following vulnerability has been resolved: comedi: pcl812: Fix bit shift out of bounds When checking for a supported IRQ number, the following test is used: if ((1 << it->options[1]) & board->irq_bits) { However, `it->options[i]` is an unchecked `int` value from userspace, so the shift amount could be negative or out of bounds. Fix the test by requiring `it->options[1]` to be within bounds before proceeding with the original test. Valid `it->options[1]` values that select the IRQ will be in the range [1,15]. The value 0 explicitly disables the use of interrupts. CVE-2025-38530 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38530.html CVE-2025-38530 https://bugzilla.suse.com/1248206 SUSE Bug 1248206 In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode When transitioning from USB_ROLE_DEVICE to USB_ROLE_NONE, the code assumed that the regulator should be disabled. However, if the regulator is marked as always-on, regulator_is_enabled() continues to return true, leading to an incorrect attempt to disable a regulator which is not enabled. This can result in warnings such as: [ 250.155624] WARNING: CPU: 1 PID: 7326 at drivers/regulator/core.c:3004 _regulator_disable+0xe4/0x1a0 [ 250.155652] unbalanced disables for VIN_SYS_5V0 To fix this, we move the regulator control logic into tegra186_xusb_padctl_id_override() function since it's directly related to the ID override state. The regulator is now only disabled when the role transitions from USB_ROLE_HOST to USB_ROLE_NONE, by checking the VBUS_ID register. This ensures that regulator enable/disable operations are properly balanced and only occur when actually transitioning to/from host mode. CVE-2025-38535 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38535.html CVE-2025-38535 https://bugzilla.suse.com/1248240 SUSE Bug 1248240 In the Linux kernel, the following vulnerability has been resolved: net: phy: Don't register LEDs for genphy If a PHY has no driver, the genphy driver is probed/removed directly in phy_attach/detach. If the PHY's ofnode has an "leds" subnode, then the LEDs will be (un)registered when probing/removing the genphy driver. This could occur if the leds are for a non-generic driver that isn't loaded for whatever reason. Synchronously removing the PHY device in phy_detach leads to the following deadlock: rtnl_lock() ndo_close() ... phy_detach() phy_remove() phy_leds_unregister() led_classdev_unregister() led_trigger_set() netdev_trigger_deactivate() unregister_netdevice_notifier() rtnl_lock() There is a corresponding deadlock on the open/register side of things (and that one is reported by lockdep), but it requires a race while this one is deterministic. Generic PHYs do not support LEDs anyway, so don't bother registering them. CVE-2025-38537 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38537.html CVE-2025-38537 https://bugzilla.suse.com/1248229 SUSE Bug 1248229 In the Linux kernel, the following vulnerability has been resolved: dmaengine: nbpfaxi: Fix memory corruption in probe() The nbpf->chan[] array is allocated earlier in the nbpf_probe() function and it has "num_channels" elements. These three loops iterate one element farther than they should and corrupt memory. The changes to the second loop are more involved. In this case, we're copying data from the irqbuf[] array into the nbpf->chan[] array. If the data in irqbuf[i] is the error IRQ then we skip it, so the iterators are not in sync. I added a check to ensure that we don't go beyond the end of the irqbuf[] array. I'm pretty sure this can't happen, but it seemed harmless to add a check. On the other hand, after the loop has ended there is a check to ensure that the "chan" iterator is where we expect it to be. In the original code we went one element beyond the end of the array so the iterator wasn't in the correct place and it would always return -EINVAL. However, now it will always be in the correct place. I deleted the check since we know the result. CVE-2025-38538 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38538.html CVE-2025-38538 https://bugzilla.suse.com/1248213 SUSE Bug 1248213 In the Linux kernel, the following vulnerability has been resolved: tracing: Add down_write(trace_event_sem) when adding trace event When a module is loaded, it adds trace events defined by the module. It may also need to modify the modules trace printk formats to replace enum names with their values. If two modules are loaded at the same time, the adding of the event to the ftrace_events list can corrupt the walking of the list in the code that is modifying the printk format strings and crash the kernel. The addition of the event should take the trace_event_sem for write while it adds the new event. Also add a lockdep_assert_held() on that semaphore in __trace_add_event_dirs() as it iterates the list. CVE-2025-38539 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38539.html CVE-2025-38539 https://bugzilla.suse.com/1248211 SUSE Bug 1248211 In the Linux kernel, the following vulnerability has been resolved: HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras The Chicony Electronics HP 5MP Cameras (USB ID 04F2:B824 & 04F2:B82C) report a HID sensor interface that is not actually implemented. Attempting to access this non-functional sensor via iio_info causes system hangs as runtime PM tries to wake up an unresponsive sensor. Add these 2 devices to the HID ignore list since the sensor interface is non-functional by design and should not be exposed to userspace. CVE-2025-38540 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38540.html CVE-2025-38540 https://bugzilla.suse.com/1248208 SUSE Bug 1248208 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: Fix null-ptr-deref in mt7925_thermal_init() devm_kasprintf() returns NULL on error. Currently, mt7925_thermal_init() does not check for this case, which results in a NULL pointer dereference. Add NULL check after devm_kasprintf() to prevent this issue. CVE-2025-38541 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38541.html CVE-2025-38541 https://bugzilla.suse.com/1248216 SUSE Bug 1248216 In the Linux kernel, the following vulnerability has been resolved: drm/tegra: nvdec: Fix dma_alloc_coherent error check Check for NULL return value with dma_alloc_coherent, in line with Robin's fix for vic.c in 'drm/tegra: vic: Fix DMA API misuse'. CVE-2025-38543 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38543.html CVE-2025-38543 https://bugzilla.suse.com/1248214 SUSE Bug 1248214 In the Linux kernel, the following vulnerability has been resolved: iio: adc: axp20x_adc: Add missing sentinel to AXP717 ADC channel maps The AXP717 ADC channel maps is missing a sentinel entry at the end. This causes a KASAN warning. Add the missing sentinel entry. CVE-2025-38547 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38547.html CVE-2025-38547 https://bugzilla.suse.com/1248222 SUSE Bug 1248222 In the Linux kernel, the following vulnerability has been resolved: hwmon: (corsair-cpro) Validate the size of the received input buffer Add buffer_recv_size to store the size of the received bytes. Validate buffer_recv_size in send_usb_cmd(). CVE-2025-38548 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38548.html CVE-2025-38548 https://bugzilla.suse.com/1248228 SUSE Bug 1248228 In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Delay put pmc->idev in mld_del_delrec() pmc->idev is still used in ip6_mc_clear_src(), so as mld_clear_delrec() does, the reference should be put after ip6_mc_clear_src() return. CVE-2025-38550 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38550.html CVE-2025-38550 https://bugzilla.suse.com/1248227 SUSE Bug 1248227 In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix recursived rtnl_lock() during probe() The deadlock appears in a stack trace like: virtnet_probe() rtnl_lock() virtio_config_changed_work() netdev_notify_peers() rtnl_lock() It happens if the VMM sends a VIRTIO_NET_S_ANNOUNCE request while the virtio-net driver is still probing. The config_work in probe() will get scheduled until virtnet_open() enables the config change notification via virtio_config_driver_enable(). CVE-2025-38551 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38551.html CVE-2025-38551 https://bugzilla.suse.com/1248234 SUSE Bug 1248234 In the Linux kernel, the following vulnerability has been resolved: benet: fix BUG when creating VFs benet crashes as soon as SRIOV VFs are created: kernel BUG at mm/vmalloc.c:3457! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 4 UID: 0 PID: 7408 Comm: test.sh Kdump: loaded Not tainted 6.16.0+ #1 PREEMPT(voluntary) [...] RIP: 0010:vunmap+0x5f/0x70 [...] Call Trace: <TASK> __iommu_dma_free+0xe8/0x1c0 be_cmd_set_mac_list+0x3fe/0x640 [be2net] be_cmd_set_mac+0xaf/0x110 [be2net] be_vf_eth_addr_config+0x19f/0x330 [be2net] be_vf_setup+0x4f7/0x990 [be2net] be_pci_sriov_configure+0x3a1/0x470 [be2net] sriov_numvfs_store+0x20b/0x380 kernfs_fop_write_iter+0x354/0x530 vfs_write+0x9b9/0xf60 ksys_write+0xf3/0x1d0 do_syscall_64+0x8c/0x3d0 be_cmd_set_mac_list() calls dma_free_coherent() under a spin_lock_bh. Fix it by freeing only after the lock has been released. CVE-2025-38569 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38569.html CVE-2025-38569 https://bugzilla.suse.com/1248384 SUSE Bug 1248384 In the Linux kernel, the following vulnerability has been resolved: neighbour: Fix null-ptr-deref in neigh_flush_dev(). kernel test robot reported null-ptr-deref in neigh_flush_dev(). [0] The cited commit introduced per-netdev neighbour list and converted neigh_flush_dev() to use it instead of the global hash table. One thing we missed is that neigh_table_clear() calls neigh_ifdown() with NULL dev. Let's restore the hash table iteration. Note that IPv6 module is no longer unloadable, so neigh_table_clear() is called only when IPv6 fails to initialise, which is unlikely to happen. [0]: IPv6: Attempt to unregister permanent protocol 136 IPv6: Attempt to unregister permanent protocol 17 Oops: general protection fault, probably for non-canonical address 0xdffffc00000001a0: 0000 [#1] SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000d00-0x0000000000000d07] CPU: 1 UID: 0 PID: 1 Comm: systemd Tainted: G T 6.12.0-rc6-01246-gf7f52738637f #1 Tainted: [T]=RANDSTRUCT Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 RIP: 0010:neigh_flush_dev.llvm.6395807810224103582+0x52/0x570 Code: c1 e8 03 42 8a 04 38 84 c0 0f 85 15 05 00 00 31 c0 41 83 3e 0a 0f 94 c0 48 8d 1c c3 48 81 c3 f8 0c 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 f7 49 93 fe 4c 8b 3b 4d 85 ff 0f RSP: 0000:ffff88810026f408 EFLAGS: 00010206 RAX: 00000000000001a0 RBX: 0000000000000d00 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffc0631640 RBP: ffff88810026f470 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 R13: ffffffffc0625250 R14: ffffffffc0631640 R15: dffffc0000000000 FS: 00007f575cb83940(0000) GS:ffff8883aee00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f575db40008 CR3: 00000002bf936000 CR4: 00000000000406f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> __neigh_ifdown.llvm.6395807810224103582+0x44/0x390 neigh_table_clear+0xb1/0x268 ndisc_cleanup+0x21/0x38 [ipv6] init_module+0x2f5/0x468 [ipv6] do_one_initcall+0x1ba/0x628 do_init_module+0x21a/0x530 load_module+0x2550/0x2ea0 __se_sys_finit_module+0x3d2/0x620 __x64_sys_finit_module+0x76/0x88 x64_sys_call+0x7ff/0xde8 do_syscall_64+0xfb/0x1e8 entry_SYSCALL_64_after_hwframe+0x67/0x6f RIP: 0033:0x7f575d6f2719 Code: 08 89 e8 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d b7 06 0d 00 f7 d8 64 89 01 48 RSP: 002b:00007fff82a2a268 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 RAX: ffffffffffffffda RBX: 0000557827b45310 RCX: 00007f575d6f2719 RDX: 0000000000000000 RSI: 00007f575d584efd RDI: 0000000000000004 RBP: 00007f575d584efd R08: 0000000000000000 R09: 0000557827b47b00 R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000020000 R13: 0000000000000000 R14: 0000557827b470e0 R15: 00007f575dbb4270 </TASK> Modules linked in: ipv6(+) CVE-2025-38589 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38589.html CVE-2025-38589 https://bugzilla.suse.com/1248366 SUSE Bug 1248366 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Remove skb secpath if xfrm state is not found Hardware returns a unique identifier for a decrypted packet's xfrm state, this state is looked up in an xarray. However, the state might have been freed by the time of this lookup. Currently, if the state is not found, only a counter is incremented. The secpath (sp) extension on the skb is not removed, resulting in sp->len becoming 0. Subsequently, functions like __xfrm_policy_check() attempt to access fields such as xfrm_input_state(skb)->xso.type (which dereferences sp->xvec[sp->len - 1]) without first validating sp->len. This leads to a crash when dereferencing an invalid state pointer. This patch prevents the crash by explicitly removing the secpath extension from the skb if the xfrm state is not found after hardware decryption. This ensures downstream functions do not operate on a zero-length secpath. BUG: unable to handle page fault for address: ffffffff000002c8 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 282e067 P4D 282e067 PUD 0 Oops: Oops: 0000 [#1] SMP CPU: 12 UID: 0 PID: 0 Comm: swapper/12 Not tainted 6.15.0-rc7_for_upstream_min_debug_2025_05_27_22_44 #1 NONE Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 RIP: 0010:__xfrm_policy_check+0x61a/0xa30 Code: b6 77 7f 83 e6 02 74 14 4d 8b af d8 00 00 00 41 0f b6 45 05 c1 e0 03 48 98 49 01 c5 41 8b 45 00 83 e8 01 48 98 49 8b 44 c5 10 <0f> b6 80 c8 02 00 00 83 e0 0c 3c 04 0f 84 0c 02 00 00 31 ff 80 fa RSP: 0018:ffff88885fb04918 EFLAGS: 00010297 RAX: ffffffff00000000 RBX: 0000000000000002 RCX: 0000000000000000 RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000000 RBP: ffffffff8311af80 R08: 0000000000000020 R09: 00000000c2eda353 R10: ffff88812be2bbc8 R11: 000000001faab533 R12: ffff88885fb049c8 R13: ffff88812be2bbc8 R14: 0000000000000000 R15: ffff88811896ae00 FS: 0000000000000000(0000) GS:ffff8888dca82000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffffff000002c8 CR3: 0000000243050002 CR4: 0000000000372eb0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <IRQ> ? try_to_wake_up+0x108/0x4c0 ? udp4_lib_lookup2+0xbe/0x150 ? udp_lib_lport_inuse+0x100/0x100 ? __udp4_lib_lookup+0x2b0/0x410 __xfrm_policy_check2.constprop.0+0x11e/0x130 udp_queue_rcv_one_skb+0x1d/0x530 udp_unicast_rcv_skb+0x76/0x90 __udp4_lib_rcv+0xa64/0xe90 ip_protocol_deliver_rcu+0x20/0x130 ip_local_deliver_finish+0x75/0xa0 ip_local_deliver+0xc1/0xd0 ? ip_protocol_deliver_rcu+0x130/0x130 ip_sublist_rcv+0x1f9/0x240 ? ip_rcv_finish_core+0x430/0x430 ip_list_rcv+0xfc/0x130 __netif_receive_skb_list_core+0x181/0x1e0 netif_receive_skb_list_internal+0x200/0x360 ? mlx5e_build_rx_skb+0x1bc/0xda0 [mlx5_core] gro_receive_skb+0xfd/0x210 mlx5e_handle_rx_cqe_mpwrq+0x141/0x280 [mlx5_core] mlx5e_poll_rx_cq+0xcc/0x8e0 [mlx5_core] ? mlx5e_handle_rx_dim+0x91/0xd0 [mlx5_core] mlx5e_napi_poll+0x114/0xab0 [mlx5_core] __napi_poll+0x25/0x170 net_rx_action+0x32d/0x3a0 ? mlx5_eq_comp_int+0x8d/0x280 [mlx5_core] ? notifier_call_chain+0x33/0xa0 handle_softirqs+0xda/0x250 irq_exit_rcu+0x6d/0xc0 common_interrupt+0x81/0xa0 </IRQ> CVE-2025-38590 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38590.html CVE-2025-38590 https://bugzilla.suse.com/1248360 SUSE Bug 1248360 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Check device memory pointer before usage Add a NULL check before accessing device memory to prevent a crash if dev->dm allocation in mlx5_init_once() fails. CVE-2025-38645 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-38645.html CVE-2025-38645 https://bugzilla.suse.com/1248626 SUSE Bug 1248626 In the Linux kernel, the following vulnerability has been resolved: ftrace: Also allocate and copy hash for reading of filter files Currently the reader of set_ftrace_filter and set_ftrace_notrace just adds the pointer to the global tracer hash to its iterator. Unlike the writer that allocates a copy of the hash, the reader keeps the pointer to the filter hashes. This is problematic because this pointer is static across function calls that release the locks that can update the global tracer hashes. This can cause UAF and similar bugs. Allocate and copy the hash for reading the filter files like it is done for the writers. This not only fixes UAF bugs, but also makes the code a bit simpler as it doesn't have to differentiate when to free the iterator's hash between writers and readers. CVE-2025-39689 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39689.html CVE-2025-39689 https://bugzilla.suse.com/1249307 SUSE Bug 1249307 In the Linux kernel, the following vulnerability has been resolved: block: avoid possible overflow for chunk_sectors check in blk_stack_limits() In blk_stack_limits(), we check that the t->chunk_sectors value is a multiple of the t->physical_block_size value. However, by finding the chunk_sectors value in bytes, we may overflow the unsigned int which holds chunk_sectors, so change the check to be based on sectors. CVE-2025-39795 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39795.html CVE-2025-39795 https://bugzilla.suse.com/1249609 SUSE Bug 1249609 In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump When calling ftrace_dump_one() concurrently with reading trace_pipe, a WARN_ON_ONCE() in trace_printk_seq() can be triggered due to a race condition. The issue occurs because: CPU0 (ftrace_dump) CPU1 (reader) echo z > /proc/sysrq-trigger !trace_empty(&iter) trace_iterator_reset(&iter) <- len = size = 0 cat /sys/kernel/tracing/trace_pipe trace_find_next_entry_inc(&iter) __find_next_entry ring_buffer_empty_cpu <- all empty return NULL trace_printk_seq(&iter.seq) WARN_ON_ONCE(s->seq.len >= s->seq.size) In the context between trace_empty() and trace_find_next_entry_inc() during ftrace_dump, the ring buffer data was consumed by other readers. This caused trace_find_next_entry_inc to return NULL, failing to populate `iter.seq`. At this point, due to the prior trace_iterator_reset, both `iter.seq.len` and `iter.seq.size` were set to 0. Since they are equal, the WARN_ON_ONCE condition is triggered. Move the trace_printk_seq() into the if block that checks to make sure the return value of trace_find_next_entry_inc() is non-NULL in ftrace_dump_one(), ensuring the 'iter.seq' is properly populated before subsequent operations. CVE-2025-39813 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39813.html CVE-2025-39813 https://bugzilla.suse.com/1250032 SUSE Bug 1250032 In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL pointer dereference in ice_unplug_aux_dev() on reset Issuing a reset when the driver is loaded without RDMA support, will results in a crash as it attempts to remove RDMA's non-existent auxbus device: echo 1 > /sys/class/net/<if>/device/reset BUG: kernel NULL pointer dereference, address: 0000000000000008 ... RIP: 0010:ice_unplug_aux_dev+0x29/0x70 [ice] ... Call Trace: <TASK> ice_prepare_for_reset+0x77/0x260 [ice] pci_dev_save_and_disable+0x2c/0x70 pci_reset_function+0x88/0x130 reset_store+0x5a/0xa0 kernfs_fop_write_iter+0x15e/0x210 vfs_write+0x273/0x520 ksys_write+0x6b/0xe0 do_syscall_64+0x79/0x3b0 entry_SYSCALL_64_after_hwframe+0x76/0x7e ice_unplug_aux_dev() checks pf->cdev_info->adev for NULL pointer, but pf->cdev_info will also be NULL, leading to the deref in the trace above. Introduce a flag to be set when the creation of the auxbus device is successful, to avoid multiple NULL pointer checks in ice_unplug_aux_dev(). CVE-2025-39814 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39814.html CVE-2025-39814 https://bugzilla.suse.com/1249895 SUSE Bug 1249895 In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare Observed on kernel 6.6 (present on master as well): BUG: KASAN: slab-out-of-bounds in memcmp+0x98/0xd0 Call trace: kasan_check_range+0xe8/0x190 __asan_loadN+0x1c/0x28 memcmp+0x98/0xd0 efivarfs_d_compare+0x68/0xd8 __d_lookup_rcu_op_compare+0x178/0x218 __d_lookup_rcu+0x1f8/0x228 d_alloc_parallel+0x150/0x648 lookup_open.isra.0+0x5f0/0x8d0 open_last_lookups+0x264/0x828 path_openat+0x130/0x3f8 do_filp_open+0x114/0x248 do_sys_openat2+0x340/0x3c0 __arm64_sys_openat+0x120/0x1a0 If dentry->d_name.len < EFI_VARIABLE_GUID_LEN , 'guid' can become negative, leadings to oob. The issue can be triggered by parallel lookups using invalid filename: T1 T2 lookup_open ->lookup simple_lookup d_add // invalid dentry is added to hash list lookup_open d_alloc_parallel __d_lookup_rcu __d_lookup_rcu_op_compare hlist_bl_for_each_entry_rcu // invalid dentry can be retrieved ->d_compare efivarfs_d_compare // oob Fix it by checking 'guid' before cmp. CVE-2025-39817 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39817.html CVE-2025-39817 https://bugzilla.suse.com/1249998 SUSE Bug 1249998 In the Linux kernel, the following vulnerability has been resolved: trace/fgraph: Fix the warning caused by missing unregister notifier This warning was triggered during testing on v6.16: notifier callback ftrace_suspend_notifier_call already registered WARNING: CPU: 2 PID: 86 at kernel/notifier.c:23 notifier_chain_register+0x44/0xb0 ... Call Trace: <TASK> blocking_notifier_chain_register+0x34/0x60 register_ftrace_graph+0x330/0x410 ftrace_profile_write+0x1e9/0x340 vfs_write+0xf8/0x420 ? filp_flush+0x8a/0xa0 ? filp_close+0x1f/0x30 ? do_dup2+0xaf/0x160 ksys_write+0x65/0xe0 do_syscall_64+0xa4/0x260 entry_SYSCALL_64_after_hwframe+0x77/0x7f When writing to the function_profile_enabled interface, the notifier was not unregistered after start_graph_tracing failed, causing a warning the next time function_profile_enabled was written. Fixed by adding unregister_pm_notifier in the exception path. CVE-2025-39829 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39829.html CVE-2025-39829 https://bugzilla.suse.com/1250082 SUSE Bug 1250082 In the Linux kernel, the following vulnerability has been resolved: libceph: fix invalid accesses to ceph_connection_v1_info There is a place where generic code in messenger.c is reading and another place where it is writing to con->v1 union member without checking that the union member is active (i.e. msgr1 is in use). On 64-bit systems, con->v1.auth_retry overlaps with con->v2.out_iter, so such a read is almost guaranteed to return a bogus value instead of 0 when msgr2 is in use. This ends up being fairly benign because the side effect is just the invalidation of the authorizer and successive fetching of new tickets. con->v1.connect_seq overlaps with con->v2.conn_bufs and the fact that it's being written to can cause more serious consequences, but luckily it's not something that happens often. CVE-2025-39880 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39880.html CVE-2025-39880 https://bugzilla.suse.com/1250388 SUSE Bug 1250388 In the Linux kernel, the following vulnerability has been resolved: tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. syzbot reported the splat below. [0] The repro does the following: 1. Load a sk_msg prog that calls bpf_msg_cork_bytes(msg, cork_bytes) 2. Attach the prog to a SOCKMAP 3. Add a socket to the SOCKMAP 4. Activate fault injection 5. Send data less than cork_bytes At 5., the data is carried over to the next sendmsg() as it is smaller than the cork_bytes specified by bpf_msg_cork_bytes(). Then, tcp_bpf_send_verdict() tries to allocate psock->cork to hold the data, but this fails silently due to fault injection + __GFP_NOWARN. If the allocation fails, we need to revert the sk->sk_forward_alloc change done by sk_msg_alloc(). Let's call sk_msg_free() when tcp_bpf_send_verdict fails to allocate psock->cork. The "*copied" also needs to be updated such that a proper error can be returned to the caller, sendmsg. It fails to allocate psock->cork. Nothing has been corked so far, so this patch simply sets "*copied" to 0. [0]: WARNING: net/ipv4/af_inet.c:156 at inet_sock_destruct+0x623/0x730 net/ipv4/af_inet.c:156, CPU#1: syz-executor/5983 Modules linked in: CPU: 1 UID: 0 PID: 5983 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:inet_sock_destruct+0x623/0x730 net/ipv4/af_inet.c:156 Code: 0f 0b 90 e9 62 fe ff ff e8 7a db b5 f7 90 0f 0b 90 e9 95 fe ff ff e8 6c db b5 f7 90 0f 0b 90 e9 bb fe ff ff e8 5e db b5 f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc RSP: 0018:ffffc90000a08b48 EFLAGS: 00010246 RAX: ffffffff8a09d0b2 RBX: dffffc0000000000 RCX: ffff888024a23c80 RDX: 0000000000000100 RSI: 0000000000000fff RDI: 0000000000000000 RBP: 0000000000000fff R08: ffff88807e07c627 R09: 1ffff1100fc0f8c4 R10: dffffc0000000000 R11: ffffed100fc0f8c5 R12: ffff88807e07c380 R13: dffffc0000000000 R14: ffff88807e07c60c R15: 1ffff1100fc0f872 FS: 00005555604c4500(0000) GS:ffff888125af1000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005555604df5c8 CR3: 0000000032b06000 CR4: 00000000003526f0 Call Trace: <IRQ> __sk_destruct+0x86/0x660 net/core/sock.c:2339 rcu_do_batch kernel/rcu/tree.c:2605 [inline] rcu_core+0xca8/0x1770 kernel/rcu/tree.c:2861 handle_softirqs+0x286/0x870 kernel/softirq.c:579 __do_softirq kernel/softirq.c:613 [inline] invoke_softirq kernel/softirq.c:453 [inline] __irq_exit_rcu+0xca/0x1f0 kernel/softirq.c:680 irq_exit_rcu+0x9/0x30 kernel/softirq.c:696 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1052 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1052 </IRQ> CVE-2025-39913 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39913.html CVE-2025-39913 https://bugzilla.suse.com/1250705 SUSE Bug 1250705 In the Linux kernel, the following vulnerability has been resolved: ceph: fix race condition validating r_parent before applying state Add validation to ensure the cached parent directory inode matches the directory info in MDS replies. This prevents client-side race conditions where concurrent operations (e.g. rename) cause r_parent to become stale between request initiation and reply processing, which could lead to applying state changes to incorrect directory inodes. [ idryomov: folded a kerneldoc fixup and a follow-up fix from Alex to move CEPH_CAP_PIN reference when r_parent is updated: When the parent directory lock is not held, req->r_parent can become stale and is updated to point to the correct inode. However, the associated CEPH_CAP_PIN reference was not being adjusted. The CEPH_CAP_PIN is a reference on an inode that is tracked for accounting purposes. Moving this pin is important to keep the accounting balanced. When the pin was not moved from the old parent to the new one, it created two problems: The reference on the old, stale parent was never released, causing a reference leak. A reference for the new parent was never acquired, creating the risk of a reference underflow later in ceph_mdsc_release_request(). This patch corrects the logic by releasing the pin from the old parent and acquiring it for the new parent when r_parent is switched. This ensures reference accounting stays balanced. ] CVE-2025-39927 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-39927.html CVE-2025-39927 https://bugzilla.suse.com/1250738 SUSE Bug 1250738 In the Linux kernel, the following vulnerability has been resolved: pinctrl: check the return value of pinmux_ops::get_function_name() While the API contract in docs doesn't specify it explicitly, the generic implementation of the get_function_name() callback from struct pinmux_ops - pinmux_generic_get_function_name() - can fail and return NULL. This is already checked in pinmux_check_ops() so add a similar check in pinmux_func_name_to_selector() instead of passing the returned pointer right down to strcmp() where the NULL can get dereferenced. This is normal operation when adding new pinfunctions. CVE-2025-40030 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40030.html CVE-2025-40030 https://bugzilla.suse.com/1252773 SUSE Bug 1252773 In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd937x: set the comp soundwire port correctly For some reason we endup with setting soundwire port for HPHL_COMP and HPHR_COMP as zero, this can potentially result in a memory corruption due to accessing and setting -1 th element of port_map array. CVE-2025-40045 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40045.html CVE-2025-40045 https://bugzilla.suse.com/1252784 SUSE Bug 1252784 In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix missing pointer check in hda_component_manager_init function The __component_match_add function may assign the 'matchptr' pointer the value ERR_PTR(-ENOMEM), which will subsequently be dereferenced. The call stack leading to the error looks like this: hda_component_manager_init |-> component_match_add |-> component_match_add_release |-> __component_match_add ( ... ,**matchptr, ... ) |-> *matchptr = ERR_PTR(-ENOMEM); // assign |-> component_master_add_with_match( ... match) |-> component_match_realloc(match, match->num); // dereference Add IS_ERR() check to prevent the crash. Found by Linux Verification Center (linuxtesting.org) with SVACE. CVE-2025-40097 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40097.html CVE-2025-40097 https://bugzilla.suse.com/1252900 SUSE Bug 1252900 In the Linux kernel, the following vulnerability has been resolved: comedi: fix divide-by-zero in comedi_buf_munge() The comedi_buf_munge() function performs a modulo operation `async->munge_chan %= async->cmd.chanlist_len` without first checking if chanlist_len is zero. If a user program submits a command with chanlist_len set to zero, this causes a divide-by-zero error when the device processes data in the interrupt handler path. Add a check for zero chanlist_len at the beginning of the function, similar to the existing checks for !map and CMDF_RAWDATA flag. When chanlist_len is zero, update munge_count and return early, indicating the data was handled without munging. This prevents potential kernel panics from malformed user commands. CVE-2025-40106 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40106.html CVE-2025-40106 https://bugzilla.suse.com/1252891 SUSE Bug 1252891 In the Linux kernel, the following vulnerability has been resolved: blk-throttle: fix access race during throttle policy activation On repeated cold boots we occasionally hit a NULL pointer crash in blk_should_throtl() when throttling is consulted before the throttle policy is fully enabled for the queue. Checking only q->td != NULL is insufficient during early initialization, so blkg_to_pd() for the throttle policy can still return NULL and blkg_to_tg() becomes NULL, which later gets dereferenced. Unable to handle kernel NULL pointer dereference at virtual address 0000000000000156 ... pc : submit_bio_noacct+0x14c/0x4c8 lr : submit_bio_noacct+0x48/0x4c8 sp : ffff800087f0b690 x29: ffff800087f0b690 x28: 0000000000005f90 x27: ffff00068af393c0 x26: 0000000000080000 x25: 000000000002fbc0 x24: ffff000684ddcc70 x23: 0000000000000000 x22: 0000000000000000 x21: 0000000000000000 x20: 0000000000080000 x19: ffff000684ddcd08 x18: ffffffffffffffff x17: 0000000000000000 x16: ffff80008132a550 x15: 0000ffff98020fff x14: 0000000000000000 x13: 1fffe000d11d7021 x12: ffff000688eb810c x11: ffff00077ec4bb80 x10: ffff000688dcb720 x9 : ffff80008068ef60 x8 : 00000a6fb8a86e85 x7 : 000000000000111e x6 : 0000000000000002 x5 : 0000000000000246 x4 : 0000000000015cff x3 : 0000000000394500 x2 : ffff000682e35e40 x1 : 0000000000364940 x0 : 000000000000001a Call trace: submit_bio_noacct+0x14c/0x4c8 verity_map+0x178/0x2c8 __map_bio+0x228/0x250 dm_submit_bio+0x1c4/0x678 __submit_bio+0x170/0x230 submit_bio_noacct_nocheck+0x16c/0x388 submit_bio_noacct+0x16c/0x4c8 submit_bio+0xb4/0x210 f2fs_submit_read_bio+0x4c/0xf0 f2fs_mpage_readpages+0x3b0/0x5f0 f2fs_readahead+0x90/0xe8 Tighten blk_throtl_activated() to also require that the throttle policy bit is set on the queue: return q->td != NULL && test_bit(blkcg_policy_throtl.plid, q->blkcg_pols); This prevents blk_should_throtl() from accessing throttle group state until policy data has been attached to blkgs. CVE-2025-40147 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40147.html CVE-2025-40147 https://bugzilla.suse.com/1253344 SUSE Bug 1253344 In the Linux kernel, the following vulnerability has been resolved: mount: handle NULL values in mnt_ns_release() When calling in listmount() mnt_ns_release() may be passed a NULL pointer. Handle that case gracefully. CVE-2025-40195 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40195.html CVE-2025-40195 https://bugzilla.suse.com/1253500 SUSE Bug 1253500 In the Linux kernel, the following vulnerability has been resolved: mptcp: fix a race in mptcp_pm_del_add_timer() mptcp_pm_del_add_timer() can call sk_stop_timer_sync(sk, &entry->add_timer) while another might have free entry already, as reported by syzbot. Add RCU protection to fix this issue. Also change confusing add_timer variable with stop_timer boolean. syzbot report: BUG: KASAN: slab-use-after-free in __timer_delete_sync+0x372/0x3f0 kernel/time/timer.c:1616 Read of size 4 at addr ffff8880311e4150 by task kworker/1:1/44 CPU: 1 UID: 0 PID: 44 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 Workqueue: events mptcp_worker Call Trace: <TASK> dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xca/0x240 mm/kasan/report.c:482 kasan_report+0x118/0x150 mm/kasan/report.c:595 __timer_delete_sync+0x372/0x3f0 kernel/time/timer.c:1616 sk_stop_timer_sync+0x1b/0x90 net/core/sock.c:3631 mptcp_pm_del_add_timer+0x283/0x310 net/mptcp/pm.c:362 mptcp_incoming_options+0x1357/0x1f60 net/mptcp/options.c:1174 tcp_data_queue+0xca/0x6450 net/ipv4/tcp_input.c:5361 tcp_rcv_established+0x1335/0x2670 net/ipv4/tcp_input.c:6441 tcp_v4_do_rcv+0x98b/0xbf0 net/ipv4/tcp_ipv4.c:1931 tcp_v4_rcv+0x252a/0x2dc0 net/ipv4/tcp_ipv4.c:2374 ip_protocol_deliver_rcu+0x221/0x440 net/ipv4/ip_input.c:205 ip_local_deliver_finish+0x3bb/0x6f0 net/ipv4/ip_input.c:239 NF_HOOK+0x30c/0x3a0 include/linux/netfilter.h:318 NF_HOOK+0x30c/0x3a0 include/linux/netfilter.h:318 __netif_receive_skb_one_core net/core/dev.c:6079 [inline] __netif_receive_skb+0x143/0x380 net/core/dev.c:6192 process_backlog+0x31e/0x900 net/core/dev.c:6544 __napi_poll+0xb6/0x540 net/core/dev.c:7594 napi_poll net/core/dev.c:7657 [inline] net_rx_action+0x5f7/0xda0 net/core/dev.c:7784 handle_softirqs+0x22f/0x710 kernel/softirq.c:622 __do_softirq kernel/softirq.c:656 [inline] __local_bh_enable_ip+0x1a0/0x2e0 kernel/softirq.c:302 mptcp_pm_send_ack net/mptcp/pm.c:210 [inline] mptcp_pm_addr_send_ack+0x41f/0x500 net/mptcp/pm.c:-1 mptcp_pm_worker+0x174/0x320 net/mptcp/pm.c:1002 mptcp_worker+0xd5/0x1170 net/mptcp/protocol.c:2762 process_one_work kernel/workqueue.c:3263 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 </TASK> Allocated by task 44: kasan_save_stack mm/kasan/common.c:56 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:77 poison_kmalloc_redzone mm/kasan/common.c:400 [inline] __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:417 kasan_kmalloc include/linux/kasan.h:262 [inline] __kmalloc_cache_noprof+0x1ef/0x6c0 mm/slub.c:5748 kmalloc_noprof include/linux/slab.h:957 [inline] mptcp_pm_alloc_anno_list+0x104/0x460 net/mptcp/pm.c:385 mptcp_pm_create_subflow_or_signal_addr+0xf9d/0x1360 net/mptcp/pm_kernel.c:355 mptcp_pm_nl_fully_established net/mptcp/pm_kernel.c:409 [inline] __mptcp_pm_kernel_worker+0x417/0x1ef0 net/mptcp/pm_kernel.c:1529 mptcp_pm_worker+0x1ee/0x320 net/mptcp/pm.c:1008 mptcp_worker+0xd5/0x1170 net/mptcp/protocol.c:2762 process_one_work kernel/workqueue.c:3263 [inline] process_scheduled_works+0xae1/0x17b0 kernel/workqueue.c:3346 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3427 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 Freed by task 6630: kasan_save_stack mm/kasan/common.c:56 [inline] kasan_save_track+0x3e/0x80 mm/kasan/common.c:77 __kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:587 kasan_save_free_info mm/kasan/kasan.h:406 [inline] poison_slab_object m ---truncated--- CVE-2025-40257 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40257.html CVE-2025-40257 https://bugzilla.suse.com/1254842 SUSE Bug 1254842 https://bugzilla.suse.com/1257242 SUSE Bug 1257242 In the Linux kernel, the following vulnerability has been resolved: scsi: sg: Do not sleep in atomic context sg_finish_rem_req() calls blk_rq_unmap_user(). The latter function may sleep. Hence, call sg_finish_rem_req() with interrupts enabled instead of disabled. CVE-2025-40259 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40259.html CVE-2025-40259 https://bugzilla.suse.com/1254845 SUSE Bug 1254845 In the Linux kernel, the following vulnerability has been resolved: nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() nvme_fc_delete_assocation() waits for pending I/O to complete before returning, and an error can cause ->ioerr_work to be queued after cancel_work_sync() had been called. Move the call to cancel_work_sync() to be after nvme_fc_delete_association() to ensure ->ioerr_work is not running when the nvme_fc_ctrl object is freed. Otherwise the following can occur: [ 1135.911754] list_del corruption, ff2d24c8093f31f8->next is NULL [ 1135.917705] ------------[ cut here ]------------ [ 1135.922336] kernel BUG at lib/list_debug.c:52! [ 1135.926784] Oops: invalid opcode: 0000 [#1] SMP NOPTI [ 1135.931851] CPU: 48 UID: 0 PID: 726 Comm: kworker/u449:23 Kdump: loaded Not tainted 6.12.0 #1 PREEMPT(voluntary) [ 1135.943490] Hardware name: Dell Inc. PowerEdge R660/0HGTK9, BIOS 2.5.4 01/16/2025 [ 1135.950969] Workqueue: 0x0 (nvme-wq) [ 1135.954673] RIP: 0010:__list_del_entry_valid_or_report.cold+0xf/0x6f [ 1135.961041] Code: c7 c7 98 68 72 94 e8 26 45 fe ff 0f 0b 48 c7 c7 70 68 72 94 e8 18 45 fe ff 0f 0b 48 89 fe 48 c7 c7 80 69 72 94 e8 07 45 fe ff <0f> 0b 48 89 d1 48 c7 c7 a0 6a 72 94 48 89 c2 e8 f3 44 fe ff 0f 0b [ 1135.979788] RSP: 0018:ff579b19482d3e50 EFLAGS: 00010046 [ 1135.985015] RAX: 0000000000000033 RBX: ff2d24c8093f31f0 RCX: 0000000000000000 [ 1135.992148] RDX: 0000000000000000 RSI: ff2d24d6bfa1d0c0 RDI: ff2d24d6bfa1d0c0 [ 1135.999278] RBP: ff2d24c8093f31f8 R08: 0000000000000000 R09: ffffffff951e2b08 [ 1136.006413] R10: ffffffff95122ac8 R11: 0000000000000003 R12: ff2d24c78697c100 [ 1136.013546] R13: fffffffffffffff8 R14: 0000000000000000 R15: ff2d24c78697c0c0 [ 1136.020677] FS: 0000000000000000(0000) GS:ff2d24d6bfa00000(0000) knlGS:0000000000000000 [ 1136.028765] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1136.034510] CR2: 00007fd207f90b80 CR3: 000000163ea22003 CR4: 0000000000f73ef0 [ 1136.041641] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1136.048776] DR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400 [ 1136.055910] PKRU: 55555554 [ 1136.058623] Call Trace: [ 1136.061074] <TASK> [ 1136.063179] ? show_trace_log_lvl+0x1b0/0x2f0 [ 1136.067540] ? show_trace_log_lvl+0x1b0/0x2f0 [ 1136.071898] ? move_linked_works+0x4a/0xa0 [ 1136.075998] ? __list_del_entry_valid_or_report.cold+0xf/0x6f [ 1136.081744] ? __die_body.cold+0x8/0x12 [ 1136.085584] ? die+0x2e/0x50 [ 1136.088469] ? do_trap+0xca/0x110 [ 1136.091789] ? do_error_trap+0x65/0x80 [ 1136.095543] ? __list_del_entry_valid_or_report.cold+0xf/0x6f [ 1136.101289] ? exc_invalid_op+0x50/0x70 [ 1136.105127] ? __list_del_entry_valid_or_report.cold+0xf/0x6f [ 1136.110874] ? asm_exc_invalid_op+0x1a/0x20 [ 1136.115059] ? __list_del_entry_valid_or_report.cold+0xf/0x6f [ 1136.120806] move_linked_works+0x4a/0xa0 [ 1136.124733] worker_thread+0x216/0x3a0 [ 1136.128485] ? __pfx_worker_thread+0x10/0x10 [ 1136.132758] kthread+0xfa/0x240 [ 1136.135904] ? __pfx_kthread+0x10/0x10 [ 1136.139657] ret_from_fork+0x31/0x50 [ 1136.143236] ? __pfx_kthread+0x10/0x10 [ 1136.146988] ret_from_fork_asm+0x1a/0x30 [ 1136.150915] </TASK> CVE-2025-40261 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40261.html CVE-2025-40261 https://bugzilla.suse.com/1254839 SUSE Bug 1254839 In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix field-spanning memcpy warning in AH output Fix field-spanning memcpy warnings in ah6_output() and ah6_output_done() where extension headers are copied to/from IPv6 address fields, triggering fortify-string warnings about writes beyond the 16-byte address fields. memcpy: detected field-spanning write (size 40) of single field "&top_iph->saddr" at net/ipv6/ah6.c:439 (size 16) WARNING: CPU: 0 PID: 8838 at net/ipv6/ah6.c:439 ah6_output+0xe7e/0x14e0 net/ipv6/ah6.c:439 The warnings are false positives as the extension headers are intentionally placed after the IPv6 header in memory. Fix by properly copying addresses and extension headers separately, and introduce helper functions to avoid code duplication. CVE-2025-40363 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-40363.html CVE-2025-40363 https://bugzilla.suse.com/1255102 SUSE Bug 1255102 In the Linux kernel, the following vulnerability has been resolved: amd/amdkfd: enhance kfd process check in switch partition current switch partition only check if kfd_processes_table is empty. kfd_prcesses_table entry is deleted in kfd_process_notifier_release, but kfd_process tear down is in kfd_process_wq_release. consider two processes: Process A (workqueue) -> kfd_process_wq_release -> Access kfd_node member Process B switch partition -> amdgpu_xcp_pre_partition_switch -> amdgpu_amdkfd_device_fini_sw -> kfd_node tear down. Process A and B may trigger a race as shown in dmesg log. This patch is to resolve the race by adding an atomic kfd_process counter kfd_processes_count, it increment as create kfd process, decrement as finish kfd_process_wq_release. v2: Put kfd_processes_count per kfd_dev, move decrement to kfd_process_destroy_pdds and bug fix. (Philip Yang) [3966658.307702] divide error: 0000 [#1] SMP NOPTI [3966658.350818] i10nm_edac [3966658.356318] CPU: 124 PID: 38435 Comm: kworker/124:0 Kdump: loaded Tainted [3966658.356890] Workqueue: kfd_process_wq kfd_process_wq_release [amdgpu] [3966658.362839] nfit [3966658.366457] RIP: 0010:kfd_get_num_sdma_engines+0x17/0x40 [amdgpu] [3966658.366460] Code: 00 00 e9 ac 81 02 00 66 66 2e 0f 1f 84 00 00 00 00 00 90 0f 1f 44 00 00 48 8b 4f 08 48 8b b7 00 01 00 00 8b 81 58 26 03 00 99 <f7> be b8 01 00 00 80 b9 70 2e 00 00 00 74 0b 83 f8 02 ba 02 00 00 [3966658.380967] x86_pkg_temp_thermal [3966658.391529] RSP: 0018:ffffc900a0edfdd8 EFLAGS: 00010246 [3966658.391531] RAX: 0000000000000008 RBX: ffff8974e593b800 RCX: ffff888645900000 [3966658.391531] RDX: 0000000000000000 RSI: ffff888129154400 RDI: ffff888129151c00 [3966658.391532] RBP: ffff8883ad79d400 R08: 0000000000000000 R09: ffff8890d2750af4 [3966658.391532] R10: 0000000000000018 R11: 0000000000000018 R12: 0000000000000000 [3966658.391533] R13: ffff8883ad79d400 R14: ffffe87ff662ba00 R15: ffff8974e593b800 [3966658.391533] FS: 0000000000000000(0000) GS:ffff88fe7f600000(0000) knlGS:0000000000000000 [3966658.391534] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [3966658.391534] CR2: 0000000000d71000 CR3: 000000dd0e970004 CR4: 0000000002770ee0 [3966658.391535] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [3966658.391535] DR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400 [3966658.391536] PKRU: 55555554 [3966658.391536] Call Trace: [3966658.391674] deallocate_sdma_queue+0x38/0xa0 [amdgpu] [3966658.391762] process_termination_cpsch+0x1ed/0x480 [amdgpu] [3966658.399754] intel_powerclamp [3966658.402831] kfd_process_dequeue_from_all_devices+0x5b/0xc0 [amdgpu] [3966658.402908] kfd_process_wq_release+0x1a/0x1a0 [amdgpu] [3966658.410516] coretemp [3966658.434016] process_one_work+0x1ad/0x380 [3966658.434021] worker_thread+0x49/0x310 [3966658.438963] kvm_intel [3966658.446041] ? process_one_work+0x380/0x380 [3966658.446045] kthread+0x118/0x140 [3966658.446047] ? __kthread_bind_mask+0x60/0x60 [3966658.446050] ret_from_fork+0x1f/0x30 [3966658.446053] Modules linked in: kpatch_20765354(OEK) [3966658.455310] kvm [3966658.464534] mptcp_diag xsk_diag raw_diag unix_diag af_packet_diag netlink_diag udp_diag act_pedit act_mirred act_vlan cls_flower kpatch_21951273(OEK) kpatch_18424469(OEK) kpatch_19749756(OEK) [3966658.473462] idxd_mdev [3966658.482306] kpatch_17971294(OEK) sch_ingress xt_conntrack amdgpu(OE) amdxcp(OE) amddrm_buddy(OE) amd_sched(OE) amdttm(OE) amdkcl(OE) intel_ifs iptable_mangle tcm_loop target_core_pscsi tcp_diag target_core_file inet_diag target_core_iblock target_core_user target_core_mod coldpgs kpatch_18383292(OEK) ip6table_nat ip6table_filter ip6_tables ip_set_hash_ipportip ip_set_hash_ipportnet ip_set_hash_ipport ip_set_bitmap_port xt_comment iptable_nat nf_nat iptable_filter ip_tables ip_set ip_vs_sh ip_vs_wrr ip_vs_rr ip_vs nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 sn_core_odd(OE) i40e overlay binfmt_misc tun bonding(OE) aisqos(OE) aisqo ---truncated--- CVE-2025-68174 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68174.html CVE-2025-68174 https://bugzilla.suse.com/1255327 SUSE Bug 1255327 In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix possible deadlock while configuring policy Following deadlock can be triggered easily by lockdep: WARNING: possible circular locking dependency detected 6.17.0-rc3-00124-ga12c2658ced0 #1665 Not tainted ------------------------------------------------------ check/1334 is trying to acquire lock: ff1100011d9d0678 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_unregister_queue+0x53/0x180 but task is already holding lock: ff1100011d9d00e0 (&q->q_usage_counter(queue)#3){++++}-{0:0}, at: del_gendisk+0xba/0x110 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #2 (&q->q_usage_counter(queue)#3){++++}-{0:0}: blk_queue_enter+0x40b/0x470 blkg_conf_prep+0x7b/0x3c0 tg_set_limit+0x10a/0x3e0 cgroup_file_write+0xc6/0x420 kernfs_fop_write_iter+0x189/0x280 vfs_write+0x256/0x490 ksys_write+0x83/0x190 __x64_sys_write+0x21/0x30 x64_sys_call+0x4608/0x4630 do_syscall_64+0xdb/0x6b0 entry_SYSCALL_64_after_hwframe+0x76/0x7e -> #1 (&q->rq_qos_mutex){+.+.}-{4:4}: __mutex_lock+0xd8/0xf50 mutex_lock_nested+0x2b/0x40 wbt_init+0x17e/0x280 wbt_enable_default+0xe9/0x140 blk_register_queue+0x1da/0x2e0 __add_disk+0x38c/0x5d0 add_disk_fwnode+0x89/0x250 device_add_disk+0x18/0x30 virtblk_probe+0x13a3/0x1800 virtio_dev_probe+0x389/0x610 really_probe+0x136/0x620 __driver_probe_device+0xb3/0x230 driver_probe_device+0x2f/0xe0 __driver_attach+0x158/0x250 bus_for_each_dev+0xa9/0x130 driver_attach+0x26/0x40 bus_add_driver+0x178/0x3d0 driver_register+0x7d/0x1c0 __register_virtio_driver+0x2c/0x60 virtio_blk_init+0x6f/0xe0 do_one_initcall+0x94/0x540 kernel_init_freeable+0x56a/0x7b0 kernel_init+0x2b/0x270 ret_from_fork+0x268/0x4c0 ret_from_fork_asm+0x1a/0x30 -> #0 (&q->sysfs_lock){+.+.}-{4:4}: __lock_acquire+0x1835/0x2940 lock_acquire+0xf9/0x450 __mutex_lock+0xd8/0xf50 mutex_lock_nested+0x2b/0x40 blk_unregister_queue+0x53/0x180 __del_gendisk+0x226/0x690 del_gendisk+0xba/0x110 sd_remove+0x49/0xb0 [sd_mod] device_remove+0x87/0xb0 device_release_driver_internal+0x11e/0x230 device_release_driver+0x1a/0x30 bus_remove_device+0x14d/0x220 device_del+0x1e1/0x5a0 __scsi_remove_device+0x1ff/0x2f0 scsi_remove_device+0x37/0x60 sdev_store_delete+0x77/0x100 dev_attr_store+0x1f/0x40 sysfs_kf_write+0x65/0x90 kernfs_fop_write_iter+0x189/0x280 vfs_write+0x256/0x490 ksys_write+0x83/0x190 __x64_sys_write+0x21/0x30 x64_sys_call+0x4608/0x4630 do_syscall_64+0xdb/0x6b0 entry_SYSCALL_64_after_hwframe+0x76/0x7e other info that might help us debug this: Chain exists of: &q->sysfs_lock --> &q->rq_qos_mutex --> &q->q_usage_counter(queue)#3 Possible unsafe locking scenario: CPU0 CPU1 ---- ---- lock(&q->q_usage_counter(queue)#3); lock(&q->rq_qos_mutex); lock(&q->q_usage_counter(queue)#3); lock(&q->sysfs_lock); Root cause is that queue_usage_counter is grabbed with rq_qos_mutex held in blkg_conf_prep(), while queue should be freezed before rq_qos_mutex from other context. The blk_queue_enter() from blkg_conf_prep() is used to protect against policy deactivation, which is already protected with blkcg_mutex, hence convert blk_queue_enter() to blkcg_mutex to fix this problem. Meanwhile, consider that blkcg_mutex is held after queue is freezed from policy deactivation, also convert blkg_alloc() to use GFP_NOIO. CVE-2025-68178 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68178.html CVE-2025-68178 https://bugzilla.suse.com/1255266 SUSE Bug 1255266 In the Linux kernel, the following vulnerability has been resolved: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() Use RCU to avoid a pair of atomic operations and a potential UAF on dst_dev()->flags. CVE-2025-68188 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68188.html CVE-2025-68188 https://bugzilla.suse.com/1255269 SUSE Bug 1255269 In the Linux kernel, the following vulnerability has been resolved: bpf: Add bpf_prog_run_data_pointers() syzbot found that cls_bpf_classify() is able to change tc_skb_cb(skb)->drop_reason triggering a warning in sk_skb_reason_drop(). WARNING: CPU: 0 PID: 5965 at net/core/skbuff.c:1192 __sk_skb_reason_drop net/core/skbuff.c:1189 [inline] WARNING: CPU: 0 PID: 5965 at net/core/skbuff.c:1192 sk_skb_reason_drop+0x76/0x170 net/core/skbuff.c:1214 struct tc_skb_cb has been added in commit ec624fe740b4 ("net/sched: Extend qdisc control block with tc control block"), which added a wrong interaction with db58ba459202 ("bpf: wire in data and data_end for cls_act_bpf"). drop_reason was added later. Add bpf_prog_run_data_pointers() helper to save/restore the net_sched storage colliding with BPF data_meta/data_end. CVE-2025-68200 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68200.html CVE-2025-68200 https://bugzilla.suse.com/1255241 SUSE Bug 1255241 In the Linux kernel, the following vulnerability has been resolved: ksm: use range-walk function to jump over holes in scan_get_next_rmap_item Currently, scan_get_next_rmap_item() walks every page address in a VMA to locate mergeable pages. This becomes highly inefficient when scanning large virtual memory areas that contain mostly unmapped regions, causing ksmd to use large amount of cpu without deduplicating much pages. This patch replaces the per-address lookup with a range walk using walk_page_range(). The range walker allows KSM to skip over entire unmapped holes in a VMA, avoiding unnecessary lookups. This problem was previously discussed in [1]. Consider the following test program which creates a 32 TiB mapping in the virtual address space but only populates a single page: #include <unistd.h> #include <stdio.h> #include <sys/mman.h> /* 32 TiB */ const size_t size = 32ul * 1024 * 1024 * 1024 * 1024; int main() { char *area = mmap(NULL, size, PROT_READ | PROT_WRITE, MAP_NORESERVE | MAP_PRIVATE | MAP_ANON, -1, 0); if (area == MAP_FAILED) { perror("mmap() failed\n"); return -1; } /* Populate a single page such that we get an anon_vma. */ *area = 0; /* Enable KSM. */ madvise(area, size, MADV_MERGEABLE); pause(); return 0; } $ ./ksm-sparse & $ echo 1 > /sys/kernel/mm/ksm/run Without this patch ksmd uses 100% of the cpu for a long time (more then 1 hour in my test machine) scanning all the 32 TiB virtual address space that contain only one mapped page. This makes ksmd essentially deadlocked not able to deduplicate anything of value. With this patch ksmd walks only the one mapped page and skips the rest of the 32 TiB virtual address space, making the scan fast using little cpu. CVE-2025-68211 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68211.html CVE-2025-68211 https://bugzilla.suse.com/1255319 SUSE Bug 1255319 In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix lockdep WARN due to partition scan work Blktests test cases nvme/014, 057 and 058 fail occasionally due to a lockdep WARN. As reported in the Closes tag URL, the WARN indicates that a deadlock can happen due to the dependency among disk->open_mutex, kblockd workqueue completion and partition_scan_work completion. To avoid the lockdep WARN and the potential deadlock, cut the dependency by running the partition_scan_work not by kblockd workqueue but by nvme_wq. CVE-2025-68218 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68218.html CVE-2025-68218 https://bugzilla.suse.com/1255245 SUSE Bug 1255245 In the Linux kernel, the following vulnerability has been resolved: mptcp: Fix proto fallback detection with BPF The sockmap feature allows bpf syscall from userspace, or based on bpf sockops, replacing the sk_prot of sockets during protocol stack processing with sockmap's custom read/write interfaces. ''' tcp_rcv_state_process() syn_recv_sock()/subflow_syn_recv_sock() tcp_init_transfer(BPF_SOCK_OPS_PASSIVE_ESTABLISHED_CB) bpf_skops_established <== sockops bpf_sock_map_update(sk) <== call bpf helper tcp_bpf_update_proto() <== update sk_prot ''' When the server has MPTCP enabled but the client sends a TCP SYN without MPTCP, subflow_syn_recv_sock() performs a fallback on the subflow, replacing the subflow sk's sk_prot with the native sk_prot. ''' subflow_syn_recv_sock() subflow_ulp_fallback() subflow_drop_ctx() mptcp_subflow_ops_undo_override() ''' Then, this subflow can be normally used by sockmap, which replaces the native sk_prot with sockmap's custom sk_prot. The issue occurs when the user executes accept::mptcp_stream_accept::mptcp_fallback_tcp_ops(). Here, it uses sk->sk_prot to compare with the native sk_prot, but this is incorrect when sockmap is used, as we may incorrectly set sk->sk_socket->ops. This fix uses the more generic sk_family for the comparison instead. Additionally, this also prevents a WARNING from occurring: result from ./scripts/decode_stacktrace.sh: ------------[ cut here ]------------ WARNING: CPU: 0 PID: 337 at net/mptcp/protocol.c:68 mptcp_stream_accept \ (net/mptcp/protocol.c:4005) Modules linked in: ... PKRU: 55555554 Call Trace: <TASK> do_accept (net/socket.c:1989) __sys_accept4 (net/socket.c:2028 net/socket.c:2057) __x64_sys_accept (net/socket.c:2067) x64_sys_call (arch/x86/entry/syscall_64.c:41) do_syscall_64 (arch/x86/entry/syscall_64.c:63 arch/x86/entry/syscall_64.c:94) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) RIP: 0033:0x7f87ac92b83d ---[ end trace 0000000000000000 ]--- CVE-2025-68227 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68227.html CVE-2025-68227 https://bugzilla.suse.com/1255216 SUSE Bug 1255216 In the Linux kernel, the following vulnerability has been resolved: ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe The sit driver's packet transmission path calls: sit_tunnel_xmit() -> update_or_create_fnhe(), which lead to fnhe_remove_oldest() being called to delete entries exceeding FNHE_RECLAIM_DEPTH+random. The race window is between fnhe_remove_oldest() selecting fnheX for deletion and the subsequent kfree_rcu(). During this time, the concurrent path's __mkroute_output() -> find_exception() can fetch the soon-to-be-deleted fnheX, and rt_bind_exception() then binds it with a new dst using a dst_hold(). When the original fnheX is freed via RCU, the dst reference remains permanently leaked. CPU 0 CPU 1 __mkroute_output() find_exception() [fnheX] update_or_create_fnhe() fnhe_remove_oldest() [fnheX] rt_bind_exception() [bind dst] RCU callback [fnheX freed, dst leak] This issue manifests as a device reference count leak and a warning in dmesg when unregistering the net device: unregister_netdevice: waiting for sitX to become free. Usage count = N Ido Schimmel provided the simple test validation method [1]. The fix clears 'oldest->fnhe_daddr' before calling fnhe_flush_routes(). Since rt_bind_exception() checks this field, setting it to zero prevents the stale fnhe from being reused and bound to a new dst just before it is freed. [1] ip netns add ns1 ip -n ns1 link set dev lo up ip -n ns1 address add 192.0.2.1/32 dev lo ip -n ns1 link add name dummy1 up type dummy ip -n ns1 route add 192.0.2.2/32 dev dummy1 ip -n ns1 link add name gretap1 up arp off type gretap \ local 192.0.2.1 remote 192.0.2.2 ip -n ns1 route add 198.51.0.0/16 dev gretap1 taskset -c 0 ip netns exec ns1 mausezahn gretap1 \ -A 198.51.100.1 -B 198.51.0.0/16 -t udp -p 1000 -c 0 -q & taskset -c 2 ip netns exec ns1 mausezahn gretap1 \ -A 198.51.100.1 -B 198.51.0.0/16 -t udp -p 1000 -c 0 -q & sleep 10 ip netns pids ns1 | xargs kill ip netns del ns1 CVE-2025-68241 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68241.html CVE-2025-68241 https://bugzilla.suse.com/1255157 SUSE Bug 1255157 In the Linux kernel, the following vulnerability has been resolved: net: netpoll: fix incorrect refcount handling causing incorrect cleanup commit efa95b01da18 ("netpoll: fix use after free") incorrectly ignored the refcount and prematurely set dev->npinfo to NULL during netpoll cleanup, leading to improper behavior and memory leaks. Scenario causing lack of proper cleanup: 1) A netpoll is associated with a NIC (e.g., eth0) and netdev->npinfo is allocated, and refcnt = 1 - Keep in mind that npinfo is shared among all netpoll instances. In this case, there is just one. 2) Another netpoll is also associated with the same NIC and npinfo->refcnt += 1. - Now dev->npinfo->refcnt = 2; - There is just one npinfo associated to the netdev. 3) When the first netpolls goes to clean up: - The first cleanup succeeds and clears np->dev->npinfo, ignoring refcnt. - It basically calls `RCU_INIT_POINTER(np->dev->npinfo, NULL);` - Set dev->npinfo = NULL, without proper cleanup - No ->ndo_netpoll_cleanup() is either called 4) Now the second target tries to clean up - The second cleanup fails because np->dev->npinfo is already NULL. * In this case, ops->ndo_netpoll_cleanup() was never called, and the skb pool is not cleaned as well (for the second netpoll instance) - This leaks npinfo and skbpool skbs, which is clearly reported by kmemleak. Revert commit efa95b01da18 ("netpoll: fix use after free") and adds clarifying comments emphasizing that npinfo cleanup should only happen once the refcount reaches zero, ensuring stable and correct netpoll behavior. CVE-2025-68245 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68245.html CVE-2025-68245 https://bugzilla.suse.com/1255268 SUSE Bug 1255268 In the Linux kernel, the following vulnerability has been resolved: ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() Fix a race between inline data destruction and block mapping. The function ext4_destroy_inline_data_nolock() changes the inode data layout by clearing EXT4_INODE_INLINE_DATA and setting EXT4_INODE_EXTENTS. At the same time, another thread may execute ext4_map_blocks(), which tests EXT4_INODE_EXTENTS to decide whether to call ext4_ext_map_blocks() or ext4_ind_map_blocks(). Without i_data_sem protection, ext4_ind_map_blocks() may receive inode with EXT4_INODE_EXTENTS flag and triggering assert. kernel BUG at fs/ext4/indirect.c:546! EXT4-fs (loop2): unmounting filesystem. invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:ext4_ind_map_blocks.cold+0x2b/0x5a fs/ext4/indirect.c:546 Call Trace: <TASK> ext4_map_blocks+0xb9b/0x16f0 fs/ext4/inode.c:681 _ext4_get_block+0x242/0x590 fs/ext4/inode.c:822 ext4_block_write_begin+0x48b/0x12c0 fs/ext4/inode.c:1124 ext4_write_begin+0x598/0xef0 fs/ext4/inode.c:1255 ext4_da_write_begin+0x21e/0x9c0 fs/ext4/inode.c:3000 generic_perform_write+0x259/0x5d0 mm/filemap.c:3846 ext4_buffered_write_iter+0x15b/0x470 fs/ext4/file.c:285 ext4_file_write_iter+0x8e0/0x17f0 fs/ext4/file.c:679 call_write_iter include/linux/fs.h:2271 [inline] do_iter_readv_writev+0x212/0x3c0 fs/read_write.c:735 do_iter_write+0x186/0x710 fs/read_write.c:861 vfs_iter_write+0x70/0xa0 fs/read_write.c:902 iter_file_splice_write+0x73b/0xc90 fs/splice.c:685 do_splice_from fs/splice.c:763 [inline] direct_splice_actor+0x10f/0x170 fs/splice.c:950 splice_direct_to_actor+0x33a/0xa10 fs/splice.c:896 do_splice_direct+0x1a9/0x280 fs/splice.c:1002 do_sendfile+0xb13/0x12c0 fs/read_write.c:1255 __do_sys_sendfile64 fs/read_write.c:1323 [inline] __se_sys_sendfile64 fs/read_write.c:1309 [inline] __x64_sys_sendfile64+0x1cf/0x210 fs/read_write.c:1309 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x35/0x80 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x6e/0xd8 CVE-2025-68261 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68261.html CVE-2025-68261 https://bugzilla.suse.com/1255164 SUSE Bug 1255164 In the Linux kernel, the following vulnerability has been resolved: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup Protect vga_switcheroo_client_fb_set() with console lock. Avoids OOB access in fbcon_remap_all(). Without holding the console lock the call races with switching outputs. VGA switcheroo calls fbcon_remap_all() when switching clients. The fbcon function uses struct fb_info.node, which is set by register_framebuffer(). As the fb-helper code currently sets up VGA switcheroo before registering the framebuffer, the value of node is -1 and therefore not a legal value. For example, fbcon uses the value within set_con2fb_map() [1] as an index into an array. Moving vga_switcheroo_client_fb_set() after register_framebuffer() can result in VGA switching that does not switch fbcon correctly. Therefore move vga_switcheroo_client_fb_set() under fbcon_fb_registered(), which already holds the console lock. Fbdev calls fbcon_fb_registered() from within register_framebuffer(). Serializes the helper with VGA switcheroo's call to fbcon_remap_all(). Although vga_switcheroo_client_fb_set() takes an instance of struct fb_info as parameter, it really only needs the contained fbcon state. Moving the call to fbcon initialization is therefore cleaner than before. Only amdgpu, i915, nouveau and radeon support vga_switcheroo. For all other drivers, this change does nothing. CVE-2025-68296 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68296.html CVE-2025-68296 https://bugzilla.suse.com/1255128 SUSE Bug 1255128 In the Linux kernel, the following vulnerability has been resolved: ceph: fix crash in process_v2_sparse_read() for encrypted directories The crash in process_v2_sparse_read() for fscrypt-encrypted directories has been reported. Issue takes place for Ceph msgr2 protocol in secure mode. It can be reproduced by the steps: sudo mount -t ceph :/ /mnt/cephfs/ -o name=admin,fs=cephfs,ms_mode=secure (1) mkdir /mnt/cephfs/fscrypt-test-3 (2) cp area_decrypted.tar /mnt/cephfs/fscrypt-test-3 (3) fscrypt encrypt --source=raw_key --key=./my.key /mnt/cephfs/fscrypt-test-3 (4) fscrypt lock /mnt/cephfs/fscrypt-test-3 (5) fscrypt unlock --key=my.key /mnt/cephfs/fscrypt-test-3 (6) cat /mnt/cephfs/fscrypt-test-3/area_decrypted.tar (7) Issue has been triggered [ 408.072247] ------------[ cut here ]------------ [ 408.072251] WARNING: CPU: 1 PID: 392 at net/ceph/messenger_v2.c:865 ceph_con_v2_try_read+0x4b39/0x72f0 [ 408.072267] Modules linked in: intel_rapl_msr intel_rapl_common intel_uncore_frequency_common intel_pmc_core pmt_telemetry pmt_discovery pmt_class intel_pmc_ssram_telemetry intel_vsec kvm_intel joydev kvm irqbypass polyval_clmulni ghash_clmulni_intel aesni_intel rapl input_leds psmouse serio_raw i2c_piix4 vga16fb bochs vgastate i2c_smbus floppy mac_hid qemu_fw_cfg pata_acpi sch_fq_codel rbd msr parport_pc ppdev lp parport efi_pstore [ 408.072304] CPU: 1 UID: 0 PID: 392 Comm: kworker/1:3 Not tainted 6.17.0-rc7+ [ 408.072307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.17.0-5.fc42 04/01/2014 [ 408.072310] Workqueue: ceph-msgr ceph_con_workfn [ 408.072314] RIP: 0010:ceph_con_v2_try_read+0x4b39/0x72f0 [ 408.072317] Code: c7 c1 20 f0 d4 ae 50 31 d2 48 c7 c6 60 27 d5 ae 48 c7 c7 f8 8e 6f b0 68 60 38 d5 ae e8 00 47 61 fe 48 83 c4 18 e9 ac fc ff ff <0f> 0b e9 06 fe ff ff 4c 8b 9d 98 fd ff ff 0f 84 64 e7 ff ff 89 85 [ 408.072319] RSP: 0018:ffff88811c3e7a30 EFLAGS: 00010246 [ 408.072322] RAX: ffffed1024874c6f RBX: ffffea00042c2b40 RCX: 0000000000000f38 [ 408.072324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 408.072325] RBP: ffff88811c3e7ca8 R08: 0000000000000000 R09: 00000000000000c8 [ 408.072326] R10: 00000000000000c8 R11: 0000000000000000 R12: 00000000000000c8 [ 408.072327] R13: dffffc0000000000 R14: ffff8881243a6030 R15: 0000000000003000 [ 408.072329] FS: 0000000000000000(0000) GS:ffff88823eadf000(0000) knlGS:0000000000000000 [ 408.072331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.072332] CR2: 000000c0003c6000 CR3: 000000010c106005 CR4: 0000000000772ef0 [ 408.072336] PKRU: 55555554 [ 408.072337] Call Trace: [ 408.072338] <TASK> [ 408.072340] ? sched_clock_noinstr+0x9/0x10 [ 408.072344] ? __pfx_ceph_con_v2_try_read+0x10/0x10 [ 408.072347] ? _raw_spin_unlock+0xe/0x40 [ 408.072349] ? finish_task_switch.isra.0+0x15d/0x830 [ 408.072353] ? __kasan_check_write+0x14/0x30 [ 408.072357] ? mutex_lock+0x84/0xe0 [ 408.072359] ? __pfx_mutex_lock+0x10/0x10 [ 408.072361] ceph_con_workfn+0x27e/0x10e0 [ 408.072364] ? metric_delayed_work+0x311/0x2c50 [ 408.072367] process_one_work+0x611/0xe20 [ 408.072371] ? __kasan_check_write+0x14/0x30 [ 408.072373] worker_thread+0x7e3/0x1580 [ 408.072375] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 408.072378] ? __pfx_worker_thread+0x10/0x10 [ 408.072381] kthread+0x381/0x7a0 [ 408.072383] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 408.072385] ? __pfx_kthread+0x10/0x10 [ 408.072387] ? __kasan_check_write+0x14/0x30 [ 408.072389] ? recalc_sigpending+0x160/0x220 [ 408.072392] ? _raw_spin_unlock_irq+0xe/0x50 [ 408.072394] ? calculate_sigpending+0x78/0xb0 [ 408.072395] ? __pfx_kthread+0x10/0x10 [ 408.072397] ret_from_fork+0x2b6/0x380 [ 408.072400] ? __pfx_kthread+0x10/0x10 [ 408.072402] ret_from_fork_asm+0x1a/0x30 [ 408.072406] </TASK> [ 408.072407] ---[ end trace 0000000000000000 ]--- [ 408.072418] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000 ---truncated--- CVE-2025-68297 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68297.html CVE-2025-68297 https://bugzilla.suse.com/1255403 SUSE Bug 1255403 In the Linux kernel, the following vulnerability has been resolved: lan966x: Fix sleeping in atomic context The following warning was seen when we try to connect using ssh to the device. BUG: sleeping function called from invalid context at kernel/locking/mutex.c:575 in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 104, name: dropbear preempt_count: 1, expected: 0 INFO: lockdep is turned off. CPU: 0 UID: 0 PID: 104 Comm: dropbear Tainted: G W 6.18.0-rc2-00399-g6f1ab1b109b9-dirty #530 NONE Tainted: [W]=WARN Hardware name: Generic DT based system Call trace: unwind_backtrace from show_stack+0x10/0x14 show_stack from dump_stack_lvl+0x7c/0xac dump_stack_lvl from __might_resched+0x16c/0x2b0 __might_resched from __mutex_lock+0x64/0xd34 __mutex_lock from mutex_lock_nested+0x1c/0x24 mutex_lock_nested from lan966x_stats_get+0x5c/0x558 lan966x_stats_get from dev_get_stats+0x40/0x43c dev_get_stats from dev_seq_printf_stats+0x3c/0x184 dev_seq_printf_stats from dev_seq_show+0x10/0x30 dev_seq_show from seq_read_iter+0x350/0x4ec seq_read_iter from seq_read+0xfc/0x194 seq_read from proc_reg_read+0xac/0x100 proc_reg_read from vfs_read+0xb0/0x2b0 vfs_read from ksys_read+0x6c/0xec ksys_read from ret_fast_syscall+0x0/0x1c Exception stack(0xf0b11fa8 to 0xf0b11ff0) 1fa0: 00000001 00001000 00000008 be9048d8 00001000 00000001 1fc0: 00000001 00001000 00000008 00000003 be905920 0000001e 00000000 00000001 1fe0: 0005404c be9048c0 00018684 b6ec2cd8 It seems that we are using a mutex in a atomic context which is wrong. Change the mutex with a spinlock. CVE-2025-68320 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68320.html CVE-2025-68320 https://bugzilla.suse.com/1255172 SUSE Bug 1255172 In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop In cake_drop(), qdisc_tree_reduce_backlog() is used to update the qlen and backlog of the qdisc hierarchy. Its caller, cake_enqueue(), assumes that the parent qdisc will enqueue the current packet. However, this assumption breaks when cake_enqueue() returns NET_XMIT_CN: the parent qdisc stops enqueuing current packet, leaving the tree qlen/backlog accounting inconsistent. This mismatch can lead to a NULL dereference (e.g., when the parent Qdisc is qfq_qdisc). This patch computes the qlen/backlog delta in a more robust way by observing the difference before and after the series of cake_drop() calls, and then compensates the qdisc tree accounting if cake_enqueue() returns NET_XMIT_CN. To ensure correct compensation when ACK thinning is enabled, a new variable is introduced to keep qlen unchanged. CVE-2025-68325 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68325.html CVE-2025-68325 https://bugzilla.suse.com/1255417 SUSE Bug 1255417 In the Linux kernel, the following vulnerability has been resolved: jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted There's issue when file system corrupted: ------------[ cut here ]------------ kernel BUG at fs/jbd2/transaction.c:1289! Oops: invalid opcode: 0000 [#1] SMP KASAN PTI CPU: 5 UID: 0 PID: 2031 Comm: mkdir Not tainted 6.18.0-rc1-next RIP: 0010:jbd2_journal_get_create_access+0x3b6/0x4d0 RSP: 0018:ffff888117aafa30 EFLAGS: 00010202 RAX: 0000000000000000 RBX: ffff88811a86b000 RCX: ffffffff89a63534 RDX: 1ffff110200ec602 RSI: 0000000000000004 RDI: ffff888100763010 RBP: ffff888100763000 R08: 0000000000000001 R09: ffff888100763028 R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 R13: ffff88812c432000 R14: ffff88812c608000 R15: ffff888120bfc000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f91d6970c99 CR3: 00000001159c4000 CR4: 00000000000006f0 Call Trace: <TASK> __ext4_journal_get_create_access+0x42/0x170 ext4_getblk+0x319/0x6f0 ext4_bread+0x11/0x100 ext4_append+0x1e6/0x4a0 ext4_init_new_dir+0x145/0x1d0 ext4_mkdir+0x326/0x920 vfs_mkdir+0x45c/0x740 do_mkdirat+0x234/0x2f0 __x64_sys_mkdir+0xd6/0x120 do_syscall_64+0x5f/0xfa0 entry_SYSCALL_64_after_hwframe+0x76/0x7e The above issue occurs with us in errors=continue mode when accompanied by storage failures. There have been many inconsistencies in the file system data. In the case of file system data inconsistency, for example, if the block bitmap of a referenced block is not set, it can lead to the situation where a block being committed is allocated and used again. As a result, the following condition will not be satisfied then trigger BUG_ON. Of course, it is entirely possible to construct a problematic image that can trigger this BUG_ON through specific operations. In fact, I have constructed such an image and easily reproduced this issue. Therefore, J_ASSERT() holds true only under ideal conditions, but it may not necessarily be satisfied in exceptional scenarios. Using J_ASSERT() directly in abnormal situations would cause the system to crash, which is clearly not what we want. So here we directly trigger a JBD abort instead of immediately invoking BUG_ON. CVE-2025-68337 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68337.html CVE-2025-68337 https://bugzilla.suse.com/1255482 SUSE Bug 1255482 In the Linux kernel, the following vulnerability has been resolved: veth: reduce XDP no_direct return section to fix race As explain in commit fa349e396e48 ("veth: Fix race with AF_XDP exposing old or uninitialized descriptors") for veth there is a chance after napi_complete_done() that another CPU can manage start another NAPI instance running veth_pool(). For NAPI this is correctly handled as the napi_schedule_prep() check will prevent multiple instances from getting scheduled, but for the remaining code in veth_pool() this can run concurrent with the newly started NAPI instance. The problem/race is that xdp_clear_return_frame_no_direct() isn't designed to be nested. Prior to commit 401cb7dae813 ("net: Reference bpf_redirect_info via task_struct on PREEMPT_RT.") the temporary BPF net context bpf_redirect_info was stored per CPU, where this wasn't an issue. Since this commit the BPF context is stored in 'current' task_struct. When running veth in threaded-NAPI mode, then the kthread becomes the storage area. Now a race exists between two concurrent veth_pool() function calls one exiting NAPI and one running new NAPI, both using the same BPF net context. Race is when another CPU gets within the xdp_set_return_frame_no_direct() section before exiting veth_pool() calls the clear-function xdp_clear_return_frame_no_direct(). CVE-2025-68341 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68341.html CVE-2025-68341 https://bugzilla.suse.com/1255506 SUSE Bug 1255506 In the Linux kernel, the following vulnerability has been resolved: block: fix memory leak in __blkdev_issue_zero_pages Move the fatal signal check before bio_alloc() to prevent a memory leak when BLKDEV_ZERO_KILLABLE is set and a fatal signal is pending. Previously, the bio was allocated before checking for a fatal signal. If a signal was pending, the code would break out of the loop without freeing or chaining the just-allocated bio, causing a memory leak. This matches the pattern already used in __blkdev_issue_write_zeroes() where the signal check precedes the allocation. CVE-2025-68348 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68348.html CVE-2025-68348 https://bugzilla.suse.com/1255694 SUSE Bug 1255694 In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid Fixes a crash when layout is null during this call stack: write_inode -> nfs4_write_inode -> pnfs_layoutcommit_inode pnfs_set_layoutcommit relies on the lseg refcount to keep the layout around. Need to clear NFS_INO_LAYOUTCOMMIT otherwise we might attempt to reference a null layout. CVE-2025-68349 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68349.html CVE-2025-68349 https://bugzilla.suse.com/1255544 SUSE Bug 1255544 In the Linux kernel, the following vulnerability has been resolved: gfs2: Prevent recursive memory reclaim Function new_inode() returns a new inode with inode->i_mapping->gfp_mask set to GFP_HIGHUSER_MOVABLE. This value includes the __GFP_FS flag, so allocations in that address space can recurse into filesystem memory reclaim. We don't want that to happen because it can consume a significant amount of stack memory. Worse than that is that it can also deadlock: for example, in several places, gfs2_unstuff_dinode() is called inside filesystem transactions. This calls filemap_grab_folio(), which can allocate a new folio, which can trigger memory reclaim. If memory reclaim recurses into the filesystem and starts another transaction, a deadlock will ensue. To fix these kinds of problems, prevent memory reclaim from recursing into filesystem code by making sure that the gfp_mask of inode address spaces doesn't include __GFP_FS. The "meta" and resource group address spaces were already using GFP_NOFS as their gfp_mask (which doesn't include __GFP_FS). The default value of GFP_HIGHUSER_MOVABLE is less restrictive than GFP_NOFS, though. To avoid being overly limiting, use the default value and only knock off the __GFP_FS flag. I'm not sure if this will actually make a difference, but it also shouldn't hurt. This patch is loosely based on commit ad22c7a043c2 ("xfs: prevent stack overflows from page cache allocation"). Fixes xfstest generic/273. CVE-2025-68356 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68356.html CVE-2025-68356 https://bugzilla.suse.com/1255593 SUSE Bug 1255593 In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free of qgroup record after failure to add delayed ref head In the previous code it was possible to incur into a double kfree() scenario when calling add_delayed_ref_head(). This could happen if the record was reported to already exist in the btrfs_qgroup_trace_extent_nolock() call, but then there was an error later on add_delayed_ref_head(). In this case, since add_delayed_ref_head() returned an error, the caller went to free the record. Since add_delayed_ref_head() couldn't set this kfree'd pointer to NULL, then kfree() would have acted on a non-NULL 'record' object which was pointing to memory already freed by the callee. The problem comes from the fact that the responsibility to kfree the object is on both the caller and the callee at the same time. Hence, the fix for this is to shift the ownership of the 'qrecord' object out of the add_delayed_ref_head(). That is, we will never attempt to kfree() the given object inside of this function, and will expect the caller to act on the 'qrecord' object on its own. The only exception where the 'qrecord' object cannot be kfree'd is if it was inserted into the tracing logic, for which we already have the 'qrecord_inserted_ret' boolean to account for this. Hence, the caller has to kfree the object only if add_delayed_ref_head() reports not to have inserted it on the tracing logic. As a side-effect of the above, we must guarantee that 'qrecord_inserted_ret' is properly initialized at the start of the function, not at the end, and then set when an actual insert happens. This way we avoid 'qrecord_inserted_ret' having an invalid value on an early exit. The documentation from the add_delayed_ref_head() has also been updated to reflect on the exact ownership of the 'qrecord' object. CVE-2025-68359 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68359.html CVE-2025-68359 https://bugzilla.suse.com/1255542 SUSE Bug 1255542 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks MT7996 driver can use both wed and wed_hif2 devices to offload traffic from/to the wireless NIC. In the current codebase we assume to always use the primary wed device in wed callbacks resulting in the following crash if the hw runs wed_hif2 (e.g. 6GHz link). [ 297.455876] Unable to handle kernel read from unreadable memory at virtual address 000000000000080a [ 297.464928] Mem abort info: [ 297.467722] ESR = 0x0000000096000005 [ 297.471461] EC = 0x25: DABT (current EL), IL = 32 bits [ 297.476766] SET = 0, FnV = 0 [ 297.479809] EA = 0, S1PTW = 0 [ 297.482940] FSC = 0x05: level 1 translation fault [ 297.487809] Data abort info: [ 297.490679] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 297.496156] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 297.501196] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 297.506500] user pgtable: 4k pages, 39-bit VAs, pgdp=0000000107480000 [ 297.512927] [000000000000080a] pgd=08000001097fb003, p4d=08000001097fb003, pud=08000001097fb003, pmd=0000000000000000 [ 297.523532] Internal error: Oops: 0000000096000005 [#1] SMP [ 297.715393] CPU: 2 UID: 0 PID: 45 Comm: kworker/u16:2 Tainted: G O 6.12.50 #0 [ 297.723908] Tainted: [O]=OOT_MODULE [ 297.727384] Hardware name: Banana Pi BPI-R4 (2x SFP+) (DT) [ 297.732857] Workqueue: nf_ft_offload_del nf_flow_rule_route_ipv6 [nf_flow_table] [ 297.740254] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 297.747205] pc : mt76_wed_offload_disable+0x64/0xa0 [mt76] [ 297.752688] lr : mtk_wed_flow_remove+0x58/0x80 [ 297.757126] sp : ffffffc080fe3ae0 [ 297.760430] x29: ffffffc080fe3ae0 x28: ffffffc080fe3be0 x27: 00000000deadbef7 [ 297.767557] x26: ffffff80c5ebca00 x25: 0000000000000001 x24: ffffff80c85f4c00 [ 297.774683] x23: ffffff80c1875b78 x22: ffffffc080d42cd0 x21: ffffffc080660018 [ 297.781809] x20: ffffff80c6a076d0 x19: ffffff80c6a043c8 x18: 0000000000000000 [ 297.788935] x17: 0000000000000000 x16: 0000000000000001 x15: 0000000000000000 [ 297.796060] x14: 0000000000000019 x13: ffffff80c0ad8ec0 x12: 00000000fa83b2da [ 297.803185] x11: ffffff80c02700c0 x10: ffffff80c0ad8ec0 x9 : ffffff81fef96200 [ 297.810311] x8 : ffffff80c02700c0 x7 : ffffff80c02700d0 x6 : 0000000000000002 [ 297.817435] x5 : 0000000000000400 x4 : 0000000000000000 x3 : 0000000000000000 [ 297.824561] x2 : 0000000000000001 x1 : 0000000000000800 x0 : ffffff80c6a063c8 [ 297.831686] Call trace: [ 297.834123] mt76_wed_offload_disable+0x64/0xa0 [mt76] [ 297.839254] mtk_wed_flow_remove+0x58/0x80 [ 297.843342] mtk_flow_offload_cmd+0x434/0x574 [ 297.847689] mtk_wed_setup_tc_block_cb+0x30/0x40 [ 297.852295] nf_flow_offload_ipv6_hook+0x7f4/0x964 [nf_flow_table] [ 297.858466] nf_flow_rule_route_ipv6+0x438/0x4a4 [nf_flow_table] [ 297.864463] process_one_work+0x174/0x300 [ 297.868465] worker_thread+0x278/0x430 [ 297.872204] kthread+0xd8/0xdc [ 297.875251] ret_from_fork+0x10/0x20 [ 297.878820] Code: 928b5ae0 8b000273 91400a60 f943fa61 (79401421) [ 297.884901] ---[ end trace 0000000000000000 ]--- Fix the issue detecting the proper wed reference to use running wed callabacks. CVE-2025-68360 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68360.html CVE-2025-68360 https://bugzilla.suse.com/1255536 SUSE Bug 1255536 In the Linux kernel, the following vulnerability has been resolved: erofs: limit the level of fs stacking for file-backed mounts Otherwise, it could cause potential kernel stack overflow (e.g., EROFS mounting itself). CVE-2025-68361 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68361.html CVE-2025-68361 https://bugzilla.suse.com/1255526 SUSE Bug 1255526 In the Linux kernel, the following vulnerability has been resolved: nbd: defer config unlock in nbd_genl_connect There is one use-after-free warning when running NBD_CMD_CONNECT and NBD_CLEAR_SOCK: nbd_genl_connect nbd_alloc_and_init_config // config_refs=1 nbd_start_device // config_refs=2 set NBD_RT_HAS_CONFIG_REF open nbd // config_refs=3 recv_work done // config_refs=2 NBD_CLEAR_SOCK // config_refs=1 close nbd // config_refs=0 refcount_inc -> uaf ------------[ cut here ]------------ refcount_t: addition on 0; use-after-free. WARNING: CPU: 24 PID: 1014 at lib/refcount.c:25 refcount_warn_saturate+0x12e/0x290 nbd_genl_connect+0x16d0/0x1ab0 genl_family_rcv_msg_doit+0x1f3/0x310 genl_rcv_msg+0x44a/0x790 The issue can be easily reproduced by adding a small delay before refcount_inc(&nbd->config_refs) in nbd_genl_connect(): mutex_unlock(&nbd->config_lock); if (!ret) { set_bit(NBD_RT_HAS_CONFIG_REF, &config->runtime_flags); + printk("before sleep\n"); + mdelay(5 * 1000); + printk("after sleep\n"); refcount_inc(&nbd->config_refs); nbd_connect_reply(info, nbd->index); } CVE-2025-68366 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68366.html CVE-2025-68366 https://bugzilla.suse.com/1255622 SUSE Bug 1255622 In the Linux kernel, the following vulnerability has been resolved: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse The following warning appears when running syzkaller, and this issue also exists in the mainline code. ------------[ cut here ]------------ list_add double add: new=ffffffffa57eee28, prev=ffffffffa57eee28, next=ffffffffa5e63100. WARNING: CPU: 0 PID: 1491 at lib/list_debug.c:35 __list_add_valid_or_report+0xf7/0x130 Modules linked in: CPU: 0 PID: 1491 Comm: syz.1.28 Not tainted 6.6.0+ #3 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014 RIP: 0010:__list_add_valid_or_report+0xf7/0x130 RSP: 0018:ff1100010dfb7b78 EFLAGS: 00010282 RAX: 0000000000000000 RBX: ffffffffa57eee18 RCX: ffffffff97fc9817 RDX: 0000000000040000 RSI: ffa0000002383000 RDI: 0000000000000001 RBP: ffffffffa57eee28 R08: 0000000000000001 R09: ffe21c0021bf6f2c R10: 0000000000000001 R11: 6464615f7473696c R12: ffffffffa5e63100 R13: ffffffffa57eee28 R14: ffffffffa57eee28 R15: ff1100010dfb7d48 FS: 00007fb14398b640(0000) GS:ff11000119600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 000000010d096005 CR4: 0000000000773ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 80000000 Call Trace: <TASK> input_register_handler+0xb3/0x210 mac_hid_start_emulation+0x1c5/0x290 mac_hid_toggle_emumouse+0x20a/0x240 proc_sys_call_handler+0x4c2/0x6e0 new_sync_write+0x1b1/0x2d0 vfs_write+0x709/0x950 ksys_write+0x12a/0x250 do_syscall_64+0x5a/0x110 entry_SYSCALL_64_after_hwframe+0x78/0xe2 The WARNING occurs when two processes concurrently write to the mac-hid emulation sysctl, causing a race condition in mac_hid_toggle_emumouse(). Both processes read old_val=0, then both try to register the input handler, leading to a double list_add of the same handler. CPU0 CPU1 ------------------------- ------------------------- vfs_write() //write 1 vfs_write() //write 1 proc_sys_write() proc_sys_write() mac_hid_toggle_emumouse() mac_hid_toggle_emumouse() old_val = *valp // old_val=0 old_val = *valp // old_val=0 mutex_lock_killable() proc_dointvec() // *valp=1 mac_hid_start_emulation() input_register_handler() mutex_unlock() mutex_lock_killable() proc_dointvec() mac_hid_start_emulation() input_register_handler() //Trigger Warning mutex_unlock() Fix this by moving the old_val read inside the mutex lock region. CVE-2025-68367 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68367.html CVE-2025-68367 https://bugzilla.suse.com/1255547 SUSE Bug 1255547 In the Linux kernel, the following vulnerability has been resolved: md: init bioset in mddev_init IO operations may be needed before md_run(), such as updating metadata after writing sysfs. Without bioset, this triggers a NULL pointer dereference as below: BUG: kernel NULL pointer dereference, address: 0000000000000020 Call Trace: md_update_sb+0x658/0xe00 new_level_store+0xc5/0x120 md_attr_store+0xc9/0x1e0 sysfs_kf_write+0x6f/0xa0 kernfs_fop_write_iter+0x141/0x2a0 vfs_write+0x1fc/0x5a0 ksys_write+0x79/0x180 __x64_sys_write+0x1d/0x30 x64_sys_call+0x2818/0x2880 do_syscall_64+0xa9/0x580 entry_SYSCALL_64_after_hwframe+0x4b/0x53 Reproducer ``` mdadm -CR /dev/md0 -l1 -n2 /dev/sd[cd] echo inactive > /sys/block/md0/md/array_state echo 10 > /sys/block/md0/md/new_level ``` mddev_init() can only be called once per mddev, no need to test if bioset has been initialized anymore. CVE-2025-68368 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68368.html CVE-2025-68368 https://bugzilla.suse.com/1255527 SUSE Bug 1255527 In the Linux kernel, the following vulnerability has been resolved: nbd: defer config put in recv_work There is one uaf issue in recv_work when running NBD_CLEAR_SOCK and NBD_CMD_RECONFIGURE: nbd_genl_connect // conf_ref=2 (connect and recv_work A) nbd_open // conf_ref=3 recv_work A done // conf_ref=2 NBD_CLEAR_SOCK // conf_ref=1 nbd_genl_reconfigure // conf_ref=2 (trigger recv_work B) close nbd // conf_ref=1 recv_work B config_put // conf_ref=0 atomic_dec(&config->recv_threads); -> UAF Or only running NBD_CLEAR_SOCK: nbd_genl_connect // conf_ref=2 nbd_open // conf_ref=3 NBD_CLEAR_SOCK // conf_ref=2 close nbd nbd_release config_put // conf_ref=1 recv_work config_put // conf_ref=0 atomic_dec(&config->recv_threads); -> UAF Commit 87aac3a80af5 ("nbd: call nbd_config_put() before notifying the waiter") moved nbd_config_put() to run before waking up the waiter in recv_work, in order to ensure that nbd_start_device_ioctl() would not be woken up while nbd->task_recv was still uncleared. However, in nbd_start_device_ioctl(), after being woken up it explicitly calls flush_workqueue() to make sure all current works are finished. Therefore, there is no need to move the config put ahead of the wakeup. Move nbd_config_put() to the end of recv_work, so that the reference is held for the whole lifetime of the worker thread. This makes sure the config cannot be freed while recv_work is still running, even if clear + reconfigure interleave. In addition, we don't need to worry about recv_work dropping the last nbd_put (which causes deadlock): path A (netlink with NBD_CFLAG_DESTROY_ON_DISCONNECT): connect // nbd_refs=1 (trigger recv_work) open nbd // nbd_refs=2 NBD_CLEAR_SOCK close nbd nbd_release nbd_disconnect_and_put flush_workqueue // recv_work done nbd_config_put nbd_put // nbd_refs=1 nbd_put // nbd_refs=0 queue_work path B (netlink without NBD_CFLAG_DESTROY_ON_DISCONNECT): connect // nbd_refs=2 (trigger recv_work) open nbd // nbd_refs=3 NBD_CLEAR_SOCK // conf_refs=2 close nbd nbd_release nbd_config_put // conf_refs=1 nbd_put // nbd_refs=2 recv_work done // conf_refs=0, nbd_refs=1 rmmod // nbd_refs=0 Depends-on: e2daec488c57 ("nbd: Fix hungtask when nbd_config_put") CVE-2025-68372 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68372.html CVE-2025-68372 https://bugzilla.suse.com/1255537 SUSE Bug 1255537 In the Linux kernel, the following vulnerability has been resolved: md: fix rcu protection in md_wakeup_thread We attempted to use RCU to protect the pointer 'thread', but directly passed the value when calling md_wakeup_thread(). This means that the RCU pointer has been acquired before rcu_read_lock(), which renders rcu_read_lock() ineffective and could lead to a use-after-free. CVE-2025-68374 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68374.html CVE-2025-68374 https://bugzilla.suse.com/1255530 SUSE Bug 1255530 In the Linux kernel, the following vulnerability has been resolved: coresight: ETR: Fix ETR buffer use-after-free issue When ETR is enabled as CS_MODE_SYSFS, if the buffer size is changed and enabled again, currently sysfs_buf will point to the newly allocated memory(buf_new) and free the old memory(buf_old). But the etr_buf that is being used by the ETR remains pointed to buf_old, not updated to buf_new. In this case, it will result in a memory use-after-free issue. Fix this by checking ETR's mode before updating and releasing buf_old, if the mode is CS_MODE_SYSFS, then skip updating and releasing it. CVE-2025-68376 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68376.html CVE-2025-68376 https://bugzilla.suse.com/1255529 SUSE Bug 1255529 In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure A NULL pointer dereference can occur in rxe_srq_chk_attr() when ibv_modify_srq() is invoked twice in succession under certain error conditions. The first call may fail in rxe_queue_resize(), which leads rxe_srq_from_attr() to set srq->rq.queue = NULL. The second call then triggers a crash (null deref) when accessing srq->rq.queue->buf->index_mask. Call Trace: <TASK> rxe_modify_srq+0x170/0x480 [rdma_rxe] ? __pfx_rxe_modify_srq+0x10/0x10 [rdma_rxe] ? uverbs_try_lock_object+0x4f/0xa0 [ib_uverbs] ? rdma_lookup_get_uobject+0x1f0/0x380 [ib_uverbs] ib_uverbs_modify_srq+0x204/0x290 [ib_uverbs] ? __pfx_ib_uverbs_modify_srq+0x10/0x10 [ib_uverbs] ? tryinc_node_nr_active+0xe6/0x150 ? uverbs_fill_udata+0xed/0x4f0 [ib_uverbs] ib_uverbs_handler_UVERBS_METHOD_INVOKE_WRITE+0x2c0/0x470 [ib_uverbs] ? __pfx_ib_uverbs_handler_UVERBS_METHOD_INVOKE_WRITE+0x10/0x10 [ib_uverbs] ? uverbs_fill_udata+0xed/0x4f0 [ib_uverbs] ib_uverbs_run_method+0x55a/0x6e0 [ib_uverbs] ? __pfx_ib_uverbs_handler_UVERBS_METHOD_INVOKE_WRITE+0x10/0x10 [ib_uverbs] ib_uverbs_cmd_verbs+0x54d/0x800 [ib_uverbs] ? __pfx_ib_uverbs_cmd_verbs+0x10/0x10 [ib_uverbs] ? __pfx___raw_spin_lock_irqsave+0x10/0x10 ? __pfx_do_vfs_ioctl+0x10/0x10 ? ioctl_has_perm.constprop.0.isra.0+0x2c7/0x4c0 ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 ib_uverbs_ioctl+0x13e/0x220 [ib_uverbs] ? __pfx_ib_uverbs_ioctl+0x10/0x10 [ib_uverbs] __x64_sys_ioctl+0x138/0x1c0 do_syscall_64+0x82/0x250 ? fdget_pos+0x58/0x4c0 ? ksys_write+0xf3/0x1c0 ? __pfx_ksys_write+0x10/0x10 ? do_syscall_64+0xc8/0x250 ? __pfx_vm_mmap_pgoff+0x10/0x10 ? fget+0x173/0x230 ? fput+0x2a/0x80 ? ksys_mmap_pgoff+0x224/0x4c0 ? do_syscall_64+0xc8/0x250 ? do_user_addr_fault+0x37b/0xfe0 ? clear_bhb_loop+0x50/0xa0 ? clear_bhb_loop+0x50/0xa0 ? clear_bhb_loop+0x50/0xa0 entry_SYSCALL_64_after_hwframe+0x76/0x7e CVE-2025-68379 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68379.html CVE-2025-68379 https://bugzilla.suse.com/1255695 SUSE Bug 1255695 In the Linux kernel, the following vulnerability has been resolved: bpf: Do not let BPF test infra emit invalid GSO types to stack Yinhao et al. reported that their fuzzer tool was able to trigger a skb_warn_bad_offload() from netif_skb_features() -> gso_features_check(). When a BPF program - triggered via BPF test infra - pushes the packet to the loopback device via bpf_clone_redirect() then mentioned offload warning can be seen. GSO-related features are then rightfully disabled. We get into this situation due to convert___skb_to_skb() setting gso_segs and gso_size but not gso_type. Technically, it makes sense that this warning triggers since the GSO properties are malformed due to the gso_type. Potentially, the gso_type could be marked non-trustworthy through setting it at least to SKB_GSO_DODGY without any other specific assumptions, but that also feels wrong given we should not go further into the GSO engine in the first place. The checks were added in 121d57af308d ("gso: validate gso_type in GSO handlers") because there were malicious (syzbot) senders that combine a protocol with a non-matching gso_type. If we would want to drop such packets, gso_features_check() currently only returns feature flags via netif_skb_features(), so one location for potentially dropping such skbs could be validate_xmit_unreadable_skb(), but then otoh it would be an additional check in the fast-path for a very corner case. Given bpf_clone_redirect() is the only place where BPF test infra could emit such packets, lets reject them right there. CVE-2025-68725 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68725.html CVE-2025-68725 https://bugzilla.suse.com/1255569 SUSE Bug 1255569 In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Prevent potential UAF in group creation This commit prevents the possibility of a use after free issue in the GROUP_CREATE ioctl function, which arose as pointer to the group is accessed in that ioctl function after storing it in the Xarray. A malicious userspace can second guess the handle of a group and try to call GROUP_DESTROY ioctl from another thread around the same time as GROUP_CREATE ioctl. To prevent the use after free exploit, this commit uses a mark on an entry of group pool Xarray which is added just before returning from the GROUP_CREATE ioctl function. The mark is checked for all ioctls that specify the group handle and so userspace won't be abe to delete a group that isn't marked yet. v2: Add R-bs and fixes tags CVE-2025-68735 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68735.html CVE-2025-68735 https://bugzilla.suse.com/1255811 SUSE Bug 1255811 https://bugzilla.suse.com/1256251 SUSE Bug 1256251 In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix improper freeing of purex item In qla2xxx_process_purls_iocb(), an item is allocated via qla27xx_copy_multiple_pkt(), which internally calls qla24xx_alloc_purex_item(). The qla24xx_alloc_purex_item() function may return a pre-allocated item from a per-adapter pool for small allocations, instead of dynamically allocating memory with kzalloc(). An error handling path in qla2xxx_process_purls_iocb() incorrectly uses kfree() to release the item. If the item was from the pre-allocated pool, calling kfree() on it is a bug that can lead to memory corruption. Fix this by using the correct deallocation function, qla24xx_free_purex_item(), which properly handles both dynamically allocated and pre-allocated items. CVE-2025-68741 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68741.html CVE-2025-68741 https://bugzilla.suse.com/1255703 SUSE Bug 1255703 In the Linux kernel, the following vulnerability has been resolved: mshv: Fix create memory region overlap check The current check is incorrect; it only checks if the beginning or end of a region is within an existing region. This doesn't account for userspace specifying a region that begins before and ends after an existing region. Change the logic to a range intersection check against gfns and uaddrs for each region. Remove mshv_partition_region_by_uaddr() as it is no longer used. CVE-2025-68743 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68743.html CVE-2025-68743 https://bugzilla.suse.com/1255708 SUSE Bug 1255708 In the Linux kernel, the following vulnerability has been resolved: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags When a filesystem is being automounted, it needs to preserve the user-set superblock mount options, such as the "ro" flag. CVE-2025-68764 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68764.html CVE-2025-68764 https://bugzilla.suse.com/1255930 SUSE Bug 1255930 In the Linux kernel, the following vulnerability has been resolved: inet: frags: flush pending skbs in fqdir_pre_exit() We have been seeing occasional deadlocks on pernet_ops_rwsem since September in NIPA. The stuck task was usually modprobe (often loading a driver like ipvlan), trying to take the lock as a Writer. lockdep does not track readers for rwsems so the read wasn't obvious from the reports. On closer inspection the Reader holding the lock was conntrack looping forever in nf_conntrack_cleanup_net_list(). Based on past experience with occasional NIPA crashes I looked thru the tests which run before the crash and noticed that the crash follows ip_defrag.sh. An immediate red flag. Scouring thru (de)fragmentation queues reveals skbs sitting around, holding conntrack references. The problem is that since conntrack depends on nf_defrag_ipv6, nf_defrag_ipv6 will load first. Since nf_defrag_ipv6 loads first its netns exit hooks run _after_ conntrack's netns exit hook. Flush all fragment queue SKBs during fqdir_pre_exit() to release conntrack references before conntrack cleanup runs. Also flush the queues in timer expiry handlers when they discover fqdir->dead is set, in case packet sneaks in while we're running the pre_exit flush. The commit under Fixes is not exactly the culprit, but I think previously the timer firing would eventually unblock the spinning conntrack. CVE-2025-68768 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68768.html CVE-2025-68768 https://bugzilla.suse.com/1256579 SUSE Bug 1256579 In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix XDP_TX path For XDP_TX action in bnxt_rx_xdp(), clearing of the event flags is not correct. __bnxt_poll_work() -> bnxt_rx_pkt() -> bnxt_rx_xdp() may be looping within NAPI and some event flags may be set in earlier iterations. In particular, if BNXT_TX_EVENT is set earlier indicating some XDP_TX packets are ready and pending, it will be cleared if it is XDP_TX action again. Normally, we will set BNXT_TX_EVENT again when we successfully call __bnxt_xmit_xdp(). But if the TX ring has no more room, the flag will not be set. This will cause the TX producer to be ahead but the driver will not hit the TX doorbell. For multi-buf XDP_TX, there is no need to clear the event flags and set BNXT_AGG_EVENT. The BNXT_AGG_EVENT flag should have been set earlier in bnxt_rx_pkt(). The visible symptom of this is that the RX ring associated with the TX XDP ring will eventually become empty and all packets will be dropped. Because this condition will cause the driver to not refill the RX ring seeing that the TX ring has forever pending XDP_TX packets. The fix is to only clear BNXT_RX_EVENT when we have successfully called __bnxt_xmit_xdp(). CVE-2025-68770 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68770.html CVE-2025-68770 https://bugzilla.suse.com/1256584 SUSE Bug 1256584 In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix kernel BUG in ocfs2_find_victim_chain syzbot reported a kernel BUG in ocfs2_find_victim_chain() because the `cl_next_free_rec` field of the allocation chain list (next free slot in the chain list) is 0, triggring the BUG_ON(!cl->cl_next_free_rec) condition in ocfs2_find_victim_chain() and panicking the kernel. To fix this, an if condition is introduced in ocfs2_claim_suballoc_bits(), just before calling ocfs2_find_victim_chain(), the code block in it being executed when either of the following conditions is true: 1. `cl_next_free_rec` is equal to 0, indicating that there are no free chains in the allocation chain list 2. `cl_next_free_rec` is greater than `cl_count` (the total number of chains in the allocation chain list) Either of them being true is indicative of the fact that there are no chains left for usage. This is addressed using ocfs2_error(), which prints the error log for debugging purposes, rather than panicking the kernel. CVE-2025-68771 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68771.html CVE-2025-68771 https://bugzilla.suse.com/1256582 SUSE Bug 1256582 In the Linux kernel, the following vulnerability has been resolved: spi: fsl-cpm: Check length parity before switching to 16 bit mode Commit fc96ec826bce ("spi: fsl-cpm: Use 16 bit mode for large transfers with even size") failed to make sure that the size is really even before switching to 16 bit mode. Until recently the problem went unnoticed because kernfs uses a pre-allocated bounce buffer of size PAGE_SIZE for reading EEPROM. But commit 8ad6249c51d0 ("eeprom: at25: convert to spi-mem API") introduced an additional dynamically allocated bounce buffer whose size is exactly the size of the transfer, leading to a buffer overrun in the fsl-cpm driver when that size is odd. Add the missing length parity verification and remain in 8 bit mode when the length is not even. CVE-2025-68773 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68773.html CVE-2025-68773 https://bugzilla.suse.com/1256586 SUSE Bug 1256586 In the Linux kernel, the following vulnerability has been resolved: net/handshake: duplicate handshake cancellations leak socket When a handshake request is cancelled it is removed from the handshake_net->hn_requests list, but it is still present in the handshake_rhashtbl until it is destroyed. If a second cancellation request arrives for the same handshake request, then remove_pending() will return false... and assuming HANDSHAKE_F_REQ_COMPLETED isn't set in req->hr_flags, we'll continue processing through the out_true label, where we put another reference on the sock and a refcount underflow occurs. This can happen for example if a handshake times out - particularly if the SUNRPC client sends the AUTH_TLS probe to the server but doesn't follow it up with the ClientHello due to a problem with tlshd. When the timeout is hit on the server, the server will send a FIN, which triggers a cancellation request via xs_reset_transport(). When the timeout is hit on the client, another cancellation request happens via xs_tls_handshake_sync(). Add a test_and_set_bit(HANDSHAKE_F_REQ_COMPLETED) in the pending cancel path so duplicate cancels can be detected. CVE-2025-68775 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68775.html CVE-2025-68775 https://bugzilla.suse.com/1256665 SUSE Bug 1256665 https://bugzilla.suse.com/1256666 SUSE Bug 1256666 In the Linux kernel, the following vulnerability has been resolved: net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() prp_get_untagged_frame() calls __pskb_copy() to create frame->skb_std but doesn't check if the allocation failed. If __pskb_copy() returns NULL, skb_clone() is called with a NULL pointer, causing a crash: Oops: general protection fault, probably for non-canonical address 0xdffffc000000000f: 0000 [#1] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000078-0x000000000000007f] CPU: 0 UID: 0 PID: 5625 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:skb_clone+0xd7/0x3a0 net/core/skbuff.c:2041 Code: 03 42 80 3c 20 00 74 08 4c 89 f7 e8 23 29 05 f9 49 83 3e 00 0f 85 a0 01 00 00 e8 94 dd 9d f8 48 8d 6b 7e 49 89 ee 49 c1 ee 03 <43> 0f b6 04 26 84 c0 0f 85 d1 01 00 00 44 0f b6 7d 00 41 83 e7 0c RSP: 0018:ffffc9000d00f200 EFLAGS: 00010207 RAX: ffffffff892235a1 RBX: 0000000000000000 RCX: ffff88803372a480 RDX: 0000000000000000 RSI: 0000000000000820 RDI: 0000000000000000 RBP: 000000000000007e R08: ffffffff8f7d0f77 R09: 1ffffffff1efa1ee R10: dffffc0000000000 R11: fffffbfff1efa1ef R12: dffffc0000000000 R13: 0000000000000820 R14: 000000000000000f R15: ffff88805144cc00 FS: 0000555557f6d500(0000) GS:ffff88808d72f000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000555581d35808 CR3: 000000005040e000 CR4: 0000000000352ef0 Call Trace: <TASK> hsr_forward_do net/hsr/hsr_forward.c:-1 [inline] hsr_forward_skb+0x1013/0x2860 net/hsr/hsr_forward.c:741 hsr_handle_frame+0x6ce/0xa70 net/hsr/hsr_slave.c:84 __netif_receive_skb_core+0x10b9/0x4380 net/core/dev.c:5966 __netif_receive_skb_one_core net/core/dev.c:6077 [inline] __netif_receive_skb+0x72/0x380 net/core/dev.c:6192 netif_receive_skb_internal net/core/dev.c:6278 [inline] netif_receive_skb+0x1cb/0x790 net/core/dev.c:6337 tun_rx_batched+0x1b9/0x730 drivers/net/tun.c:1485 tun_get_user+0x2b65/0x3e90 drivers/net/tun.c:1953 tun_chr_write_iter+0x113/0x200 drivers/net/tun.c:1999 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x5c9/0xb30 fs/read_write.c:686 ksys_write+0x145/0x250 fs/read_write.c:738 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f0449f8e1ff Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 RSP: 002b:00007ffd7ad94c90 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00007f044a1e5fa0 RCX: 00007f0449f8e1ff RDX: 000000000000003e RSI: 0000200000000500 RDI: 00000000000000c8 RBP: 00007ffd7ad94d20 R08: 0000000000000000 R09: 0000000000000000 R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 R13: 00007f044a1e5fa0 R14: 00007f044a1e5fa0 R15: 0000000000000003 </TASK> Add a NULL check immediately after __pskb_copy() to handle allocation failures gracefully. CVE-2025-68776 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68776.html CVE-2025-68776 https://bugzilla.suse.com/1256659 SUSE Bug 1256659 In the Linux kernel, the following vulnerability has been resolved: Input: ti_am335x_tsc - fix off-by-one error in wire_order validation The current validation 'wire_order[i] > ARRAY_SIZE(config_pins)' allows wire_order[i] to equal ARRAY_SIZE(config_pins), which causes out-of-bounds access when used as index in 'config_pins[wire_order[i]]'. Since config_pins has 4 elements (indices 0-3), the valid range for wire_order should be 0-3. Fix the off-by-one error by using >= instead of > in the validation check. CVE-2025-68777 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68777.html CVE-2025-68777 https://bugzilla.suse.com/1256655 SUSE Bug 1256655 In the Linux kernel, the following vulnerability has been resolved: btrfs: don't log conflicting inode if it's a dir moved in the current transaction We can't log a conflicting inode if it's a directory and it was moved from one parent directory to another parent directory in the current transaction, as this can result an attempt to have a directory with two hard links during log replay, one for the old parent directory and another for the new parent directory. The following scenario triggers that issue: 1) We have directories "dir1" and "dir2" created in a past transaction. Directory "dir1" has inode A as its parent directory; 2) We move "dir1" to some other directory; 3) We create a file with the name "dir1" in directory inode A; 4) We fsync the new file. This results in logging the inode of the new file and the inode for the directory "dir1" that was previously moved in the current transaction. So the log tree has the INODE_REF item for the new location of "dir1"; 5) We move the new file to some other directory. This results in updating the log tree to included the new INODE_REF for the new location of the file and removes the INODE_REF for the old location. This happens during the rename when we call btrfs_log_new_name(); 6) We fsync the file, and that persists the log tree changes done in the previous step (btrfs_log_new_name() only updates the log tree in memory); 7) We have a power failure; 8) Next time the fs is mounted, log replay happens and when processing the inode for directory "dir1" we find a new INODE_REF and add that link, but we don't remove the old link of the inode since we have not logged the old parent directory of the directory inode "dir1". As a result after log replay finishes when we trigger writeback of the subvolume tree's extent buffers, the tree check will detect that we have a directory a hard link count of 2 and we get a mount failure. The errors and stack traces reported in dmesg/syslog are like this: [ 3845.729764] BTRFS info (device dm-0): start tree-log replay [ 3845.730304] page: refcount:3 mapcount:0 mapping:000000005c8a3027 index:0x1d00 pfn:0x11510c [ 3845.731236] memcg:ffff9264c02f4e00 [ 3845.731751] aops:btree_aops [btrfs] ino:1 [ 3845.732300] flags: 0x17fffc00000400a(uptodate|private|writeback|node=0|zone=2|lastcpupid=0x1ffff) [ 3845.733346] raw: 017fffc00000400a 0000000000000000 dead000000000122 ffff9264d978aea8 [ 3845.734265] raw: 0000000000001d00 ffff92650e6d4738 00000003ffffffff ffff9264c02f4e00 [ 3845.735305] page dumped because: eb page dump [ 3845.735981] BTRFS critical (device dm-0): corrupt leaf: root=5 block=30408704 slot=6 ino=257, invalid nlink: has 2 expect no more than 1 for dir [ 3845.737786] BTRFS info (device dm-0): leaf 30408704 gen 10 total ptrs 17 free space 14881 owner 5 [ 3845.737789] BTRFS info (device dm-0): refs 4 lock_owner 0 current 30701 [ 3845.737792] item 0 key (256 INODE_ITEM 0) itemoff 16123 itemsize 160 [ 3845.737794] inode generation 3 transid 9 size 16 nbytes 16384 [ 3845.737795] block group 0 mode 40755 links 1 uid 0 gid 0 [ 3845.737797] rdev 0 sequence 2 flags 0x0 [ 3845.737798] atime 1764259517.0 [ 3845.737800] ctime 1764259517.572889464 [ 3845.737801] mtime 1764259517.572889464 [ 3845.737802] otime 1764259517.0 [ 3845.737803] item 1 key (256 INODE_REF 256) itemoff 16111 itemsize 12 [ 3845.737805] index 0 name_len 2 [ 3845.737807] item 2 key (256 DIR_ITEM 2363071922) itemoff 16077 itemsize 34 [ 3845.737808] location key (257 1 0) type 2 [ 3845.737810] transid 9 data_len 0 name_len 4 [ 3845.737811] item 3 key (256 DIR_ITEM 2676584006) itemoff 16043 itemsize 34 [ 3845.737813] location key (258 1 0) type 2 [ 3845.737814] transid 9 data_len 0 name_len 4 [ 3845.737815] item 4 key (256 DIR_INDEX 2) itemoff 16009 itemsize 34 [ 3845.737816] location key (257 1 0) type 2 [ ---truncated--- CVE-2025-68778 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68778.html CVE-2025-68778 https://bugzilla.suse.com/1256683 SUSE Bug 1256683 In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-mixer: us16x08: validate meter packet indices get_meter_levels_from_urb() parses the 64-byte meter packets sent by the device and fills the per-channel arrays meter_level[], comp_level[] and master_level[] in struct snd_us16x08_meter_store. Currently the function derives the channel index directly from the meter packet (MUB2(meter_urb, s) - 1) and uses it to index those arrays without validating the range. If the packet contains a negative or out-of-range channel number, the driver may write past the end of these arrays. Introduce a local channel variable and validate it before updating the arrays. We reject negative indices, limit meter_level[] and comp_level[] to SND_US16X08_MAX_CHANNELS, and guard master_level[] updates with ARRAY_SIZE(master_level). CVE-2025-68783 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68783.html CVE-2025-68783 https://bugzilla.suse.com/1256650 SUSE Bug 1256650 In the Linux kernel, the following vulnerability has been resolved: xfs: fix a UAF problem in xattr repair The xchk_setup_xattr_buf function can allocate a new value buffer, which means that any reference to ab->value before the call could become a dangling pointer. Fix this by moving an assignment to after the buffer setup. CVE-2025-68784 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68784.html CVE-2025-68784 https://bugzilla.suse.com/1256793 SUSE Bug 1256793 In the Linux kernel, the following vulnerability has been resolved: fsnotify: do not generate ACCESS/MODIFY events on child for special files inotify/fanotify do not allow users with no read access to a file to subscribe to events (e.g. IN_ACCESS/IN_MODIFY), but they do allow the same user to subscribe for watching events on children when the user has access to the parent directory (e.g. /dev). Users with no read access to a file but with read access to its parent directory can still stat the file and see if it was accessed/modified via atime/mtime change. The same is not true for special files (e.g. /dev/null). Users will not generally observe atime/mtime changes when other users read/write to special files, only when someone sets atime/mtime via utimensat(). Align fsnotify events with this stat behavior and do not generate ACCESS/MODIFY events to parent watchers on read/write of special files. The events are still generated to parent watchers on utimensat(). This closes some side-channels that could be possibly used for information exfiltration [1]. [1] https://snee.la/pdf/pubs/file-notification-attacks.pdf CVE-2025-68788 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68788.html CVE-2025-68788 https://bugzilla.suse.com/1256638 SUSE Bug 1256638 This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2025-68789 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68789.html CVE-2025-68789 https://bugzilla.suse.com/1256781 SUSE Bug 1256781 In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix out of range indexing in name_size 'name_size' does not have any range checks, and it just directly indexes with TPM_ALG_ID, which could lead into memory corruption at worst. Address the issue by only processing known values and returning -EINVAL for unrecognized values. Make also 'tpm_buf_append_name' and 'tpm_buf_fill_hmac_session' fallible so that errors are detected before causing any spurious TPM traffic. End also the authorization session on failure in both of the functions, as the session state would be then by definition corrupted. CVE-2025-68792 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68792.html CVE-2025-68792 https://bugzilla.suse.com/1256656 SUSE Bug 1256656 In the Linux kernel, the following vulnerability has been resolved: ethtool: Avoid overflowing userspace buffer on stats query The ethtool -S command operates across three ioctl calls: ETHTOOL_GSSET_INFO for the size, ETHTOOL_GSTRINGS for the names, and ETHTOOL_GSTATS for the values. If the number of stats changes between these calls (e.g., due to device reconfiguration), userspace's buffer allocation will be incorrect, potentially leading to buffer overflow. Drivers are generally expected to maintain stable stat counts, but some drivers (e.g., mlx5, bnx2x, bna, ksz884x) use dynamic counters, making this scenario possible. Some drivers try to handle this internally: - bnad_get_ethtool_stats() returns early in case stats.n_stats is not equal to the driver's stats count. - micrel/ksz884x also makes sure not to write anything beyond stats.n_stats and overflow the buffer. However, both use stats.n_stats which is already assigned with the value returned from get_sset_count(), hence won't solve the issue described here. Change ethtool_get_strings(), ethtool_get_stats(), ethtool_get_phy_stats() to not return anything in case of a mismatch between userspace's size and get_sset_size(), to prevent buffer overflow. The returned n_stats value will be equal to zero, to reflect that nothing has been returned. This could result in one of two cases when using upstream ethtool, depending on when the size change is detected: 1. When detected in ethtool_get_strings(): # ethtool -S eth2 no stats available 2. When detected in get stats, all stats will be reported as zero. Both cases are presumably transient, and a subsequent ethtool call should succeed. Other than the overflow avoidance, these two cases are very evident (no output/cleared stats), which is arguably better than presenting incorrect/shifted stats. I also considered returning an error instead of a "silent" response, but that seems more destructive towards userspace apps. Notes: - This patch does not claim to fix the inherent race, it only makes sure that we do not overflow the userspace buffer, and makes for a more predictable behavior. - RTNL lock is held during each ioctl, the race window exists between the separate ioctl calls when the lock is released. - Userspace ethtool always fills stats.n_stats, but it is likely that these stats ioctls are implemented in other userspace applications which might not fill it. The added code checks that it's not zero, to prevent any regressions. CVE-2025-68795 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68795.html CVE-2025-68795 https://bugzilla.suse.com/1256688 SUSE Bug 1256688 In the Linux kernel, the following vulnerability has been resolved: char: applicom: fix NULL pointer dereference in ac_ioctl Discovered by Atuin - Automated Vulnerability Discovery Engine. In ac_ioctl, the validation of IndexCard and the check for a valid RamIO pointer are skipped when cmd is 6. However, the function unconditionally executes readb(apbs[IndexCard].RamIO + VERS) at the end. If cmd is 6, IndexCard may reference a board that does not exist (where RamIO is NULL), leading to a NULL pointer dereference. Fix this by skipping the readb access when cmd is 6, as this command is a global information query and does not target a specific board context. CVE-2025-68797 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68797.html CVE-2025-68797 https://bugzilla.suse.com/1256660 SUSE Bug 1256660 In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: Check event before enable to avoid GPF On AMD machines cpuc->events[idx] can become NULL in a subtle race condition with NMI->throttle->x86_pmu_stop(). Check event for NULL in amd_pmu_enable_all() before enable to avoid a GPF. This appears to be an AMD only issue. Syzkaller reported a GPF in amd_pmu_enable_all. INFO: NMI handler (perf_event_nmi_handler) took too long to run: 13.143 msecs Oops: general protection fault, probably for non-canonical address 0xdffffc0000000034: 0000 PREEMPT SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x00000000000001a0-0x00000000000001a7] CPU: 0 UID: 0 PID: 328415 Comm: repro_36674776 Not tainted 6.12.0-rc1-syzk RIP: 0010:x86_pmu_enable_event (arch/x86/events/perf_event.h:1195 arch/x86/events/core.c:1430) RSP: 0018:ffff888118009d60 EFLAGS: 00010012 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000034 RSI: 0000000000000000 RDI: 00000000000001a0 RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000002 R13: ffff88811802a440 R14: ffff88811802a240 R15: ffff8881132d8601 FS: 00007f097dfaa700(0000) GS:ffff888118000000(0000) GS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000200001c0 CR3: 0000000103d56000 CR4: 00000000000006f0 Call Trace: <IRQ> amd_pmu_enable_all (arch/x86/events/amd/core.c:760 (discriminator 2)) x86_pmu_enable (arch/x86/events/core.c:1360) event_sched_out (kernel/events/core.c:1191 kernel/events/core.c:1186 kernel/events/core.c:2346) __perf_remove_from_context (kernel/events/core.c:2435) event_function (kernel/events/core.c:259) remote_function (kernel/events/core.c:92 (discriminator 1) kernel/events/core.c:72 (discriminator 1)) __flush_smp_call_function_queue (./arch/x86/include/asm/jump_label.h:27 ./include/linux/jump_label.h:207 ./include/trace/events/csd.h:64 kernel/smp.c:135 kernel/smp.c:540) __sysvec_call_function_single (./arch/x86/include/asm/jump_label.h:27 ./include/linux/jump_label.h:207 ./arch/x86/include/asm/trace/irq_vectors.h:99 arch/x86/kernel/smp.c:272) sysvec_call_function_single (arch/x86/kernel/smp.c:266 (discriminator 47) arch/x86/kernel/smp.c:266 (discriminator 47)) </IRQ> CVE-2025-68798 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68798.html CVE-2025-68798 https://bugzilla.suse.com/1256689 SUSE Bug 1256689 In the Linux kernel, the following vulnerability has been resolved: caif: fix integer underflow in cffrml_receive() The cffrml_receive() function extracts a length field from the packet header and, when FCS is disabled, subtracts 2 from this length without validating that len >= 2. If an attacker sends a malicious packet with a length field of 0 or 1 to an interface with FCS disabled, the subtraction causes an integer underflow. This can lead to memory exhaustion and kernel instability, potential information disclosure if padding contains uninitialized kernel memory. Fix this by validating that len >= 2 before performing the subtraction. CVE-2025-68799 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68799.html CVE-2025-68799 https://bugzilla.suse.com/1256643 SUSE Bug 1256643 In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats Cited commit added a dedicated mutex (instead of RTNL) to protect the multicast route list, so that it will not change while the driver periodically traverses it in order to update the kernel about multicast route stats that were queried from the device. One instance of list entry deletion (during route replace) was missed and it can result in a use-after-free [1]. Fix by acquiring the mutex before deleting the entry from the list and releasing it afterwards. [1] BUG: KASAN: slab-use-after-free in mlxsw_sp_mr_stats_update+0x4a5/0x540 drivers/net/ethernet/mellanox/mlxsw/spectrum_mr.c:1006 [mlxsw_spectrum] Read of size 8 at addr ffff8881523c2fa8 by task kworker/2:5/22043 CPU: 2 UID: 0 PID: 22043 Comm: kworker/2:5 Not tainted 6.18.0-rc1-custom-g1a3d6d7cd014 #1 PREEMPT(full) Hardware name: Mellanox Technologies Ltd. MSN2010/SA002610, BIOS 5.6.5 08/24/2017 Workqueue: mlxsw_core mlxsw_sp_mr_stats_update [mlxsw_spectrum] Call Trace: <TASK> dump_stack_lvl+0xba/0x110 print_report+0x174/0x4f5 kasan_report+0xdf/0x110 mlxsw_sp_mr_stats_update+0x4a5/0x540 drivers/net/ethernet/mellanox/mlxsw/spectrum_mr.c:1006 [mlxsw_spectrum] process_one_work+0x9cc/0x18e0 worker_thread+0x5df/0xe40 kthread+0x3b8/0x730 ret_from_fork+0x3e9/0x560 ret_from_fork_asm+0x1a/0x30 </TASK> Allocated by task 29933: kasan_save_stack+0x30/0x50 kasan_save_track+0x14/0x30 __kasan_kmalloc+0x8f/0xa0 mlxsw_sp_mr_route_add+0xd8/0x4770 [mlxsw_spectrum] mlxsw_sp_router_fibmr_event_work+0x371/0xad0 drivers/net/ethernet/mellanox/mlxsw/spectrum_router.c:7965 [mlxsw_spectrum] process_one_work+0x9cc/0x18e0 worker_thread+0x5df/0xe40 kthread+0x3b8/0x730 ret_from_fork+0x3e9/0x560 ret_from_fork_asm+0x1a/0x30 Freed by task 29933: kasan_save_stack+0x30/0x50 kasan_save_track+0x14/0x30 __kasan_save_free_info+0x3b/0x70 __kasan_slab_free+0x43/0x70 kfree+0x14e/0x700 mlxsw_sp_mr_route_add+0x2dea/0x4770 drivers/net/ethernet/mellanox/mlxsw/spectrum_mr.c:444 [mlxsw_spectrum] mlxsw_sp_router_fibmr_event_work+0x371/0xad0 drivers/net/ethernet/mellanox/mlxsw/spectrum_router.c:7965 [mlxsw_spectrum] process_one_work+0x9cc/0x18e0 worker_thread+0x5df/0xe40 kthread+0x3b8/0x730 ret_from_fork+0x3e9/0x560 ret_from_fork_asm+0x1a/0x30 CVE-2025-68800 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68800.html CVE-2025-68800 https://bugzilla.suse.com/1256646 SUSE Bug 1256646 In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_router: Fix neighbour use-after-free We sometimes observe use-after-free when dereferencing a neighbour [1]. The problem seems to be that the driver stores a pointer to the neighbour, but without holding a reference on it. A reference is only taken when the neighbour is used by a nexthop. Fix by simplifying the reference counting scheme. Always take a reference when storing a neighbour pointer in a neighbour entry. Avoid taking a referencing when the neighbour is used by a nexthop as the neighbour entry associated with the nexthop already holds a reference. Tested by running the test that uncovered the problem over 300 times. Without this patch the problem was reproduced after a handful of iterations. [1] BUG: KASAN: slab-use-after-free in mlxsw_sp_neigh_entry_update+0x2d4/0x310 Read of size 8 at addr ffff88817f8e3420 by task ip/3929 CPU: 3 UID: 0 PID: 3929 Comm: ip Not tainted 6.18.0-rc4-virtme-g36b21a067510 #3 PREEMPT(full) Hardware name: Nvidia SN5600/VMOD0013, BIOS 5.13 05/31/2023 Call Trace: <TASK> dump_stack_lvl+0x6f/0xa0 print_address_description.constprop.0+0x6e/0x300 print_report+0xfc/0x1fb kasan_report+0xe4/0x110 mlxsw_sp_neigh_entry_update+0x2d4/0x310 mlxsw_sp_router_rif_gone_sync+0x35f/0x510 mlxsw_sp_rif_destroy+0x1ea/0x730 mlxsw_sp_inetaddr_port_vlan_event+0xa1/0x1b0 __mlxsw_sp_inetaddr_lag_event+0xcc/0x130 __mlxsw_sp_inetaddr_event+0xf5/0x3c0 mlxsw_sp_router_netdevice_event+0x1015/0x1580 notifier_call_chain+0xcc/0x150 call_netdevice_notifiers_info+0x7e/0x100 __netdev_upper_dev_unlink+0x10b/0x210 netdev_upper_dev_unlink+0x79/0xa0 vrf_del_slave+0x18/0x50 do_set_master+0x146/0x7d0 do_setlink.isra.0+0x9a0/0x2880 rtnl_newlink+0x637/0xb20 rtnetlink_rcv_msg+0x6fe/0xb90 netlink_rcv_skb+0x123/0x380 netlink_unicast+0x4a3/0x770 netlink_sendmsg+0x75b/0xc90 __sock_sendmsg+0xbe/0x160 ____sys_sendmsg+0x5b2/0x7d0 ___sys_sendmsg+0xfd/0x180 __sys_sendmsg+0x124/0x1c0 do_syscall_64+0xbb/0xfd0 entry_SYSCALL_64_after_hwframe+0x4b/0x53 [...] Allocated by task 109: kasan_save_stack+0x30/0x50 kasan_save_track+0x14/0x30 __kasan_kmalloc+0x7b/0x90 __kmalloc_noprof+0x2c1/0x790 neigh_alloc+0x6af/0x8f0 ___neigh_create+0x63/0xe90 mlxsw_sp_nexthop_neigh_init+0x430/0x7e0 mlxsw_sp_nexthop_type_init+0x212/0x960 mlxsw_sp_nexthop6_group_info_init.constprop.0+0x81f/0x1280 mlxsw_sp_nexthop6_group_get+0x392/0x6a0 mlxsw_sp_fib6_entry_create+0x46a/0xfd0 mlxsw_sp_router_fib6_replace+0x1ed/0x5f0 mlxsw_sp_router_fib6_event_work+0x10a/0x2a0 process_one_work+0xd57/0x1390 worker_thread+0x4d6/0xd40 kthread+0x355/0x5b0 ret_from_fork+0x1d4/0x270 ret_from_fork_asm+0x11/0x20 Freed by task 154: kasan_save_stack+0x30/0x50 kasan_save_track+0x14/0x30 __kasan_save_free_info+0x3b/0x60 __kasan_slab_free+0x43/0x70 kmem_cache_free_bulk.part.0+0x1eb/0x5e0 kvfree_rcu_bulk+0x1f2/0x260 kfree_rcu_work+0x130/0x1b0 process_one_work+0xd57/0x1390 worker_thread+0x4d6/0xd40 kthread+0x355/0x5b0 ret_from_fork+0x1d4/0x270 ret_from_fork_asm+0x11/0x20 Last potentially related work creation: kasan_save_stack+0x30/0x50 kasan_record_aux_stack+0x8c/0xa0 kvfree_call_rcu+0x93/0x5b0 mlxsw_sp_router_neigh_event_work+0x67d/0x860 process_one_work+0xd57/0x1390 worker_thread+0x4d6/0xd40 kthread+0x355/0x5b0 ret_from_fork+0x1d4/0x270 ret_from_fork_asm+0x11/0x20 CVE-2025-68801 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68801.html CVE-2025-68801 https://bugzilla.suse.com/1256653 SUSE Bug 1256653 In the Linux kernel, the following vulnerability has been resolved: drm/xe: Limit num_syncs to prevent oversized allocations The exec and vm_bind ioctl allow userspace to specify an arbitrary num_syncs value. Without bounds checking, a very large num_syncs can force an excessively large allocation, leading to kernel warnings from the page allocator as below. Introduce DRM_XE_MAX_SYNCS (set to 1024) and reject any request exceeding this limit. " ------------[ cut here ]------------ WARNING: CPU: 0 PID: 1217 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x2f8/0x2180 mm/page_alloc.c:5124 ... Call Trace: <TASK> alloc_pages_mpol+0xe4/0x330 mm/mempolicy.c:2416 ___kmalloc_large_node+0xd8/0x110 mm/slub.c:4317 __kmalloc_large_node_noprof+0x18/0xe0 mm/slub.c:4348 __do_kmalloc_node mm/slub.c:4364 [inline] __kmalloc_noprof+0x3d4/0x4b0 mm/slub.c:4388 kmalloc_noprof include/linux/slab.h:909 [inline] kmalloc_array_noprof include/linux/slab.h:948 [inline] xe_exec_ioctl+0xa47/0x1e70 drivers/gpu/drm/xe/xe_exec.c:158 drm_ioctl_kernel+0x1f1/0x3e0 drivers/gpu/drm/drm_ioctl.c:797 drm_ioctl+0x5e7/0xc50 drivers/gpu/drm/drm_ioctl.c:894 xe_drm_ioctl+0x10b/0x170 drivers/gpu/drm/xe/xe_device.c:224 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:598 [inline] __se_sys_ioctl fs/ioctl.c:584 [inline] __x64_sys_ioctl+0x18b/0x210 fs/ioctl.c:584 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xbb/0x380 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f ... " v2: Add "Reported-by" and Cc stable kernels. v3: Change XE_MAX_SYNCS from 64 to 1024. (Matt & Ashutosh) v4: s/XE_MAX_SYNCS/DRM_XE_MAX_SYNCS/ (Matt) v5: Do the check at the top of the exec func. (Matt) (cherry picked from commit b07bac9bd708ec468cd1b8a5fe70ae2ac9b0a11c) CVE-2025-68802 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68802.html CVE-2025-68802 https://bugzilla.suse.com/1256661 SUSE Bug 1256661 In the Linux kernel, the following vulnerability has been resolved: NFSD: NFSv4 file creation neglects setting ACL An NFSv4 client that sets an ACL with a named principal during file creation retrieves the ACL afterwards, and finds that it is only a default ACL (based on the mode bits) and not the ACL that was requested during file creation. This violates RFC 8881 section 6.4.1.3: "the ACL attribute is set as given". The issue occurs in nfsd_create_setattr(), which calls nfsd_attrs_valid() to determine whether to call nfsd_setattr(). However, nfsd_attrs_valid() checks only for iattr changes and security labels, but not POSIX ACLs. When only an ACL is present, the function returns false, nfsd_setattr() is skipped, and the POSIX ACL is never applied to the inode. Subsequently, when the client retrieves the ACL, the server finds no POSIX ACL on the inode and returns one generated from the file's mode bits rather than returning the originally-specified ACL. CVE-2025-68803 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68803.html CVE-2025-68803 https://bugzilla.suse.com/1256770 SUSE Bug 1256770 In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver After unbinding the driver, another kthread `cros_ec_console_log_work` is still accessing the device, resulting an UAF and crash. The driver doesn't unregister the EC device in .remove() which should shutdown sub-devices synchronously. Fix it. CVE-2025-68804 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68804.html CVE-2025-68804 https://bugzilla.suse.com/1256617 SUSE Bug 1256617 https://bugzilla.suse.com/1256618 SUSE Bug 1256618 In the Linux kernel, the following vulnerability has been resolved: media: vidtv: initialize local pointers upon transfer of memory ownership vidtv_channel_si_init() creates a temporary list (program, service, event) and ownership of the memory itself is transferred to the PAT/SDT/EIT tables through vidtv_psi_pat_program_assign(), vidtv_psi_sdt_service_assign(), vidtv_psi_eit_event_assign(). The problem here is that the local pointer where the memory ownership transfer was completed is not initialized to NULL. This causes the vidtv_psi_pmt_create_sec_for_each_pat_entry() function to fail, and in the flow that jumps to free_eit, the memory that was freed by vidtv_psi_*_table_destroy() can be accessed again by vidtv_psi_*_event_destroy() due to the uninitialized local pointer, so it is freed once again. Therefore, to prevent use-after-free and double-free vulnerability, local pointers must be initialized to NULL when transferring memory ownership. CVE-2025-68808 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68808.html CVE-2025-68808 https://bugzilla.suse.com/1256682 SUSE Bug 1256682 In the Linux kernel, the following vulnerability has been resolved: svcrdma: use rc_pageoff for memcpy byte offset svc_rdma_copy_inline_range added rc_curpage (page index) to the page base instead of the byte offset rc_pageoff. Use rc_pageoff so copies land within the current page. Found by ZeroPath (https://zeropath.com) CVE-2025-68811 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68811.html CVE-2025-68811 https://bugzilla.suse.com/1256677 SUSE Bug 1256677 In the Linux kernel, the following vulnerability has been resolved: ipvs: fix ipv4 null-ptr-deref in route error path The IPv4 code path in __ip_vs_get_out_rt() calls dst_link_failure() without ensuring skb->dev is set, leading to a NULL pointer dereference in fib_compute_spec_dst() when ipv4_link_failure() attempts to send ICMP destination unreachable messages. The issue emerged after commit ed0de45a1008 ("ipv4: recompile ip options in ipv4_link_failure") started calling __ip_options_compile() from ipv4_link_failure(). This code path eventually calls fib_compute_spec_dst() which dereferences skb->dev. An attempt was made to fix the NULL skb->dev dereference in commit 0113d9c9d1cc ("ipv4: fix null-deref in ipv4_link_failure"), but it only addressed the immediate dev_net(skb->dev) dereference by using a fallback device. The fix was incomplete because fib_compute_spec_dst() later in the call chain still accesses skb->dev directly, which remains NULL when IPVS calls dst_link_failure(). The crash occurs when: 1. IPVS processes a packet in NAT mode with a misconfigured destination 2. Route lookup fails in __ip_vs_get_out_rt() before establishing a route 3. The error path calls dst_link_failure(skb) with skb->dev == NULL 4. ipv4_link_failure() -> ipv4_send_dest_unreach() -> __ip_options_compile() -> fib_compute_spec_dst() 5. fib_compute_spec_dst() dereferences NULL skb->dev Apply the same fix used for IPv6 in commit 326bf17ea5d4 ("ipvs: fix ipv6 route unreach panic"): set skb->dev from skb_dst(skb)->dev before calling dst_link_failure(). KASAN: null-ptr-deref in range [0x0000000000000328-0x000000000000032f] CPU: 1 PID: 12732 Comm: syz.1.3469 Not tainted 6.6.114 #2 RIP: 0010:__in_dev_get_rcu include/linux/inetdevice.h:233 RIP: 0010:fib_compute_spec_dst+0x17a/0x9f0 net/ipv4/fib_frontend.c:285 Call Trace: <TASK> spec_dst_fill net/ipv4/ip_options.c:232 spec_dst_fill net/ipv4/ip_options.c:229 __ip_options_compile+0x13a1/0x17d0 net/ipv4/ip_options.c:330 ipv4_send_dest_unreach net/ipv4/route.c:1252 ipv4_link_failure+0x702/0xb80 net/ipv4/route.c:1265 dst_link_failure include/net/dst.h:437 __ip_vs_get_out_rt+0x15fd/0x19e0 net/netfilter/ipvs/ip_vs_xmit.c:412 ip_vs_nat_xmit+0x1d8/0xc80 net/netfilter/ipvs/ip_vs_xmit.c:764 CVE-2025-68813 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68813.html CVE-2025-68813 https://bugzilla.suse.com/1256641 SUSE Bug 1256641 https://bugzilla.suse.com/1256644 SUSE Bug 1256644 In the Linux kernel, the following vulnerability has been resolved: io_uring: fix filename leak in __io_openat_prep() __io_openat_prep() allocates a struct filename using getname(). However, for the condition of the file being installed in the fixed file table as well as having O_CLOEXEC flag set, the function returns early. At that point, the request doesn't have REQ_F_NEED_CLEANUP flag set. Due to this, the memory for the newly allocated struct filename is not cleaned up, causing a memory leak. Fix this by setting the REQ_F_NEED_CLEANUP for the request just after the successful getname() call, so that when the request is torn down, the filename will be cleaned up, along with other resources needing cleanup. CVE-2025-68814 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68814.html CVE-2025-68814 https://bugzilla.suse.com/1256651 SUSE Bug 1256651 In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Remove drr class from the active list if it changes to strict Whenever a user issues an ets qdisc change command, transforming a drr class into a strict one, the ets code isn't checking whether that class was in the active list and removing it. This means that, if a user changes a strict class (which was in the active list) back to a drr one, that class will be added twice to the active list [1]. Doing so with the following commands: tc qdisc add dev lo root handle 1: ets bands 2 strict 1 tc qdisc add dev lo parent 1:2 handle 20: \ tbf rate 8bit burst 100b latency 1s tc filter add dev lo parent 1: basic classid 1:2 ping -c1 -W0.01 -s 56 127.0.0.1 tc qdisc change dev lo root handle 1: ets bands 2 strict 2 tc qdisc change dev lo root handle 1: ets bands 2 strict 1 ping -c1 -W0.01 -s 56 127.0.0.1 Will trigger the following splat with list debug turned on: [ 59.279014][ T365] ------------[ cut here ]------------ [ 59.279452][ T365] list_add double add: new=ffff88801d60e350, prev=ffff88801d60e350, next=ffff88801d60e2c0. [ 59.280153][ T365] WARNING: CPU: 3 PID: 365 at lib/list_debug.c:35 __list_add_valid_or_report+0x17f/0x220 [ 59.280860][ T365] Modules linked in: [ 59.281165][ T365] CPU: 3 UID: 0 PID: 365 Comm: tc Not tainted 6.18.0-rc7-00105-g7e9f13163c13-dirty #239 PREEMPT(voluntary) [ 59.281977][ T365] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011 [ 59.282391][ T365] RIP: 0010:__list_add_valid_or_report+0x17f/0x220 [ 59.282842][ T365] Code: 89 c6 e8 d4 b7 0d ff 90 0f 0b 90 90 31 c0 e9 31 ff ff ff 90 48 c7 c7 e0 a0 22 9f 48 89 f2 48 89 c1 4c 89 c6 e8 b2 b7 0d ff 90 <0f> 0b 90 90 31 c0 e9 0f ff ff ff 48 89 f7 48 89 44 24 10 4c 89 44 ... [ 59.288812][ T365] Call Trace: [ 59.289056][ T365] <TASK> [ 59.289224][ T365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 59.289546][ T365] ets_qdisc_change+0xd2b/0x1e80 [ 59.289891][ T365] ? __lock_acquire+0x7e7/0x1be0 [ 59.290223][ T365] ? __pfx_ets_qdisc_change+0x10/0x10 [ 59.290546][ T365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 59.290898][ T365] ? __mutex_trylock_common+0xda/0x240 [ 59.291228][ T365] ? __pfx___mutex_trylock_common+0x10/0x10 [ 59.291655][ T365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 59.291993][ T365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 59.292313][ T365] ? trace_contention_end+0xc8/0x110 [ 59.292656][ T365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 59.293022][ T365] ? srso_alias_return_thunk+0x5/0xfbef5 [ 59.293351][ T365] tc_modify_qdisc+0x63a/0x1cf0 Fix this by always checking and removing an ets class from the active list when changing it to strict. [1] https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/tree/net/sched/sch_ets.c?id=ce052b9402e461a9aded599f5b47e76bc727f7de#n663 CVE-2025-68815 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68815.html CVE-2025-68815 https://bugzilla.suse.com/1256680 SUSE Bug 1256680 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fw_tracer, Validate format string parameters Add validation for format string parameters in the firmware tracer to prevent potential security vulnerabilities and crashes from malformed format strings received from firmware. The firmware tracer receives format strings from the device firmware and uses them to format trace messages. Without proper validation, bad firmware could provide format strings with invalid format specifiers (e.g., %s, %p, %n) that could lead to crashes, or other undefined behavior. Add mlx5_tracer_validate_params() to validate that all format specifiers in trace strings are limited to safe integer/hex formats (%x, %d, %i, %u, %llx, %lx, etc.). Reject strings containing other format types that could be used to access arbitrary memory or cause crashes. Invalid format strings are added to the trace output for visibility with "BAD_FORMAT: " prefix. CVE-2025-68816 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68816.html CVE-2025-68816 https://bugzilla.suse.com/1256674 SUSE Bug 1256674 In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() rlen value is a user-controlled value, but dtv5100_i2c_msg() does not check the size of the rlen value. Therefore, if it is set to a value larger than sizeof(st->data), an out-of-bounds vuln occurs for st->data. Therefore, we need to add proper range checking to prevent this vuln. CVE-2025-68819 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68819.html CVE-2025-68819 https://bugzilla.suse.com/1256664 SUSE Bug 1256664 In the Linux kernel, the following vulnerability has been resolved: ext4: xattr: fix null pointer deref in ext4_raw_inode() If ext4_get_inode_loc() fails (e.g. if it returns -EFSCORRUPTED), iloc.bh will remain set to NULL. Since ext4_xattr_inode_dec_ref_all() lacks error checking, this will lead to a null pointer dereference in ext4_raw_inode(), called right after ext4_get_inode_loc(). Found by Linux Verification Center (linuxtesting.org) with SVACE. CVE-2025-68820 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68820.html CVE-2025-68820 https://bugzilla.suse.com/1256754 SUSE Bug 1256754 In the Linux kernel, the following vulnerability has been resolved: fuse: fix readahead reclaim deadlock Commit e26ee4efbc79 ("fuse: allocate ff->release_args only if release is needed") skips allocating ff->release_args if the server does not implement open. However in doing so, fuse_prepare_release() now skips grabbing the reference on the inode, which makes it possible for an inode to be evicted from the dcache while there are inflight readahead requests. This causes a deadlock if the server triggers reclaim while servicing the readahead request and reclaim attempts to evict the inode of the file being read ahead. Since the folio is locked during readahead, when reclaim evicts the fuse inode and fuse_evict_inode() attempts to remove all folios associated with the inode from the page cache (truncate_inode_pages_range()), reclaim will block forever waiting for the lock since readahead cannot relinquish the lock because it is itself blocked in reclaim: >>> stack_trace(1504735) folio_wait_bit_common (mm/filemap.c:1308:4) folio_lock (./include/linux/pagemap.h:1052:3) truncate_inode_pages_range (mm/truncate.c:336:10) fuse_evict_inode (fs/fuse/inode.c:161:2) evict (fs/inode.c:704:3) dentry_unlink_inode (fs/dcache.c:412:3) __dentry_kill (fs/dcache.c:615:3) shrink_kill (fs/dcache.c:1060:12) shrink_dentry_list (fs/dcache.c:1087:3) prune_dcache_sb (fs/dcache.c:1168:2) super_cache_scan (fs/super.c:221:10) do_shrink_slab (mm/shrinker.c:435:9) shrink_slab (mm/shrinker.c:626:10) shrink_node (mm/vmscan.c:5951:2) shrink_zones (mm/vmscan.c:6195:3) do_try_to_free_pages (mm/vmscan.c:6257:3) do_swap_page (mm/memory.c:4136:11) handle_pte_fault (mm/memory.c:5562:10) handle_mm_fault (mm/memory.c:5870:9) do_user_addr_fault (arch/x86/mm/fault.c:1338:10) handle_page_fault (arch/x86/mm/fault.c:1481:3) exc_page_fault (arch/x86/mm/fault.c:1539:2) asm_exc_page_fault+0x22/0x27 Fix this deadlock by allocating ff->release_args and grabbing the reference on the inode when preparing the file for release even if the server does not implement open. The inode reference will be dropped when the last reference on the fuse file is dropped (see fuse_file_put() -> fuse_release_end()). CVE-2025-68821 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68821.html CVE-2025-68821 https://bugzilla.suse.com/1256667 SUSE Bug 1256667 In the Linux kernel, the following vulnerability has been resolved: Input: alps - fix use-after-free bugs caused by dev3_register_work The dev3_register_work delayed work item is initialized within alps_reconnect() and scheduled upon receipt of the first bare PS/2 packet from an external PS/2 device connected to the ALPS touchpad. During device detachment, the original implementation calls flush_workqueue() in psmouse_disconnect() to ensure completion of dev3_register_work. However, the flush_workqueue() in psmouse_disconnect() only blocks and waits for work items that were already queued to the workqueue prior to its invocation. Any work items submitted after flush_workqueue() is called are not included in the set of tasks that the flush operation awaits. This means that after flush_workqueue() has finished executing, the dev3_register_work could still be scheduled. Although the psmouse state is set to PSMOUSE_CMD_MODE in psmouse_disconnect(), the scheduling of dev3_register_work remains unaffected. The race condition can occur as follows: CPU 0 (cleanup path) | CPU 1 (delayed work) psmouse_disconnect() | psmouse_set_state() | flush_workqueue() | alps_report_bare_ps2_packet() alps_disconnect() | psmouse_queue_work() kfree(priv); // FREE | alps_register_bare_ps2_mouse() | priv = container_of(work...); // USE | priv->dev3 // USE Add disable_delayed_work_sync() in alps_disconnect() to ensure that dev3_register_work is properly canceled and prevented from executing after the alps_data structure has been deallocated. This bug is identified by static analysis. CVE-2025-68822 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-68822.html CVE-2025-68822 https://bugzilla.suse.com/1256668 SUSE Bug 1256668 In the Linux kernel, the following vulnerability has been resolved: net: hns3: using the num_tqps in the vf driver to apply for resources Currently, hdev->htqp is allocated using hdev->num_tqps, and kinfo->tqp is allocated using kinfo->num_tqps. However, kinfo->num_tqps is set to min(new_tqps, hdev->num_tqps); Therefore, kinfo->num_tqps may be smaller than hdev->num_tqps, which causes some hdev->htqp[i] to remain uninitialized in hclgevf_knic_setup(). Thus, this patch allocates hdev->htqp and kinfo->tqp using hdev->num_tqps, ensuring that the lengths of hdev->htqp and kinfo->tqp are consistent and that all elements are properly initialized. CVE-2025-71064 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71064.html CVE-2025-71064 https://bugzilla.suse.com/1256654 SUSE Bug 1256654 In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change zdi-disclosures@trendmicro.com says: The vulnerability is a race condition between `ets_qdisc_dequeue` and `ets_qdisc_change`. It leads to UAF on `struct Qdisc` object. Attacker requires the capability to create new user and network namespace in order to trigger the bug. See my additional commentary at the end of the analysis. Analysis: static int ets_qdisc_change(struct Qdisc *sch, struct nlattr *opt, struct netlink_ext_ack *extack) { ... // (1) this lock is preventing .change handler (`ets_qdisc_change`) //to race with .dequeue handler (`ets_qdisc_dequeue`) sch_tree_lock(sch); for (i = nbands; i < oldbands; i++) { if (i >= q->nstrict && q->classes[i].qdisc->q.qlen) list_del_init(&q->classes[i].alist); qdisc_purge_queue(q->classes[i].qdisc); } WRITE_ONCE(q->nbands, nbands); for (i = nstrict; i < q->nstrict; i++) { if (q->classes[i].qdisc->q.qlen) { // (2) the class is added to the q->active list_add_tail(&q->classes[i].alist, &q->active); q->classes[i].deficit = quanta[i]; } } WRITE_ONCE(q->nstrict, nstrict); memcpy(q->prio2band, priomap, sizeof(priomap)); for (i = 0; i < q->nbands; i++) WRITE_ONCE(q->classes[i].quantum, quanta[i]); for (i = oldbands; i < q->nbands; i++) { q->classes[i].qdisc = queues[i]; if (q->classes[i].qdisc != &noop_qdisc) qdisc_hash_add(q->classes[i].qdisc, true); } // (3) the qdisc is unlocked, now dequeue can be called in parallel // to the rest of .change handler sch_tree_unlock(sch); ets_offload_change(sch); for (i = q->nbands; i < oldbands; i++) { // (4) we're reducing the refcount for our class's qdisc and // freeing it qdisc_put(q->classes[i].qdisc); // (5) If we call .dequeue between (4) and (5), we will have // a strong UAF and we can control RIP q->classes[i].qdisc = NULL; WRITE_ONCE(q->classes[i].quantum, 0); q->classes[i].deficit = 0; gnet_stats_basic_sync_init(&q->classes[i].bstats); memset(&q->classes[i].qstats, 0, sizeof(q->classes[i].qstats)); } return 0; } Comment: This happens because some of the classes have their qdiscs assigned to NULL, but remain in the active list. This commit fixes this issue by always removing the class from the active list before deleting and freeing its associated qdisc Reproducer Steps (trimmed version of what was sent by zdi-disclosures@trendmicro.com) ``` DEV="${DEV:-lo}" ROOT_HANDLE="${ROOT_HANDLE:-1:}" BAND2_HANDLE="${BAND2_HANDLE:-20:}" # child under 1:2 PING_BYTES="${PING_BYTES:-48}" PING_COUNT="${PING_COUNT:-200000}" PING_DST="${PING_DST:-127.0.0.1}" SLOW_TBF_RATE="${SLOW_TBF_RATE:-8bit}" SLOW_TBF_BURST="${SLOW_TBF_BURST:-100b}" SLOW_TBF_LAT="${SLOW_TBF_LAT:-1s}" cleanup() { tc qdisc del dev "$DEV" root 2>/dev/null } trap cleanup EXIT ip link set "$DEV" up tc qdisc del dev "$DEV" root 2>/dev/null || true tc qdisc add dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 2 tc qdisc add dev "$DEV" parent 1:2 handle "$BAND2_HANDLE" \ tbf rate "$SLOW_TBF_RATE" burst "$SLOW_TBF_BURST" latency "$SLOW_TBF_LAT" tc filter add dev "$DEV" parent 1: protocol all prio 1 u32 match u32 0 0 flowid 1:2 tc -s qdisc ls dev $DEV ping -I "$DEV" -f -c "$PING_COUNT" -s "$PING_BYTES" -W 0.001 "$PING_DST" \ >/dev/null 2>&1 & tc qdisc change dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 0 tc qdisc change dev "$DEV" root handle "$ROOT_HANDLE" ets bands 2 strict 2 tc -s qdisc ls dev $DEV tc qdisc del dev "$DEV" parent ---truncated--- CVE-2025-71066 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71066.html CVE-2025-71066 https://bugzilla.suse.com/1256645 SUSE Bug 1256645 In the Linux kernel, the following vulnerability has been resolved: Input: lkkbd - disable pending work before freeing device lkkbd_interrupt() schedules lk->tq via schedule_work(), and the work handler lkkbd_reinit() dereferences the lkkbd structure and its serio/input_dev fields. lkkbd_disconnect() and error paths in lkkbd_connect() free the lkkbd structure without preventing the reinit work from being queued again until serio_close() returns. This can allow the work handler to run after the structure has been freed, leading to a potential use-after-free. Use disable_work_sync() instead of cancel_work_sync() to ensure the reinit work cannot be re-queued, and call it both in lkkbd_disconnect() and in lkkbd_connect() error paths after serio_open(). CVE-2025-71073 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71073.html CVE-2025-71073 https://bugzilla.suse.com/1256632 SUSE Bug 1256632 In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Limit num_syncs to prevent oversized allocations The OA open parameters did not validate num_syncs, allowing userspace to pass arbitrarily large values, potentially leading to excessive allocations. Add check to ensure that num_syncs does not exceed DRM_XE_MAX_SYNCS, returning -EINVAL when the limit is violated. v2: use XE_IOCTL_DBG() and drop duplicated check. (Ashutosh) (cherry picked from commit e057b2d2b8d815df3858a87dffafa2af37e5945b) CVE-2025-71076 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71076.html CVE-2025-71076 https://bugzilla.suse.com/1256627 SUSE Bug 1256627 In the Linux kernel, the following vulnerability has been resolved: tpm: Cap the number of PCR banks tpm2_get_pcr_allocation() does not cap any upper limit for the number of banks. Cap the limit to eight banks so that out of bounds values coming from external I/O cause on only limited harm. CVE-2025-71077 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71077.html CVE-2025-71077 https://bugzilla.suse.com/1256613 SUSE Bug 1256613 In the Linux kernel, the following vulnerability has been resolved: powerpc/64s/slb: Fix SLB multihit issue during SLB preload On systems using the hash MMU, there is a software SLB preload cache that mirrors the entries loaded into the hardware SLB buffer. This preload cache is subject to periodic eviction - typically after every 256 context switches - to remove old entry. To optimize performance, the kernel skips switch_mmu_context() in switch_mm_irqs_off() when the prev and next mm_struct are the same. However, on hash MMU systems, this can lead to inconsistencies between the hardware SLB and the software preload cache. If an SLB entry for a process is evicted from the software cache on one CPU, and the same process later runs on another CPU without executing switch_mmu_context(), the hardware SLB may retain stale entries. If the kernel then attempts to reload that entry, it can trigger an SLB multi-hit error. The following timeline shows how stale SLB entries are created and can cause a multi-hit error when a process moves between CPUs without a MMU context switch. CPU 0 CPU 1 ----- ----- Process P exec swapper/1 load_elf_binary begin_new_exc activate_mm switch_mm_irqs_off switch_mmu_context switch_slb /* * This invalidates all * the entries in the HW * and setup the new HW * SLB entries as per the * preload cache. */ context_switch sched_migrate_task migrates process P to cpu-1 Process swapper/0 context switch (to process P) (uses mm_struct of Process P) switch_mm_irqs_off() switch_slb load_slb++ /* * load_slb becomes 0 here * and we evict an entry from * the preload cache with * preload_age(). We still * keep HW SLB and preload * cache in sync, that is * because all HW SLB entries * anyways gets evicted in * switch_slb during SLBIA. * We then only add those * entries back in HW SLB, * which are currently * present in preload_cache * (after eviction). */ load_elf_binary continues... setup_new_exec() slb_setup_new_exec() sched_switch event sched_migrate_task migrates process P to cpu-0 context_switch from swapper/0 to Process P switch_mm_irqs_off() /* * Since both prev and next mm struct are same we don't call * switch_mmu_context(). This will cause the HW SLB and SW preload * cache to go out of sync in preload_new_slb_context. Because there * was an SLB entry which was evicted from both HW and preload cache * on cpu-1. Now later in preload_new_slb_context(), when we will try * to add the same preload entry again, we will add this to the SW * preload cache and then will add it to the HW SLB. Since on cpu-0 * this entry was never invalidated, hence adding this entry to the HW * SLB will cause a SLB multi-hit error. */ load_elf_binary cont ---truncated--- CVE-2025-71078 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71078.html CVE-2025-71078 https://bugzilla.suse.com/1256616 SUSE Bug 1256616 In the Linux kernel, the following vulnerability has been resolved: net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write A deadlock can occur between nfc_unregister_device() and rfkill_fop_write() due to lock ordering inversion between device_lock and rfkill_global_mutex. The problematic lock order is: Thread A (rfkill_fop_write): rfkill_fop_write() mutex_lock(&rfkill_global_mutex) rfkill_set_block() nfc_rfkill_set_block() nfc_dev_down() device_lock(&dev->dev) <- waits for device_lock Thread B (nfc_unregister_device): nfc_unregister_device() device_lock(&dev->dev) rfkill_unregister() mutex_lock(&rfkill_global_mutex) <- waits for rfkill_global_mutex This creates a classic ABBA deadlock scenario. Fix this by moving rfkill_unregister() and rfkill_destroy() outside the device_lock critical section. Store the rfkill pointer in a local variable before releasing the lock, then call rfkill_unregister() after releasing device_lock. This change is safe because rfkill_fop_write() holds rfkill_global_mutex while calling the rfkill callbacks, and rfkill_unregister() also acquires rfkill_global_mutex before cleanup. Therefore, rfkill_unregister() will wait for any ongoing callback to complete before proceeding, and device_del() is only called after rfkill_unregister() returns, preventing any use-after-free. The similar lock ordering in nfc_register_device() (device_lock -> rfkill_global_mutex via rfkill_register) is safe because during registration the device is not yet in rfkill_list, so no concurrent rfkill operations can occur on this device. CVE-2025-71079 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71079.html CVE-2025-71079 https://bugzilla.suse.com/1256619 SUSE Bug 1256619 In the Linux kernel, the following vulnerability has been resolved: ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT On PREEMPT_RT kernels, after rt6_get_pcpu_route() returns NULL, the current task can be preempted. Another task running on the same CPU may then execute rt6_make_pcpu_route() and successfully install a pcpu_rt entry. When the first task resumes execution, its cmpxchg() in rt6_make_pcpu_route() will fail because rt6i_pcpu is no longer NULL, triggering the BUG_ON(prev). It's easy to reproduce it by adding mdelay() after rt6_get_pcpu_route(). Using preempt_disable/enable is not appropriate here because ip6_rt_pcpu_alloc() may sleep. Fix this by handling the cmpxchg() failure gracefully on PREEMPT_RT: free our allocation and return the existing pcpu_rt installed by another task. The BUG_ON is replaced by WARN_ON_ONCE for non-PREEMPT_RT kernels where such races should not occur. CVE-2025-71080 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71080.html CVE-2025-71080 https://bugzilla.suse.com/1256608 SUSE Bug 1256608 In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: sai: fix OF node leak on probe The reference taken to the sync provider OF node when probing the platform device is currently only dropped if the set_sync() callback fails during DAI probe. Make sure to drop the reference on platform probe failures (e.g. probe deferral) and on driver unbind. This also avoids a potential use-after-free in case the DAI is ever reprobed without first rebinding the platform driver. CVE-2025-71081 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71081.html CVE-2025-71081 https://bugzilla.suse.com/1256609 SUSE Bug 1256609 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: revert use of devm_kzalloc in btusb This reverts commit 98921dbd00c4e ("Bluetooth: Use devm_kzalloc in btusb.c file"). In btusb_probe(), we use devm_kzalloc() to allocate the btusb data. This ties the lifetime of all the btusb data to the binding of a driver to one interface, INTF. In a driver that binds to other interfaces, ISOC and DIAG, this is an accident waiting to happen. The issue is revealed in btusb_disconnect(), where calling usb_driver_release_interface(&btusb_driver, data->intf) will have devm free the data that is also being used by the other interfaces of the driver that may not be released yet. To fix this, revert the use of devm and go back to freeing memory explicitly. CVE-2025-71082 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71082.html CVE-2025-71082 https://bugzilla.suse.com/1256611 SUSE Bug 1256611 In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Avoid NULL pointer deref for evicted BOs It is possible for a BO to exist that is not currently associated with a resource, e.g. because it has been evicted. When devcoredump tries to read the contents of all BOs for dumping, we need to expect this as well -- in this case, ENODATA is recorded instead of the buffer contents. CVE-2025-71083 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71083.html CVE-2025-71083 https://bugzilla.suse.com/1256610 SUSE Bug 1256610 In the Linux kernel, the following vulnerability has been resolved: RDMA/cm: Fix leaking the multicast GID table reference If the CM ID is destroyed while the CM event for multicast creating is still queued the cancel_work_sync() will prevent the work from running which also prevents destroying the ah_attr. This leaks a refcount and triggers a WARN: GID entry ref leak for dev syz1 index 2 ref=573 WARNING: CPU: 1 PID: 655 at drivers/infiniband/core/cache.c:809 release_gid_table drivers/infiniband/core/cache.c:806 [inline] WARNING: CPU: 1 PID: 655 at drivers/infiniband/core/cache.c:809 gid_table_release_one+0x284/0x3cc drivers/infiniband/core/cache.c:886 Destroy the ah_attr after canceling the work, it is safe to call this twice. CVE-2025-71084 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71084.html CVE-2025-71084 https://bugzilla.suse.com/1256622 SUSE Bug 1256622 In the Linux kernel, the following vulnerability has been resolved: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() There exists a kernel oops caused by a BUG_ON(nhead < 0) at net/core/skbuff.c:2232 in pskb_expand_head(). This bug is triggered as part of the calipso_skbuff_setattr() routine when skb_cow() is passed headroom > INT_MAX (i.e. (int)(skb_headroom(skb) + len_delta) < 0). The root cause of the bug is due to an implicit integer cast in __skb_cow(). The check (headroom > skb_headroom(skb)) is meant to ensure that delta = headroom - skb_headroom(skb) is never negative, otherwise we will trigger a BUG_ON in pskb_expand_head(). However, if headroom > INT_MAX and delta <= -NET_SKB_PAD, the check passes, delta becomes negative, and pskb_expand_head() is passed a negative value for nhead. Fix the trigger condition in calipso_skbuff_setattr(). Avoid passing "negative" headroom sizes to skb_cow() within calipso_skbuff_setattr() by only using skb_cow() to grow headroom. PoC: Using `netlabelctl` tool: netlabelctl map del default netlabelctl calipso add pass doi:7 netlabelctl map add default address:0::1/128 protocol:calipso,7 Then run the following PoC: int fd = socket(AF_INET6, SOCK_DGRAM, IPPROTO_UDP); // setup msghdr int cmsg_size = 2; int cmsg_len = 0x60; struct msghdr msg; struct sockaddr_in6 dest_addr; struct cmsghdr * cmsg = (struct cmsghdr *) calloc(1, sizeof(struct cmsghdr) + cmsg_len); msg.msg_name = &dest_addr; msg.msg_namelen = sizeof(dest_addr); msg.msg_iov = NULL; msg.msg_iovlen = 0; msg.msg_control = cmsg; msg.msg_controllen = cmsg_len; msg.msg_flags = 0; // setup sockaddr dest_addr.sin6_family = AF_INET6; dest_addr.sin6_port = htons(31337); dest_addr.sin6_flowinfo = htonl(31337); dest_addr.sin6_addr = in6addr_loopback; dest_addr.sin6_scope_id = 31337; // setup cmsghdr cmsg->cmsg_len = cmsg_len; cmsg->cmsg_level = IPPROTO_IPV6; cmsg->cmsg_type = IPV6_HOPOPTS; char * hop_hdr = (char *)cmsg + sizeof(struct cmsghdr); hop_hdr[1] = 0x9; //set hop size - (0x9 + 1) * 8 = 80 sendmsg(fd, &msg, 0); CVE-2025-71085 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71085.html CVE-2025-71085 https://bugzilla.suse.com/1256623 SUSE Bug 1256623 https://bugzilla.suse.com/1256624 SUSE Bug 1256624 In the Linux kernel, the following vulnerability has been resolved: net: rose: fix invalid array index in rose_kill_by_device() rose_kill_by_device() collects sockets into a local array[] and then iterates over them to disconnect sockets bound to a device being brought down. The loop mistakenly indexes array[cnt] instead of array[i]. For cnt < ARRAY_SIZE(array), this reads an uninitialized entry; for cnt == ARRAY_SIZE(array), it is an out-of-bounds read. Either case can lead to an invalid socket pointer dereference and also leaks references taken via sock_hold(). Fix the index to use i. CVE-2025-71086 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71086.html CVE-2025-71086 https://bugzilla.suse.com/1256625 SUSE Bug 1256625 In the Linux kernel, the following vulnerability has been resolved: iavf: fix off-by-one issues in iavf_config_rss_reg() There are off-by-one bugs when configuring RSS hash key and lookup table, causing out-of-bounds reads to memory [1] and out-of-bounds writes to device registers. Before commit 43a3d9ba34c9 ("i40evf: Allow PF driver to configure RSS"), the loop upper bounds were: i <= I40E_VFQF_{HKEY,HLUT}_MAX_INDEX which is safe since the value is the last valid index. That commit changed the bounds to: i <= adapter->rss_{key,lut}_size / 4 where `rss_{key,lut}_size / 4` is the number of dwords, so the last valid index is `(rss_{key,lut}_size / 4) - 1`. Therefore, using `<=` accesses one element past the end. Fix the issues by using `<` instead of `<=`, ensuring we do not exceed the bounds. [1] KASAN splat about rss_key_size off-by-one BUG: KASAN: slab-out-of-bounds in iavf_config_rss+0x619/0x800 Read of size 4 at addr ffff888102c50134 by task kworker/u8:6/63 CPU: 0 UID: 0 PID: 63 Comm: kworker/u8:6 Not tainted 6.18.0-rc2-enjuk-tnguy-00378-g3005f5b77652-dirty #156 PREEMPT(voluntary) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 Workqueue: iavf iavf_watchdog_task Call Trace: <TASK> dump_stack_lvl+0x6f/0xb0 print_report+0x170/0x4f3 kasan_report+0xe1/0x1a0 iavf_config_rss+0x619/0x800 iavf_watchdog_task+0x2be7/0x3230 process_one_work+0x7fd/0x1420 worker_thread+0x4d1/0xd40 kthread+0x344/0x660 ret_from_fork+0x249/0x320 ret_from_fork_asm+0x1a/0x30 </TASK> Allocated by task 63: kasan_save_stack+0x30/0x50 kasan_save_track+0x14/0x30 __kasan_kmalloc+0x7f/0x90 __kmalloc_noprof+0x246/0x6f0 iavf_watchdog_task+0x28fc/0x3230 process_one_work+0x7fd/0x1420 worker_thread+0x4d1/0xd40 kthread+0x344/0x660 ret_from_fork+0x249/0x320 ret_from_fork_asm+0x1a/0x30 The buggy address belongs to the object at ffff888102c50100 which belongs to the cache kmalloc-64 of size 64 The buggy address is located 0 bytes to the right of allocated 52-byte region [ffff888102c50100, ffff888102c50134) The buggy address belongs to the physical page: page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x102c50 flags: 0x200000000000000(node=0|zone=2) page_type: f5(slab) raw: 0200000000000000 ffff8881000418c0 dead000000000122 0000000000000000 raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000 page dumped because: kasan: bad access detected Memory state around the buggy address: ffff888102c50000: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc ffff888102c50080: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc >ffff888102c50100: 00 00 00 00 00 00 04 fc fc fc fc fc fc fc fc fc ^ ffff888102c50180: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc ffff888102c50200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc CVE-2025-71087 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71087.html CVE-2025-71087 https://bugzilla.suse.com/1256628 SUSE Bug 1256628 In the Linux kernel, the following vulnerability has been resolved: mptcp: fallback earlier on simult connection Syzkaller reports a simult-connect race leading to inconsistent fallback status: WARNING: CPU: 3 PID: 33 at net/mptcp/subflow.c:1515 subflow_data_ready+0x40b/0x7c0 net/mptcp/subflow.c:1515 Modules linked in: CPU: 3 UID: 0 PID: 33 Comm: ksoftirqd/3 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:subflow_data_ready+0x40b/0x7c0 net/mptcp/subflow.c:1515 Code: 89 ee e8 78 61 3c f6 40 84 ed 75 21 e8 8e 66 3c f6 44 89 fe bf 07 00 00 00 e8 c1 61 3c f6 41 83 ff 07 74 09 e8 76 66 3c f6 90 <0f> 0b 90 e8 6d 66 3c f6 48 89 df e8 e5 ad ff ff 31 ff 89 c5 89 c6 RSP: 0018:ffffc900006cf338 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff888031acd100 RCX: ffffffff8b7f2abf RDX: ffff88801e6ea440 RSI: ffffffff8b7f2aca RDI: 0000000000000005 RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000007 R10: 0000000000000004 R11: 0000000000002c10 R12: ffff88802ba69900 R13: 1ffff920000d9e67 R14: ffff888046f81800 R15: 0000000000000004 FS: 0000000000000000(0000) GS:ffff8880d69bc000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000560fc0ca1670 CR3: 0000000032c3a000 CR4: 0000000000352ef0 Call Trace: <TASK> tcp_data_queue+0x13b0/0x4f90 net/ipv4/tcp_input.c:5197 tcp_rcv_state_process+0xfdf/0x4ec0 net/ipv4/tcp_input.c:6922 tcp_v6_do_rcv+0x492/0x1740 net/ipv6/tcp_ipv6.c:1672 tcp_v6_rcv+0x2976/0x41e0 net/ipv6/tcp_ipv6.c:1918 ip6_protocol_deliver_rcu+0x188/0x1520 net/ipv6/ip6_input.c:438 ip6_input_finish+0x1e4/0x4b0 net/ipv6/ip6_input.c:489 NF_HOOK include/linux/netfilter.h:318 [inline] NF_HOOK include/linux/netfilter.h:312 [inline] ip6_input+0x105/0x2f0 net/ipv6/ip6_input.c:500 dst_input include/net/dst.h:471 [inline] ip6_rcv_finish net/ipv6/ip6_input.c:79 [inline] NF_HOOK include/linux/netfilter.h:318 [inline] NF_HOOK include/linux/netfilter.h:312 [inline] ipv6_rcv+0x264/0x650 net/ipv6/ip6_input.c:311 __netif_receive_skb_one_core+0x12d/0x1e0 net/core/dev.c:5979 __netif_receive_skb+0x1d/0x160 net/core/dev.c:6092 process_backlog+0x442/0x15e0 net/core/dev.c:6444 __napi_poll.constprop.0+0xba/0x550 net/core/dev.c:7494 napi_poll net/core/dev.c:7557 [inline] net_rx_action+0xa9f/0xfe0 net/core/dev.c:7684 handle_softirqs+0x216/0x8e0 kernel/softirq.c:579 run_ksoftirqd kernel/softirq.c:968 [inline] run_ksoftirqd+0x3a/0x60 kernel/softirq.c:960 smpboot_thread_fn+0x3f7/0xae0 kernel/smpboot.c:160 kthread+0x3c2/0x780 kernel/kthread.c:463 ret_from_fork+0x5d7/0x6f0 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 </TASK> The TCP subflow can process the simult-connect syn-ack packet after transitioning to TCP_FIN1 state, bypassing the MPTCP fallback check, as the sk_state_change() callback is not invoked for * -> FIN_WAIT1 transitions. That will move the msk socket to an inconsistent status and the next incoming data will hit the reported splat. Close the race moving the simult-fallback check at the earliest possible stage - that is at syn-ack generation time. About the fixes tags: [2] was supposed to also fix this issue introduced by [3]. [1] is required as a dependence: it was not explicitly marked as a fix, but it is one and it has already been backported before [3]. In other words, this commit should be backported up to [3], including [2] and [1] if that's not already there. CVE-2025-71088 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71088.html CVE-2025-71088 https://bugzilla.suse.com/1256630 SUSE Bug 1256630 In the Linux kernel, the following vulnerability has been resolved: iommu: disable SVA when CONFIG_X86 is set Patch series "Fix stale IOTLB entries for kernel address space", v7. This proposes a fix for a security vulnerability related to IOMMU Shared Virtual Addressing (SVA). In an SVA context, an IOMMU can cache kernel page table entries. When a kernel page table page is freed and reallocated for another purpose, the IOMMU might still hold stale, incorrect entries. This can be exploited to cause a use-after-free or write-after-free condition, potentially leading to privilege escalation or data corruption. This solution introduces a deferred freeing mechanism for kernel page table pages, which provides a safe window to notify the IOMMU to invalidate its caches before the page is reused. This patch (of 8): In the IOMMU Shared Virtual Addressing (SVA) context, the IOMMU hardware shares and walks the CPU's page tables. The x86 architecture maps the kernel's virtual address space into the upper portion of every process's page table. Consequently, in an SVA context, the IOMMU hardware can walk and cache kernel page table entries. The Linux kernel currently lacks a notification mechanism for kernel page table changes, specifically when page table pages are freed and reused. The IOMMU driver is only notified of changes to user virtual address mappings. This can cause the IOMMU's internal caches to retain stale entries for kernel VA. Use-After-Free (UAF) and Write-After-Free (WAF) conditions arise when kernel page table pages are freed and later reallocated. The IOMMU could misinterpret the new data as valid page table entries. The IOMMU might then walk into attacker-controlled memory, leading to arbitrary physical memory DMA access or privilege escalation. This is also a Write-After-Free issue, as the IOMMU will potentially continue to write Accessed and Dirty bits to the freed memory while attempting to walk the stale page tables. Currently, SVA contexts are unprivileged and cannot access kernel mappings. However, the IOMMU will still walk kernel-only page tables all the way down to the leaf entries, where it realizes the mapping is for the kernel and errors out. This means the IOMMU still caches these intermediate page table entries, making the described vulnerability a real concern. Disable SVA on x86 architecture until the IOMMU can receive notification to flush the paging cache before freeing the CPU kernel page table pages. CVE-2025-71089 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71089.html CVE-2025-71089 https://bugzilla.suse.com/1256612 SUSE Bug 1256612 https://bugzilla.suse.com/1256615 SUSE Bug 1256615 In the Linux kernel, the following vulnerability has been resolved: team: fix check for port enabled in team_queue_override_port_prio_changed() There has been a syzkaller bug reported recently with the following trace: list_del corruption, ffff888058bea080->prev is LIST_POISON2 (dead000000000122) ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:59! Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI CPU: 3 UID: 0 PID: 21246 Comm: syz.0.2928 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:__list_del_entry_valid_or_report+0x13e/0x200 lib/list_debug.c:59 Code: 48 c7 c7 e0 71 f0 8b e8 30 08 ef fc 90 0f 0b 48 89 ef e8 a5 02 55 fd 48 89 ea 48 89 de 48 c7 c7 40 72 f0 8b e8 13 08 ef fc 90 <0f> 0b 48 89 ef e8 88 02 55 fd 48 89 ea 48 b8 00 00 00 00 00 fc ff RSP: 0018:ffffc9000d49f370 EFLAGS: 00010286 RAX: 000000000000004e RBX: ffff888058bea080 RCX: ffffc9002817d000 RDX: 0000000000000000 RSI: ffffffff819becc6 RDI: 0000000000000005 RBP: dead000000000122 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000080000000 R11: 0000000000000001 R12: ffff888039e9c230 R13: ffff888058bea088 R14: ffff888058bea080 R15: ffff888055461480 FS: 00007fbbcfe6f6c0(0000) GS:ffff8880d6d0a000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000110c3afcb0 CR3: 00000000382c7000 CR4: 0000000000352ef0 Call Trace: <TASK> __list_del_entry_valid include/linux/list.h:132 [inline] __list_del_entry include/linux/list.h:223 [inline] list_del_rcu include/linux/rculist.h:178 [inline] __team_queue_override_port_del drivers/net/team/team_core.c:826 [inline] __team_queue_override_port_del drivers/net/team/team_core.c:821 [inline] team_queue_override_port_prio_changed drivers/net/team/team_core.c:883 [inline] team_priority_option_set+0x171/0x2f0 drivers/net/team/team_core.c:1534 team_option_set drivers/net/team/team_core.c:376 [inline] team_nl_options_set_doit+0x8ae/0xe60 drivers/net/team/team_core.c:2653 genl_family_rcv_msg_doit+0x209/0x2f0 net/netlink/genetlink.c:1115 genl_family_rcv_msg net/netlink/genetlink.c:1195 [inline] genl_rcv_msg+0x55c/0x800 net/netlink/genetlink.c:1210 netlink_rcv_skb+0x158/0x420 net/netlink/af_netlink.c:2552 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1219 netlink_unicast_kernel net/netlink/af_netlink.c:1320 [inline] netlink_unicast+0x5aa/0x870 net/netlink/af_netlink.c:1346 netlink_sendmsg+0x8c8/0xdd0 net/netlink/af_netlink.c:1896 sock_sendmsg_nosec net/socket.c:727 [inline] __sock_sendmsg net/socket.c:742 [inline] ____sys_sendmsg+0xa98/0xc70 net/socket.c:2630 ___sys_sendmsg+0x134/0x1d0 net/socket.c:2684 __sys_sendmsg+0x16d/0x220 net/socket.c:2716 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0xcd/0xfa0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f The problem is in this flow: 1) Port is enabled, queue_id != 0, in qom_list 2) Port gets disabled -> team_port_disable() -> team_queue_override_port_del() -> del (removed from list) 3) Port is disabled, queue_id != 0, not in any list 4) Priority changes -> team_queue_override_port_prio_changed() -> checks: port disabled && queue_id != 0 -> calls del - hits the BUG as it is removed already To fix this, change the check in team_queue_override_port_prio_changed() so it returns early if port is not enabled. CVE-2025-71091 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71091.html CVE-2025-71091 https://bugzilla.suse.com/1256773 SUSE Bug 1256773 In the Linux kernel, the following vulnerability has been resolved: e1000: fix OOB in e1000_tbi_should_accept() In e1000_tbi_should_accept() we read the last byte of the frame via 'data[length - 1]' to evaluate the TBI workaround. If the descriptor- reported length is zero or larger than the actual RX buffer size, this read goes out of bounds and can hit unrelated slab objects. The issue is observed from the NAPI receive path (e1000_clean_rx_irq): ================================================================== BUG: KASAN: slab-out-of-bounds in e1000_tbi_should_accept+0x610/0x790 Read of size 1 at addr ffff888014114e54 by task sshd/363 CPU: 0 PID: 363 Comm: sshd Not tainted 5.18.0-rc1 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 Call Trace: <IRQ> dump_stack_lvl+0x5a/0x74 print_address_description+0x7b/0x440 print_report+0x101/0x200 kasan_report+0xc1/0xf0 e1000_tbi_should_accept+0x610/0x790 e1000_clean_rx_irq+0xa8c/0x1110 e1000_clean+0xde2/0x3c10 __napi_poll+0x98/0x380 net_rx_action+0x491/0xa20 __do_softirq+0x2c9/0x61d do_softirq+0xd1/0x120 </IRQ> <TASK> __local_bh_enable_ip+0xfe/0x130 ip_finish_output2+0x7d5/0xb00 __ip_queue_xmit+0xe24/0x1ab0 __tcp_transmit_skb+0x1bcb/0x3340 tcp_write_xmit+0x175d/0x6bd0 __tcp_push_pending_frames+0x7b/0x280 tcp_sendmsg_locked+0x2e4f/0x32d0 tcp_sendmsg+0x24/0x40 sock_write_iter+0x322/0x430 vfs_write+0x56c/0xa60 ksys_write+0xd1/0x190 do_syscall_64+0x43/0x90 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f511b476b10 Code: 73 01 c3 48 8b 0d 88 d3 2b 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d f9 2b 2c 00 00 75 10 b8 01 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 8e 9b 01 00 48 89 04 24 RSP: 002b:00007ffc9211d4e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000004024 RCX: 00007f511b476b10 RDX: 0000000000004024 RSI: 0000559a9385962c RDI: 0000000000000003 RBP: 0000559a9383a400 R08: fffffffffffffff0 R09: 0000000000004f00 R10: 0000000000000070 R11: 0000000000000246 R12: 0000000000000000 R13: 00007ffc9211d57f R14: 0000559a9347bde7 R15: 0000000000000003 </TASK> Allocated by task 1: __kasan_krealloc+0x131/0x1c0 krealloc+0x90/0xc0 add_sysfs_param+0xcb/0x8a0 kernel_add_sysfs_param+0x81/0xd4 param_sysfs_builtin+0x138/0x1a6 param_sysfs_init+0x57/0x5b do_one_initcall+0x104/0x250 do_initcall_level+0x102/0x132 do_initcalls+0x46/0x74 kernel_init_freeable+0x28f/0x393 kernel_init+0x14/0x1a0 ret_from_fork+0x22/0x30 The buggy address belongs to the object at ffff888014114000 which belongs to the cache kmalloc-2k of size 2048 The buggy address is located 1620 bytes to the right of 2048-byte region [ffff888014114000, ffff888014114800] The buggy address belongs to the physical page: page:ffffea0000504400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14110 head:ffffea0000504400 order:3 compound_mapcount:0 compound_pincount:0 flags: 0x100000000010200(slab|head|node=0|zone=1) raw: 0100000000010200 0000000000000000 dead000000000001 ffff888013442000 raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected ================================================================== This happens because the TBI check unconditionally dereferences the last byte without validating the reported length first: u8 last_byte = *(data + length - 1); Fix by rejecting the frame early if the length is zero, or if it exceeds adapter->rx_buffer_len. This preserves the TBI workaround semantics for valid frames and prevents touching memory beyond the RX buffer. CVE-2025-71093 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71093.html CVE-2025-71093 https://bugzilla.suse.com/1256777 SUSE Bug 1256777 In the Linux kernel, the following vulnerability has been resolved: net: usb: asix: validate PHY address before use The ASIX driver reads the PHY address from the USB device via asix_read_phy_addr(). A malicious or faulty device can return an invalid address (>= PHY_MAX_ADDR), which causes a warning in mdiobus_get_phy(): addr 207 out of range WARNING: drivers/net/phy/mdio_bus.c:76 Validate the PHY address in asix_read_phy_addr() and remove the now-redundant check in ax88172a.c. CVE-2025-71094 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71094.html CVE-2025-71094 https://bugzilla.suse.com/1256597 SUSE Bug 1256597 In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix the crash issue for zero copy XDP_TX action There is a crash issue when running zero copy XDP_TX action, the crash log is shown below. [ 216.122464] Unable to handle kernel paging request at virtual address fffeffff80000000 [ 216.187524] Internal error: Oops: 0000000096000144 [#1] SMP [ 216.301694] Call trace: [ 216.304130] dcache_clean_poc+0x20/0x38 (P) [ 216.308308] __dma_sync_single_for_device+0x1bc/0x1e0 [ 216.313351] stmmac_xdp_xmit_xdpf+0x354/0x400 [ 216.317701] __stmmac_xdp_run_prog+0x164/0x368 [ 216.322139] stmmac_napi_poll_rxtx+0xba8/0xf00 [ 216.326576] __napi_poll+0x40/0x218 [ 216.408054] Kernel panic - not syncing: Oops: Fatal exception in interrupt For XDP_TX action, the xdp_buff is converted to xdp_frame by xdp_convert_buff_to_frame(). The memory type of the resulting xdp_frame depends on the memory type of the xdp_buff. For page pool based xdp_buff it produces xdp_frame with memory type MEM_TYPE_PAGE_POOL. For zero copy XSK pool based xdp_buff it produces xdp_frame with memory type MEM_TYPE_PAGE_ORDER0. However, stmmac_xdp_xmit_back() does not check the memory type and always uses the page pool type, this leads to invalid mappings and causes the crash. Therefore, check the xdp_buff memory type in stmmac_xdp_xmit_back() to fix this issue. CVE-2025-71095 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71095.html CVE-2025-71095 https://bugzilla.suse.com/1256605 SUSE Bug 1256605 In the Linux kernel, the following vulnerability has been resolved: ipv4: Fix reference count leak when using error routes with nexthop objects When a nexthop object is deleted, it is marked as dead and then fib_table_flush() is called to flush all the routes that are using the dead nexthop. The current logic in fib_table_flush() is to only flush error routes (e.g., blackhole) when it is called as part of network namespace dismantle (i.e., with flush_all=true). Therefore, error routes are not flushed when their nexthop object is deleted: # ip link add name dummy1 up type dummy # ip nexthop add id 1 dev dummy1 # ip route add 198.51.100.1/32 nhid 1 # ip route add blackhole 198.51.100.2/32 nhid 1 # ip nexthop del id 1 # ip route show blackhole 198.51.100.2 nhid 1 dev dummy1 As such, they keep holding a reference on the nexthop object which in turn holds a reference on the nexthop device, resulting in a reference count leak: # ip link del dev dummy1 [ 70.516258] unregister_netdevice: waiting for dummy1 to become free. Usage count = 2 Fix by flushing error routes when their nexthop is marked as dead. IPv6 does not suffer from this problem. CVE-2025-71097 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71097.html CVE-2025-71097 https://bugzilla.suse.com/1256607 SUSE Bug 1256607 In the Linux kernel, the following vulnerability has been resolved: ip6_gre: make ip6gre_header() robust Over the years, syzbot found many ways to crash the kernel in ip6gre_header() [1]. This involves team or bonding drivers ability to dynamically change their dev->needed_headroom and/or dev->hard_header_len In this particular crash mld_newpack() allocated an skb with a too small reserve/headroom, and by the time mld_sendpack() was called, syzbot managed to attach an ip6gre device. [1] skbuff: skb_under_panic: text:ffffffff8a1d69a8 len:136 put:40 head:ffff888059bc7000 data:ffff888059bc6fe8 tail:0x70 end:0x6c0 dev:team0 ------------[ cut here ]------------ kernel BUG at net/core/skbuff.c:213 ! <TASK> skb_under_panic net/core/skbuff.c:223 [inline] skb_push+0xc3/0xe0 net/core/skbuff.c:2641 ip6gre_header+0xc8/0x790 net/ipv6/ip6_gre.c:1371 dev_hard_header include/linux/netdevice.h:3436 [inline] neigh_connected_output+0x286/0x460 net/core/neighbour.c:1618 neigh_output include/net/neighbour.h:556 [inline] ip6_finish_output2+0xfb3/0x1480 net/ipv6/ip6_output.c:136 __ip6_finish_output net/ipv6/ip6_output.c:-1 [inline] ip6_finish_output+0x234/0x7d0 net/ipv6/ip6_output.c:220 NF_HOOK_COND include/linux/netfilter.h:307 [inline] ip6_output+0x340/0x550 net/ipv6/ip6_output.c:247 NF_HOOK+0x9e/0x380 include/linux/netfilter.h:318 mld_sendpack+0x8d4/0xe60 net/ipv6/mcast.c:1855 mld_send_cr net/ipv6/mcast.c:2154 [inline] mld_ifc_work+0x83e/0xd60 net/ipv6/mcast.c:2693 CVE-2025-71098 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71098.html CVE-2025-71098 https://bugzilla.suse.com/1256591 SUSE Bug 1256591 In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() In xe_oa_add_config_ioctl(), we accessed oa_config->id after dropping metrics_lock. Since this lock protects the lifetime of oa_config, an attacker could guess the id and call xe_oa_remove_config_ioctl() with perfect timing, freeing oa_config before we dereference it, leading to a potential use-after-free. Fix this by caching the id in a local variable while holding the lock. v2: (Matt A) - Dropped mutex_unlock(&oa->metrics_lock) ordering change from xe_oa_remove_config_ioctl() (cherry picked from commit 28aeaed130e8e587fd1b73b6d66ca41ccc5a1a31) CVE-2025-71099 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71099.html CVE-2025-71099 https://bugzilla.suse.com/1256592 SUSE Bug 1256592 In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc() TID getting from ieee80211_get_tid() might be out of range of array size of sta_entry->tids[], so check TID is less than MAX_TID_COUNT. Othwerwise, UBSAN warn: UBSAN: array-index-out-of-bounds in drivers/net/wireless/realtek/rtlwifi/rtl8192cu/trx.c:514:30 index 10 is out of range for type 'rtl_tid_data [9]' CVE-2025-71100 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71100.html CVE-2025-71100 https://bugzilla.suse.com/1256593 SUSE Bug 1256593 In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing The hp_populate_*_elements_from_package() functions in the hp-bioscfg driver contain out-of-bounds array access vulnerabilities. These functions parse ACPI packages into internal data structures using a for loop with index variable 'elem' that iterates through enum_obj/integer_obj/order_obj/password_obj/string_obj arrays. When processing multi-element fields like PREREQUISITES and ENUM_POSSIBLE_VALUES, these functions read multiple consecutive array elements using expressions like 'enum_obj[elem + reqs]' and 'enum_obj[elem + pos_values]' within nested loops. The bug is that the bounds check only validated elem, but did not consider the additional offset when accessing elem + reqs or elem + pos_values. The fix changes the bounds check to validate the actual accessed index. CVE-2025-71101 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71101.html CVE-2025-71101 https://bugzilla.suse.com/1256594 SUSE Bug 1256594 In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Handle incorrect num_connectors capability The UCSI spec states that the num_connectors field is 7 bits, and the 8th bit is reserved and should be set to zero. Some buggy FW has been known to set this bit, and it can lead to a system not booting. Flag that the FW is not behaving correctly, and auto-fix the value so that the system boots correctly. Found on Lenovo P1 G8 during Linux enablement program. The FW will be fixed, but seemed worth addressing in case it hit platforms that aren't officially Linux supported. CVE-2025-71108 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71108.html CVE-2025-71108 https://bugzilla.suse.com/1256774 SUSE Bug 1256774 In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83791d) Convert macros to functions to avoid TOCTOU The macro FAN_FROM_REG evaluates its arguments multiple times. When used in lockless contexts involving shared driver data, this leads to Time-of-Check to Time-of-Use (TOCTOU) race conditions, potentially causing divide-by-zero errors. Convert the macro to a static function. This guarantees that arguments are evaluated only once (pass-by-value), preventing the race conditions. Additionally, in store_fan_div, move the calculation of the minimum limit inside the update lock. This ensures that the read-modify-write sequence operates on consistent data. Adhere to the principle of minimal changes by only converting macros that evaluate arguments multiple times and are used in lockless contexts. CVE-2025-71111 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71111.html CVE-2025-71111 https://bugzilla.suse.com/1256728 SUSE Bug 1256728 In the Linux kernel, the following vulnerability has been resolved: net: hns3: add VLAN id validation before using Currently, the VLAN id may be used without validation when receive a VLAN configuration mailbox from VF. The length of vlan_del_fail_bmap is BITS_TO_LONGS(VLAN_N_VID). It may cause out-of-bounds memory access once the VLAN id is bigger than or equal to VLAN_N_VID. Therefore, VLAN id needs to be checked to ensure it is within the range of VLAN_N_VID. CVE-2025-71112 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71112.html CVE-2025-71112 https://bugzilla.suse.com/1256726 SUSE Bug 1256726 https://bugzilla.suse.com/1256727 SUSE Bug 1256727 In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - zero initialize memory allocated via sock_kmalloc Several crypto user API contexts and requests allocated with sock_kmalloc() were left uninitialized, relying on callers to set fields explicitly. This resulted in the use of uninitialized data in certain error paths or when new fields are added in the future. The ACVP patches also contain two user-space interface files: algif_kpp.c and algif_akcipher.c. These too rely on proper initialization of their context structures. A particular issue has been observed with the newly added 'inflight' variable introduced in af_alg_ctx by commit: 67b164a871af ("crypto: af_alg - Disallow multiple in-flight AIO requests") Because the context is not memset to zero after allocation, the inflight variable has contained garbage values. As a result, af_alg_alloc_areq() has incorrectly returned -EBUSY randomly when the garbage value was interpreted as true: https://github.com/gregkh/linux/blame/master/crypto/af_alg.c#L1209 The check directly tests ctx->inflight without explicitly comparing against true/false. Since inflight is only ever set to true or false later, an uninitialized value has triggered -EBUSY failures. Zero-initializing memory allocated with sock_kmalloc() ensures inflight and other fields start in a known state, removing random issues caused by uninitialized data. CVE-2025-71113 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71113.html CVE-2025-71113 https://bugzilla.suse.com/1256716 SUSE Bug 1256716 In the Linux kernel, the following vulnerability has been resolved: via_wdt: fix critical boot hang due to unnamed resource allocation The VIA watchdog driver uses allocate_resource() to reserve a MMIO region for the watchdog control register. However, the allocated resource was not given a name, which causes the kernel resource tree to contain an entry marked as "<BAD>" under /proc/iomem on x86 platforms. During boot, this unnamed resource can lead to a critical hang because subsequent resource lookups and conflict checks fail to handle the invalid entry properly. CVE-2025-71114 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71114.html CVE-2025-71114 https://bugzilla.suse.com/1256752 SUSE Bug 1256752 In the Linux kernel, the following vulnerability has been resolved: libceph: make decode_pool() more resilient against corrupted osdmaps If the osdmap is (maliciously) corrupted such that the encoded length of ceph_pg_pool envelope is less than what is expected for a particular encoding version, out-of-bounds reads may ensue because the only bounds check that is there is based on that length value. This patch adds explicit bounds checks for each field that is decoded or skipped. CVE-2025-71116 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71116.html CVE-2025-71116 https://bugzilla.suse.com/1256744 SUSE Bug 1256744 In the Linux kernel, the following vulnerability has been resolved: ACPICA: Avoid walking the Namespace if start_node is NULL Although commit 0c9992315e73 ("ACPICA: Avoid walking the ACPI Namespace if it is not there") fixed the situation when both start_node and acpi_gbl_root_node are NULL, the Linux kernel mainline now still crashed on Honor Magicbook 14 Pro [1]. That happens due to the access to the member of parent_node in acpi_ns_get_next_node(). The NULL pointer dereference will always happen, no matter whether or not the start_node is equal to ACPI_ROOT_OBJECT, so move the check of start_node being NULL out of the if block. Unfortunately, all the attempts to contact Honor have failed, they refused to provide any technical support for Linux. The bad DSDT table's dump could be found on GitHub [2]. DMI: HONOR FMB-P/FMB-P-PCB, BIOS 1.13 05/08/2025 [ rjw: Subject adjustment, changelog edits ] CVE-2025-71118 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71118.html CVE-2025-71118 https://bugzilla.suse.com/1256763 SUSE Bug 1256763 In the Linux kernel, the following vulnerability has been resolved: powerpc/kexec: Enable SMT before waking offline CPUs If SMT is disabled or a partial SMT state is enabled, when a new kernel image is loaded for kexec, on reboot the following warning is observed: kexec: Waking offline cpu 228. WARNING: CPU: 0 PID: 9062 at arch/powerpc/kexec/core_64.c:223 kexec_prepare_cpus+0x1b0/0x1bc [snip] NIP kexec_prepare_cpus+0x1b0/0x1bc LR kexec_prepare_cpus+0x1a0/0x1bc Call Trace: kexec_prepare_cpus+0x1a0/0x1bc (unreliable) default_machine_kexec+0x160/0x19c machine_kexec+0x80/0x88 kernel_kexec+0xd0/0x118 __do_sys_reboot+0x210/0x2c4 system_call_exception+0x124/0x320 system_call_vectored_common+0x15c/0x2ec This occurs as add_cpu() fails due to cpu_bootable() returning false for CPUs that fail the cpu_smt_thread_allowed() check or non primary threads if SMT is disabled. Fix the issue by enabling SMT and resetting the number of SMT threads to the number of threads per core, before attempting to wake up all present CPUs. CVE-2025-71119 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71119.html CVE-2025-71119 https://bugzilla.suse.com/1256730 SUSE Bug 1256730 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf A zero length gss_token results in pages == 0 and in_token->pages[0] is NULL. The code unconditionally evaluates page_address(in_token->pages[0]) for the initial memcpy, which can dereference NULL even when the copy length is 0. Guard the first memcpy so it only runs when length > 0. CVE-2025-71120 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71120.html CVE-2025-71120 https://bugzilla.suse.com/1256779 SUSE Bug 1256779 https://bugzilla.suse.com/1256780 SUSE Bug 1256780 In the Linux kernel, the following vulnerability has been resolved: ext4: fix string copying in parse_apply_sb_mount_options() strscpy_pad() can't be used to copy a non-NUL-term string into a NUL-term string of possibly bigger size. Commit 0efc5990bca5 ("string.h: Introduce memtostr() and memtostr_pad()") provides additional information in that regard. So if this happens, the following warning is observed: strnlen: detected buffer overflow: 65 byte read of buffer size 64 WARNING: CPU: 0 PID: 28655 at lib/string_helpers.c:1032 __fortify_report+0x96/0xc0 lib/string_helpers.c:1032 Modules linked in: CPU: 0 UID: 0 PID: 28655 Comm: syz-executor.3 Not tainted 6.12.54-syzkaller-00144-g5f0270f1ba00 #0 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:__fortify_report+0x96/0xc0 lib/string_helpers.c:1032 Call Trace: <TASK> __fortify_panic+0x1f/0x30 lib/string_helpers.c:1039 strnlen include/linux/fortify-string.h:235 [inline] sized_strscpy include/linux/fortify-string.h:309 [inline] parse_apply_sb_mount_options fs/ext4/super.c:2504 [inline] __ext4_fill_super fs/ext4/super.c:5261 [inline] ext4_fill_super+0x3c35/0xad00 fs/ext4/super.c:5706 get_tree_bdev_flags+0x387/0x620 fs/super.c:1636 vfs_get_tree+0x93/0x380 fs/super.c:1814 do_new_mount fs/namespace.c:3553 [inline] path_mount+0x6ae/0x1f70 fs/namespace.c:3880 do_mount fs/namespace.c:3893 [inline] __do_sys_mount fs/namespace.c:4103 [inline] __se_sys_mount fs/namespace.c:4080 [inline] __x64_sys_mount+0x280/0x300 fs/namespace.c:4080 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x64/0x140 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x76/0x7e Since userspace is expected to provide s_mount_opts field to be at most 63 characters long with the ending byte being NUL-term, use a 64-byte buffer which matches the size of s_mount_opts, so that strscpy_pad() does its job properly. Return with error if the user still managed to provide a non-NUL-term string here. Found by Linux Verification Center (linuxtesting.org) with Syzkaller. CVE-2025-71123 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71123.html CVE-2025-71123 https://bugzilla.suse.com/1256757 SUSE Bug 1256757 In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid deadlock on fallback while reinjecting Jakub reported an MPTCP deadlock at fallback time: WARNING: possible recursive locking detected 6.18.0-rc7-virtme #1 Not tainted -------------------------------------------- mptcp_connect/20858 is trying to acquire lock: ff1100001da18b60 (&msk->fallback_lock){+.-.}-{3:3}, at: __mptcp_try_fallback+0xd8/0x280 but task is already holding lock: ff1100001da18b60 (&msk->fallback_lock){+.-.}-{3:3}, at: __mptcp_retrans+0x352/0xaa0 other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock(&msk->fallback_lock); lock(&msk->fallback_lock); *** DEADLOCK *** May be due to missing lock nesting notation 3 locks held by mptcp_connect/20858: #0: ff1100001da18290 (sk_lock-AF_INET){+.+.}-{0:0}, at: mptcp_sendmsg+0x114/0x1bc0 #1: ff1100001db40fd0 (k-sk_lock-AF_INET#2){+.+.}-{0:0}, at: __mptcp_retrans+0x2cb/0xaa0 #2: ff1100001da18b60 (&msk->fallback_lock){+.-.}-{3:3}, at: __mptcp_retrans+0x352/0xaa0 stack backtrace: CPU: 0 UID: 0 PID: 20858 Comm: mptcp_connect Not tainted 6.18.0-rc7-virtme #1 PREEMPT(full) Hardware name: Bochs, BIOS Bochs 01/01/2011 Call Trace: <TASK> dump_stack_lvl+0x6f/0xa0 print_deadlock_bug.cold+0xc0/0xcd validate_chain+0x2ff/0x5f0 __lock_acquire+0x34c/0x740 lock_acquire.part.0+0xbc/0x260 _raw_spin_lock_bh+0x38/0x50 __mptcp_try_fallback+0xd8/0x280 mptcp_sendmsg_frag+0x16c2/0x3050 __mptcp_retrans+0x421/0xaa0 mptcp_release_cb+0x5aa/0xa70 release_sock+0xab/0x1d0 mptcp_sendmsg+0xd5b/0x1bc0 sock_write_iter+0x281/0x4d0 new_sync_write+0x3c5/0x6f0 vfs_write+0x65e/0xbb0 ksys_write+0x17e/0x200 do_syscall_64+0xbb/0xfd0 entry_SYSCALL_64_after_hwframe+0x4b/0x53 RIP: 0033:0x7fa5627cbc5e Code: 4d 89 d8 e8 14 bd 00 00 4c 8b 5d f8 41 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 11 c9 c3 0f 1f 80 00 00 00 00 48 8b 45 10 0f 05 <c9> c3 83 e2 39 83 fa 08 75 e7 e8 13 ff ff ff 0f 1f 00 f3 0f 1e fa RSP: 002b:00007fff1fe14700 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fa5627cbc5e RDX: 0000000000001f9c RSI: 00007fff1fe16984 RDI: 0000000000000005 RBP: 00007fff1fe14710 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff1fe16920 R13: 0000000000002000 R14: 0000000000001f9c R15: 0000000000001f9c The packet scheduler could attempt a reinjection after receiving an MP_FAIL and before the infinite map has been transmitted, causing a deadlock since MPTCP needs to do the reinjection atomically from WRT fallback. Address the issue explicitly avoiding the reinjection in the critical scenario. Note that this is the only fallback critical section that could potentially send packets and hit the double-lock. CVE-2025-71126 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71126.html CVE-2025-71126 https://bugzilla.suse.com/1256755 SUSE Bug 1256755 In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer Initialize the eb.vma array with values of 0 when the eb structure is first set up. In particular, this sets the eb->vma[i].vma pointers to NULL, simplifying cleanup and getting rid of the bug described below. During the execution of eb_lookup_vmas(), the eb->vma array is successively filled up with struct eb_vma objects. This process includes calling eb_add_vma(), which might fail; however, even in the event of failure, eb->vma[i].vma is set for the currently processed buffer. If eb_add_vma() fails, eb_lookup_vmas() returns with an error, which prompts a call to eb_release_vmas() to clean up the mess. Since eb_lookup_vmas() might fail during processing any (possibly not first) buffer, eb_release_vmas() checks whether a buffer's vma is NULL to know at what point did the lookup function fail. In eb_lookup_vmas(), eb->vma[i].vma is set to NULL if either the helper function eb_lookup_vma() or eb_validate_vma() fails. eb->vma[i+1].vma is set to NULL in case i915_gem_object_userptr_submit_init() fails; the current one needs to be cleaned up by eb_release_vmas() at this point, so the next one is set. If eb_add_vma() fails, neither the current nor the next vma is set to NULL, which is a source of a NULL deref bug described in the issue linked in the Closes tag. When entering eb_lookup_vmas(), the vma pointers are set to the slab poison value, instead of NULL. This doesn't matter for the actual lookup, since it gets overwritten anyway, however the eb_release_vmas() function only recognizes NULL as the stopping value, hence the pointers are being set to NULL as they go in case of intermediate failure. This patch changes the approach to filling them all with NULL at the start instead, rather than handling that manually during failure. (cherry picked from commit 08889b706d4f0b8d2352b7ca29c2d8df4d0787cd) CVE-2025-71130 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71130.html CVE-2025-71130 https://bugzilla.suse.com/1256741 SUSE Bug 1256741 In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Do not use req->iv after crypto_aead_encrypt As soon as crypto_aead_encrypt is called, the underlying request may be freed by an asynchronous completion. Thus dereferencing req->iv after it returns is invalid. Instead of checking req->iv against info, create a new variable unaligned_info and use it for that purpose instead. CVE-2025-71131 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71131.html CVE-2025-71131 https://bugzilla.suse.com/1256742 SUSE Bug 1256742 In the Linux kernel, the following vulnerability has been resolved: smc91x: fix broken irq-context in PREEMPT_RT When smc91x.c is built with PREEMPT_RT, the following splat occurs in FVP_RevC: [ 13.055000] smc91x LNRO0003:00 eth0: link up, 10Mbps, half-duplex, lpa 0x0000 [ 13.062137] BUG: workqueue leaked atomic, lock or RCU: kworker/2:1[106] [ 13.062137] preempt=0x00000000 lock=0->0 RCU=0->1 workfn=mld_ifc_work [ 13.062266] C ** replaying previous printk message ** [ 13.062266] CPU: 2 UID: 0 PID: 106 Comm: kworker/2:1 Not tainted 6.18.0-dirty #179 PREEMPT_{RT,(full)} [ 13.062353] Hardware name: , BIOS [ 13.062382] Workqueue: mld mld_ifc_work [ 13.062469] Call trace: [ 13.062494] show_stack+0x24/0x40 (C) [ 13.062602] __dump_stack+0x28/0x48 [ 13.062710] dump_stack_lvl+0x7c/0xb0 [ 13.062818] dump_stack+0x18/0x34 [ 13.062926] process_scheduled_works+0x294/0x450 [ 13.063043] worker_thread+0x260/0x3d8 [ 13.063124] kthread+0x1c4/0x228 [ 13.063235] ret_from_fork+0x10/0x20 This happens because smc_special_trylock() disables IRQs even on PREEMPT_RT, but smc_special_unlock() does not restore IRQs on PREEMPT_RT. The reason is that smc_special_unlock() calls spin_unlock_irqrestore(), and rcu_read_unlock_bh() in __dev_queue_xmit() cannot invoke rcu_read_unlock() through __local_bh_enable_ip() when current->softirq_disable_cnt becomes zero. To address this issue, replace smc_special_trylock() with spin_trylock_irqsave(). CVE-2025-71132 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71132.html CVE-2025-71132 https://bugzilla.suse.com/1256737 SUSE Bug 1256737 In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: avoid invalid read in irdma_net_event irdma_net_event() should not dereference anything from "neigh" (alias "ptr") until it has checked that the event is NETEVENT_NEIGH_UPDATE. Other events come with different structures pointed to by "ptr" and they may be smaller than struct neighbour. Move the read of neigh->dev under the NETEVENT_NEIGH_UPDATE case. The bug is mostly harmless, but it triggers KASAN on debug kernels: BUG: KASAN: stack-out-of-bounds in irdma_net_event+0x32e/0x3b0 [irdma] Read of size 8 at addr ffffc900075e07f0 by task kworker/27:2/542554 CPU: 27 PID: 542554 Comm: kworker/27:2 Kdump: loaded Not tainted 5.14.0-630.el9.x86_64+debug #1 Hardware name: [...] Workqueue: events rt6_probe_deferred Call Trace: <IRQ> dump_stack_lvl+0x60/0xb0 print_address_description.constprop.0+0x2c/0x3f0 print_report+0xb4/0x270 kasan_report+0x92/0xc0 irdma_net_event+0x32e/0x3b0 [irdma] notifier_call_chain+0x9e/0x180 atomic_notifier_call_chain+0x5c/0x110 rt6_do_redirect+0xb91/0x1080 tcp_v6_err+0xe9b/0x13e0 icmpv6_notify+0x2b2/0x630 ndisc_redirect_rcv+0x328/0x530 icmpv6_rcv+0xc16/0x1360 ip6_protocol_deliver_rcu+0xb84/0x12e0 ip6_input_finish+0x117/0x240 ip6_input+0xc4/0x370 ipv6_rcv+0x420/0x7d0 __netif_receive_skb_one_core+0x118/0x1b0 process_backlog+0xd1/0x5d0 __napi_poll.constprop.0+0xa3/0x440 net_rx_action+0x78a/0xba0 handle_softirqs+0x2d4/0x9c0 do_softirq+0xad/0xe0 </IRQ> CVE-2025-71133 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71133.html CVE-2025-71133 https://bugzilla.suse.com/1256733 SUSE Bug 1256733 In the Linux kernel, the following vulnerability has been resolved: md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt() The variable mddev->private is first assigned to conf and then checked: conf = mddev->private; if (!conf) ... If conf is NULL, then mddev->private is also NULL. In this case, null-pointer dereferences can occur when calling raid5_quiesce(): raid5_quiesce(mddev, true); raid5_quiesce(mddev, false); since mddev->private is assigned to conf again in raid5_quiesce(), and conf is dereferenced in several places, for example: conf->quiesce = 0; wake_up(&conf->wait_for_quiescent); To fix this issue, the function should unlock mddev and return before invoking raid5_quiesce() when conf is NULL, following the existing pattern in raid5_change_consistency_policy(). CVE-2025-71135 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71135.html CVE-2025-71135 https://bugzilla.suse.com/1256761 SUSE Bug 1256761 In the Linux kernel, the following vulnerability has been resolved: media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() It's possible for cp_read() and hdmi_read() to return -EIO. Those values are further used as indexes for accessing arrays. Fix that by checking return values where it's needed. Found by Linux Verification Center (linuxtesting.org) with SVACE. CVE-2025-71136 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71136.html CVE-2025-71136 https://bugzilla.suse.com/1256759 SUSE Bug 1256759 In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" This patch ensures that the RX ring size (rx_pending) is not set below the permitted length. This avoids UBSAN shift-out-of-bounds errors when users passes small or zero ring sizes via ethtool -G. CVE-2025-71137 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71137.html CVE-2025-71137 https://bugzilla.suse.com/1256760 SUSE Bug 1256760 In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add missing NULL pointer check for pingpong interface It is checked almost always in dpu_encoder_phys_wb_setup_ctl(), but in a single place the check is missing. Also use convenient locals instead of phys_enc->* where available. Patchwork: https://patchwork.freedesktop.org/patch/693860/ CVE-2025-71138 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71138.html CVE-2025-71138 https://bugzilla.suse.com/1256785 SUSE Bug 1256785 In the Linux kernel, the following vulnerability has been resolved: drm/tilcdc: Fix removal actions in case of failed probe The drm_kms_helper_poll_fini() and drm_atomic_helper_shutdown() helpers should only be called when the device has been successfully registered. Currently, these functions are called unconditionally in tilcdc_fini(), which causes warnings during probe deferral scenarios. [ 7.972317] WARNING: CPU: 0 PID: 23 at drivers/gpu/drm/drm_atomic_state_helper.c:175 drm_atomic_helper_crtc_duplicate_state+0x60/0x68 ... [ 8.005820] drm_atomic_helper_crtc_duplicate_state from drm_atomic_get_crtc_state+0x68/0x108 [ 8.005858] drm_atomic_get_crtc_state from drm_atomic_helper_disable_all+0x90/0x1c8 [ 8.005885] drm_atomic_helper_disable_all from drm_atomic_helper_shutdown+0x90/0x144 [ 8.005911] drm_atomic_helper_shutdown from tilcdc_fini+0x68/0xf8 [tilcdc] [ 8.005957] tilcdc_fini [tilcdc] from tilcdc_pdev_probe+0xb0/0x6d4 [tilcdc] Fix this by rewriting the failed probe cleanup path using the standard goto error handling pattern, which ensures that cleanup functions are only called on successfully initialized resources. Additionally, remove the now-unnecessary is_registered flag. CVE-2025-71141 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71141.html CVE-2025-71141 https://bugzilla.suse.com/1256756 SUSE Bug 1256756 In the Linux kernel, the following vulnerability has been resolved: cpuset: fix warning when disabling remote partition A warning was triggered as follows: WARNING: kernel/cgroup/cpuset.c:1651 at remote_partition_disable+0xf7/0x110 RIP: 0010:remote_partition_disable+0xf7/0x110 RSP: 0018:ffffc90001947d88 EFLAGS: 00000206 RAX: 0000000000007fff RBX: ffff888103b6e000 RCX: 0000000000006f40 RDX: 0000000000006f00 RSI: ffffc90001947da8 RDI: ffff888103b6e000 RBP: ffff888103b6e000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000001 R11: ffff88810b2e2728 R12: ffffc90001947da8 R13: 0000000000000000 R14: ffffc90001947da8 R15: ffff8881081f1c00 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f55c8bbe0b2 CR3: 000000010b14c000 CR4: 00000000000006f0 Call Trace: <TASK> update_prstate+0x2d3/0x580 cpuset_partition_write+0x94/0xf0 kernfs_fop_write_iter+0x147/0x200 vfs_write+0x35d/0x500 ksys_write+0x66/0xe0 do_syscall_64+0x6b/0x390 entry_SYSCALL_64_after_hwframe+0x4b/0x53 RIP: 0033:0x7f55c8cd4887 Reproduction steps (on a 16-CPU machine): # cd /sys/fs/cgroup/ # mkdir A1 # echo +cpuset > A1/cgroup.subtree_control # echo "0-14" > A1/cpuset.cpus.exclusive # mkdir A1/A2 # echo "0-14" > A1/A2/cpuset.cpus.exclusive # echo "root" > A1/A2/cpuset.cpus.partition # echo 0 > /sys/devices/system/cpu/cpu15/online # echo member > A1/A2/cpuset.cpus.partition When CPU 15 is offlined, subpartitions_cpus gets cleared because no CPUs remain available for the top_cpuset, forcing partitions to share CPUs with the top_cpuset. In this scenario, disabling the remote partition triggers a warning stating that effective_xcpus is not a subset of subpartitions_cpus. Partitions should be invalidated in this case to inform users that the partition is now invalid(cpus are shared with top_cpuset). To fix this issue: 1. Only emit the warning only if subpartitions_cpus is not empty and the effective_xcpus is not a subset of subpartitions_cpus. 2. During the CPU hotplug process, invalidate partitions if subpartitions_cpus is empty. CVE-2025-71142 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71142.html CVE-2025-71142 https://bugzilla.suse.com/1256748 SUSE Bug 1256748 In the Linux kernel, the following vulnerability has been resolved: clk: samsung: exynos-clkout: Assign .num before accessing .hws Commit f316cdff8d67 ("clk: Annotate struct clk_hw_onecell_data with __counted_by") annotated the hws member of 'struct clk_hw_onecell_data' with __counted_by, which informs the bounds sanitizer (UBSAN_BOUNDS) about the number of elements in .hws[], so that it can warn when .hws[] is accessed out of bounds. As noted in that change, the __counted_by member must be initialized with the number of elements before the first array access happens, otherwise there will be a warning from each access prior to the initialization because the number of elements is zero. This occurs in exynos_clkout_probe() due to .num being assigned after .hws[] has been accessed: UBSAN: array-index-out-of-bounds in drivers/clk/samsung/clk-exynos-clkout.c:178:18 index 0 is out of range for type 'clk_hw *[*]' Move the .num initialization to before the first access of .hws[], clearing up the warning. CVE-2025-71143 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71143.html CVE-2025-71143 https://bugzilla.suse.com/1256749 SUSE Bug 1256749 In the Linux kernel, the following vulnerability has been resolved: usb: phy: isp1301: fix non-OF device reference imbalance A recent change fixing a device reference leak in a UDC driver introduced a potential use-after-free in the non-OF case as the isp1301_get_client() helper only increases the reference count for the returned I2C device in the OF case. Increment the reference count also for non-OF so that the caller can decrement it unconditionally. Note that this is inherently racy just as using the returned I2C device is since nothing is preventing the PHY driver from being unbound while in use. CVE-2025-71145 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71145.html CVE-2025-71145 https://bugzilla.suse.com/1257155 SUSE Bug 1257155 https://bugzilla.suse.com/1257156 SUSE Bug 1257156 In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix a memory leak in tpm2_load_cmd 'tpm2_load_cmd' allocates a tempoary blob indirectly via 'tpm2_key_decode' but it is not freed in the failure paths. Address this by wrapping the blob into with a cleanup helper. CVE-2025-71147 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71147.html CVE-2025-71147 https://bugzilla.suse.com/1257158 SUSE Bug 1257158 In the Linux kernel, the following vulnerability has been resolved: net/handshake: restore destructor on submit failure handshake_req_submit() replaces sk->sk_destruct but never restores it when submission fails before the request is hashed. handshake_sk_destruct() then returns early and the original destructor never runs, leaking the socket. Restore sk_destruct on the error path. CVE-2025-71148 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71148.html CVE-2025-71148 https://bugzilla.suse.com/1257159 SUSE Bug 1257159 In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: correctly handle io_poll_add() return value on update When the core of io_uring was updated to handle completions consistently and with fixed return codes, the POLL_REMOVE opcode with updates got slightly broken. If a POLL_ADD is pending and then POLL_REMOVE is used to update the events of that request, if that update causes the POLL_ADD to now trigger, then that completion is lost and a CQE is never posted. Additionally, ensure that if an update does cause an existing POLL_ADD to complete, that the completion value isn't always overwritten with -ECANCELED. For that case, whatever io_poll_add() set the value to should just be retained. CVE-2025-71149 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71149.html CVE-2025-71149 https://bugzilla.suse.com/1257164 SUSE Bug 1257164 In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix memory leak on usb_submit_urb() failure In async_set_registers(), when usb_submit_urb() fails, the allocated async_req structure and URB are not freed, causing a memory leak. The completion callback async_set_reg_cb() is responsible for freeing these allocations, but it is only called after the URB is successfully submitted and completes (successfully or with error). If submission fails, the callback never runs and the memory is leaked. Fix this by freeing both the URB and the request structure in the error path when usb_submit_urb() fails. CVE-2025-71154 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71154.html CVE-2025-71154 https://bugzilla.suse.com/1257163 SUSE Bug 1257163 In the Linux kernel, the following vulnerability has been resolved: gve: defer interrupt enabling until NAPI registration Currently, interrupts are automatically enabled immediately upon request. This allows interrupt to fire before the associated NAPI context is fully initialized and cause failures like below: [ 0.946369] Call Trace: [ 0.946369] <IRQ> [ 0.946369] __napi_poll+0x2a/0x1e0 [ 0.946369] net_rx_action+0x2f9/0x3f0 [ 0.946369] handle_softirqs+0xd6/0x2c0 [ 0.946369] ? handle_edge_irq+0xc1/0x1b0 [ 0.946369] __irq_exit_rcu+0xc3/0xe0 [ 0.946369] common_interrupt+0x81/0xa0 [ 0.946369] </IRQ> [ 0.946369] <TASK> [ 0.946369] asm_common_interrupt+0x22/0x40 [ 0.946369] RIP: 0010:pv_native_safe_halt+0xb/0x10 Use the `IRQF_NO_AUTOEN` flag when requesting interrupts to prevent auto enablement and explicitly enable the interrupt in NAPI initialization path (and disable it during NAPI teardown). This ensures that interrupt lifecycle is strictly coupled with readiness of NAPI context. CVE-2025-71156 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71156.html CVE-2025-71156 https://bugzilla.suse.com/1257167 SUSE Bug 1257167 In the Linux kernel, the following vulnerability has been resolved: RDMA/core: always drop device refcount in ib_del_sub_device_and_put() Since nldev_deldev() (introduced by commit 060c642b2ab8 ("RDMA/nldev: Add support to add/delete a sub IB device through netlink") grabs a reference using ib_device_get_by_index() before calling ib_del_sub_device_and_put(), we need to drop that reference before returning -EOPNOTSUPP error. CVE-2025-71157 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71157.html CVE-2025-71157 https://bugzilla.suse.com/1257168 SUSE Bug 1257168 In the Linux kernel, the following vulnerability has been resolved: dmaengine: tegra-adma: Fix use-after-free A use-after-free bug exists in the Tegra ADMA driver when audio streams are terminated, particularly during XRUN conditions. The issue occurs when the DMA buffer is freed by tegra_adma_terminate_all() before the vchan completion tasklet finishes accessing it. The race condition follows this sequence: 1. DMA transfer completes, triggering an interrupt that schedules the completion tasklet (tasklet has not executed yet) 2. Audio playback stops, calling tegra_adma_terminate_all() which frees the DMA buffer memory via kfree() 3. The scheduled tasklet finally executes, calling vchan_complete() which attempts to access the already-freed memory Since tasklets can execute at any time after being scheduled, there is no guarantee that the buffer will remain valid when vchan_complete() runs. Fix this by properly synchronizing the virtual channel completion: - Calling vchan_terminate_vdesc() in tegra_adma_stop() to mark the descriptors as terminated instead of freeing the descriptor. - Add the callback tegra_adma_synchronize() that calls vchan_synchronize() which kills any pending tasklets and frees any terminated descriptors. Crash logs: [ 337.427523] BUG: KASAN: use-after-free in vchan_complete+0x124/0x3b0 [ 337.427544] Read of size 8 at addr ffff000132055428 by task swapper/0/0 [ 337.427562] Call trace: [ 337.427564] dump_backtrace+0x0/0x320 [ 337.427571] show_stack+0x20/0x30 [ 337.427575] dump_stack_lvl+0x68/0x84 [ 337.427584] print_address_description.constprop.0+0x74/0x2b8 [ 337.427590] kasan_report+0x1f4/0x210 [ 337.427598] __asan_load8+0xa0/0xd0 [ 337.427603] vchan_complete+0x124/0x3b0 [ 337.427609] tasklet_action_common.constprop.0+0x190/0x1d0 [ 337.427617] tasklet_action+0x30/0x40 [ 337.427623] __do_softirq+0x1a0/0x5c4 [ 337.427628] irq_exit+0x110/0x140 [ 337.427633] handle_domain_irq+0xa4/0xe0 [ 337.427640] gic_handle_irq+0x64/0x160 [ 337.427644] call_on_irq_stack+0x20/0x4c [ 337.427649] do_interrupt_handler+0x7c/0x90 [ 337.427654] el1_interrupt+0x30/0x80 [ 337.427659] el1h_64_irq_handler+0x18/0x30 [ 337.427663] el1h_64_irq+0x7c/0x80 [ 337.427667] cpuidle_enter_state+0xe4/0x540 [ 337.427674] cpuidle_enter+0x54/0x80 [ 337.427679] do_idle+0x2e0/0x380 [ 337.427685] cpu_startup_entry+0x2c/0x70 [ 337.427690] rest_init+0x114/0x130 [ 337.427695] arch_call_rest_init+0x18/0x24 [ 337.427702] start_kernel+0x380/0x3b4 [ 337.427706] __primary_switched+0xc0/0xc8 CVE-2025-71162 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71162.html CVE-2025-71162 https://bugzilla.suse.com/1257204 SUSE Bug 1257204 In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix device leaks on compat bind and unbind Make sure to drop the reference taken when looking up the idxd device as part of the compat bind and unbind sysfs interface. CVE-2025-71163 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2025-71163.html CVE-2025-71163 https://bugzilla.suse.com/1257215 SUSE Bug 1257215 In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset `qfq_class->leaf_qdisc->q.qlen > 0` does not imply that the class itself is active. Two qfq_class objects may point to the same leaf_qdisc. This happens when: 1. one QFQ qdisc is attached to the dev as the root qdisc, and 2. another QFQ qdisc is temporarily referenced (e.g., via qdisc_get() / qdisc_put()) and is pending to be destroyed, as in function tc_new_tfilter. When packets are enqueued through the root QFQ qdisc, the shared leaf_qdisc->q.qlen increases. At the same time, the second QFQ qdisc triggers qdisc_put and qdisc_destroy: the qdisc enters qfq_reset() with its own q->q.qlen == 0, but its class's leaf qdisc->q.qlen > 0. Therefore, the qfq_reset would wrongly deactivate an inactive aggregate and trigger a null-deref in qfq_deactivate_agg: [ 0.903172] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 0.903571] #PF: supervisor write access in kernel mode [ 0.903860] #PF: error_code(0x0002) - not-present page [ 0.904177] PGD 10299b067 P4D 10299b067 PUD 10299c067 PMD 0 [ 0.904502] Oops: Oops: 0002 [#1] SMP NOPTI [ 0.904737] CPU: 0 UID: 0 PID: 135 Comm: exploit Not tainted 6.19.0-rc3+ #2 NONE [ 0.905157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.17.0-0-gb52ca86e094d-prebuilt.qemu.org 04/01/2014 [ 0.905754] RIP: 0010:qfq_deactivate_agg (include/linux/list.h:992 (discriminator 2) include/linux/list.h:1006 (discriminator 2) net/sched/sch_qfq.c:1367 (discriminator 2) net/sched/sch_qfq.c:1393 (discriminator 2)) [ 0.906046] Code: 0f 84 4d 01 00 00 48 89 70 18 8b 4b 10 48 c7 c2 ff ff ff ff 48 8b 78 08 48 d3 e2 48 21 f2 48 2b 13 48 8b 30 48 d3 ea 8b 4b 18 0 Code starting with the faulting instruction =========================================== 0: 0f 84 4d 01 00 00 je 0x153 6: 48 89 70 18 mov %rsi,0x18(%rax) a: 8b 4b 10 mov 0x10(%rbx),%ecx d: 48 c7 c2 ff ff ff ff mov $0xffffffffffffffff,%rdx 14: 48 8b 78 08 mov 0x8(%rax),%rdi 18: 48 d3 e2 shl %cl,%rdx 1b: 48 21 f2 and %rsi,%rdx 1e: 48 2b 13 sub (%rbx),%rdx 21: 48 8b 30 mov (%rax),%rsi 24: 48 d3 ea shr %cl,%rdx 27: 8b 4b 18 mov 0x18(%rbx),%ecx ... [ 0.907095] RSP: 0018:ffffc900004a39a0 EFLAGS: 00010246 [ 0.907368] RAX: ffff8881043a0880 RBX: ffff888102953340 RCX: 0000000000000000 [ 0.907723] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 0.908100] RBP: ffff888102952180 R08: 0000000000000000 R09: 0000000000000000 [ 0.908451] R10: ffff8881043a0000 R11: 0000000000000000 R12: ffff888102952000 [ 0.908804] R13: ffff888102952180 R14: ffff8881043a0ad8 R15: ffff8881043a0880 [ 0.909179] FS: 000000002a1a0380(0000) GS:ffff888196d8d000(0000) knlGS:0000000000000000 [ 0.909572] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 0.909857] CR2: 0000000000000000 CR3: 0000000102993002 CR4: 0000000000772ef0 [ 0.910247] PKRU: 55555554 [ 0.910391] Call Trace: [ 0.910527] <TASK> [ 0.910638] qfq_reset_qdisc (net/sched/sch_qfq.c:357 net/sched/sch_qfq.c:1485) [ 0.910826] qdisc_reset (include/linux/skbuff.h:2195 include/linux/skbuff.h:2501 include/linux/skbuff.h:3424 include/linux/skbuff.h:3430 net/sched/sch_generic.c:1036) [ 0.911040] __qdisc_destroy (net/sched/sch_generic.c:1076) [ 0.911236] tc_new_tfilter (net/sched/cls_api.c:2447) [ 0.911447] rtnetlink_rcv_msg (net/core/rtnetlink.c:6958) [ 0.911663] ? __pfx_rtnetlink_rcv_msg (net/core/rtnetlink.c:6861) [ 0.911894] netlink_rcv_skb (net/netlink/af_netlink.c:2550) [ 0.912100] netlink_unicast (net/netlink/af_netlink.c:1319 net/netlink/af_netlink.c:1344) [ 0.912296] ? __alloc_skb (net/core/skbuff.c:706) [ 0.912484] netlink_sendmsg (net/netlink/af ---truncated--- CVE-2026-22976 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2026-22976.html CVE-2026-22976 https://bugzilla.suse.com/1257035 SUSE Bug 1257035 In the Linux kernel, the following vulnerability has been resolved: net: sock: fix hardened usercopy panic in sock_recv_errqueue skbuff_fclone_cache was created without defining a usercopy region, [1] unlike skbuff_head_cache which properly whitelists the cb[] field. [2] This causes a usercopy BUG() when CONFIG_HARDENED_USERCOPY is enabled and the kernel attempts to copy sk_buff.cb data to userspace via sock_recv_errqueue() -> put_cmsg(). The crash occurs when: 1. TCP allocates an skb using alloc_skb_fclone() (from skbuff_fclone_cache) [1] 2. The skb is cloned via skb_clone() using the pre-allocated fclone [3] 3. The cloned skb is queued to sk_error_queue for timestamp reporting 4. Userspace reads the error queue via recvmsg(MSG_ERRQUEUE) 5. sock_recv_errqueue() calls put_cmsg() to copy serr->ee from skb->cb [4] 6. __check_heap_object() fails because skbuff_fclone_cache has no usercopy whitelist [5] When cloned skbs allocated from skbuff_fclone_cache are used in the socket error queue, accessing the sock_exterr_skb structure in skb->cb via put_cmsg() triggers a usercopy hardening violation: [ 5.379589] usercopy: Kernel memory exposure attempt detected from SLUB object 'skbuff_fclone_cache' (offset 296, size 16)! [ 5.382796] kernel BUG at mm/usercopy.c:102! [ 5.383923] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 5.384903] CPU: 1 UID: 0 PID: 138 Comm: poc_put_cmsg Not tainted 6.12.57 #7 [ 5.384903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 5.384903] RIP: 0010:usercopy_abort+0x6c/0x80 [ 5.384903] Code: 1a 86 51 48 c7 c2 40 15 1a 86 41 52 48 c7 c7 c0 15 1a 86 48 0f 45 d6 48 c7 c6 80 15 1a 86 48 89 c1 49 0f 45 f3 e8 84 27 88 ff <0f> 0b 490 [ 5.384903] RSP: 0018:ffffc900006f77a8 EFLAGS: 00010246 [ 5.384903] RAX: 000000000000006f RBX: ffff88800f0ad2a8 RCX: 1ffffffff0f72e74 [ 5.384903] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff87b973a0 [ 5.384903] RBP: 0000000000000010 R08: 0000000000000000 R09: fffffbfff0f72e74 [ 5.384903] R10: 0000000000000003 R11: 79706f6372657375 R12: 0000000000000001 [ 5.384903] R13: ffff88800f0ad2b8 R14: ffffea00003c2b40 R15: ffffea00003c2b00 [ 5.384903] FS: 0000000011bc4380(0000) GS:ffff8880bf100000(0000) knlGS:0000000000000000 [ 5.384903] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 5.384903] CR2: 000056aa3b8e5fe4 CR3: 000000000ea26004 CR4: 0000000000770ef0 [ 5.384903] PKRU: 55555554 [ 5.384903] Call Trace: [ 5.384903] <TASK> [ 5.384903] __check_heap_object+0x9a/0xd0 [ 5.384903] __check_object_size+0x46c/0x690 [ 5.384903] put_cmsg+0x129/0x5e0 [ 5.384903] sock_recv_errqueue+0x22f/0x380 [ 5.384903] tls_sw_recvmsg+0x7ed/0x1960 [ 5.384903] ? srso_alias_return_thunk+0x5/0xfbef5 [ 5.384903] ? schedule+0x6d/0x270 [ 5.384903] ? srso_alias_return_thunk+0x5/0xfbef5 [ 5.384903] ? mutex_unlock+0x81/0xd0 [ 5.384903] ? __pfx_mutex_unlock+0x10/0x10 [ 5.384903] ? __pfx_tls_sw_recvmsg+0x10/0x10 [ 5.384903] ? _raw_spin_lock_irqsave+0x8f/0xf0 [ 5.384903] ? _raw_read_unlock_irqrestore+0x20/0x40 [ 5.384903] ? srso_alias_return_thunk+0x5/0xfbef5 The crash offset 296 corresponds to skb2->cb within skbuff_fclones: - sizeof(struct sk_buff) = 232 - offsetof(struct sk_buff, cb) = 40 - offset of skb2.cb in fclones = 232 + 40 = 272 - crash offset 296 = 272 + 24 (inside sock_exterr_skb.ee) This patch uses a local stack variable as a bounce buffer to avoid the hardened usercopy check failure. [1] https://elixir.bootlin.com/linux/v6.12.62/source/net/ipv4/tcp.c#L885 [2] https://elixir.bootlin.com/linux/v6.12.62/source/net/core/skbuff.c#L5104 [3] https://elixir.bootlin.com/linux/v6.12.62/source/net/core/skbuff.c#L5566 [4] https://elixir.bootlin.com/linux/v6.12.62/source/net/core/skbuff.c#L5491 [5] https://elixir.bootlin.com/linux/v6.12.62/source/mm/slub.c#L5719 CVE-2026-22977 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2026-22977.html CVE-2026-22977 https://bugzilla.suse.com/1257053 SUSE Bug 1257053 In the Linux kernel, the following vulnerability has been resolved: wifi: avoid kernel-infoleak from struct iw_point struct iw_point has a 32bit hole on 64bit arches. struct iw_point { void __user *pointer; /* Pointer to the data (in user space) */ __u16 length; /* number of fields or size in bytes */ __u16 flags; /* Optional params */ }; Make sure to zero the structure to avoid disclosing 32bits of kernel data to user space. CVE-2026-22978 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2026-22978.html CVE-2026-22978 https://bugzilla.suse.com/1257227 SUSE Bug 1257227 In the Linux kernel, the following vulnerability has been resolved: idpf: detach and close netdevs while handling a reset Protect the reset path from callbacks by setting the netdevs to detached state and close any netdevs in UP state until the reset handling has completed. During a reset, the driver will de-allocate resources for the vport, and there is no guarantee that those will recover, which is why the existing vport_ctrl_lock does not provide sufficient protection. idpf_detach_and_close() is called right before reset handling. If the reset handling succeeds, the netdevs state is recovered via call to idpf_attach_and_open(). If the reset handling fails the netdevs remain down. The detach/down calls are protected with RTNL lock to avoid racing with callbacks. On the recovery side the attach can be done without holding the RTNL lock as there are no callbacks expected at that point, due to detach/close always being done first in that flow. The previous logic restoring the netdevs state based on the IDPF_VPORT_UP_REQUESTED flag in the init task is not needed anymore, hence the removal of idpf_set_vport_state(). The IDPF_VPORT_UP_REQUESTED is still being used to restore the state of the netdevs following the reset, but has no use outside of the reset handling flow. idpf_init_hard_reset() is converted to void, since it was used as such and there is no error handling being done based on its return value. Before this change, invoking hard and soft resets simultaneously will cause the driver to lose the vport state: ip -br a <inf> UP echo 1 > /sys/class/net/ens801f0/device/reset& \ ethtool -L ens801f0 combined 8 ip -br a <inf> DOWN ip link set <inf> up ip -br a <inf> DOWN Also in case of a failure in the reset path, the netdev is left exposed to external callbacks, while vport resources are not initialized, leading to a crash on subsequent ifup/down: [408471.398966] idpf 0000:83:00.0: HW reset detected [408471.411744] idpf 0000:83:00.0: Device HW Reset initiated [408472.277901] idpf 0000:83:00.0: The driver was unable to contact the device's firmware. Check that the FW is running. Driver state= 0x2 [408508.125551] BUG: kernel NULL pointer dereference, address: 0000000000000078 [408508.126112] #PF: supervisor read access in kernel mode [408508.126687] #PF: error_code(0x0000) - not-present page [408508.127256] PGD 2aae2f067 P4D 0 [408508.127824] Oops: Oops: 0000 [#1] SMP NOPTI ... [408508.130871] RIP: 0010:idpf_stop+0x39/0x70 [idpf] ... [408508.139193] Call Trace: [408508.139637] <TASK> [408508.140077] __dev_close_many+0xbb/0x260 [408508.140533] __dev_change_flags+0x1cf/0x280 [408508.140987] netif_change_flags+0x26/0x70 [408508.141434] dev_change_flags+0x3d/0xb0 [408508.141878] devinet_ioctl+0x460/0x890 [408508.142321] inet_ioctl+0x18e/0x1d0 [408508.142762] ? _copy_to_user+0x22/0x70 [408508.143207] sock_do_ioctl+0x3d/0xe0 [408508.143652] sock_ioctl+0x10e/0x330 [408508.144091] ? find_held_lock+0x2b/0x80 [408508.144537] __x64_sys_ioctl+0x96/0xe0 [408508.144979] do_syscall_64+0x79/0x3d0 [408508.145415] entry_SYSCALL_64_after_hwframe+0x76/0x7e [408508.145860] RIP: 0033:0x7f3e0bb4caff CVE-2026-22981 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2026-22981.html CVE-2026-22981 https://bugzilla.suse.com/1257225 SUSE Bug 1257225 In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: Fix crash when adding interface under a lag Commit 15faa1f67ab4 ("lan966x: Fix crash when adding interface under a lag") fixed a similar issue in the lan966x driver caused by a NULL pointer dereference. The ocelot_set_aggr_pgids() function in the ocelot driver has similar logic and is susceptible to the same crash. This issue specifically affects the ocelot_vsc7514.c frontend, which leaves unused ports as NULL pointers. The felix_vsc9959.c frontend is unaffected as it uses the DSA framework which registers all ports. Fix this by checking if the port pointer is valid before accessing it. CVE-2026-22982 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2026-22982.html CVE-2026-22982 https://bugzilla.suse.com/1257179 SUSE Bug 1257179 In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads in handle_auth_done() Perform an explicit bounds check on payload_len to avoid a possible out-of-bounds access in the callout. [ idryomov: changelog ] CVE-2026-22984 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2026-22984.html CVE-2026-22984 https://bugzilla.suse.com/1257217 SUSE Bug 1257217 In the Linux kernel, the following vulnerability has been resolved: idpf: Fix RSS LUT NULL pointer crash on early ethtool operations The RSS LUT is not initialized until the interface comes up, causing the following NULL pointer crash when ethtool operations like rxhash on/off are performed before the interface is brought up for the first time. Move RSS LUT initialization from ndo_open to vport creation to ensure LUT is always available. This enables RSS configuration via ethtool before bringing the interface up. Simplify LUT management by maintaining all changes in the driver's soft copy and programming zeros to the indirection table when rxhash is disabled. Defer HW programming until the interface comes up if it is down during rxhash and LUT configuration changes. Steps to reproduce: ** Load idpf driver; interfaces will be created modprobe idpf ** Before bringing the interfaces up, turn rxhash off ethtool -K eth2 rxhash off [89408.371875] BUG: kernel NULL pointer dereference, address: 0000000000000000 [89408.371908] #PF: supervisor read access in kernel mode [89408.371924] #PF: error_code(0x0000) - not-present page [89408.371940] PGD 0 P4D 0 [89408.371953] Oops: Oops: 0000 [#1] SMP NOPTI <snip> [89408.372052] RIP: 0010:memcpy_orig+0x16/0x130 [89408.372310] Call Trace: [89408.372317] <TASK> [89408.372326] ? idpf_set_features+0xfc/0x180 [idpf] [89408.372363] __netdev_update_features+0x295/0xde0 [89408.372384] ethnl_set_features+0x15e/0x460 [89408.372406] genl_family_rcv_msg_doit+0x11f/0x180 [89408.372429] genl_rcv_msg+0x1ad/0x2b0 [89408.372446] ? __pfx_ethnl_set_features+0x10/0x10 [89408.372465] ? __pfx_genl_rcv_msg+0x10/0x10 [89408.372482] netlink_rcv_skb+0x58/0x100 [89408.372502] genl_rcv+0x2c/0x50 [89408.372516] netlink_unicast+0x289/0x3e0 [89408.372533] netlink_sendmsg+0x215/0x440 [89408.372551] __sys_sendto+0x234/0x240 [89408.372571] __x64_sys_sendto+0x28/0x30 [89408.372585] x64_sys_call+0x1909/0x1da0 [89408.372604] do_syscall_64+0x7a/0xfa0 [89408.373140] ? clear_bhb_loop+0x60/0xb0 [89408.373647] entry_SYSCALL_64_after_hwframe+0x76/0x7e [89408.378887] </TASK> <snip> CVE-2026-22985 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2026-22985.html CVE-2026-22985 https://bugzilla.suse.com/1257277 SUSE Bug 1257277 In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix race condition for gdev->srcu If two drivers were calling gpiochip_add_data_with_key(), one may be traversing the srcu-protected list in gpio_name_to_desc(), meanwhile other has just added its gdev in gpiodev_add_to_list_unlocked(). This creates a non-mutexed and non-protected timeframe, when one instance is dereferencing and using &gdev->srcu, before the other has initialized it, resulting in crash: [ 4.935481] Unable to handle kernel paging request at virtual address ffff800272bcc000 [ 4.943396] Mem abort info: [ 4.943400] ESR = 0x0000000096000005 [ 4.943403] EC = 0x25: DABT (current EL), IL = 32 bits [ 4.943407] SET = 0, FnV = 0 [ 4.943410] EA = 0, S1PTW = 0 [ 4.943413] FSC = 0x05: level 1 translation fault [ 4.943416] Data abort info: [ 4.943418] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 4.946220] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 4.955261] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 4.955268] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000038e6c000 [ 4.961449] [ffff800272bcc000] pgd=0000000000000000 [ 4.969203] , p4d=1000000039739003 [ 4.979730] , pud=0000000000000000 [ 4.980210] phandle (CPU): 0x0000005e, phandle (BE): 0x5e000000 for node "reset" [ 4.991736] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP ... [ 5.121359] pc : __srcu_read_lock+0x44/0x98 [ 5.131091] lr : gpio_name_to_desc+0x60/0x1a0 [ 5.153671] sp : ffff8000833bb430 [ 5.298440] [ 5.298443] Call trace: [ 5.298445] __srcu_read_lock+0x44/0x98 [ 5.309484] gpio_name_to_desc+0x60/0x1a0 [ 5.320692] gpiochip_add_data_with_key+0x488/0xf00 5.946419] ---[ end trace 0000000000000000 ]--- Move initialization code for gdev fields before it is added to gpio_devices, with adjacent initialization code. Adjust goto statements to reflect modified order of operations [Bartosz: fixed a build issue, removed stray newline] CVE-2026-22986 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2026-22986.html CVE-2026-22986 https://bugzilla.suse.com/1257276 SUSE Bug 1257276 In the Linux kernel, the following vulnerability has been resolved: arp: do not assume dev_hard_header() does not change skb->head arp_create() is the only dev_hard_header() caller making assumption about skb->head being unchanged. A recent commit broke this assumption. Initialize @arp pointer after dev_hard_header() call. CVE-2026-22988 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2026-22988.html CVE-2026-22988 https://bugzilla.suse.com/1257282 SUSE Bug 1257282 In the Linux kernel, the following vulnerability has been resolved: nfsd: check that server is running in unlock_filesystem If we are trying to unlock the filesystem via an administrative interface and nfsd isn't running, it crashes the server. This happens currently because nfsd4_revoke_states() access state structures (eg., conf_id_hashtbl) that has been freed as a part of the server shutdown. [ 59.465072] Call trace: [ 59.465308] nfsd4_revoke_states+0x1b4/0x898 [nfsd] (P) [ 59.465830] write_unlock_fs+0x258/0x440 [nfsd] [ 59.466278] nfsctl_transaction_write+0xb0/0x120 [nfsd] [ 59.466780] vfs_write+0x1f0/0x938 [ 59.467088] ksys_write+0xfc/0x1f8 [ 59.467395] __arm64_sys_write+0x74/0xb8 [ 59.467746] invoke_syscall.constprop.0+0xdc/0x1e8 [ 59.468177] do_el0_svc+0x154/0x1d8 [ 59.468489] el0_svc+0x40/0xe0 [ 59.468767] el0t_64_sync_handler+0xa0/0xe8 [ 59.469138] el0t_64_sync+0x1ac/0x1b0 Ensure this can't happen by taking the nfsd_mutex and checking that the server is still up, and then holding the mutex across the call to nfsd4_revoke_states(). CVE-2026-22989 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2026-22989.html CVE-2026-22989 https://bugzilla.suse.com/1257279 SUSE Bug 1257279 In the Linux kernel, the following vulnerability has been resolved: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() If the osdmap is (maliciously) corrupted such that the incremental osdmap epoch is different from what is expected, there is no need to BUG. Instead, just declare the incremental osdmap to be invalid. CVE-2026-22990 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2026-22990.html CVE-2026-22990 https://bugzilla.suse.com/1257221 SUSE Bug 1257221 In the Linux kernel, the following vulnerability has been resolved: libceph: make free_choose_arg_map() resilient to partial allocation free_choose_arg_map() may dereference a NULL pointer if its caller fails after a partial allocation. For example, in decode_choose_args(), if allocation of arg_map->args fails, execution jumps to the fail label and free_choose_arg_map() is called. Since arg_map->size is updated to a non-zero value before memory allocation, free_choose_arg_map() will iterate over arg_map->args and dereference a NULL pointer. To prevent this potential NULL pointer dereference and make free_choose_arg_map() more resilient, add checks for pointers before iterating. CVE-2026-22991 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2026-22991.html CVE-2026-22991 https://bugzilla.suse.com/1257220 SUSE Bug 1257220 In the Linux kernel, the following vulnerability has been resolved: libceph: return the handler error from mon_handle_auth_done() Currently any error from ceph_auth_handle_reply_done() is propagated via finish_auth() but isn't returned from mon_handle_auth_done(). This results in higher layers learning that (despite the monitor considering us to be successfully authenticated) something went wrong in the authentication phase and reacting accordingly, but msgr2 still trying to proceed with establishing the session in the background. In the case of secure mode this can trigger a WARN in setup_crypto() and later lead to a NULL pointer dereference inside of prepare_auth_signature(). CVE-2026-22992 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2026-22992.html CVE-2026-22992 https://bugzilla.suse.com/1257218 SUSE Bug 1257218 In the Linux kernel, the following vulnerability has been resolved: idpf: Fix RSS LUT NULL ptr issue after soft reset During soft reset, the RSS LUT is freed and not restored unless the interface is up. If an ethtool command that accesses the rss lut is attempted immediately after reset, it will result in NULL ptr dereference. Also, there is no need to reset the rss lut if the soft reset does not involve queue count change. After soft reset, set the RSS LUT to default values based on the updated queue count only if the reset was a result of a queue count change and the LUT was not configured by the user. In all other cases, don't touch the LUT. Steps to reproduce: ** Bring the interface down (if up) ifconfig eth1 down ** update the queue count (eg., 27->20) ethtool -L eth1 combined 20 ** display the RSS LUT ethtool -x eth1 [82375.558338] BUG: kernel NULL pointer dereference, address: 0000000000000000 [82375.558373] #PF: supervisor read access in kernel mode [82375.558391] #PF: error_code(0x0000) - not-present page [82375.558408] PGD 0 P4D 0 [82375.558421] Oops: Oops: 0000 [#1] SMP NOPTI <snip> [82375.558516] RIP: 0010:idpf_get_rxfh+0x108/0x150 [idpf] [82375.558786] Call Trace: [82375.558793] <TASK> [82375.558804] rss_prepare.isra.0+0x187/0x2a0 [82375.558827] rss_prepare_data+0x3a/0x50 [82375.558845] ethnl_default_doit+0x13d/0x3e0 [82375.558863] genl_family_rcv_msg_doit+0x11f/0x180 [82375.558886] genl_rcv_msg+0x1ad/0x2b0 [82375.558902] ? __pfx_ethnl_default_doit+0x10/0x10 [82375.558920] ? __pfx_genl_rcv_msg+0x10/0x10 [82375.558937] netlink_rcv_skb+0x58/0x100 [82375.558957] genl_rcv+0x2c/0x50 [82375.558971] netlink_unicast+0x289/0x3e0 [82375.558988] netlink_sendmsg+0x215/0x440 [82375.559005] __sys_sendto+0x234/0x240 [82375.559555] __x64_sys_sendto+0x28/0x30 [82375.560068] x64_sys_call+0x1909/0x1da0 [82375.560576] do_syscall_64+0x7a/0xfa0 [82375.561076] ? clear_bhb_loop+0x60/0xb0 [82375.561567] entry_SYSCALL_64_after_hwframe+0x76/0x7e <snip> CVE-2026-22993 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2026-22993.html CVE-2026-22993 https://bugzilla.suse.com/1257180 SUSE Bug 1257180 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv mlx5e_priv is an unstable structure that can be memset(0) if profile attaching fails, mlx5e_priv in mlx5e_dev devlink private is used to reference the netdev and mdev associated with that struct. Instead, store netdev directly into mlx5e_dev and get mdev from the containing mlx5_adev aux device structure. This fixes a kernel oops in mlx5e_remove when switchdev mode fails due to change profile failure. $ devlink dev eswitch set pci/0000:00:03.0 mode switchdev Error: mlx5_core: Failed setting eswitch to offloads. dmesg: workqueue: Failed to create a rescuer kthread for wq "mlx5e": -EINTR mlx5_core 0012:03:00.1: mlx5e_netdev_init_profile:6214:(pid 37199): mlx5e_priv_init failed, err=-12 mlx5_core 0012:03:00.1 gpu3rdma1: mlx5e_netdev_change_profile: new profile init failed, -12 workqueue: Failed to create a rescuer kthread for wq "mlx5e": -EINTR mlx5_core 0012:03:00.1: mlx5e_netdev_init_profile:6214:(pid 37199): mlx5e_priv_init failed, err=-12 mlx5_core 0012:03:00.1 gpu3rdma1: mlx5e_netdev_change_profile: failed to rollback to orig profile, -12 $ devlink dev reload pci/0000:00:03.0 ==> oops BUG: kernel NULL pointer dereference, address: 0000000000000520 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: Oops: 0000 [#1] SMP NOPTI CPU: 3 UID: 0 PID: 521 Comm: devlink Not tainted 6.18.0-rc5+ #117 PREEMPT(voluntary) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40 04/01/2014 RIP: 0010:mlx5e_remove+0x68/0x130 RSP: 0018:ffffc900034838f0 EFLAGS: 00010246 RAX: ffff88810283c380 RBX: ffff888101874400 RCX: ffffffff826ffc45 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffff888102d789c0 R08: ffff8881007137f0 R09: ffff888100264e10 R10: ffffc90003483898 R11: ffffc900034838a0 R12: ffff888100d261a0 R13: ffff888100d261a0 R14: ffff8881018749a0 R15: ffff888101874400 FS: 00007f8565fea740(0000) GS:ffff88856a759000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000520 CR3: 000000010b11a004 CR4: 0000000000370ef0 Call Trace: <TASK> device_release_driver_internal+0x19c/0x200 bus_remove_device+0xc6/0x130 device_del+0x160/0x3d0 ? devl_param_driverinit_value_get+0x2d/0x90 mlx5_detach_device+0x89/0xe0 mlx5_unload_one_devl_locked+0x3a/0x70 mlx5_devlink_reload_down+0xc8/0x220 devlink_reload+0x7d/0x260 devlink_nl_reload_doit+0x45b/0x5a0 genl_family_rcv_msg_doit+0xe8/0x140 CVE-2026-22996 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2026-22996.html CVE-2026-22996 https://bugzilla.suse.com/1257203 SUSE Bug 1257203 In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts Since j1939_session_deactivate_activate_next() in j1939_tp_rxtimer() is called only when the timer is enabled, we need to call j1939_session_deactivate_activate_next() if we cancelled the timer. Otherwise, refcount for j1939_session leaks, which will later appear as | unregister_netdevice: waiting for vcan0 to become free. Usage count = 2. problem. CVE-2026-22997 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2026-22997.html CVE-2026-22997 https://bugzilla.suse.com/1257202 SUSE Bug 1257202 In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: do not free existing class in qfq_change_class() Fixes qfq_change_class() error case. cl->qdisc and cl should only be freed if a new class and qdisc were allocated, or we risk various UAF. CVE-2026-22999 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2026-22999.html CVE-2026-22999 https://bugzilla.suse.com/1257236 SUSE Bug 1257236 https://bugzilla.suse.com/1257238 SUSE Bug 1257238 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix crash on profile change rollback failure mlx5e_netdev_change_profile can fail to attach a new profile and can fail to rollback to old profile, in such case, we could end up with a dangling netdev with a fully reset netdev_priv. A retry to change profile, e.g. another attempt to call mlx5e_netdev_change_profile via switchdev mode change, will crash trying to access the now NULL priv->mdev. This fix allows mlx5e_netdev_change_profile() to handle previous failures and an empty priv, by not assuming priv is valid. Pass netdev and mdev to all flows requiring mlx5e_netdev_change_profile() and avoid passing priv. In mlx5e_netdev_change_profile() check if current priv is valid, and if not, just attach the new profile without trying to access the old one. This fixes the following oops, when enabling switchdev mode for the 2nd time after first time failure: ## Enabling switchdev mode first time: mlx5_core 0012:03:00.1: E-Switch: Supported tc chains and prios offload workqueue: Failed to create a rescuer kthread for wq "mlx5e": -EINTR mlx5_core 0012:03:00.1: mlx5e_netdev_init_profile:6214:(pid 37199): mlx5e_priv_init failed, err=-12 mlx5_core 0012:03:00.1 gpu3rdma1: mlx5e_netdev_change_profile: new profile init failed, -12 workqueue: Failed to create a rescuer kthread for wq "mlx5e": -EINTR mlx5_core 0012:03:00.1: mlx5e_netdev_init_profile:6214:(pid 37199): mlx5e_priv_init failed, err=-12 mlx5_core 0012:03:00.1 gpu3rdma1: mlx5e_netdev_change_profile: failed to rollback to orig profile, -12 ^^^^^^^^ mlx5_core 0000:00:03.0: E-Switch: Disable: mode(LEGACY), nvfs(0), necvfs(0), active vports(0) ## retry: Enabling switchdev mode 2nd time: mlx5_core 0000:00:03.0: E-Switch: Supported tc chains and prios offload BUG: kernel NULL pointer dereference, address: 0000000000000038 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: Oops: 0000 [#1] SMP NOPTI CPU: 13 UID: 0 PID: 520 Comm: devlink Not tainted 6.18.0-rc4+ #91 PREEMPT(voluntary) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40 04/01/2014 RIP: 0010:mlx5e_detach_netdev+0x3c/0x90 Code: 50 00 00 f0 80 4f 78 02 48 8b bf e8 07 00 00 48 85 ff 74 16 48 8b 73 78 48 d1 ee 83 e6 01 83 f6 01 40 0f b6 f6 e8 c4 42 00 00 <48> 8b 45 38 48 85 c0 74 08 48 89 df e8 cc 47 40 1e 48 8b bb f0 07 RSP: 0018:ffffc90000673890 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff8881036a89c0 RCX: 0000000000000000 RDX: ffff888113f63800 RSI: ffffffff822fe720 RDI: 0000000000000000 RBP: 0000000000000000 R08: 0000000000002dcd R09: 0000000000000000 R10: ffffc900006738e8 R11: 00000000ffffffff R12: 0000000000000000 R13: 0000000000000000 R14: ffff8881036a89c0 R15: 0000000000000000 FS: 00007fdfb8384740(0000) GS:ffff88856a9d6000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000038 CR3: 0000000112ae0005 CR4: 0000000000370ef0 Call Trace: <TASK> mlx5e_netdev_change_profile+0x45/0xb0 mlx5e_vport_rep_load+0x27b/0x2d0 mlx5_esw_offloads_rep_load+0x72/0xf0 esw_offloads_enable+0x5d0/0x970 mlx5_eswitch_enable_locked+0x349/0x430 ? is_mp_supported+0x57/0xb0 mlx5_devlink_eswitch_mode_set+0x26b/0x430 devlink_nl_eswitch_set_doit+0x6f/0xf0 genl_family_rcv_msg_doit+0xe8/0x140 genl_rcv_msg+0x18b/0x290 ? __pfx_devlink_nl_pre_doit+0x10/0x10 ? __pfx_devlink_nl_eswitch_set_doit+0x10/0x10 ? __pfx_devlink_nl_post_doit+0x10/0x10 ? __pfx_genl_rcv_msg+0x10/0x10 netlink_rcv_skb+0x52/0x100 genl_rcv+0x28/0x40 netlink_unicast+0x282/0x3e0 ? __alloc_skb+0xd6/0x190 netlink_sendmsg+0x1f7/0x430 __sys_sendto+0x213/0x220 ? __sys_recvmsg+0x6a/0xd0 __x64_sys_sendto+0x24/0x30 do_syscall_64+0x50/0x1f0 entry_SYSCALL_64_after_hwframe+0x76/0x7e RIP: 0033:0x7fdfb8495047 CVE-2026-23000 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2026-23000.html CVE-2026-23000 https://bugzilla.suse.com/1257234 SUSE Bug 1257234 In the Linux kernel, the following vulnerability has been resolved: macvlan: fix possible UAF in macvlan_forward_source() Add RCU protection on (struct macvlan_source_entry)->vlan. Whenever macvlan_hash_del_source() is called, we must clear entry->vlan pointer before RCU grace period starts. This allows macvlan_forward_source() to skip over entries queued for freeing. Note that macvlan_dev are already RCU protected, as they are embedded in a standard netdev (netdev_priv(ndev)). https: //lore.kernel.org/netdev/695fb1e8.050a0220.1c677c.039f.GAE@google.com/T/#u CVE-2026-23001 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2026-23001.html CVE-2026-23001 https://bugzilla.suse.com/1257232 SUSE Bug 1257232 https://bugzilla.suse.com/1257233 SUSE Bug 1257233 In the Linux kernel, the following vulnerability has been resolved: lib/buildid: use __kernel_read() for sleepable context Prevent a "BUG: unable to handle kernel NULL pointer dereference in filemap_read_folio". For the sleepable context, convert freader to use __kernel_read() instead of direct page cache access via read_cache_folio(). This simplifies the faultable code path by using the standard kernel file reading interface which handles all the complexity of reading file data. At the moment we are not changing the code for non-sleepable context which uses filemap_get_folio() and only succeeds if the target folios are already in memory and up-to-date. The reason is to keep the patch simple and easier to backport to stable kernels. Syzbot repro does not crash the kernel anymore and the selftests run successfully. In the follow up we will make __kernel_read() with IOCB_NOWAIT work for non-sleepable contexts. In addition, I would like to replace the secretmem check with a more generic approach and will add fstest for the buildid code. CVE-2026-23002 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2026-23002.html CVE-2026-23002 https://bugzilla.suse.com/1257243 SUSE Bug 1257243 In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 When loading guest XSAVE state via KVM_SET_XSAVE, and when updating XFD in response to a guest WRMSR, clear XFD-disabled features in the saved (or to be restored) XSTATE_BV to ensure KVM doesn't attempt to load state for features that are disabled via the guest's XFD. Because the kernel executes XRSTOR with the guest's XFD, saving XSTATE_BV[i]=1 with XFD[i]=1 will cause XRSTOR to #NM and panic the kernel. E.g. if fpu_update_guest_xfd() sets XFD without clearing XSTATE_BV: ------------[ cut here ]------------ WARNING: arch/x86/kernel/traps.c:1524 at exc_device_not_available+0x101/0x110, CPU#29: amx_test/848 Modules linked in: kvm_intel kvm irqbypass CPU: 29 UID: 1000 PID: 848 Comm: amx_test Not tainted 6.19.0-rc2-ffa07f7fd437-x86_amx_nm_xfd_non_init-vm #171 NONE Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 RIP: 0010:exc_device_not_available+0x101/0x110 Call Trace: <TASK> asm_exc_device_not_available+0x1a/0x20 RIP: 0010:restore_fpregs_from_fpstate+0x36/0x90 switch_fpu_return+0x4a/0xb0 kvm_arch_vcpu_ioctl_run+0x1245/0x1e40 [kvm] kvm_vcpu_ioctl+0x2c3/0x8f0 [kvm] __x64_sys_ioctl+0x8f/0xd0 do_syscall_64+0x62/0x940 entry_SYSCALL_64_after_hwframe+0x4b/0x53 </TASK> ---[ end trace 0000000000000000 ]--- This can happen if the guest executes WRMSR(MSR_IA32_XFD) to set XFD[18] = 1, and a host IRQ triggers kernel_fpu_begin() prior to the vmexit handler's call to fpu_update_guest_xfd(). and if userspace stuffs XSTATE_BV[i]=1 via KVM_SET_XSAVE: ------------[ cut here ]------------ WARNING: arch/x86/kernel/traps.c:1524 at exc_device_not_available+0x101/0x110, CPU#14: amx_test/867 Modules linked in: kvm_intel kvm irqbypass CPU: 14 UID: 1000 PID: 867 Comm: amx_test Not tainted 6.19.0-rc2-2dace9faccd6-x86_amx_nm_xfd_non_init-vm #168 NONE Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 RIP: 0010:exc_device_not_available+0x101/0x110 Call Trace: <TASK> asm_exc_device_not_available+0x1a/0x20 RIP: 0010:restore_fpregs_from_fpstate+0x36/0x90 fpu_swap_kvm_fpstate+0x6b/0x120 kvm_load_guest_fpu+0x30/0x80 [kvm] kvm_arch_vcpu_ioctl_run+0x85/0x1e40 [kvm] kvm_vcpu_ioctl+0x2c3/0x8f0 [kvm] __x64_sys_ioctl+0x8f/0xd0 do_syscall_64+0x62/0x940 entry_SYSCALL_64_after_hwframe+0x4b/0x53 </TASK> ---[ end trace 0000000000000000 ]--- The new behavior is consistent with the AMX architecture. Per Intel's SDM, XSAVE saves XSTATE_BV as '0' for components that are disabled via XFD (and non-compacted XSAVE saves the initial configuration of the state component): If XSAVE, XSAVEC, XSAVEOPT, or XSAVES is saving the state component i, the instruction does not generate #NM when XCR0[i] = IA32_XFD[i] = 1; instead, it operates as if XINUSE[i] = 0 (and the state component was in its initial state): it saves bit i of XSTATE_BV field of the XSAVE header as 0; in addition, XSAVE saves the initial configuration of the state component (the other instructions do not save state component i). Alternatively, KVM could always do XRSTOR with XFD=0, e.g. by using a constant XFD based on the set of enabled features when XSAVEing for a struct fpu_guest. However, having XSTATE_BV[i]=1 for XFD-disabled features can only happen in the above interrupt case, or in similar scenarios involving preemption on preemptible kernels, because fpu_swap_kvm_fpstate()'s call to save_fpregs_to_fpstate() saves the outgoing FPU state with the current XFD; and that is (on all but the first WRMSR to XFD) the guest XFD. Therefore, XFD can only go out of sync with XSTATE_BV in the above interrupt case, or in similar scenarios involving preemption on preemptible kernels, and it we can consider it (de facto) part of KVM ABI that KVM_GET_XSAVE returns XSTATE_BV[i]=0 for XFD-disabled features. [Move clea ---truncated--- CVE-2026-23005 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2026-23005.html CVE-2026-23005 https://bugzilla.suse.com/1257245 SUSE Bug 1257245 In the Linux kernel, the following vulnerability has been resolved: ASoC: tlv320adcx140: fix null pointer The "snd_soc_component" in "adcx140_priv" was only used once but never set. It was only used for reaching "dev" which is already present in "adcx140_priv". CVE-2026-23006 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2026-23006.html CVE-2026-23006 https://bugzilla.suse.com/1257208 SUSE Bug 1257208 In the Linux kernel, the following vulnerability has been resolved: ipv4: ip_gre: make ipgre_header() robust Analog to commit db5b4e39c4e6 ("ip6_gre: make ip6gre_header() robust") Over the years, syzbot found many ways to crash the kernel in ipgre_header() [1]. This involves team or bonding drivers ability to dynamically change their dev->needed_headroom and/or dev->hard_header_len In this particular crash mld_newpack() allocated an skb with a too small reserve/headroom, and by the time mld_sendpack() was called, syzbot managed to attach an ipgre device. [1] skbuff: skb_under_panic: text:ffffffff89ea3cb7 len:2030915468 put:2030915372 head:ffff888058b43000 data:ffff887fdfa6e194 tail:0x120 end:0x6c0 dev:team0 kernel BUG at net/core/skbuff.c:213 ! Oops: invalid opcode: 0000 [#1] SMP KASAN PTI CPU: 1 UID: 0 PID: 1322 Comm: kworker/1:9 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 Workqueue: mld mld_ifc_work RIP: 0010:skb_panic+0x157/0x160 net/core/skbuff.c:213 Call Trace: <TASK> skb_under_panic net/core/skbuff.c:223 [inline] skb_push+0xc3/0xe0 net/core/skbuff.c:2641 ipgre_header+0x67/0x290 net/ipv4/ip_gre.c:897 dev_hard_header include/linux/netdevice.h:3436 [inline] neigh_connected_output+0x286/0x460 net/core/neighbour.c:1618 NF_HOOK_COND include/linux/netfilter.h:307 [inline] ip6_output+0x340/0x550 net/ipv6/ip6_output.c:247 NF_HOOK+0x9e/0x380 include/linux/netfilter.h:318 mld_sendpack+0x8d4/0xe60 net/ipv6/mcast.c:1855 mld_send_cr net/ipv6/mcast.c:2154 [inline] mld_ifc_work+0x83e/0xd60 net/ipv6/mcast.c:2693 process_one_work kernel/workqueue.c:3257 [inline] process_scheduled_works+0xad1/0x1770 kernel/workqueue.c:3340 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3421 kthread+0x711/0x8a0 kernel/kthread.c:463 ret_from_fork+0x510/0xa50 arch/x86/kernel/process.c:158 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246 CVE-2026-23011 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/security/cve/CVE-2026-23011.html CVE-2026-23011 https://bugzilla.suse.com/1257207 SUSE Bug 1257207