Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2025:4515-1 Final 1 1 2025-12-23T16:19:45Z current 2025-12-23T16:19:45Z 2025-12-23T16:19:45Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50364: i2c: mux: reg: check return value after calling platform_get_resource() (bsc#1250083). - CVE-2022-50368: drm/msm/dsi: fix memory corruption with too many bridges (bsc#1250009). - CVE-2022-50494: thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash (bsc#1251173). - CVE-2022-50545: r6040: Fix kmemleak in probe and remove (bsc#1251285). - CVE-2022-50551: wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() (bsc#1251322). - CVE-2022-50569: xfrm: Update ipcomp_scratches with NULL when freed (bsc#1252640). - CVE-2022-50578: class: fix possible memory leak in __class_register() (bsc#1252519). - CVE-2023-53229: wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (bsc#1249650). - CVE-2023-53369: net: dcb: choose correct policy to parse DCB_ATTR_BCN (bsc#1250206). - CVE-2023-53431: scsi: ses: Don't attach if enclosure has no components (bsc#1250374). - CVE-2023-53542: ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy (bsc#1251154). - CVE-2023-53597: cifs: fix mid leak during reconnection after timeout threshold (bsc#1251159). - CVE-2023-53641: wifi: ath9k: hif_usb: fix memory leak of remain_skbs (bsc#1251728). - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251786). - CVE-2025-38436: drm/scheduler: signal scheduled fence when kill job (bsc#1247227). - CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176). - CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033). - CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303). - CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763). - CVE-2025-40030: pinctrl: check the return value of pinmux_ops::get_function_name() (bsc#1252773). - CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780). - CVE-2025-40048: uio_hv_generic: Let userspace take care of interrupt mask (bsc#1252862). - CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821). - CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836). - CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912). - CVE-2025-40173: net/ip6_tunnel: Prevent perpetual tunnel growth (bsc#1253421). - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253436). - CVE-2025-40205: btrfs: avoid potential out-of-bounds in btrfs_encode_fh() (bsc#1253456). The following non-security bugs were fixed: - KVM: x86: Give a hint when Win2016 might fail to boot due to XSAVES erratum (git-fixes). - PCI: aardvark: Fix checking for MEM resource type (git-fixes). - cifs: Check the lease context if we actually got a lease (bsc#1228688). - cifs: return a single-use cfid if we did not get a lease (bsc#1228688). - dmaengine: bcm2835: Avoid GFP_KERNEL in device_prep_slave_sg (bsc#1070872). - kabi/severities: Update info about kvm_86_ops. - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (bsc#1220419). - skmsg: Return copied bytes in sk_msg_memcopy_from_iter (bsc#1250650). - smb3: fix Open files on server counter going negative (git-fixes). - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork (bsc#1250705). - tcp_bpf: Fix copied value in tcp_bpf_sendmsg (bsc#1250650). - thermal: intel_powerclamp: Use first online CPU as control_cpu (bsc#1251173). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2025-4515,SUSE-SLE-Live-Patching-12-SP5-2025-4515,SUSE-SLE-SERVER-12-SP5-LTSS-2025-4515,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-4515 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ Link for SUSE-SU-2025:4515-1 https://lists.suse.com/pipermail/sle-security-updates/2025-December/023647.html E-Mail link for SUSE-SU-2025:4515-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1070872 SUSE Bug 1070872 https://bugzilla.suse.com/1220419 SUSE Bug 1220419 https://bugzilla.suse.com/1228688 SUSE Bug 1228688 https://bugzilla.suse.com/1247227 SUSE Bug 1247227 https://bugzilla.suse.com/1249650 SUSE Bug 1249650 https://bugzilla.suse.com/1250009 SUSE Bug 1250009 https://bugzilla.suse.com/1250083 SUSE Bug 1250083 https://bugzilla.suse.com/1250176 SUSE Bug 1250176 https://bugzilla.suse.com/1250206 SUSE Bug 1250206 https://bugzilla.suse.com/1250374 SUSE Bug 1250374 https://bugzilla.suse.com/1250650 SUSE Bug 1250650 https://bugzilla.suse.com/1250705 SUSE Bug 1250705 https://bugzilla.suse.com/1251154 SUSE Bug 1251154 https://bugzilla.suse.com/1251159 SUSE Bug 1251159 https://bugzilla.suse.com/1251173 SUSE Bug 1251173 https://bugzilla.suse.com/1251285 SUSE Bug 1251285 https://bugzilla.suse.com/1251322 SUSE Bug 1251322 https://bugzilla.suse.com/1251728 SUSE Bug 1251728 https://bugzilla.suse.com/1251786 SUSE Bug 1251786 https://bugzilla.suse.com/1252033 SUSE Bug 1252033 https://bugzilla.suse.com/1252303 SUSE Bug 1252303 https://bugzilla.suse.com/1252519 SUSE Bug 1252519 https://bugzilla.suse.com/1252640 SUSE Bug 1252640 https://bugzilla.suse.com/1252763 SUSE Bug 1252763 https://bugzilla.suse.com/1252773 SUSE Bug 1252773 https://bugzilla.suse.com/1252780 SUSE Bug 1252780 https://bugzilla.suse.com/1252821 SUSE Bug 1252821 https://bugzilla.suse.com/1252836 SUSE Bug 1252836 https://bugzilla.suse.com/1252862 SUSE Bug 1252862 https://bugzilla.suse.com/1252912 SUSE Bug 1252912 https://bugzilla.suse.com/1253237 SUSE Bug 1253237 https://bugzilla.suse.com/1253421 SUSE Bug 1253421 https://bugzilla.suse.com/1253436 SUSE Bug 1253436 https://bugzilla.suse.com/1253438 SUSE Bug 1253438 https://bugzilla.suse.com/1253456 SUSE Bug 1253456 https://www.suse.com/security/cve/CVE-2022-50364/ SUSE CVE CVE-2022-50364 page https://www.suse.com/security/cve/CVE-2022-50368/ SUSE CVE CVE-2022-50368 page https://www.suse.com/security/cve/CVE-2022-50494/ SUSE CVE CVE-2022-50494 page https://www.suse.com/security/cve/CVE-2022-50545/ SUSE CVE CVE-2022-50545 page https://www.suse.com/security/cve/CVE-2022-50551/ SUSE CVE CVE-2022-50551 page https://www.suse.com/security/cve/CVE-2022-50569/ SUSE CVE CVE-2022-50569 page https://www.suse.com/security/cve/CVE-2022-50578/ SUSE CVE CVE-2022-50578 page https://www.suse.com/security/cve/CVE-2023-53229/ SUSE CVE CVE-2023-53229 page https://www.suse.com/security/cve/CVE-2023-53369/ SUSE CVE CVE-2023-53369 page https://www.suse.com/security/cve/CVE-2023-53431/ SUSE CVE CVE-2023-53431 page https://www.suse.com/security/cve/CVE-2023-53542/ SUSE CVE CVE-2023-53542 page https://www.suse.com/security/cve/CVE-2023-53597/ SUSE CVE CVE-2023-53597 page https://www.suse.com/security/cve/CVE-2023-53641/ SUSE CVE CVE-2023-53641 page https://www.suse.com/security/cve/CVE-2023-53676/ SUSE CVE CVE-2023-53676 page https://www.suse.com/security/cve/CVE-2025-38436/ SUSE CVE CVE-2025-38436 page https://www.suse.com/security/cve/CVE-2025-39819/ SUSE CVE CVE-2025-39819 page https://www.suse.com/security/cve/CVE-2025-39967/ SUSE CVE CVE-2025-39967 page https://www.suse.com/security/cve/CVE-2025-40001/ SUSE CVE CVE-2025-40001 page https://www.suse.com/security/cve/CVE-2025-40027/ SUSE CVE CVE-2025-40027 page https://www.suse.com/security/cve/CVE-2025-40030/ SUSE CVE CVE-2025-40030 page https://www.suse.com/security/cve/CVE-2025-40040/ SUSE CVE CVE-2025-40040 page https://www.suse.com/security/cve/CVE-2025-40048/ SUSE CVE CVE-2025-40048 page https://www.suse.com/security/cve/CVE-2025-40055/ SUSE CVE CVE-2025-40055 page https://www.suse.com/security/cve/CVE-2025-40070/ SUSE CVE CVE-2025-40070 page https://www.suse.com/security/cve/CVE-2025-40083/ SUSE CVE CVE-2025-40083 page https://www.suse.com/security/cve/CVE-2025-40173/ SUSE CVE CVE-2025-40173 page https://www.suse.com/security/cve/CVE-2025-40186/ SUSE CVE CVE-2025-40186 page https://www.suse.com/security/cve/CVE-2025-40204/ SUSE CVE CVE-2025-40204 page https://www.suse.com/security/cve/CVE-2025-40205/ SUSE CVE CVE-2025-40205 page SUSE Linux Enterprise Live Patching 12 SP5 SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 cluster-md-kmp-default-4.12.14-122.283.1 dlm-kmp-default-4.12.14-122.283.1 gfs2-kmp-default-4.12.14-122.283.1 kernel-default-4.12.14-122.283.1 kernel-default-base-4.12.14-122.283.1 kernel-default-devel-4.12.14-122.283.1 kernel-default-extra-4.12.14-122.283.1 kernel-default-kgraft-4.12.14-122.283.1 kernel-default-kgraft-devel-4.12.14-122.283.1 kernel-default-man-4.12.14-122.283.1 kernel-devel-4.12.14-122.283.1 kernel-docs-4.12.14-122.283.1 kernel-docs-html-4.12.14-122.283.1 kernel-kvmsmall-4.12.14-122.283.1 kernel-kvmsmall-base-4.12.14-122.283.1 kernel-kvmsmall-devel-4.12.14-122.283.1 kernel-macros-4.12.14-122.283.1 kernel-obs-build-4.12.14-122.283.1 kernel-obs-qa-4.12.14-122.283.1 kernel-source-4.12.14-122.283.1 kernel-source-vanilla-4.12.14-122.283.1 kernel-syms-4.12.14-122.283.1 kernel-vanilla-4.12.14-122.283.1 kernel-vanilla-base-4.12.14-122.283.1 kernel-vanilla-devel-4.12.14-122.283.1 kernel-zfcpdump-4.12.14-122.283.1 kernel-zfcpdump-man-4.12.14-122.283.1 kgraft-patch-4_12_14-122_283-default-1-8.3.1 kselftests-kmp-default-4.12.14-122.283.1 ocfs2-kmp-default-4.12.14-122.283.1 kernel-default-kgraft-4.12.14-122.283.1 as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-default-kgraft-devel-4.12.14-122.283.1 as a component of SUSE Linux Enterprise Live Patching 12 SP5 kgraft-patch-4_12_14-122_283-default-1-8.3.1 as a component of SUSE Linux Enterprise Live Patching 12 SP5 cluster-md-kmp-default-4.12.14-122.283.1 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS dlm-kmp-default-4.12.14-122.283.1 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS gfs2-kmp-default-4.12.14-122.283.1 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default-4.12.14-122.283.1 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default-base-4.12.14-122.283.1 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default-devel-4.12.14-122.283.1 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default-man-4.12.14-122.283.1 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-devel-4.12.14-122.283.1 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-macros-4.12.14-122.283.1 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-source-4.12.14-122.283.1 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-syms-4.12.14-122.283.1 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS ocfs2-kmp-default-4.12.14-122.283.1 as a component of SUSE Linux Enterprise Server 12 SP5-LTSS cluster-md-kmp-default-4.12.14-122.283.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 dlm-kmp-default-4.12.14-122.283.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 gfs2-kmp-default-4.12.14-122.283.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 kernel-default-4.12.14-122.283.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 kernel-default-base-4.12.14-122.283.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 kernel-default-devel-4.12.14-122.283.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 kernel-devel-4.12.14-122.283.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 kernel-macros-4.12.14-122.283.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 kernel-source-4.12.14-122.283.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 kernel-syms-4.12.14-122.283.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 ocfs2-kmp-default-4.12.14-122.283.1 as a component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 In the Linux kernel, the following vulnerability has been resolved: i2c: mux: reg: check return value after calling platform_get_resource() It will cause null-ptr-deref in resource_size(), if platform_get_resource() returns NULL, move calling resource_size() after devm_ioremap_resource() that will check 'res' to avoid null-ptr-deref. And use devm_platform_get_and_ioremap_resource() to simplify code. CVE-2022-50364 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2022-50364.html CVE-2022-50364 https://bugzilla.suse.com/1250083 SUSE Bug 1250083 In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: fix memory corruption with too many bridges Add the missing sanity check on the bridge counter to avoid corrupting data beyond the fixed-sized bridge array in case there are ever more than eight bridges. Patchwork: https://patchwork.freedesktop.org/patch/502668/ CVE-2022-50368 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2022-50368.html CVE-2022-50368 https://bugzilla.suse.com/1250009 SUSE Bug 1250009 In the Linux kernel, the following vulnerability has been resolved: thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash When CPU 0 is offline and intel_powerclamp is used to inject idle, it generates kernel BUG: BUG: using smp_processor_id() in preemptible [00000000] code: bash/15687 caller is debug_smp_processor_id+0x17/0x20 CPU: 4 PID: 15687 Comm: bash Not tainted 5.19.0-rc7+ #57 Call Trace: <TASK> dump_stack_lvl+0x49/0x63 dump_stack+0x10/0x16 check_preemption_disabled+0xdd/0xe0 debug_smp_processor_id+0x17/0x20 powerclamp_set_cur_state+0x7f/0xf9 [intel_powerclamp] ... ... Here CPU 0 is the control CPU by default and changed to the current CPU, if CPU 0 offlined. This check has to be performed under cpus_read_lock(), hence the above warning. Use get_cpu() instead of smp_processor_id() to avoid this BUG. [ rjw: Subject edits ] CVE-2022-50494 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2022-50494.html CVE-2022-50494 https://bugzilla.suse.com/1251173 SUSE Bug 1251173 In the Linux kernel, the following vulnerability has been resolved: r6040: Fix kmemleak in probe and remove There is a memory leaks reported by kmemleak: unreferenced object 0xffff888116111000 (size 2048): comm "modprobe", pid 817, jiffies 4294759745 (age 76.502s) hex dump (first 32 bytes): 00 c4 0a 04 81 88 ff ff 08 10 11 16 81 88 ff ff ................ 08 10 11 16 81 88 ff ff 00 00 00 00 00 00 00 00 ................ backtrace: [<ffffffff815bcd82>] kmalloc_trace+0x22/0x60 [<ffffffff827e20ee>] phy_device_create+0x4e/0x90 [<ffffffff827e6072>] get_phy_device+0xd2/0x220 [<ffffffff827e7844>] mdiobus_scan+0xa4/0x2e0 [<ffffffff827e8be2>] __mdiobus_register+0x482/0x8b0 [<ffffffffa01f5d24>] r6040_init_one+0x714/0xd2c [r6040] ... The problem occurs in probe process as follows: r6040_init_one: mdiobus_register mdiobus_scan <- alloc and register phy_device, the reference count of phy_device is 3 r6040_mii_probe phy_connect <- connect to the first phy_device, so the reference count of the first phy_device is 4, others are 3 register_netdev <- fault inject succeeded, goto error handling path // error handling path err_out_mdio_unregister: mdiobus_unregister(lp->mii_bus); err_out_mdio: mdiobus_free(lp->mii_bus); <- the reference count of the first phy_device is 1, it is not released and other phy_devices are released // similarly, the remove process also has the same problem The root cause is traced to the phy_device is not disconnected when removes one r6040 device in r6040_remove_one() or on error handling path after r6040_mii probed successfully. In r6040_mii_probe(), a net ethernet device is connected to the first PHY device of mii_bus, in order to notify the connected driver when the link status changes, which is the default behavior of the PHY infrastructure to handle everything. Therefore the phy_device should be disconnected when removes one r6040 device or on error handling path. Fix it by adding phy_disconnect() when removes one r6040 device or on error handling path after r6040_mii probed successfully. CVE-2022-50545 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2022-50545.html CVE-2022-50545 https://bugzilla.suse.com/1251285 SUSE Bug 1251285 In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() This patch fixes a shift-out-of-bounds in brcmfmac that occurs in BIT(chiprev) when a 'chiprev' provided by the device is too large. It should also not be equal to or greater than BITS_PER_TYPE(u32) as we do bitwise AND with a u32 variable and BIT(chiprev). The patch adds a check that makes the function return NULL if that is the case. Note that the NULL case is later handled by the bus-specific caller, brcmf_usb_probe_cb() or brcmf_usb_reset_resume(), for example. Found by a modified version of syzkaller. UBSAN: shift-out-of-bounds in drivers/net/wireless/broadcom/brcm80211/brcmfmac/firmware.c shift exponent 151055786 is too large for 64-bit type 'long unsigned int' CPU: 0 PID: 1885 Comm: kworker/0:2 Tainted: G O 5.14.0+ #132 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.12.1-0-ga5cab58e9a3f-prebuilt.qemu.org 04/01/2014 Workqueue: usb_hub_wq hub_event Call Trace: dump_stack_lvl+0x57/0x7d ubsan_epilogue+0x5/0x40 __ubsan_handle_shift_out_of_bounds.cold+0x53/0xdb ? lock_chain_count+0x20/0x20 brcmf_fw_alloc_request.cold+0x19/0x3ea ? brcmf_fw_get_firmwares+0x250/0x250 ? brcmf_usb_ioctl_resp_wait+0x1a7/0x1f0 brcmf_usb_get_fwname+0x114/0x1a0 ? brcmf_usb_reset_resume+0x120/0x120 ? number+0x6c4/0x9a0 brcmf_c_process_clm_blob+0x168/0x590 ? put_dec+0x90/0x90 ? enable_ptr_key_workfn+0x20/0x20 ? brcmf_common_pd_remove+0x50/0x50 ? rcu_read_lock_sched_held+0xa1/0xd0 brcmf_c_preinit_dcmds+0x673/0xc40 ? brcmf_c_set_joinpref_default+0x100/0x100 ? rcu_read_lock_sched_held+0xa1/0xd0 ? rcu_read_lock_bh_held+0xb0/0xb0 ? lock_acquire+0x19d/0x4e0 ? find_held_lock+0x2d/0x110 ? brcmf_usb_deq+0x1cc/0x260 ? mark_held_locks+0x9f/0xe0 ? lockdep_hardirqs_on_prepare+0x273/0x3e0 ? _raw_spin_unlock_irqrestore+0x47/0x50 ? trace_hardirqs_on+0x1c/0x120 ? brcmf_usb_deq+0x1a7/0x260 ? brcmf_usb_rx_fill_all+0x5a/0xf0 brcmf_attach+0x246/0xd40 ? wiphy_new_nm+0x1476/0x1d50 ? kmemdup+0x30/0x40 brcmf_usb_probe+0x12de/0x1690 ? brcmf_usbdev_qinit.constprop.0+0x470/0x470 usb_probe_interface+0x25f/0x710 really_probe+0x1be/0xa90 __driver_probe_device+0x2ab/0x460 ? usb_match_id.part.0+0x88/0xc0 driver_probe_device+0x49/0x120 __device_attach_driver+0x18a/0x250 ? driver_allows_async_probing+0x120/0x120 bus_for_each_drv+0x123/0x1a0 ? bus_rescan_devices+0x20/0x20 ? lockdep_hardirqs_on_prepare+0x273/0x3e0 ? trace_hardirqs_on+0x1c/0x120 __device_attach+0x207/0x330 ? device_bind_driver+0xb0/0xb0 ? kobject_uevent_env+0x230/0x12c0 bus_probe_device+0x1a2/0x260 device_add+0xa61/0x1ce0 ? __mutex_unlock_slowpath+0xe7/0x660 ? __fw_devlink_link_to_suppliers+0x550/0x550 usb_set_configuration+0x984/0x1770 ? kernfs_create_link+0x175/0x230 usb_generic_driver_probe+0x69/0x90 usb_probe_device+0x9c/0x220 really_probe+0x1be/0xa90 __driver_probe_device+0x2ab/0x460 driver_probe_device+0x49/0x120 __device_attach_driver+0x18a/0x250 ? driver_allows_async_probing+0x120/0x120 bus_for_each_drv+0x123/0x1a0 ? bus_rescan_devices+0x20/0x20 ? lockdep_hardirqs_on_prepare+0x273/0x3e0 ? trace_hardirqs_on+0x1c/0x120 __device_attach+0x207/0x330 ? device_bind_driver+0xb0/0xb0 ? kobject_uevent_env+0x230/0x12c0 bus_probe_device+0x1a2/0x260 device_add+0xa61/0x1ce0 ? __fw_devlink_link_to_suppliers+0x550/0x550 usb_new_device.cold+0x463/0xf66 ? hub_disconnect+0x400/0x400 ? _raw_spin_unlock_irq+0x24/0x30 hub_event+0x10d5/0x3330 ? hub_port_debounce+0x280/0x280 ? __lock_acquire+0x1671/0x5790 ? wq_calc_node_cpumask+0x170/0x2a0 ? lock_release+0x640/0x640 ? rcu_read_lock_sched_held+0xa1/0xd0 ? rcu_read_lock_bh_held+0xb0/0xb0 ? lockdep_hardirqs_on_prepare+0x273/0x3e0 process_one_work+0x873/0x13e0 ? lock_release+0x640/0x640 ? pwq_dec_nr_in_flight+0x320/0x320 ? rwlock_bug.part.0+0x90/0x90 worker_thread+0x8b/0xd10 ? __kthread_parkme+0xd9/0x1d0 ? pr ---truncated--- CVE-2022-50551 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2022-50551.html CVE-2022-50551 https://bugzilla.suse.com/1251322 SUSE Bug 1251322 In the Linux kernel, the following vulnerability has been resolved: xfrm: Update ipcomp_scratches with NULL when freed Currently if ipcomp_alloc_scratches() fails to allocate memory ipcomp_scratches holds obsolete address. So when we try to free the percpu scratches using ipcomp_free_scratches() it tries to vfree non existent vm area. Described below: static void * __percpu *ipcomp_alloc_scratches(void) { ... scratches = alloc_percpu(void *); if (!scratches) return NULL; ipcomp_scratches does not know about this allocation failure. Therefore holding the old obsolete address. ... } So when we free, static void ipcomp_free_scratches(void) { ... scratches = ipcomp_scratches; Assigning obsolete address from ipcomp_scratches if (!scratches) return; for_each_possible_cpu(i) vfree(*per_cpu_ptr(scratches, i)); Trying to free non existent page, causing warning: trying to vfree existent vm area. ... } Fix this breakage by updating ipcomp_scrtches with NULL when scratches is freed CVE-2022-50569 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2022-50569.html CVE-2022-50569 https://bugzilla.suse.com/1252640 SUSE Bug 1252640 In the Linux kernel, the following vulnerability has been resolved: class: fix possible memory leak in __class_register() If class_add_groups() returns error, the 'cp->subsys' need be unregister, and the 'cp' need be freed. We can not call kset_unregister() here, because the 'cls' will be freed in callback function class_release() and it's also freed in caller's error path, it will cause double free. So fix this by calling kobject_del() and kfree_const(name) to cleanup kobject. Besides, call kfree() to free the 'cp'. Fault injection test can trigger this: unreferenced object 0xffff888102fa8190 (size 8): comm "modprobe", pid 502, jiffies 4294906074 (age 49.296s) hex dump (first 8 bytes): 70 6b 74 63 64 76 64 00 pktcdvd. backtrace: [<00000000e7c7703d>] __kmalloc_track_caller+0x1ae/0x320 [<000000005e4d70bc>] kstrdup+0x3a/0x70 [<00000000c2e5e85a>] kstrdup_const+0x68/0x80 [<000000000049a8c7>] kvasprintf_const+0x10b/0x190 [<0000000029123163>] kobject_set_name_vargs+0x56/0x150 [<00000000747219c9>] kobject_set_name+0xab/0xe0 [<0000000005f1ea4e>] __class_register+0x15c/0x49a unreferenced object 0xffff888037274000 (size 1024): comm "modprobe", pid 502, jiffies 4294906074 (age 49.296s) hex dump (first 32 bytes): 00 40 27 37 80 88 ff ff 00 40 27 37 80 88 ff ff .@'7.....@'7.... 00 00 00 00 ad 4e ad de ff ff ff ff 00 00 00 00 .....N.......... backtrace: [<00000000151f9600>] kmem_cache_alloc_trace+0x17c/0x2f0 [<00000000ecf3dd95>] __class_register+0x86/0x49a CVE-2022-50578 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2022-50578.html CVE-2022-50578 https://bugzilla.suse.com/1252519 SUSE Bug 1252519 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta Avoid potential data corruption issues caused by uninitialized driver private data structures. CVE-2023-53229 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2023-53229.html CVE-2023-53229 https://bugzilla.suse.com/1249650 SUSE Bug 1249650 In the Linux kernel, the following vulnerability has been resolved: net: dcb: choose correct policy to parse DCB_ATTR_BCN The dcbnl_bcn_setcfg uses erroneous policy to parse tb[DCB_ATTR_BCN], which is introduced in commit 859ee3c43812 ("DCB: Add support for DCB BCN"). Please see the comment in below code static int dcbnl_bcn_setcfg(...) { ... ret = nla_parse_nested_deprecated(..., dcbnl_pfc_up_nest, .. ) // !!! dcbnl_pfc_up_nest for attributes // DCB_PFC_UP_ATTR_0 to DCB_PFC_UP_ATTR_ALL in enum dcbnl_pfc_up_attrs ... for (i = DCB_BCN_ATTR_RP_0; i <= DCB_BCN_ATTR_RP_7; i++) { // !!! DCB_BCN_ATTR_RP_0 to DCB_BCN_ATTR_RP_7 in enum dcbnl_bcn_attrs ... value_byte = nla_get_u8(data[i]); ... } ... for (i = DCB_BCN_ATTR_BCNA_0; i <= DCB_BCN_ATTR_RI; i++) { // !!! DCB_BCN_ATTR_BCNA_0 to DCB_BCN_ATTR_RI in enum dcbnl_bcn_attrs ... value_int = nla_get_u32(data[i]); ... } ... } That is, the nla_parse_nested_deprecated uses dcbnl_pfc_up_nest attributes to parse nlattr defined in dcbnl_pfc_up_attrs. But the following access code fetch each nlattr as dcbnl_bcn_attrs attributes. By looking up the associated nla_policy for dcbnl_bcn_attrs. We can find the beginning part of these two policies are "same". static const struct nla_policy dcbnl_pfc_up_nest[...] = { [DCB_PFC_UP_ATTR_0] = {.type = NLA_U8}, [DCB_PFC_UP_ATTR_1] = {.type = NLA_U8}, [DCB_PFC_UP_ATTR_2] = {.type = NLA_U8}, [DCB_PFC_UP_ATTR_3] = {.type = NLA_U8}, [DCB_PFC_UP_ATTR_4] = {.type = NLA_U8}, [DCB_PFC_UP_ATTR_5] = {.type = NLA_U8}, [DCB_PFC_UP_ATTR_6] = {.type = NLA_U8}, [DCB_PFC_UP_ATTR_7] = {.type = NLA_U8}, [DCB_PFC_UP_ATTR_ALL] = {.type = NLA_FLAG}, }; static const struct nla_policy dcbnl_bcn_nest[...] = { [DCB_BCN_ATTR_RP_0] = {.type = NLA_U8}, [DCB_BCN_ATTR_RP_1] = {.type = NLA_U8}, [DCB_BCN_ATTR_RP_2] = {.type = NLA_U8}, [DCB_BCN_ATTR_RP_3] = {.type = NLA_U8}, [DCB_BCN_ATTR_RP_4] = {.type = NLA_U8}, [DCB_BCN_ATTR_RP_5] = {.type = NLA_U8}, [DCB_BCN_ATTR_RP_6] = {.type = NLA_U8}, [DCB_BCN_ATTR_RP_7] = {.type = NLA_U8}, [DCB_BCN_ATTR_RP_ALL] = {.type = NLA_FLAG}, // from here is somewhat different [DCB_BCN_ATTR_BCNA_0] = {.type = NLA_U32}, ... [DCB_BCN_ATTR_ALL] = {.type = NLA_FLAG}, }; Therefore, the current code is buggy and this nla_parse_nested_deprecated could overflow the dcbnl_pfc_up_nest and use the adjacent nla_policy to parse attributes from DCB_BCN_ATTR_BCNA_0. Hence use the correct policy dcbnl_bcn_nest to parse the nested tb[DCB_ATTR_BCN] TLV. CVE-2023-53369 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2023-53369.html CVE-2023-53369 https://bugzilla.suse.com/1250206 SUSE Bug 1250206 In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Handle enclosure with just a primary component gracefully This reverts commit 3fe97ff3d949 ("scsi: ses: Don't attach if enclosure has no components") and introduces proper handling of case where there are no detected secondary components, but primary component (enumerated in num_enclosures) does exist. That fix was originally proposed by Ding Hui <dinghui@sangfor.com.cn>. Completely ignoring devices that have one primary enclosure and no secondary one results in ses_intf_add() bailing completely scsi 2:0:0:254: enclosure has no enumerated components scsi 2:0:0:254: Failed to bind enclosure -12ven in valid configurations such even on valid configurations with 1 primary and 0 secondary enclosures as below: # sg_ses /dev/sg0 3PARdata SES 3321 Supported diagnostic pages: Supported Diagnostic Pages [sdp] [0x0] Configuration (SES) [cf] [0x1] Short Enclosure Status (SES) [ses] [0x8] # sg_ses -p cf /dev/sg0 3PARdata SES 3321 Configuration diagnostic page: number of secondary subenclosures: 0 generation code: 0x0 enclosure descriptor list Subenclosure identifier: 0 [primary] relative ES process id: 0, number of ES processes: 1 number of type descriptor headers: 1 enclosure logical identifier (hex): 20000002ac02068d enclosure vendor: 3PARdata product: VV rev: 3321 type descriptor header and text list Element type: Unspecified, subenclosure id: 0 number of possible elements: 1 The changelog for the original fix follows ===== We can get a crash when disconnecting the iSCSI session, the call trace like this: [ffff00002a00fb70] kfree at ffff00000830e224 [ffff00002a00fba0] ses_intf_remove at ffff000001f200e4 [ffff00002a00fbd0] device_del at ffff0000086b6a98 [ffff00002a00fc50] device_unregister at ffff0000086b6d58 [ffff00002a00fc70] __scsi_remove_device at ffff00000870608c [ffff00002a00fca0] scsi_remove_device at ffff000008706134 [ffff00002a00fcc0] __scsi_remove_target at ffff0000087062e4 [ffff00002a00fd10] scsi_remove_target at ffff0000087064c0 [ffff00002a00fd70] __iscsi_unbind_session at ffff000001c872c4 [ffff00002a00fdb0] process_one_work at ffff00000810f35c [ffff00002a00fe00] worker_thread at ffff00000810f648 [ffff00002a00fe70] kthread at ffff000008116e98 In ses_intf_add, components count could be 0, and kcalloc 0 size scomp, but not saved in edev->component[i].scratch In this situation, edev->component[0].scratch is an invalid pointer, when kfree it in ses_intf_remove_enclosure, a crash like above would happen The call trace also could be other random cases when kfree cannot catch the invalid pointer We should not use edev->component[] array when the components count is 0 We also need check index when use edev->component[] array in ses_enclosure_data_process ===== CVE-2023-53431 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2023-53431.html CVE-2023-53431 https://bugzilla.suse.com/1250374 SUSE Bug 1250374 In the Linux kernel, the following vulnerability has been resolved: ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy For some reason, the driver adding support for Exynos5420 MIPI phy back in 2016 wasn't used on Exynos5420, which caused a kernel panic. Add the proper compatible for it. CVE-2023-53542 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2023-53542.html CVE-2023-53542 https://bugzilla.suse.com/1251154 SUSE Bug 1251154 In the Linux kernel, the following vulnerability has been resolved: cifs: fix mid leak during reconnection after timeout threshold When the number of responses with status of STATUS_IO_TIMEOUT exceeds a specified threshold (NUM_STATUS_IO_TIMEOUT), we reconnect the connection. But we do not return the mid, or the credits returned for the mid, or reduce the number of in-flight requests. This bug could result in the server->in_flight count to go bad, and also cause a leak in the mids. This change moves the check to a few lines below where the response is decrypted, even of the response is read from the transform header. This way, the code for returning the mids can be reused. Also, the cifs_reconnect was reconnecting just the transport connection before. In case of multi-channel, this may not be what we want to do after several timeouts. Changed that to reconnect the session and the tree too. Also renamed NUM_STATUS_IO_TIMEOUT to a more appropriate name MAX_STATUS_IO_TIMEOUT. CVE-2023-53597 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2023-53597.html CVE-2023-53597 https://bugzilla.suse.com/1251159 SUSE Bug 1251159 In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: hif_usb: fix memory leak of remain_skbs hif_dev->remain_skb is allocated and used exclusively in ath9k_hif_usb_rx_stream(). It is implied that an allocated remain_skb is processed and subsequently freed (in error paths) only during the next call of ath9k_hif_usb_rx_stream(). So, if the urbs are deallocated between those two calls due to the device deinitialization or suspend, it is possible that ath9k_hif_usb_rx_stream() is not called next time and the allocated remain_skb is leaked. Our local Syzkaller instance was able to trigger that. remain_skb makes sense when receiving two consecutive urbs which are logically linked together, i.e. a specific data field from the first skb indicates a cached skb to be allocated, memcpy'd with some data and subsequently processed in the next call to ath9k_hif_usb_rx_stream(). Urbs deallocation supposedly makes that link irrelevant so we need to free the cached skb in those cases. Fix the leak by introducing a function to explicitly free remain_skb (if it is not NULL) when the rx urbs have been deallocated. remain_skb is NULL when it has not been allocated at all (hif_dev struct is kzalloced) or when it has been processed in next call to ath9k_hif_usb_rx_stream(). Found by Linux Verification Center (linuxtesting.org) with Syzkaller. CVE-2023-53641 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2023-53641.html CVE-2023-53641 https://bugzilla.suse.com/1251728 SUSE Bug 1251728 In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() The function lio_target_nacl_info_show() uses sprintf() in a loop to print details for every iSCSI connection in a session without checking for the buffer length. With enough iSCSI connections it's possible to overflow the buffer provided by configfs and corrupt the memory. This patch replaces sprintf() with sysfs_emit_at() that checks for buffer boundries. CVE-2023-53676 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2023-53676.html CVE-2023-53676 https://bugzilla.suse.com/1251786 SUSE Bug 1251786 https://bugzilla.suse.com/1251787 SUSE Bug 1251787 In the Linux kernel, the following vulnerability has been resolved: drm/scheduler: signal scheduled fence when kill job When an entity from application B is killed, drm_sched_entity_kill() removes all jobs belonging to that entity through drm_sched_entity_kill_jobs_work(). If application A's job depends on a scheduled fence from application B's job, and that fence is not properly signaled during the killing process, application A's dependency cannot be cleared. This leads to application A hanging indefinitely while waiting for a dependency that will never be resolved. Fix this issue by ensuring that scheduled fences are properly signaled when an entity is killed, allowing dependent applications to continue execution. CVE-2025-38436 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2025-38436.html CVE-2025-38436 https://bugzilla.suse.com/1247227 SUSE Bug 1247227 In the Linux kernel, the following vulnerability has been resolved: fs/smb: Fix inconsistent refcnt update A possible inconsistent update of refcount was identified in `smb2_compound_op`. Such inconsistent update could lead to possible resource leaks. Why it is a possible bug: 1. In the comment section of the function, it clearly states that the reference to `cfile` should be dropped after calling this function. 2. Every control flow path would check and drop the reference to `cfile`, except the patched one. 3. Existing callers would not handle refcount update of `cfile` if -ENOMEM is returned. To fix the bug, an extra goto label "out" is added, to make sure that the cleanup logic would always be respected. As the problem is caused by the allocation failure of `vars`, the cleanup logic between label "finished" and "out" can be safely ignored. According to the definition of function `is_replayable_error`, the error code of "-ENOMEM" is not recoverable. Therefore, the replay logic also gets ignored. CVE-2025-39819 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2025-39819.html CVE-2025-39819 https://bugzilla.suse.com/1250176 SUSE Bug 1250176 In the Linux kernel, the following vulnerability has been resolved: fbcon: fix integer overflow in fbcon_do_set_font Fix integer overflow vulnerabilities in fbcon_do_set_font() where font size calculations could overflow when handling user-controlled font parameters. The vulnerabilities occur when: 1. CALC_FONTSZ(h, pitch, charcount) performs h * pith * charcount multiplication with user-controlled values that can overflow. 2. FONT_EXTRA_WORDS * sizeof(int) + size addition can also overflow 3. This results in smaller allocations than expected, leading to buffer overflows during font data copying. Add explicit overflow checking using check_mul_overflow() and check_add_overflow() kernel helpers to safety validate all size calculations before allocation. CVE-2025-39967 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2025-39967.html CVE-2025-39967 https://bugzilla.suse.com/1252033 SUSE Bug 1252033 In the Linux kernel, the following vulnerability has been resolved: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue During the detaching of Marvell's SAS/SATA controller, the original code calls cancel_delayed_work() in mvs_free() to cancel the delayed work item mwq->work_q. However, if mwq->work_q is already running, the cancel_delayed_work() may fail to cancel it. This can lead to use-after-free scenarios where mvs_free() frees the mvs_info while mvs_work_queue() is still executing and attempts to access the already-freed mvs_info. A typical race condition is illustrated below: CPU 0 (remove) | CPU 1 (delayed work callback) mvs_pci_remove() | mvs_free() | mvs_work_queue() cancel_delayed_work() | kfree(mvi) | | mvi-> // UAF Replace cancel_delayed_work() with cancel_delayed_work_sync() to ensure that the delayed work item is properly canceled and any executing delayed work item completes before the mvs_info is deallocated. This bug was found by static analysis. CVE-2025-40001 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2025-40001.html CVE-2025-40001 https://bugzilla.suse.com/1252303 SUSE Bug 1252303 In the Linux kernel, the following vulnerability has been resolved: net/9p: fix double req put in p9_fd_cancelled Syzkaller reports a KASAN issue as below: general protection fault, probably for non-canonical address 0xfbd59c0000000021: 0000 [#1] PREEMPT SMP KASAN NOPTI KASAN: maybe wild-memory-access in range [0xdead000000000108-0xdead00000000010f] CPU: 0 PID: 5083 Comm: syz-executor.2 Not tainted 6.1.134-syzkaller-00037-g855bd1d7d838 #0 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:__list_del include/linux/list.h:114 [inline] RIP: 0010:__list_del_entry include/linux/list.h:137 [inline] RIP: 0010:list_del include/linux/list.h:148 [inline] RIP: 0010:p9_fd_cancelled+0xe9/0x200 net/9p/trans_fd.c:734 Call Trace: <TASK> p9_client_flush+0x351/0x440 net/9p/client.c:614 p9_client_rpc+0xb6b/0xc70 net/9p/client.c:734 p9_client_version net/9p/client.c:920 [inline] p9_client_create+0xb51/0x1240 net/9p/client.c:1027 v9fs_session_init+0x1f0/0x18f0 fs/9p/v9fs.c:408 v9fs_mount+0xba/0xcb0 fs/9p/vfs_super.c:126 legacy_get_tree+0x108/0x220 fs/fs_context.c:632 vfs_get_tree+0x8e/0x300 fs/super.c:1573 do_new_mount fs/namespace.c:3056 [inline] path_mount+0x6a6/0x1e90 fs/namespace.c:3386 do_mount fs/namespace.c:3399 [inline] __do_sys_mount fs/namespace.c:3607 [inline] __se_sys_mount fs/namespace.c:3584 [inline] __x64_sys_mount+0x283/0x300 fs/namespace.c:3584 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x35/0x80 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x6e/0xd8 This happens because of a race condition between: - The 9p client sending an invalid flush request and later cleaning it up; - The 9p client in p9_read_work() canceled all pending requests. Thread 1 Thread 2 ... p9_client_create() ... p9_fd_create() ... p9_conn_create() ... // start Thread 2 INIT_WORK(&m->rq, p9_read_work); p9_read_work() ... p9_client_rpc() ... ... p9_conn_cancel() ... spin_lock(&m->req_lock); ... p9_fd_cancelled() ... ... spin_unlock(&m->req_lock); // status rewrite p9_client_cb(m->client, req, REQ_STATUS_ERROR) // first remove list_del(&req->req_list); ... spin_lock(&m->req_lock) ... // second remove list_del(&req->req_list); spin_unlock(&m->req_lock) ... Commit 74d6a5d56629 ("9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work") fixes a concurrency issue in the 9p filesystem client where the req_list could be deleted simultaneously by both p9_read_work and p9_fd_cancelled functions, but for the case where req->status equals REQ_STATUS_RCVD. Update the check for req->status in p9_fd_cancelled to skip processing not just received requests, but anything that is not SENT, as whatever changed the state from SENT also removed the request from its list. Found by Linux Verification Center (linuxtesting.org) with Syzkaller. [updated the check from status == RECV || status == ERROR to status != SENT] CVE-2025-40027 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2025-40027.html CVE-2025-40027 https://bugzilla.suse.com/1252763 SUSE Bug 1252763 In the Linux kernel, the following vulnerability has been resolved: pinctrl: check the return value of pinmux_ops::get_function_name() While the API contract in docs doesn't specify it explicitly, the generic implementation of the get_function_name() callback from struct pinmux_ops - pinmux_generic_get_function_name() - can fail and return NULL. This is already checked in pinmux_check_ops() so add a similar check in pinmux_func_name_to_selector() instead of passing the returned pointer right down to strcmp() where the NULL can get dereferenced. This is normal operation when adding new pinfunctions. CVE-2025-40030 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2025-40030.html CVE-2025-40030 https://bugzilla.suse.com/1252773 SUSE Bug 1252773 In the Linux kernel, the following vulnerability has been resolved: mm/ksm: fix flag-dropping behavior in ksm_madvise syzkaller discovered the following crash: (kernel BUG) [ 44.607039] ------------[ cut here ]------------ [ 44.607422] kernel BUG at mm/userfaultfd.c:2067! [ 44.608148] Oops: invalid opcode: 0000 [#1] SMP DEBUG_PAGEALLOC KASAN NOPTI [ 44.608814] CPU: 1 UID: 0 PID: 2475 Comm: reproducer Not tainted 6.16.0-rc6 #1 PREEMPT(none) [ 44.609635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 44.610695] RIP: 0010:userfaultfd_release_all+0x3a8/0x460 <snip other registers, drop unreliable trace> [ 44.617726] Call Trace: [ 44.617926] <TASK> [ 44.619284] userfaultfd_release+0xef/0x1b0 [ 44.620976] __fput+0x3f9/0xb60 [ 44.621240] fput_close_sync+0x110/0x210 [ 44.622222] __x64_sys_close+0x8f/0x120 [ 44.622530] do_syscall_64+0x5b/0x2f0 [ 44.622840] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.623244] RIP: 0033:0x7f365bb3f227 Kernel panics because it detects UFFD inconsistency during userfaultfd_release_all(). Specifically, a VMA which has a valid pointer to vma->vm_userfaultfd_ctx, but no UFFD flags in vma->vm_flags. The inconsistency is caused in ksm_madvise(): when user calls madvise() with MADV_UNMEARGEABLE on a VMA that is registered for UFFD in MINOR mode, it accidentally clears all flags stored in the upper 32 bits of vma->vm_flags. Assuming x86_64 kernel build, unsigned long is 64-bit and unsigned int and int are 32-bit wide. This setup causes the following mishap during the &= ~VM_MERGEABLE assignment. VM_MERGEABLE is a 32-bit constant of type unsigned int, 0x8000'0000. After ~ is applied, it becomes 0x7fff'ffff unsigned int, which is then promoted to unsigned long before the & operation. This promotion fills upper 32 bits with leading 0s, as we're doing unsigned conversion (and even for a signed conversion, this wouldn't help as the leading bit is 0). & operation thus ends up AND-ing vm_flags with 0x0000'0000'7fff'ffff instead of intended 0xffff'ffff'7fff'ffff and hence accidentally clears the upper 32-bits of its value. Fix it by changing `VM_MERGEABLE` constant to unsigned long, using the BIT() macro. Note: other VM_* flags are not affected: This only happens to the VM_MERGEABLE flag, as the other VM_* flags are all constants of type int and after ~ operation, they end up with leading 1 and are thus converted to unsigned long with leading 1s. Note 2: After commit 31defc3b01d9 ("userfaultfd: remove (VM_)BUG_ON()s"), this is no longer a kernel BUG, but a WARNING at the same place: [ 45.595973] WARNING: CPU: 1 PID: 2474 at mm/userfaultfd.c:2067 but the root-cause (flag-drop) remains the same. [akpm@linux-foundation.org: rust bindgen wasn't able to handle BIT(), from Miguel] CVE-2025-40040 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2025-40040.html CVE-2025-40040 https://bugzilla.suse.com/1252780 SUSE Bug 1252780 In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Let userspace take care of interrupt mask Remove the logic to set interrupt mask by default in uio_hv_generic driver as the interrupt mask value is supposed to be controlled completely by the user space. If the mask bit gets changed by the driver, concurrently with user mode operating on the ring, the mask bit may be set when it is supposed to be clear, and the user-mode driver will miss an interrupt which will cause a hang. For eg- when the driver sets inbound ring buffer interrupt mask to 1, the host does not interrupt the guest on the UIO VMBus channel. However, setting the mask does not prevent the host from putting a message in the inbound ring buffer. So let's assume that happens, the host puts a message into the ring buffer but does not interrupt. Subsequently, the user space code in the guest sets the inbound ring buffer interrupt mask to 0, saying "Hey, I'm ready for interrupts". User space code then calls pread() to wait for an interrupt. Then one of two things happens: * The host never sends another message. So the pread() waits forever. * The host does send another message. But because there's already a message in the ring buffer, it doesn't generate an interrupt. This is the correct behavior, because the host should only send an interrupt when the inbound ring buffer transitions from empty to not-empty. Adding an additional message to a ring buffer that is not empty is not supposed to generate an interrupt on the guest. Since the guest is waiting in pread() and not removing messages from the ring buffer, the pread() waits forever. This could be easily reproduced in hv_fcopy_uio_daemon if we delay setting interrupt mask to 0. Similarly if hv_uio_channel_cb() sets the interrupt_mask to 1, there's a race condition. Once user space empties the inbound ring buffer, but before user space sets interrupt_mask to 0, the host could put another message in the ring buffer but it wouldn't interrupt. Then the next pread() would hang. Fix these by removing all instances where interrupt_mask is changed, while keeping the one in set_event() unchanged to enable userspace control the interrupt mask by writing 0/1 to /dev/uioX. CVE-2025-40048 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2025-40048.html CVE-2025-40048 https://bugzilla.suse.com/1252862 SUSE Bug 1252862 In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix double free in user_cluster_connect() user_cluster_disconnect() frees "conn->cc_private" which is "lc" but then the error handling frees "lc" a second time. Set "lc" to NULL on this path to avoid a double free. CVE-2025-40055 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2025-40055.html CVE-2025-40055 https://bugzilla.suse.com/1252821 SUSE Bug 1252821 In the Linux kernel, the following vulnerability has been resolved: pps: fix warning in pps_register_cdev when register device fail Similar to previous commit 2a934fdb01db ("media: v4l2-dev: fix error handling in __video_register_device()"), the release hook should be set before device_register(). Otherwise, when device_register() return error and put_device() try to callback the release function, the below warning may happen. ------------[ cut here ]------------ WARNING: CPU: 1 PID: 4760 at drivers/base/core.c:2567 device_release+0x1bd/0x240 drivers/base/core.c:2567 Modules linked in: CPU: 1 UID: 0 PID: 4760 Comm: syz.4.914 Not tainted 6.17.0-rc3+ #1 NONE RIP: 0010:device_release+0x1bd/0x240 drivers/base/core.c:2567 Call Trace: <TASK> kobject_cleanup+0x136/0x410 lib/kobject.c:689 kobject_release lib/kobject.c:720 [inline] kref_put include/linux/kref.h:65 [inline] kobject_put+0xe9/0x130 lib/kobject.c:737 put_device+0x24/0x30 drivers/base/core.c:3797 pps_register_cdev+0x2da/0x370 drivers/pps/pps.c:402 pps_register_source+0x2f6/0x480 drivers/pps/kapi.c:108 pps_tty_open+0x190/0x310 drivers/pps/clients/pps-ldisc.c:57 tty_ldisc_open+0xa7/0x120 drivers/tty/tty_ldisc.c:432 tty_set_ldisc+0x333/0x780 drivers/tty/tty_ldisc.c:563 tiocsetd drivers/tty/tty_io.c:2429 [inline] tty_ioctl+0x5d1/0x1700 drivers/tty/tty_io.c:2728 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:598 [inline] __se_sys_ioctl fs/ioctl.c:584 [inline] __x64_sys_ioctl+0x194/0x210 fs/ioctl.c:584 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x5f/0x2a0 arch/x86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x76/0x7e </TASK> Before commit c79a39dc8d06 ("pps: Fix a use-after-free"), pps_register_cdev() call device_create() to create pps->dev, which will init dev->release to device_create_release(). Now the comment is outdated, just remove it. Thanks for the reminder from Calvin Owens, 'kfree_pps' should be removed in pps_register_source() to avoid a double free in the failure case. CVE-2025-40070 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2025-40070.html CVE-2025-40070 https://bugzilla.suse.com/1252836 SUSE Bug 1252836 In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix null-deref in agg_dequeue To prevent a potential crash in agg_dequeue (net/sched/sch_qfq.c) when cl->qdisc->ops->peek(cl->qdisc) returns NULL, we check the return value before using it, similar to the existing approach in sch_hfsc.c. To avoid code duplication, the following changes are made: 1. Changed qdisc_warn_nonwc(include/net/pkt_sched.h) into a static inline function. 2. Moved qdisc_peek_len from net/sched/sch_hfsc.c to include/net/pkt_sched.h so that sch_qfq can reuse it. 3. Applied qdisc_peek_len in agg_dequeue to avoid crashing. CVE-2025-40083 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2025-40083.html CVE-2025-40083 https://bugzilla.suse.com/1252912 SUSE Bug 1252912 In the Linux kernel, the following vulnerability has been resolved: net/ip6_tunnel: Prevent perpetual tunnel growth Similarly to ipv4 tunnel, ipv6 version updates dev->needed_headroom, too. While ipv4 tunnel headroom adjustment growth was limited in commit 5ae1e9922bbd ("net: ip_tunnel: prevent perpetual headroom growth"), ipv6 tunnel yet increases the headroom without any ceiling. Reflect ipv4 tunnel headroom adjustment limit on ipv6 version. Credits to Francesco Ruggeri, who was originally debugging this issue and wrote local Arista-specific patch and a reproducer. CVE-2025-40173 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2025-40173.html CVE-2025-40173 https://bugzilla.suse.com/1253421 SUSE Bug 1253421 In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). syzbot reported the splat below in tcp_conn_request(). [0] If a listener is close()d while a TFO socket is being processed in tcp_conn_request(), inet_csk_reqsk_queue_add() does not set reqsk->sk and calls inet_child_forget(), which calls tcp_disconnect() for the TFO socket. After the cited commit, tcp_disconnect() calls reqsk_fastopen_remove(), where reqsk_put() is called due to !reqsk->sk. Then, reqsk_fastopen_remove() in tcp_conn_request() decrements the last req->rsk_refcnt and frees reqsk, and __reqsk_free() at the drop_and_free label causes the refcount underflow for the listener and double-free of the reqsk. Let's remove reqsk_fastopen_remove() in tcp_conn_request(). Note that other callers make sure tp->fastopen_rsk is not NULL. [0]: refcount_t: underflow; use-after-free. WARNING: CPU: 12 PID: 5563 at lib/refcount.c:28 refcount_warn_saturate (lib/refcount.c:28) Modules linked in: CPU: 12 UID: 0 PID: 5563 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 RIP: 0010:refcount_warn_saturate (lib/refcount.c:28) Code: ab e8 8e b4 98 ff 0f 0b c3 cc cc cc cc cc 80 3d a4 e4 d6 01 00 75 9c c6 05 9b e4 d6 01 01 48 c7 c7 e8 df fb ab e8 6a b4 98 ff <0f> 0b e9 03 5b 76 00 cc 80 3d 7d e4 d6 01 00 0f 85 74 ff ff ff c6 RSP: 0018:ffffa79fc0304a98 EFLAGS: 00010246 RAX: d83af4db1c6b3900 RBX: ffff9f65c7a69020 RCX: d83af4db1c6b3900 RDX: 0000000000000000 RSI: 00000000ffff7fff RDI: ffffffffac78a280 RBP: 000000009d781b60 R08: 0000000000007fff R09: ffffffffac6ca280 R10: 0000000000017ffd R11: 0000000000000004 R12: ffff9f65c7b4f100 R13: ffff9f65c7d23c00 R14: ffff9f65c7d26000 R15: ffff9f65c7a64ef8 FS: 00007f9f962176c0(0000) GS:ffff9f65fcf00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000200000000180 CR3: 000000000dbbe006 CR4: 0000000000372ef0 Call Trace: <IRQ> tcp_conn_request (./include/linux/refcount.h:400 ./include/linux/refcount.h:432 ./include/linux/refcount.h:450 ./include/net/sock.h:1965 ./include/net/request_sock.h:131 net/ipv4/tcp_input.c:7301) tcp_rcv_state_process (net/ipv4/tcp_input.c:6708) tcp_v6_do_rcv (net/ipv6/tcp_ipv6.c:1670) tcp_v6_rcv (net/ipv6/tcp_ipv6.c:1906) ip6_protocol_deliver_rcu (net/ipv6/ip6_input.c:438) ip6_input (net/ipv6/ip6_input.c:500) ipv6_rcv (net/ipv6/ip6_input.c:311) __netif_receive_skb (net/core/dev.c:6104) process_backlog (net/core/dev.c:6456) __napi_poll (net/core/dev.c:7506) net_rx_action (net/core/dev.c:7569 net/core/dev.c:7696) handle_softirqs (kernel/softirq.c:579) do_softirq (kernel/softirq.c:480) </IRQ> CVE-2025-40186 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2025-40186.html CVE-2025-40186 https://bugzilla.suse.com/1253438 SUSE Bug 1253438 In the Linux kernel, the following vulnerability has been resolved: sctp: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this. CVE-2025-40204 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2025-40204.html CVE-2025-40204 https://bugzilla.suse.com/1253436 SUSE Bug 1253436 https://bugzilla.suse.com/1253437 SUSE Bug 1253437 In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid potential out-of-bounds in btrfs_encode_fh() The function btrfs_encode_fh() does not properly account for the three cases it handles. Before writing to the file handle (fh), the function only returns to the user BTRFS_FID_SIZE_NON_CONNECTABLE (5 dwords, 20 bytes) or BTRFS_FID_SIZE_CONNECTABLE (8 dwords, 32 bytes). However, when a parent exists and the root ID of the parent and the inode are different, the function writes BTRFS_FID_SIZE_CONNECTABLE_ROOT (10 dwords, 40 bytes). If *max_len is not large enough, this write goes out of bounds because BTRFS_FID_SIZE_CONNECTABLE_ROOT is greater than BTRFS_FID_SIZE_CONNECTABLE originally returned. This results in an 8-byte out-of-bounds write at fid->parent_root_objectid = parent_root_id. A previous attempt to fix this issue was made but was lost. https://lore.kernel.org/all/4CADAEEC020000780001B32C@vpn.id2.novell.com/ Although this issue does not seem to be easily triggerable, it is a potential memory corruption bug that should be fixed. This patch resolves the issue by ensuring the function returns the appropriate size for all three cases and validates that *max_len is large enough before writing any data. CVE-2025-40205 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.283.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_283-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:cluster-md-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:dlm-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:gfs2-kmp-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-base-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-default-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-devel-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-macros-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-source-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:kernel-syms-4.12.14-122.283.1 SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:ocfs2-kmp-default-4.12.14-122.283.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/ https://www.suse.com/security/cve/CVE-2025-40205.html CVE-2025-40205 https://bugzilla.suse.com/1253456 SUSE Bug 1253456