SUSE-SU-2025:1195-1
SUSE-SU-2025:1195-1 · Security update for the Linux Kernel
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238919). - CVE-2022-49739: gfs2: Always check inode size of inline inodes (bsc#1240207). - CVE-2023-52935: mm/khugepaged: fix ->anon_vma race (bsc#1240276). - CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464). - CVE-2024-56651: can: hi311x: hi3110_can_ist(): fix potential use-after-free (bsc#1235528). - CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036). - CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029). - CVE-2025-21714: RDMA/mlx5: Fix implicit ODP use after free (bsc#1237890). - CVE-2025-21732: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (bsc#1237877). - CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875). - CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238911). The following non-security bugs were fixed: - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (bsc#1237530). - RDMA/mana_ib: Prefer struct_size over open coded arithmetic (bsc#1239016). - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (bsc#1239016). - RDMA/mlx5: Fix implicit ODP hang on parent deregistration (git-fixes) - btrfs: defrag: do not use merged extent map for their generation check (bsc#1239968). - btrfs: fix defrag not merging contiguous extents due to merged extent maps (bsc#1239968). - btrfs: fix extent map merging not happening for adjacent extents (bsc#1239968). - btrfs: send: allow cloning non-aligned extent if it ends at i_size (bsc#1239969). - btrfs: send: fix invalid clone operation for file that got its size decreased (bsc#1239969). - gfs2: Fix inode height consistency check (git-fixes). - mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() (bsc#1239126). - mm: zswap: move allocations during CPU init outside the lock (git-fixes). - net: mana: Add flex array to struct mana_cfg_rx_steer_req_v2 (bsc#1239016). - net: mana: Allow variable size indirection table (bsc#1239016). - net: mana: Avoid open coded arithmetic (bsc#1239016). - net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup (bsc#1240195). - net: mana: Support holes in device list reply msg (bsc#1240133).
Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
kernel-default SUSE:Linux Enterprise Micro 5.3
- Plages de versions concernées
- ECOSYSTEM: < 5.14.21-150400.24.161.1
Mettez à jour vers 5.14.21-150400.24.161.1
kernel-default-base SUSE:Linux Enterprise Micro 5.3
- Plages de versions concernées
- ECOSYSTEM: < 5.14.21-150400.24.161.1.150400.24.80.1
Mettez à jour vers 5.14.21-150400.24.161.1.150400.24.80.1
kernel-default SUSE:Linux Enterprise Micro 5.4
- Plages de versions concernées
- ECOSYSTEM: < 5.14.21-150400.24.161.1
Mettez à jour vers 5.14.21-150400.24.161.1
kernel-default-base SUSE:Linux Enterprise Micro 5.4
- Plages de versions concernées
- ECOSYSTEM: < 5.14.21-150400.24.161.1.150400.24.80.1
Mettez à jour vers 5.14.21-150400.24.161.1.150400.24.80.1
kernel-default SUSE:Linux Enterprise Live Patching 15 SP4
- Plages de versions concernées
- ECOSYSTEM: < 5.14.21-150400.24.161.1
Mettez à jour vers 5.14.21-150400.24.161.1
kernel-livepatch-sle15-sp4_update_39 SUSE:Linux Enterprise Live Patching 15 SP4
- Plages de versions concernées
- ECOSYSTEM: < 1-150400.9.3.1
Mettez à jour vers 1-150400.9.3.1
kernel-default SUSE:Linux Enterprise High Availability Extension 15 SP4
- Plages de versions concernées
- ECOSYSTEM: < 5.14.21-150400.24.161.1
Mettez à jour vers 5.14.21-150400.24.161.1
kernel-64kb SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
- Plages de versions concernées
- ECOSYSTEM: < 5.14.21-150400.24.161.1
Mettez à jour vers 5.14.21-150400.24.161.1
kernel-default SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
- Plages de versions concernées
- ECOSYSTEM: < 5.14.21-150400.24.161.1
Mettez à jour vers 5.14.21-150400.24.161.1
kernel-default-base SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
- Plages de versions concernées
- ECOSYSTEM: < 5.14.21-150400.24.161.1.150400.24.80.1
Mettez à jour vers 5.14.21-150400.24.161.1.150400.24.80.1
kernel-docs SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
- Plages de versions concernées
- ECOSYSTEM: < 5.14.21-150400.24.161.1
Mettez à jour vers 5.14.21-150400.24.161.1
kernel-obs-build SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
- Plages de versions concernées
- ECOSYSTEM: < 5.14.21-150400.24.161.1
Mettez à jour vers 5.14.21-150400.24.161.1
kernel-source SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
- Plages de versions concernées
- ECOSYSTEM: < 5.14.21-150400.24.161.1
Mettez à jour vers 5.14.21-150400.24.161.1
kernel-syms SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
- Plages de versions concernées
- ECOSYSTEM: < 5.14.21-150400.24.161.1
Mettez à jour vers 5.14.21-150400.24.161.1
kernel-64kb SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
- Plages de versions concernées
- ECOSYSTEM: < 5.14.21-150400.24.161.1
Mettez à jour vers 5.14.21-150400.24.161.1
kernel-default SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
- Plages de versions concernées
- ECOSYSTEM: < 5.14.21-150400.24.161.1
Mettez à jour vers 5.14.21-150400.24.161.1
kernel-default-base SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
- Plages de versions concernées
- ECOSYSTEM: < 5.14.21-150400.24.161.1.150400.24.80.1
Mettez à jour vers 5.14.21-150400.24.161.1.150400.24.80.1
kernel-docs SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
- Plages de versions concernées
- ECOSYSTEM: < 5.14.21-150400.24.161.1
Mettez à jour vers 5.14.21-150400.24.161.1
kernel-obs-build SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
- Plages de versions concernées
- ECOSYSTEM: < 5.14.21-150400.24.161.1
Mettez à jour vers 5.14.21-150400.24.161.1
kernel-source SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
- Plages de versions concernées
- ECOSYSTEM: < 5.14.21-150400.24.161.1
Mettez à jour vers 5.14.21-150400.24.161.1
kernel-syms SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
- Plages de versions concernées
- ECOSYSTEM: < 5.14.21-150400.24.161.1
Mettez à jour vers 5.14.21-150400.24.161.1
kernel-64kb SUSE:Linux Enterprise Server 15 SP4-LTSS
- Plages de versions concernées
- ECOSYSTEM: < 5.14.21-150400.24.161.1
Mettez à jour vers 5.14.21-150400.24.161.1
kernel-default SUSE:Linux Enterprise Server 15 SP4-LTSS
- Plages de versions concernées
- ECOSYSTEM: < 5.14.21-150400.24.161.1
Mettez à jour vers 5.14.21-150400.24.161.1
kernel-default-base SUSE:Linux Enterprise Server 15 SP4-LTSS
- Plages de versions concernées
- ECOSYSTEM: < 5.14.21-150400.24.161.1.150400.24.80.1
Mettez à jour vers 5.14.21-150400.24.161.1.150400.24.80.1
Sources originales
- https://www.suse.com/support/update/announcement/2025/suse-su-20251195-1/
- https://bugzilla.suse.com/1193629
- https://bugzilla.suse.com/1197227
- https://bugzilla.suse.com/1207034
- https://bugzilla.suse.com/1207186
- https://bugzilla.suse.com/1207878
- https://bugzilla.suse.com/1209262
- https://bugzilla.suse.com/1209547
- https://bugzilla.suse.com/1209788
- https://bugzilla.suse.com/1210647
- https://bugzilla.suse.com/1213167
- https://bugzilla.suse.com/1225742
- https://bugzilla.suse.com/1231375
- https://bugzilla.suse.com/1233479
- https://bugzilla.suse.com/1233557
- https://bugzilla.suse.com/1233558
- https://bugzilla.suse.com/1234464
- https://bugzilla.suse.com/1235528
- https://bugzilla.suse.com/1237029
- https://bugzilla.suse.com/1237530
- https://bugzilla.suse.com/1237875
- https://bugzilla.suse.com/1237877
- https://bugzilla.suse.com/1237890
- https://osv.dev/vulnerability/SUSE-SU-2025:1195-1