p PatchFirst

SUSE-SU-2025:02848-1

SUSE-SU-2025:02848-1 · Security update for the Linux Kernel

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50211: md-raid10: fix KASAN warning (bsc#1245140). - CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210629). - CVE-2023-52923: netfilter: nf_tables: split async and sync catchall in two functions (bsc#1236104). - CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644). - CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551). - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863). - CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417). - CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245217). - CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246000). - CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (bsc#1246045). - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246029). - CVE-2025-38213: vgacon: Add check for vc_origin address range in vgacon_scroll() (bsc#1246037). - CVE-2025-38257: s390/pkey: Prevent overflow in size calculation for memdup_user() (bsc#1246186). - CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247349). - CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID (bsc#1247348). - CVE-2025-38497: usb: gadget: configfs: Fix OOB read on empty string write (bsc#1247347).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • kernel-default SUSE:Linux Enterprise Live Patching 15 SP3

    Affected ranges
    • ECOSYSTEM: < 5.3.18-150300.59.215.1

    Update to 5.3.18-150300.59.215.1

  • kernel-livepatch-sle15-sp3_update_60 SUSE:Linux Enterprise Live Patching 15 SP3

    Affected ranges
    • ECOSYSTEM: < 1-150300.7.3.1

    Update to 1-150300.7.3.1

  • kernel-default SUSE:Linux Enterprise High Availability Extension 15 SP3

    Affected ranges
    • ECOSYSTEM: < 5.3.18-150300.59.215.1

    Update to 5.3.18-150300.59.215.1

  • kernel-64kb SUSE:Linux Enterprise Server 15 SP3-LTSS

    Affected ranges
    • ECOSYSTEM: < 5.3.18-150300.59.215.1

    Update to 5.3.18-150300.59.215.1

  • kernel-default SUSE:Linux Enterprise Server 15 SP3-LTSS

    Affected ranges
    • ECOSYSTEM: < 5.3.18-150300.59.215.1

    Update to 5.3.18-150300.59.215.1

  • kernel-default-base SUSE:Linux Enterprise Server 15 SP3-LTSS

    Affected ranges
    • ECOSYSTEM: < 5.3.18-150300.59.215.1.150300.18.128.1

    Update to 5.3.18-150300.59.215.1.150300.18.128.1

  • kernel-docs SUSE:Linux Enterprise Server 15 SP3-LTSS

    Affected ranges
    • ECOSYSTEM: < 5.3.18-150300.59.215.1

    Update to 5.3.18-150300.59.215.1

  • kernel-obs-build SUSE:Linux Enterprise Server 15 SP3-LTSS

    Affected ranges
    • ECOSYSTEM: < 5.3.18-150300.59.215.1

    Update to 5.3.18-150300.59.215.1

  • kernel-preempt SUSE:Linux Enterprise Server 15 SP3-LTSS

    Affected ranges
    • ECOSYSTEM: < 5.3.18-150300.59.215.1

    Update to 5.3.18-150300.59.215.1

  • kernel-source SUSE:Linux Enterprise Server 15 SP3-LTSS

    Affected ranges
    • ECOSYSTEM: < 5.3.18-150300.59.215.1

    Update to 5.3.18-150300.59.215.1

  • kernel-syms SUSE:Linux Enterprise Server 15 SP3-LTSS

    Affected ranges
    • ECOSYSTEM: < 5.3.18-150300.59.215.1

    Update to 5.3.18-150300.59.215.1

  • kernel-zfcpdump SUSE:Linux Enterprise Server 15 SP3-LTSS

    Affected ranges
    • ECOSYSTEM: < 5.3.18-150300.59.215.1

    Update to 5.3.18-150300.59.215.1

  • kernel-default SUSE:Linux Enterprise Micro 5.1

    Affected ranges
    • ECOSYSTEM: < 5.3.18-150300.59.215.1

    Update to 5.3.18-150300.59.215.1

  • kernel-default-base SUSE:Linux Enterprise Micro 5.1

    Affected ranges
    • ECOSYSTEM: < 5.3.18-150300.59.215.1.150300.18.128.1

    Update to 5.3.18-150300.59.215.1.150300.18.128.1

  • kernel-default SUSE:Linux Enterprise Micro 5.2

    Affected ranges
    • ECOSYSTEM: < 5.3.18-150300.59.215.1

    Update to 5.3.18-150300.59.215.1

  • kernel-default-base SUSE:Linux Enterprise Micro 5.2

    Affected ranges
    • ECOSYSTEM: < 5.3.18-150300.59.215.1.150300.18.128.1

    Update to 5.3.18-150300.59.215.1.150300.18.128.1

  • kernel-64kb SUSE:Enterprise Storage 7.1

    Affected ranges
    • ECOSYSTEM: < 5.3.18-150300.59.215.1

    Update to 5.3.18-150300.59.215.1

  • kernel-default SUSE:Enterprise Storage 7.1

    Affected ranges
    • ECOSYSTEM: < 5.3.18-150300.59.215.1

    Update to 5.3.18-150300.59.215.1

  • kernel-default-base SUSE:Enterprise Storage 7.1

    Affected ranges
    • ECOSYSTEM: < 5.3.18-150300.59.215.1.150300.18.128.1

    Update to 5.3.18-150300.59.215.1.150300.18.128.1

  • kernel-docs SUSE:Enterprise Storage 7.1

    Affected ranges
    • ECOSYSTEM: < 5.3.18-150300.59.215.1

    Update to 5.3.18-150300.59.215.1

  • kernel-obs-build SUSE:Enterprise Storage 7.1

    Affected ranges
    • ECOSYSTEM: < 5.3.18-150300.59.215.1

    Update to 5.3.18-150300.59.215.1

  • kernel-preempt SUSE:Enterprise Storage 7.1

    Affected ranges
    • ECOSYSTEM: < 5.3.18-150300.59.215.1

    Update to 5.3.18-150300.59.215.1

  • kernel-source SUSE:Enterprise Storage 7.1

    Affected ranges
    • ECOSYSTEM: < 5.3.18-150300.59.215.1

    Update to 5.3.18-150300.59.215.1

  • kernel-syms SUSE:Enterprise Storage 7.1

    Affected ranges
    • ECOSYSTEM: < 5.3.18-150300.59.215.1

    Update to 5.3.18-150300.59.215.1

Original sources

Check your server →