p PatchFirst

SUSE-SU-2025:1195-1

SUSE-SU-2025:1195-1 · Security update for the Linux Kernel

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238919). - CVE-2022-49739: gfs2: Always check inode size of inline inodes (bsc#1240207). - CVE-2023-52935: mm/khugepaged: fix ->anon_vma race (bsc#1240276). - CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464). - CVE-2024-56651: can: hi311x: hi3110_can_ist(): fix potential use-after-free (bsc#1235528). - CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036). - CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029). - CVE-2025-21714: RDMA/mlx5: Fix implicit ODP use after free (bsc#1237890). - CVE-2025-21732: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (bsc#1237877). - CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875). - CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238911). The following non-security bugs were fixed: - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (bsc#1237530). - RDMA/mana_ib: Prefer struct_size over open coded arithmetic (bsc#1239016). - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (bsc#1239016). - RDMA/mlx5: Fix implicit ODP hang on parent deregistration (git-fixes) - btrfs: defrag: do not use merged extent map for their generation check (bsc#1239968). - btrfs: fix defrag not merging contiguous extents due to merged extent maps (bsc#1239968). - btrfs: fix extent map merging not happening for adjacent extents (bsc#1239968). - btrfs: send: allow cloning non-aligned extent if it ends at i_size (bsc#1239969). - btrfs: send: fix invalid clone operation for file that got its size decreased (bsc#1239969). - gfs2: Fix inode height consistency check (git-fixes). - mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() (bsc#1239126). - mm: zswap: move allocations during CPU init outside the lock (git-fixes). - net: mana: Add flex array to struct mana_cfg_rx_steer_req_v2 (bsc#1239016). - net: mana: Allow variable size indirection table (bsc#1239016). - net: mana: Avoid open coded arithmetic (bsc#1239016). - net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup (bsc#1240195). - net: mana: Support holes in device list reply msg (bsc#1240133).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • kernel-default SUSE:Linux Enterprise Micro 5.3

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.161.1

    Update to 5.14.21-150400.24.161.1

  • kernel-default-base SUSE:Linux Enterprise Micro 5.3

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.161.1.150400.24.80.1

    Update to 5.14.21-150400.24.161.1.150400.24.80.1

  • kernel-default SUSE:Linux Enterprise Micro 5.4

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.161.1

    Update to 5.14.21-150400.24.161.1

  • kernel-default-base SUSE:Linux Enterprise Micro 5.4

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.161.1.150400.24.80.1

    Update to 5.14.21-150400.24.161.1.150400.24.80.1

  • kernel-default SUSE:Linux Enterprise Live Patching 15 SP4

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.161.1

    Update to 5.14.21-150400.24.161.1

  • kernel-livepatch-sle15-sp4_update_39 SUSE:Linux Enterprise Live Patching 15 SP4

    Affected ranges
    • ECOSYSTEM: < 1-150400.9.3.1

    Update to 1-150400.9.3.1

  • kernel-default SUSE:Linux Enterprise High Availability Extension 15 SP4

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.161.1

    Update to 5.14.21-150400.24.161.1

  • kernel-64kb SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.161.1

    Update to 5.14.21-150400.24.161.1

  • kernel-default SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.161.1

    Update to 5.14.21-150400.24.161.1

  • kernel-default-base SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.161.1.150400.24.80.1

    Update to 5.14.21-150400.24.161.1.150400.24.80.1

  • kernel-docs SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.161.1

    Update to 5.14.21-150400.24.161.1

  • kernel-obs-build SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.161.1

    Update to 5.14.21-150400.24.161.1

  • kernel-source SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.161.1

    Update to 5.14.21-150400.24.161.1

  • kernel-syms SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.161.1

    Update to 5.14.21-150400.24.161.1

  • kernel-64kb SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.161.1

    Update to 5.14.21-150400.24.161.1

  • kernel-default SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.161.1

    Update to 5.14.21-150400.24.161.1

  • kernel-default-base SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.161.1.150400.24.80.1

    Update to 5.14.21-150400.24.161.1.150400.24.80.1

  • kernel-docs SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.161.1

    Update to 5.14.21-150400.24.161.1

  • kernel-obs-build SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.161.1

    Update to 5.14.21-150400.24.161.1

  • kernel-source SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.161.1

    Update to 5.14.21-150400.24.161.1

  • kernel-syms SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.161.1

    Update to 5.14.21-150400.24.161.1

  • kernel-64kb SUSE:Linux Enterprise Server 15 SP4-LTSS

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.161.1

    Update to 5.14.21-150400.24.161.1

  • kernel-default SUSE:Linux Enterprise Server 15 SP4-LTSS

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.161.1

    Update to 5.14.21-150400.24.161.1

  • kernel-default-base SUSE:Linux Enterprise Server 15 SP4-LTSS

    Affected ranges
    • ECOSYSTEM: < 5.14.21-150400.24.161.1.150400.24.80.1

    Update to 5.14.21-150400.24.161.1.150400.24.80.1

Original sources

Check your server →