SUSE-SU-2025:4200-1
SUSE-SU-2025:4200-1 · Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 15 SP6)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.10.34 fixes various security issues The following security issues were fixed: - CVE-2025-23145: mptcp: fix NULL pointer in can_accept_new_subflow (bsc#1242882). - CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672). - CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1249537).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-livepatch-sle15-sp6-rt_update_10 SUSE:Linux Enterprise Live Patching 15 SP6
- Affected ranges
- ECOSYSTEM: < 10-150600.2.1
Update to 10-150600.2.1
Original sources
- https://www.suse.com/support/update/announcement/2025/suse-su-20254200-1/
- https://bugzilla.suse.com/1242882
- https://bugzilla.suse.com/1248672
- https://bugzilla.suse.com/1249537
- https://www.suse.com/security/cve/CVE-2025-23145
- https://www.suse.com/security/cve/CVE-2025-38500
- https://www.suse.com/security/cve/CVE-2025-38616
- https://osv.dev/vulnerability/SUSE-SU-2025:4200-1