RHSA-2025:14748
Vulnerability from csaf_opensuse - Published: 2025-08-27 00:00 - Updated: 2026-09-20 11:48Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2025:14748.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2025:14748.
Patchnames: RHSA-2025:14748
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-49788
Threats
Impact
moderate
6.6 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-49788
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-49788
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-49788
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-49788
Threats
Impact
moderate
Affected products
Recommended
13 products, the same list as for
CVE-2022-49788
Threats
Impact
important
Affected products
Recommended
13 products, the same list as for
CVE-2022-49788
Threats
Impact
important
7.3 (High)
Affected products
Recommended
13 products, the same list as for
CVE-2022-49788
Threats
Impact
important
References
39 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2025:14748.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2025:14748.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2025:14748",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2025_14748.json"
},
{
"category": "self",
"summary": "URL for RHSA-2025:14748",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-September/001967.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2025:14748",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-September/001967.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-49788 page",
"url": "https://www.suse.com/security/cve/CVE-2022-49788/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50020 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50022 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50022/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57980 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57980/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21928 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21928/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-23150 page",
"url": "https://www.suse.com/security/cve/CVE-2025-23150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-38000 page",
"url": "https://www.suse.com/security/cve/CVE-2025-38000/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-38177 page",
"url": "https://www.suse.com/security/cve/CVE-2025-38177/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-38350 page",
"url": "https://www.suse.com/security/cve/CVE-2025-38350/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:48:19Z",
"generator": {
"date": "2025-08-27T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2025:14748",
"initial_release_date": "2025-08-27T00:00:00Z",
"revision_history": [
{
"date": "2025-08-27T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:48:19Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"product": {
"name": "kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"product_id": "kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-whitelists@3.10.0-1160.137.1.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"product": {
"name": "kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"product_id": "kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@3.10.0-1160.137.1.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"product": {
"name": "bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"product_id": "bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@3.10.0-1160.137.1.el7?arch=x86_64\u0026upstream=bpftool-0:3.10.0-1160.137.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:3.10.0-1160.137.1.el7.x86_64",
"product": {
"name": "kernel-0:3.10.0-1160.137.1.el7.x86_64",
"product_id": "kernel-0:3.10.0-1160.137.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@3.10.0-1160.137.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"product": {
"name": "kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"product_id": "kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@3.10.0-1160.137.1.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-1160.137.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"product": {
"name": "kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"product_id": "kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@3.10.0-1160.137.1.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-1160.137.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"product": {
"name": "kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"product_id": "kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@3.10.0-1160.137.1.el7?arch=x86_64\u0026upstream=kernel-source-0:3.10.0-1160.137.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"product": {
"name": "kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"product_id": "kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@3.10.0-1160.137.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"product": {
"name": "kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"product_id": "kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@3.10.0-1160.137.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"product": {
"name": "kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"product_id": "kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@3.10.0-1160.137.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"product_id": "kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@3.10.0-1160.137.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:3.10.0-1160.137.1.el7.x86_64",
"product": {
"name": "perf-0:3.10.0-1160.137.1.el7.x86_64",
"product_id": "perf-0:3.10.0-1160.137.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@3.10.0-1160.137.1.el7?arch=x86_64\u0026upstream=perf-0:3.10.0-1160.137.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python-perf-0:3.10.0-1160.137.1.el7.x86_64",
"product": {
"name": "python-perf-0:3.10.0-1160.137.1.el7.x86_64",
"product_id": "python-perf-0:3.10.0-1160.137.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python-perf@3.10.0-1160.137.1.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 7 LTSS",
"product": {
"name": "SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:3.10.0-1160.137.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64"
},
"product_reference": "bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:3.10.0-1160.137.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64"
},
"product_reference": "kernel-0:3.10.0-1160.137.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch"
},
"product_reference": "kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:3.10.0-1160.137.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64"
},
"product_reference": "kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64"
},
"product_reference": "kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:3.10.0-1160.137.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64"
},
"product_reference": "kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:3.10.0-1160.137.1.el7.noarch as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch"
},
"product_reference": "kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:3.10.0-1160.137.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64"
},
"product_reference": "kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:3.10.0-1160.137.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64"
},
"product_reference": "kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64"
},
"product_reference": "kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:3.10.0-1160.137.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64"
},
"product_reference": "perf-0:3.10.0-1160.137.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-0:3.10.0-1160.137.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
},
"product_reference": "python-perf-0:3.10.0-1160.137.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-49788",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-49788"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()\n\n`struct vmci_event_qp` allocated by qp_notify_peer() contains padding,\nwhich may carry uninitialized data to the userspace, as observed by\nKMSAN:\n\n BUG: KMSAN: kernel-infoleak in instrument_copy_to_user ./include/linux/instrumented.h:121\n instrument_copy_to_user ./include/linux/instrumented.h:121\n _copy_to_user+0x5f/0xb0 lib/usercopy.c:33\n copy_to_user ./include/linux/uaccess.h:169\n vmci_host_do_receive_datagram drivers/misc/vmw_vmci/vmci_host.c:431\n vmci_host_unlocked_ioctl+0x33d/0x43d0 drivers/misc/vmw_vmci/vmci_host.c:925\n vfs_ioctl fs/ioctl.c:51\n ...\n\n Uninit was stored to memory at:\n kmemdup+0x74/0xb0 mm/util.c:131\n dg_dispatch_as_host drivers/misc/vmw_vmci/vmci_datagram.c:271\n vmci_datagram_dispatch+0x4f8/0xfc0 drivers/misc/vmw_vmci/vmci_datagram.c:339\n qp_notify_peer+0x19a/0x290 drivers/misc/vmw_vmci/vmci_queue_pair.c:1479\n qp_broker_attach drivers/misc/vmw_vmci/vmci_queue_pair.c:1662\n qp_broker_alloc+0x2977/0x2f30 drivers/misc/vmw_vmci/vmci_queue_pair.c:1750\n vmci_qp_broker_alloc+0x96/0xd0 drivers/misc/vmw_vmci/vmci_queue_pair.c:1940\n vmci_host_do_alloc_queuepair drivers/misc/vmw_vmci/vmci_host.c:488\n vmci_host_unlocked_ioctl+0x24fd/0x43d0 drivers/misc/vmw_vmci/vmci_host.c:927\n ...\n\n Local variable ev created at:\n qp_notify_peer+0x54/0x290 drivers/misc/vmw_vmci/vmci_queue_pair.c:1456\n qp_broker_attach drivers/misc/vmw_vmci/vmci_queue_pair.c:1662\n qp_broker_alloc+0x2977/0x2f30 drivers/misc/vmw_vmci/vmci_queue_pair.c:1750\n\n Bytes 28-31 of 48 are uninitialized\n Memory access of size 48 starts at ffff888035155e00\n Data copied to user address 0000000020000100\n\nUse memset() to prevent the infoleaks.\n\nAlso speculatively fix qp_notify_peer_local(), which may suffer from the\nsame problem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-49788",
"url": "https://www.suse.com/security/cve/CVE-2022-49788"
},
{
"category": "external",
"summary": "SUSE Bug 1242353 for CVE-2022-49788",
"url": "https://bugzilla.suse.com/1242353"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-27T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-49788"
},
{
"cve": "CVE-2022-50020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50020"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: avoid resizing to a partial cluster size\n\nThis patch avoids an attempt to resize the filesystem to an\nunaligned cluster boundary. An online resize to a size that is not\nintegral to cluster size results in the last iteration attempting to\ngrow the fs by a negative amount, which trips a BUG_ON and leaves the fs\nwith a corrupted in-memory superblock.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50020",
"url": "https://www.suse.com/security/cve/CVE-2022-50020"
},
{
"category": "external",
"summary": "SUSE Bug 1245129 for CVE-2022-50020",
"url": "https://bugzilla.suse.com/1245129"
},
{
"category": "external",
"summary": "SUSE Bug 1245130 for CVE-2022-50020",
"url": "https://bugzilla.suse.com/1245130"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-27T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-50020"
},
{
"cve": "CVE-2022-50022",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50022"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers:md:fix a potential use-after-free bug\n\nIn line 2884, \"raid5_release_stripe(sh);\" drops the reference to sh and\nmay cause sh to be released. However, sh is subsequently used in lines\n2886 \"if (sh-\u003ebatch_head \u0026\u0026 sh != sh-\u003ebatch_head)\". This may result in an\nuse-after-free bug.\n\nIt can be fixed by moving \"raid5_release_stripe(sh);\" to the bottom of\nthe function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50022",
"url": "https://www.suse.com/security/cve/CVE-2022-50022"
},
{
"category": "external",
"summary": "SUSE Bug 1245131 for CVE-2022-50022",
"url": "https://bugzilla.suse.com/1245131"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-27T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-50022"
},
{
"cve": "CVE-2024-57980",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57980"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: uvcvideo: Fix double free in error path\n\nIf the uvc_status_init() function fails to allocate the int_urb, it will\nfree the dev-\u003estatus pointer but doesn\u0027t reset the pointer to NULL. This\nresults in the kfree() call in uvc_status_cleanup() trying to\ndouble-free the memory. Fix it by resetting the dev-\u003estatus pointer to\nNULL after freeing it.\n\nReviewed by: Ricardo Ribalda \u003cribalda@chromium.org\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57980",
"url": "https://www.suse.com/security/cve/CVE-2024-57980"
},
{
"category": "external",
"summary": "SUSE Bug 1237911 for CVE-2024-57980",
"url": "https://bugzilla.suse.com/1237911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-27T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-57980"
},
{
"cve": "CVE-2025-21928",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21928"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()\n\nThe system can experience a random crash a few minutes after the driver is\nremoved. This issue occurs due to improper handling of memory freeing in\nthe ishtp_hid_remove() function.\n\nThe function currently frees the `driver_data` directly within the loop\nthat destroys the HID devices, which can lead to accessing freed memory.\nSpecifically, `hid_destroy_device()` uses `driver_data` when it calls\n`hid_ishtp_set_feature()` to power off the sensor, so freeing\n`driver_data` beforehand can result in accessing invalid memory.\n\nThis patch resolves the issue by storing the `driver_data` in a temporary\nvariable before calling `hid_destroy_device()`, and then freeing the\n`driver_data` after the device is destroyed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21928",
"url": "https://www.suse.com/security/cve/CVE-2025-21928"
},
{
"category": "external",
"summary": "SUSE Bug 1240722 for CVE-2025-21928",
"url": "https://bugzilla.suse.com/1240722"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-27T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-21928"
},
{
"cve": "CVE-2025-23150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-23150"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix off-by-one error in do_split\n\nSyzkaller detected a use-after-free issue in ext4_insert_dentry that was\ncaused by out-of-bounds access due to incorrect splitting in do_split.\n\nBUG: KASAN: use-after-free in ext4_insert_dentry+0x36a/0x6d0 fs/ext4/namei.c:2109\nWrite of size 251 at addr ffff888074572f14 by task syz-executor335/5847\n\nCPU: 0 UID: 0 PID: 5847 Comm: syz-executor335 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:377 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:488\n kasan_report+0x143/0x180 mm/kasan/report.c:601\n kasan_check_range+0x282/0x290 mm/kasan/generic.c:189\n __asan_memcpy+0x40/0x70 mm/kasan/shadow.c:106\n ext4_insert_dentry+0x36a/0x6d0 fs/ext4/namei.c:2109\n add_dirent_to_buf+0x3d9/0x750 fs/ext4/namei.c:2154\n make_indexed_dir+0xf98/0x1600 fs/ext4/namei.c:2351\n ext4_add_entry+0x222a/0x25d0 fs/ext4/namei.c:2455\n ext4_add_nondir+0x8d/0x290 fs/ext4/namei.c:2796\n ext4_symlink+0x920/0xb50 fs/ext4/namei.c:3431\n vfs_symlink+0x137/0x2e0 fs/namei.c:4615\n do_symlinkat+0x222/0x3a0 fs/namei.c:4641\n __do_sys_symlink fs/namei.c:4662 [inline]\n __se_sys_symlink fs/namei.c:4660 [inline]\n __x64_sys_symlink+0x7a/0x90 fs/namei.c:4660\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n \u003c/TASK\u003e\n\nThe following loop is located right above \u0027if\u0027 statement.\n\nfor (i = count-1; i \u003e= 0; i--) {\n\t/* is more than half of this entry in 2nd half of the block? */\n\tif (size + map[i].size/2 \u003e blocksize/2)\n\t\tbreak;\n\tsize += map[i].size;\n\tmove++;\n}\n\n\u0027i\u0027 in this case could go down to -1, in which case sum of active entries\nwouldn\u0027t exceed half the block size, but previous behaviour would also do\nsplit in half if sum would exceed at the very last block, which in case of\nhaving too many long name files in a single block could lead to\nout-of-bounds access and following use-after-free.\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-23150",
"url": "https://www.suse.com/security/cve/CVE-2025-23150"
},
{
"category": "external",
"summary": "SUSE Bug 1242513 for CVE-2025-23150",
"url": "https://bugzilla.suse.com/1242513"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-27T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-23150"
},
{
"cve": "CVE-2025-38000",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-38000"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()\n\nWhen enqueuing the first packet to an HFSC class, hfsc_enqueue() calls the\nchild qdisc\u0027s peek() operation before incrementing sch-\u003eq.qlen and\nsch-\u003eqstats.backlog. If the child qdisc uses qdisc_peek_dequeued(), this may\ntrigger an immediate dequeue and potential packet drop. In such cases,\nqdisc_tree_reduce_backlog() is called, but the HFSC qdisc\u0027s qlen and backlog\nhave not yet been updated, leading to inconsistent queue accounting. This\ncan leave an empty HFSC class in the active list, causing further\nconsequences like use-after-free.\n\nThis patch fixes the bug by moving the increment of sch-\u003eq.qlen and\nsch-\u003eqstats.backlog before the call to the child qdisc\u0027s peek() operation.\nThis ensures that queue length and backlog are always accurate when packet\ndrops or dequeues are triggered during the peek.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-38000",
"url": "https://www.suse.com/security/cve/CVE-2025-38000"
},
{
"category": "external",
"summary": "SUSE Bug 1244277 for CVE-2025-38000",
"url": "https://bugzilla.suse.com/1244277"
},
{
"category": "external",
"summary": "SUSE Bug 1245775 for CVE-2025-38000",
"url": "https://bugzilla.suse.com/1245775"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-27T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2025-38000"
},
{
"cve": "CVE-2025-38177",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-38177"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsch_hfsc: make hfsc_qlen_notify() idempotent\n\nhfsc_qlen_notify() is not idempotent either and not friendly\nto its callers, like fq_codel_dequeue(). Let\u0027s make it idempotent\nto ease qdisc_tree_reduce_backlog() callers\u0027 life:\n\n1. update_vf() decreases cl-\u003ecl_nactive, so we can check whether it is\nnon-zero before calling it.\n\n2. eltree_remove() always removes RB node cl-\u003eel_node, but we can use\n RB_EMPTY_NODE() + RB_CLEAR_NODE() to make it safe.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-38177",
"url": "https://www.suse.com/security/cve/CVE-2025-38177"
},
{
"category": "external",
"summary": "SUSE Bug 1237312 for CVE-2025-38177",
"url": "https://bugzilla.suse.com/1237312"
},
{
"category": "external",
"summary": "SUSE Bug 1245986 for CVE-2025-38177",
"url": "https://bugzilla.suse.com/1245986"
},
{
"category": "external",
"summary": "SUSE Bug 1246356 for CVE-2025-38177",
"url": "https://bugzilla.suse.com/1246356"
},
{
"category": "external",
"summary": "SUSE Bug 1247374 for CVE-2025-38177",
"url": "https://bugzilla.suse.com/1247374"
},
{
"category": "external",
"summary": "SUSE Bug 1253291 for CVE-2025-38177",
"url": "https://bugzilla.suse.com/1253291"
},
{
"category": "external",
"summary": "SUSE Bug 1253292 for CVE-2025-38177",
"url": "https://bugzilla.suse.com/1253292"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-27T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2025-38177"
},
{
"cve": "CVE-2025-38350",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-38350"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: Always pass notifications when child class becomes empty\n\nCertain classful qdiscs may invoke their classes\u0027 dequeue handler on an\nenqueue operation. This may unexpectedly empty the child qdisc and thus\nmake an in-flight class passive via qlen_notify(). Most qdiscs do not\nexpect such behaviour at this point in time and may re-activate the\nclass eventually anyways which will lead to a use-after-free.\n\nThe referenced fix commit attempted to fix this behavior for the HFSC\ncase by moving the backlog accounting around, though this turned out to\nbe incomplete since the parent\u0027s parent may run into the issue too.\nThe following reproducer demonstrates this use-after-free:\n\n tc qdisc add dev lo root handle 1: drr\n tc filter add dev lo parent 1: basic classid 1:1\n tc class add dev lo parent 1: classid 1:1 drr\n tc qdisc add dev lo parent 1:1 handle 2: hfsc def 1\n tc class add dev lo parent 2: classid 2:1 hfsc rt m1 8 d 1 m2 0\n tc qdisc add dev lo parent 2:1 handle 3: netem\n tc qdisc add dev lo parent 3:1 handle 4: blackhole\n\n echo 1 | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888\n tc class delete dev lo classid 1:1\n echo 1 | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888\n\nSince backlog accounting issues leading to a use-after-frees on stale\nclass pointers is a recurring pattern at this point, this patch takes\na different approach. Instead of trying to fix the accounting, the patch\nensures that qdisc_tree_reduce_backlog always calls qlen_notify when\nthe child qdisc is empty. This solves the problem because deletion of\nqdiscs always involves a call to qdisc_reset() and / or\nqdisc_purge_queue() which ultimately resets its qlen to 0 thus causing\nthe following qdisc_tree_reduce_backlog() to report to the parent. Note\nthat this may call qlen_notify on passive classes multiple times. This\nis not a problem after the recent patch series that made all the\nclassful qdiscs qlen_notify() handlers idempotent.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-38350",
"url": "https://www.suse.com/security/cve/CVE-2025-38350"
},
{
"category": "external",
"summary": "SUSE Bug 1246781 for CVE-2025-38350",
"url": "https://bugzilla.suse.com/1246781"
},
{
"category": "external",
"summary": "SUSE Bug 1247043 for CVE-2025-38350",
"url": "https://bugzilla.suse.com/1247043"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.137.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.137.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.137.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-27T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2025-38350"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…