RHSA-2025:11298
Vulnerability from csaf_opensuse - Published: 2025-07-16 00:00 - Updated: 2026-09-20 11:46Summary
security update for kernel
Severity
Moderate
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2025:11298.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2025:11298.
Patchnames: RHSA-2025:11298
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2022-49058
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-49058
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-49058
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-49058
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2022-49058
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-49058
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-49058
Threats
Impact
moderate
References
31 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2025:11298.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2025:11298.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2025:11298",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2025_11298.json"
},
{
"category": "self",
"summary": "URL for RHSA-2025:11298",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-July/001807.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2025:11298",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-July/001807.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-49058 page",
"url": "https://www.suse.com/security/cve/CVE-2022-49058/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-49788 page",
"url": "https://www.suse.com/security/cve/CVE-2022-49788/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-57980 page",
"url": "https://www.suse.com/security/cve/CVE-2024-57980/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-58002 page",
"url": "https://www.suse.com/security/cve/CVE-2024-58002/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21991 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21991/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-22004 page",
"url": "https://www.suse.com/security/cve/CVE-2025-22004/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-23150 page",
"url": "https://www.suse.com/security/cve/CVE-2025-23150/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-37738 page",
"url": "https://www.suse.com/security/cve/CVE-2025-37738/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:46:44Z",
"generator": {
"date": "2025-07-16T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2025:11298",
"initial_release_date": "2025-07-16T00:00:00Z",
"revision_history": [
{
"date": "2025-07-16T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:46:44Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"product": {
"name": "kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"product_id": "kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@4.18.0-553.62.1.el8_10?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"product": {
"name": "kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"product_id": "kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@4.18.0-553.62.1.el8_10?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"product": {
"name": "bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"product_id": "bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@4.18.0-553.62.1.el8_10?arch=x86_64\u0026upstream=bpftool-0:4.18.0-553.62.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"product": {
"name": "kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"product_id": "kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@4.18.0-553.62.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"product": {
"name": "kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"product_id": "kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@4.18.0-553.62.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"product": {
"name": "kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"product_id": "kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@4.18.0-553.62.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"product_id": "kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@4.18.0-553.62.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-553.62.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"product_id": "kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@4.18.0-553.62.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"product_id": "kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@4.18.0-553.62.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-553.62.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@4.18.0-553.62.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@4.18.0-553.62.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"product": {
"name": "kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"product_id": "kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@4.18.0-553.62.1.el8_10?arch=x86_64\u0026upstream=kernel-source-0:4.18.0-553.62.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"product": {
"name": "kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"product_id": "kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@4.18.0-553.62.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"product_id": "kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@4.18.0-553.62.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"product_id": "kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@4.18.0-553.62.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"product_id": "kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@4.18.0-553.62.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@4.18.0-553.62.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@4.18.0-553.62.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:4.18.0-553.62.1.el8_10.x86_64",
"product": {
"name": "perf-0:4.18.0-553.62.1.el8_10.x86_64",
"product_id": "perf-0:4.18.0-553.62.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@4.18.0-553.62.1.el8_10?arch=x86_64\u0026upstream=perf-0:4.18.0-553.62.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-0:4.18.0-553.62.1.el8_10.x86_64",
"product": {
"name": "python3-perf-0:4.18.0-553.62.1.el8_10.x86_64",
"product_id": "python3-perf-0:4.18.0-553.62.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@4.18.0-553.62.1.el8_10?arch=x86_64\u0026upstream=perf-0:4.18.0-553.62.1.el8_10.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:4.18.0-553.62.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64"
},
"product_reference": "bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:4.18.0-553.62.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64"
},
"product_reference": "kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch"
},
"product_reference": "kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-0:4.18.0-553.62.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64"
},
"product_reference": "kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64"
},
"product_reference": "kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64"
},
"product_reference": "kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:4.18.0-553.62.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch"
},
"product_reference": "kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64"
},
"product_reference": "kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:4.18.0-553.62.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64"
},
"product_reference": "perf-0:4.18.0-553.62.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-0:4.18.0-553.62.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64"
},
"product_reference": "python3-perf-0:4.18.0-553.62.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-49058",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-49058"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: potential buffer overflow in handling symlinks\n\nSmatch printed a warning:\n\tarch/x86/crypto/poly1305_glue.c:198 poly1305_update_arch() error:\n\t__memcpy() \u0027dctx-\u003ebuf\u0027 too small (16 vs u32max)\n\nIt\u0027s caused because Smatch marks \u0027link_len\u0027 as untrusted since it comes\nfrom sscanf(). Add a check to ensure that \u0027link_len\u0027 is not larger than\nthe size of the \u0027link_str\u0027 buffer.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-49058",
"url": "https://www.suse.com/security/cve/CVE-2022-49058"
},
{
"category": "external",
"summary": "SUSE Bug 1237814 for CVE-2022-49058",
"url": "https://bugzilla.suse.com/1237814"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-07-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-49058"
},
{
"cve": "CVE-2022-49788",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-49788"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()\n\n`struct vmci_event_qp` allocated by qp_notify_peer() contains padding,\nwhich may carry uninitialized data to the userspace, as observed by\nKMSAN:\n\n BUG: KMSAN: kernel-infoleak in instrument_copy_to_user ./include/linux/instrumented.h:121\n instrument_copy_to_user ./include/linux/instrumented.h:121\n _copy_to_user+0x5f/0xb0 lib/usercopy.c:33\n copy_to_user ./include/linux/uaccess.h:169\n vmci_host_do_receive_datagram drivers/misc/vmw_vmci/vmci_host.c:431\n vmci_host_unlocked_ioctl+0x33d/0x43d0 drivers/misc/vmw_vmci/vmci_host.c:925\n vfs_ioctl fs/ioctl.c:51\n ...\n\n Uninit was stored to memory at:\n kmemdup+0x74/0xb0 mm/util.c:131\n dg_dispatch_as_host drivers/misc/vmw_vmci/vmci_datagram.c:271\n vmci_datagram_dispatch+0x4f8/0xfc0 drivers/misc/vmw_vmci/vmci_datagram.c:339\n qp_notify_peer+0x19a/0x290 drivers/misc/vmw_vmci/vmci_queue_pair.c:1479\n qp_broker_attach drivers/misc/vmw_vmci/vmci_queue_pair.c:1662\n qp_broker_alloc+0x2977/0x2f30 drivers/misc/vmw_vmci/vmci_queue_pair.c:1750\n vmci_qp_broker_alloc+0x96/0xd0 drivers/misc/vmw_vmci/vmci_queue_pair.c:1940\n vmci_host_do_alloc_queuepair drivers/misc/vmw_vmci/vmci_host.c:488\n vmci_host_unlocked_ioctl+0x24fd/0x43d0 drivers/misc/vmw_vmci/vmci_host.c:927\n ...\n\n Local variable ev created at:\n qp_notify_peer+0x54/0x290 drivers/misc/vmw_vmci/vmci_queue_pair.c:1456\n qp_broker_attach drivers/misc/vmw_vmci/vmci_queue_pair.c:1662\n qp_broker_alloc+0x2977/0x2f30 drivers/misc/vmw_vmci/vmci_queue_pair.c:1750\n\n Bytes 28-31 of 48 are uninitialized\n Memory access of size 48 starts at ffff888035155e00\n Data copied to user address 0000000020000100\n\nUse memset() to prevent the infoleaks.\n\nAlso speculatively fix qp_notify_peer_local(), which may suffer from the\nsame problem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-49788",
"url": "https://www.suse.com/security/cve/CVE-2022-49788"
},
{
"category": "external",
"summary": "SUSE Bug 1242353 for CVE-2022-49788",
"url": "https://bugzilla.suse.com/1242353"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-07-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-49788"
},
{
"cve": "CVE-2024-57980",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-57980"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: uvcvideo: Fix double free in error path\n\nIf the uvc_status_init() function fails to allocate the int_urb, it will\nfree the dev-\u003estatus pointer but doesn\u0027t reset the pointer to NULL. This\nresults in the kfree() call in uvc_status_cleanup() trying to\ndouble-free the memory. Fix it by resetting the dev-\u003estatus pointer to\nNULL after freeing it.\n\nReviewed by: Ricardo Ribalda \u003cribalda@chromium.org\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-57980",
"url": "https://www.suse.com/security/cve/CVE-2024-57980"
},
{
"category": "external",
"summary": "SUSE Bug 1237911 for CVE-2024-57980",
"url": "https://bugzilla.suse.com/1237911"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-07-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-57980"
},
{
"cve": "CVE-2024-58002",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-58002"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: uvcvideo: Remove dangling pointers\n\nWhen an async control is written, we copy a pointer to the file handle\nthat started the operation. That pointer will be used when the device is\ndone. Which could be anytime in the future.\n\nIf the user closes that file descriptor, its structure will be freed,\nand there will be one dangling pointer per pending async control, that\nthe driver will try to use.\n\nClean all the dangling pointers during release().\n\nTo avoid adding a performance penalty in the most common case (no async\noperation), a counter has been introduced with some logic to make sure\nthat it is properly handled.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-58002",
"url": "https://www.suse.com/security/cve/CVE-2024-58002"
},
{
"category": "external",
"summary": "SUSE Bug 1238503 for CVE-2024-58002",
"url": "https://bugzilla.suse.com/1238503"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-07-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2024-58002"
},
{
"cve": "CVE-2025-21991",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21991"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes\n\nCurrently, load_microcode_amd() iterates over all NUMA nodes, retrieves their\nCPU masks and unconditionally accesses per-CPU data for the first CPU of each\nmask.\n\nAccording to Documentation/admin-guide/mm/numaperf.rst:\n\n \"Some memory may share the same node as a CPU, and others are provided as\n memory only nodes.\"\n\nTherefore, some node CPU masks may be empty and wouldn\u0027t have a \"first CPU\".\n\nOn a machine with far memory (and therefore CPU-less NUMA nodes):\n- cpumask_of_node(nid) is 0\n- cpumask_first(0) is CONFIG_NR_CPUS\n- cpu_data(CONFIG_NR_CPUS) accesses the cpu_info per-CPU array at an\n index that is 1 out of bounds\n\nThis does not have any security implications since flashing microcode is\na privileged operation but I believe this has reliability implications by\npotentially corrupting memory while flashing a microcode update.\n\nWhen booting with CONFIG_UBSAN_BOUNDS=y on an AMD machine that flashes\na microcode update. I get the following splat:\n\n UBSAN: array-index-out-of-bounds in arch/x86/kernel/cpu/microcode/amd.c:X:Y\n index 512 is out of range for type \u0027unsigned long[512]\u0027\n [...]\n Call Trace:\n dump_stack\n __ubsan_handle_out_of_bounds\n load_microcode_amd\n request_microcode_amd\n reload_store\n kernfs_fop_write_iter\n vfs_write\n ksys_write\n do_syscall_64\n entry_SYSCALL_64_after_hwframe\n\nChange the loop to go over only NUMA nodes which have CPUs before determining\nwhether the first CPU on the respective node needs microcode update.\n\n [ bp: Massage commit message, fix typo. ]",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21991",
"url": "https://www.suse.com/security/cve/CVE-2025-21991"
},
{
"category": "external",
"summary": "SUSE Bug 1240795 for CVE-2025-21991",
"url": "https://bugzilla.suse.com/1240795"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-07-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-21991"
},
{
"cve": "CVE-2025-22004",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-22004"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: atm: fix use after free in lec_send()\n\nThe -\u003esend() operation frees skb so save the length before calling\n-\u003esend() to avoid a use after free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-22004",
"url": "https://www.suse.com/security/cve/CVE-2025-22004"
},
{
"category": "external",
"summary": "SUSE Bug 1240835 for CVE-2025-22004",
"url": "https://bugzilla.suse.com/1240835"
},
{
"category": "external",
"summary": "SUSE Bug 1241090 for CVE-2025-22004",
"url": "https://bugzilla.suse.com/1241090"
},
{
"category": "external",
"summary": "SUSE Bug 1253291 for CVE-2025-22004",
"url": "https://bugzilla.suse.com/1253291"
},
{
"category": "external",
"summary": "SUSE Bug 1253292 for CVE-2025-22004",
"url": "https://bugzilla.suse.com/1253292"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-07-16T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2025-22004"
},
{
"cve": "CVE-2025-23150",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-23150"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix off-by-one error in do_split\n\nSyzkaller detected a use-after-free issue in ext4_insert_dentry that was\ncaused by out-of-bounds access due to incorrect splitting in do_split.\n\nBUG: KASAN: use-after-free in ext4_insert_dentry+0x36a/0x6d0 fs/ext4/namei.c:2109\nWrite of size 251 at addr ffff888074572f14 by task syz-executor335/5847\n\nCPU: 0 UID: 0 PID: 5847 Comm: syz-executor335 Not tainted 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024\nCall Trace:\n \u003cTASK\u003e\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:377 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:488\n kasan_report+0x143/0x180 mm/kasan/report.c:601\n kasan_check_range+0x282/0x290 mm/kasan/generic.c:189\n __asan_memcpy+0x40/0x70 mm/kasan/shadow.c:106\n ext4_insert_dentry+0x36a/0x6d0 fs/ext4/namei.c:2109\n add_dirent_to_buf+0x3d9/0x750 fs/ext4/namei.c:2154\n make_indexed_dir+0xf98/0x1600 fs/ext4/namei.c:2351\n ext4_add_entry+0x222a/0x25d0 fs/ext4/namei.c:2455\n ext4_add_nondir+0x8d/0x290 fs/ext4/namei.c:2796\n ext4_symlink+0x920/0xb50 fs/ext4/namei.c:3431\n vfs_symlink+0x137/0x2e0 fs/namei.c:4615\n do_symlinkat+0x222/0x3a0 fs/namei.c:4641\n __do_sys_symlink fs/namei.c:4662 [inline]\n __se_sys_symlink fs/namei.c:4660 [inline]\n __x64_sys_symlink+0x7a/0x90 fs/namei.c:4660\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n \u003c/TASK\u003e\n\nThe following loop is located right above \u0027if\u0027 statement.\n\nfor (i = count-1; i \u003e= 0; i--) {\n\t/* is more than half of this entry in 2nd half of the block? */\n\tif (size + map[i].size/2 \u003e blocksize/2)\n\t\tbreak;\n\tsize += map[i].size;\n\tmove++;\n}\n\n\u0027i\u0027 in this case could go down to -1, in which case sum of active entries\nwouldn\u0027t exceed half the block size, but previous behaviour would also do\nsplit in half if sum would exceed at the very last block, which in case of\nhaving too many long name files in a single block could lead to\nout-of-bounds access and following use-after-free.\n\nFound by Linux Verification Center (linuxtesting.org) with Syzkaller.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-23150",
"url": "https://www.suse.com/security/cve/CVE-2025-23150"
},
{
"category": "external",
"summary": "SUSE Bug 1242513 for CVE-2025-23150",
"url": "https://bugzilla.suse.com/1242513"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-07-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-23150"
},
{
"cve": "CVE-2025-37738",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-37738"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: ignore xattrs past end\n\nOnce inside \u0027ext4_xattr_inode_dec_ref_all\u0027 we should\nignore xattrs entries past the \u0027end\u0027 entry.\n\nThis fixes the following KASAN reported issue:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in ext4_xattr_inode_dec_ref_all+0xb8c/0xe90\nRead of size 4 at addr ffff888012c120c4 by task repro/2065\n\nCPU: 1 UID: 0 PID: 2065 Comm: repro Not tainted 6.13.0-rc2+ #11\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x1fd/0x300\n ? tcp_gro_dev_warn+0x260/0x260\n ? _printk+0xc0/0x100\n ? read_lock_is_recursive+0x10/0x10\n ? irq_work_queue+0x72/0xf0\n ? __virt_addr_valid+0x17b/0x4b0\n print_address_description+0x78/0x390\n print_report+0x107/0x1f0\n ? __virt_addr_valid+0x17b/0x4b0\n ? __virt_addr_valid+0x3ff/0x4b0\n ? __phys_addr+0xb5/0x160\n ? ext4_xattr_inode_dec_ref_all+0xb8c/0xe90\n kasan_report+0xcc/0x100\n ? ext4_xattr_inode_dec_ref_all+0xb8c/0xe90\n ext4_xattr_inode_dec_ref_all+0xb8c/0xe90\n ? ext4_xattr_delete_inode+0xd30/0xd30\n ? __ext4_journal_ensure_credits+0x5f0/0x5f0\n ? __ext4_journal_ensure_credits+0x2b/0x5f0\n ? inode_update_timestamps+0x410/0x410\n ext4_xattr_delete_inode+0xb64/0xd30\n ? ext4_truncate+0xb70/0xdc0\n ? ext4_expand_extra_isize_ea+0x1d20/0x1d20\n ? __ext4_mark_inode_dirty+0x670/0x670\n ? ext4_journal_check_start+0x16f/0x240\n ? ext4_inode_is_fast_symlink+0x2f2/0x3a0\n ext4_evict_inode+0xc8c/0xff0\n ? ext4_inode_is_fast_symlink+0x3a0/0x3a0\n ? do_raw_spin_unlock+0x53/0x8a0\n ? ext4_inode_is_fast_symlink+0x3a0/0x3a0\n evict+0x4ac/0x950\n ? proc_nr_inodes+0x310/0x310\n ? trace_ext4_drop_inode+0xa2/0x220\n ? _raw_spin_unlock+0x1a/0x30\n ? iput+0x4cb/0x7e0\n do_unlinkat+0x495/0x7c0\n ? try_break_deleg+0x120/0x120\n ? 0xffffffff81000000\n ? __check_object_size+0x15a/0x210\n ? strncpy_from_user+0x13e/0x250\n ? getname_flags+0x1dc/0x530\n __x64_sys_unlinkat+0xc8/0xf0\n do_syscall_64+0x65/0x110\n entry_SYSCALL_64_after_hwframe+0x67/0x6f\nRIP: 0033:0x434ffd\nCode: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 8\nRSP: 002b:00007ffc50fa7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000107\nRAX: ffffffffffffffda RBX: 00007ffc50fa7e18 RCX: 0000000000434ffd\nRDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005\nRBP: 00007ffc50fa7be0 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001\nR13: 00007ffc50fa7e08 R14: 00000000004bbf30 R15: 0000000000000001\n \u003c/TASK\u003e\n\nThe buggy address belongs to the object at ffff888012c12000\n which belongs to the cache filp of size 360\nThe buggy address is located 196 bytes inside of\n freed 360-byte region [ffff888012c12000, ffff888012c12168)\n\nThe buggy address belongs to the physical page:\npage: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12c12\nhead: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0\nflags: 0x40(head|node=0|zone=0)\npage_type: f5(slab)\nraw: 0000000000000040 ffff888000ad7640 ffffea0000497a00 dead000000000004\nraw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000\nhead: 0000000000000040 ffff888000ad7640 ffffea0000497a00 dead000000000004\nhead: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000\nhead: 0000000000000001 ffffea00004b0481 ffffffffffffffff 0000000000000000\nhead: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000\npage dumped because: kasan: bad access detected\n\nMemory state around the buggy address:\n ffff888012c11f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n ffff888012c12000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n\u003e ffff888012c12080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n ^\n ffff888012c12100: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc\n ffff888012c12180: fc fc fc fc fc fc fc fc fc\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-37738",
"url": "https://www.suse.com/security/cve/CVE-2025-37738"
},
{
"category": "external",
"summary": "SUSE Bug 1242846 for CVE-2025-37738",
"url": "https://bugzilla.suse.com/1242846"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.62.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.62.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.62.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-07-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-37738"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…