FlawAtlas
Search the atlas
SUSE-SU-2025:1027-1 Not scored

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339). - CVE-2024-41092: drm/i915/gt: Fix potential UAF by revoke of fence registers (bsc#1228483). - CVE-2024-42098: crypto: ecdh - explicitly zeroize private_key (bsc#1228779). - CVE-2024-42229: crypto: aead,cipher - zeroize key buffer after use (bsc#1228708). - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076). - CVE-2024-58014: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (bsc#1239109). - CVE-2025-21718: net: rose: fix timer races against user threads (bsc#1239073). - CVE-2025-21780: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() (bsc#1239115). The following non-security bugs were fixed: - initcall_blacklist: Does not allow kernel_lockdown be blacklisted (bsc#1237521). - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (git-fixes). - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (git-fixes). - x86/bugs: Fix BHI documentation (git-fixes). - x86/bugs: Fix BHI handling of RRSBA (git-fixes). - x86/bugs: Fix BHI retpoline check (git-fixes). - x86/bugs: Fix return type of spectre_bhi_state() (git-fixes). - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (git-fixes).

Exploit probability Not scored
Published March 26, 2025
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Manager Server 4.3 kernel-source
SUSE:Manager Server 4.3 kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP Applications 15 SP4 kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-docs
SUSE:Manager Server 4.3 kernel-default-base
SUSE:Linux Enterprise Micro 5.3 kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP4 kernel-default-base
SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-syms
SUSE:Linux Enterprise Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_38
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-source
SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-obs-build
SUSE:Linux Enterprise Micro 5.3 kernel-default-base
SUSE:Manager Server 4.3 kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP4 kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-default
SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP4 kernel-default
SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-64kb
SUSE:Manager Proxy 4.3 kernel-source
SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-default
SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-obs-build
SUSE:Manager Proxy 4.3 kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP4 kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-syms
SUSE:Linux Enterprise Micro 5.4 kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP4 kernel-source
SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-zfcpdump
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-docs
SUSE:Linux Enterprise Live Patching 15 SP4 kernel-default
SUSE:Manager Server 4.3 kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default-base
SUSE:Linux Enterprise Micro 5.4 kernel-default-base
SUSE:Linux Enterprise High Availability Extension 15 SP4 kernel-default
SUSE:Manager Proxy 4.3 kernel-default-base
SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-docs
SUSE:Manager Proxy 4.3 kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-64kb

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2025:1027-1

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-2201: Fixed information leak in x86/BHI (bsc#1217339). - CVE-2024-41092: drm/i915/gt: Fix potential UAF by revoke of fence registers (bsc#1228483). - CVE-2024-42098: crypto: ecdh - explicitly zeroize private_key (bsc#1228779). - CVE-2024-42229: crypto: aead,cipher - zeroize key buffer after use (bsc#1228708). - CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076). - CVE-2024-58014: wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (bsc#1239109). - CVE-2025-21718: net: rose: fix timer races against user threads (bsc#1239073). - CVE-2025-21780: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() (bsc#1239115). The following non-security bugs were fixed: - initcall_blacklist: Does not allow kernel_lockdown be blacklisted (bsc#1237521). - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (git-fixes). - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (git-fixes). - x86/bugs: Fix BHI documentation (git-fixes). - x86/bugs: Fix BHI handling of RRSBA (git-fixes). - x86/bugs: Fix BHI retpoline check (git-fixes). - x86/bugs: Fix return type of spectre_bhi_state() (git-fixes). - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (git-fixes).

View original source

05 / REFERENCES

Further evidence