FlawAtlas
Search the atlas
SUSE-SU-2025:4111-1 Not scored

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859). - CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (bsc#1249857). - CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251164). - CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741). - CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (bsc#1249988). - CVE-2023-53500: xfrm: fix slab-use-after-free in decode_session6 (bsc#1250816). - CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6 (bsc#1251052). - CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251222). - CVE-2023-53619: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (bsc#1251743). - CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251763). - CVE-2023-53705: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (bsc#1252554). - CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249479). - CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230). - CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033). - CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047). - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035). - CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688). - CVE-2025-40044: fs: udf: fix OOB read in lengthAllocDescs handling (bsc#1252785). - CVE-2025-40088: hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() (bsc#1252904). - CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919). The following non security issues were fixed: - fbcon: Fix OOB access in font allocation (bsc#1252033) - mm: avoid unnecessary page fault retires on shared memory types (bsc#1251823). - net: hv_netvsc: fix loss of early receive events from host during channel open (bsc#1252265).

Exploit probability Not scored
Published November 15, 2025
Required by Not available
Last source change March 23, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Manager Proxy LTS 4.3 kernel-source
SUSE:Manager Server LTS 4.3 kernel-default
SUSE:Manager Proxy LTS 4.3 kernel-default
SUSE:Linux Enterprise Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_46
SUSE:Linux Enterprise Server for SAP Applications 15 SP4 kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-docs
SUSE:Linux Enterprise Micro 5.3 kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP4 kernel-default-base
SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-source
SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-obs-build
SUSE:Linux Enterprise Micro 5.3 kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP4 kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-default
SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP4 kernel-default
SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-64kb
SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-default
SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP4 kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-syms
SUSE:Linux Enterprise Micro 5.4 kernel-default
SUSE:Manager Server LTS 4.3 kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP Applications 15 SP4 kernel-source
SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-zfcpdump
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-docs
SUSE:Linux Enterprise Live Patching 15 SP4 kernel-default
SUSE:Manager Proxy LTS 4.3 kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default-base
SUSE:Linux Enterprise Micro 5.4 kernel-default-base
SUSE:Linux Enterprise High Availability Extension 15 SP4 kernel-default
SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default
SUSE:Manager Server LTS 4.3 kernel-syms
SUSE:Manager Server LTS 4.3 kernel-source
SUSE:Manager Server LTS 4.3 kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-source
SUSE:Manager Proxy LTS 4.3 kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-64kb

03 / CONNECTIONS

Connected vulnerabilities

related CVE-2022-50487
upstream CVE-2022-50487

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2025:4111-1

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859). - CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (bsc#1249857). - CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251164). - CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741). - CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (bsc#1249988). - CVE-2023-53500: xfrm: fix slab-use-after-free in decode_session6 (bsc#1250816). - CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6 (bsc#1251052). - CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251222). - CVE-2023-53619: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (bsc#1251743). - CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251763). - CVE-2023-53705: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (bsc#1252554). - CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249479). - CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230). - CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033). - CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047). - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035). - CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069). - CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688). - CVE-2025-40044: fs: udf: fix OOB read in lengthAllocDescs handling (bsc#1252785). - CVE-2025-40088: hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() (bsc#1252904). - CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919). The following non security issues were fixed: - fbcon: Fix OOB access in font allocation (bsc#1252033) - mm: avoid unnecessary page fault retires on shared memory types (bsc#1251823). - net: hv_netvsc: fix loss of early receive events from host during channel open (bsc#1252265).

View original source

05 / REFERENCES

Further evidence