Security update for the Linux Kernel (Live Patch 65 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise kernel 4.12.14-122.247 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205). - CVE-2025-40186: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (bsc#1253439). The following non security issue was fixed: - bsc#1250280: don't expose {file,inode}_operations with static lifetimes Fix issue with static lifetime empty_iops/no_open_fops by allocating them on the heap. Make sure previously assigned instances don't become dangling. (bsc#1250280).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for the SUSE Linux Enterprise kernel 4.12.14-122.247 fixes various security issues The following security issues were fixed: - CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250314). - CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1249205). - CVE-2025-40186: tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request() (bsc#1253439). The following non security issue was fixed: - bsc#1250280: don't expose {file,inode}_operations with static lifetimes Fix issue with static lifetime empty_iops/no_open_fops by allocating them on the heap. Make sure previously assigned instances don't become dangling. (bsc#1250280).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1249205
- https://bugzilla.suse.com/1250280
- https://bugzilla.suse.com/1250314
- https://bugzilla.suse.com/1253439
- https://www.suse.com/security/cve/CVE-2023-53321
- https://www.suse.com/security/cve/CVE-2025-38352
- https://www.suse.com/security/cve/CVE-2025-40186
- https://www.suse.com/support/update/announcement/2026/suse-su-20260515-1/