Security update for the Linux Kernel (Live Patch 73 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.275 fixes various security issues The following security issues were fixed: - CVE-2022-50423: ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (bsc#1250785). - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2022-50756: nvme-pci: fix mempool alloc size (bsc#1256217). - CVE-2023-53781: smc: Fix use-after-free in tcp_write_timer_handler() (bsc#1254755). - CVE-2025-21738: ata: libata-sff: ensure that we cannot write outside the allocated buffer (bsc#1257118). - CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255402). - CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256644). - CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256624).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.275 fixes various security issues The following security issues were fixed: - CVE-2022-50423: ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (bsc#1250785). - CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). - CVE-2022-50756: nvme-pci: fix mempool alloc size (bsc#1256217). - CVE-2023-53781: smc: Fix use-after-free in tcp_write_timer_handler() (bsc#1254755). - CVE-2025-21738: ata: libata-sff: ensure that we cannot write outside the allocated buffer (bsc#1257118). - CVE-2025-68285: libceph: fix potential use-after-free in have_mon_and_osd_map() (bsc#1255402). - CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256644). - CVE-2025-71085: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256624).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1250785
- https://bugzilla.suse.com/1254755
- https://bugzilla.suse.com/1255402
- https://bugzilla.suse.com/1255595
- https://bugzilla.suse.com/1256217
- https://bugzilla.suse.com/1256624
- https://bugzilla.suse.com/1256644
- https://bugzilla.suse.com/1257118
- https://www.suse.com/security/cve/CVE-2022-50423
- https://www.suse.com/security/cve/CVE-2022-50697
- https://www.suse.com/security/cve/CVE-2022-50756
- https://www.suse.com/security/cve/CVE-2023-53781
- https://www.suse.com/security/cve/CVE-2025-21738
- https://www.suse.com/security/cve/CVE-2025-68285
- https://www.suse.com/security/cve/CVE-2025-68813
- https://www.suse.com/security/cve/CVE-2025-71085
- https://www.suse.com/support/update/announcement/2026/suse-su-20260970-1/