The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various
security bugfixes.
The following security bugs were fixed:
* CVE-2024-28956: x86/ibt: Keep IBT disabled during alternative patching
(bsc#1242006).
* CVE-2024-46713: kabi fix for perf/aux: Fix AUX buffer serialization
(bsc#1230581).
* CVE-2024-50223: sched/numa: Fix the potential null pointer dereference in
(bsc#1233192).
* CVE-2024-53135: KVM: VMX: Bury Intel PT virtualization (guest/host mode)
behind CONFIG_BROKEN (bsc#1234154).
* CVE-2024-54458: scsi: ufs: bsg: Set bsg_queue to NULL after removal
(bsc#1238992).
* CVE-2025-21648: netfilter: conntrack: clamp maximum hashtable size to
INT_MAX (bsc#1236142).
* CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0
(bsc#1237312).
* CVE-2025-21787: team: better TEAM_OPTION_TYPE_STRING validation
(bsc#1238774).
* CVE-2025-21814: ptp: Ensure info->enable callback is always set
(bsc#1238473).
Read the Full Advisory## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* openSUSE Leap 15.6
zypper in -t patch openSUSE-SLE-15.6-2025-1965=1 SUSE-2025-1965=1
* Public Cloud Module 15-SP6
zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP6-2025-1965=1
* openSUSE Leap 15.6 (aarch64 x86_64)
* dlm-kmp-azure-6.4.0-150600.8.40.1
* kselftests-kmp-azure-debuginfo-6.4.0-150600.8.40.1
* kernel-azure-extra-debuginfo-6.4.0-150600.8.40.1
* reiserfs-kmp-azure-debuginfo-6.4.0-150600.8.40.1
* kselftests-kmp-azure-6.4.0-150600.8.40.1
* gfs2-kmp-azure-debuginfo-6.4.0-150600.8.40.1
* ocfs2-kmp-azure-debuginfo-6.4.0-150600.8.40.1
* kernel-azure-debuginfo-6.4.0-150600.8.40.1
* reiserfs-kmp-azure-6.4.0-150600.8.40.1
* cluster-md-kmp-azure-debuginfo-6.4.0-150600.8.40.1
* cluster-md-kmp-azure-6.4.0-150600.8.40.1
* kernel-syms-azure-6.4.0-150600.8.40.1
* kernel-azure-extra-6.4.0-150600.8.40.1
* kernel-azure-debugsource-6.4.0-150600.8.40.1
* kernel-azure-optional-6.4.0-150600.8.40.1
* kernel-azure-devel-debuginfo-6.4.0-150600.8.40.1
* kernel-azure-optional-debuginfo-6.4.0-150600.8.40.1
* kernel-azure-devel-6.4.0-150600.8.40.1
* gfs2-kmp-azure-6.4.0-150600.8.40.1
* dlm-kmp-azure-debuginfo-6.4.0-150600.8.40.1
* ocfs2-kmp-azure-6.4.0-150600.8.40.1
* openSUSE Leap 15.6 (aarch64...
Read the Full Advisory* bsc#1220112
* bsc#1223096
* bsc#1226498
* bsc#1229491
* bsc#1230581
* bsc#1231016
* bsc#1232649
* bsc#1232882
* bsc#1233192
* bsc#1234154
* bsc#1235149
* bsc#1235968
* bsc#1236142
* bsc#1236208
* bsc#1237312
* bsc#1238212
* bsc#1238473
* bsc#1238774
* bsc#1238992
* bsc#1239691
* bsc#1239925
* bsc#1240593
* bsc#1240866
* bsc#1240966
* bsc#1241148
* bsc#1241282
* bsc#1241305
* bsc#1241340
* bsc#1241351
* bsc#1241376
* bsc#1241448
* bsc#1241457
* bsc#1241492
* bsc#1241519
* bsc#1241525
* bsc#1241533
* bsc#1241538
* bsc#1241576
* bsc#1241590
* bsc#1241595
* bsc#1241596
* bsc#1241597
* bsc#1241625
* bsc#1241627
* bsc#1241635
* bsc#1241638
* bsc#1241644
* bsc#1241654
* bsc#1241657
* bsc#1242006
* bsc#1242012
* bsc#1242035
* bsc#1242044
* bsc#1242203
* bsc#1242343
* bsc#1242414
* bsc#1242417
* bsc#1242501
* bsc#1242502
* bsc#1242506
* bsc#1242507
* bsc#1242509
* bsc#1242510
* bsc#1242512
* bsc#1242513
* bsc#1242514
* bsc#1242520
* bsc#1242523
* bsc#1242524
* bsc#1242529
* bsc#1242530
* bsc#1242531
* bsc#1242532
* bsc#1242559
* bsc#1242563
* bsc#1242564
*...
Read the Full AdvisoryGet the latest Linux and open source security news straight to your inbox.