This update for the Linux Kernel 5.14.21-150500_55_110 fixes several issues.
The following security issues were fixed:
* CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350).
* CVE-2025-38495: HID: core: ensure the allocated report buffer can contain
the reserved report ID (bsc#1247351).
* CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept
(bsc#1245218).
* CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245350).
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* openSUSE Leap 15.5
zypper in -t patch SUSE-2025-2876=1 SUSE-2025-2879=1 SUSE-2025-2880=1
SUSE-2025-2881=1 SUSE-2025-2882=1
* SUSE Linux Enterprise Live Patching 15-SP5
zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2025-2876=1 SUSE-SLE-
Module-Live-Patching-15-SP5-2025-2879=1 SUSE-SLE-Module-Live-
Patching-15-SP5-2025-2880=1 SUSE-SLE-Module-Live-Patching-15-SP5-2025-2881=1
SUSE-SLE-Module-Live-Patching-15-SP5-2025-2882=1
* openSUSE Leap 15.5 (ppc64le s390x x86_64)
* kernel-livepatch-5_14_21-150500_55_94-default-5-150500.2.1
* kernel-livepatch-SLE15-SP5_Update_24-debugsource-5-150500.2.1
* kernel-livepatch-SLE15-SP5_Update_23-debugsource-5-150500.2.1
* kernel-livepatch-5_14_21-150500_55_91-default-debuginfo-9-150500.2.1
* kernel-livepatch-5_14_21-150500_55_97-default-5-150500.2.1
* kernel-livepatch-SLE15-SP5_Update_22-debugsource-9-150500.2.1
* kernel-livepatch-5_14_21-150500_55_103-default-4-150500.2.1
* kernel-livepatch-5_14_21-150500_55_103-default-debuginfo-4-150500.2.1
* kernel-livepatch-SLE15-SP5_Update_26-debugsource-4-150500.2.1
* kernel-livepatch-5_14_21-150500_55_110-default-debuginfo-3-150500.2.1
* kernel-livepatch-SLE15-SP5_Update_27-debugsource-3-150500.2.1
* kernel-livepatch-5_14_21-150500_55_94-default-debuginfo-5-150500.2.1
* kernel-livepatch-5_14_21-150500_55_91-default-9-150500.2.1
* kernel-livepatch-5_14_21-150500_55_110-default-3-150500.2.1
*...
Read the Full Advisory* bsc#1232927
* bsc#1245218
* bsc#1245350
* bsc#1247350
* bsc#1247351
## References:
* https://www.suse.com/security/cve/CVE-2025-38079.html
* https://www.suse.com/security/cve/CVE-2025-38083.html
* https://www.suse.com/security/cve/CVE-2025-38494.html
* https://www.suse.com/security/cve/CVE-2025-38495.html
* https://bugzilla.suse.com/show_bug.cgi?id=1232927
* https://bugzilla.suse.com/show_bug.cgi?id=1245218
* https://bugzilla.suse.com/show_bug.cgi?id=1245350
* https://bugzilla.suse.com/show_bug.cgi?id=1247350
* https://bugzilla.suse.com/show_bug.cgi?id=1247351
Get the latest Linux and open source security news straight to your inbox.