Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 498
Alerts This Week
Warning Icon 1 498

openSUSE: Linux Kernel Important Security Fix SUSE-SU-2025:03217-1

opensuse
Calendar Grey September 15, 2025
Scroller Opensuse
Urgent security patch released for the Linux Kernel, tackling a range of vulnerabilities classified as high risk.
An update that solves eight vulnerabilities and has one security fix can now be installed.

Description

This update for the Linux Kernel 6.4.0-150600_23_30 fixes several issues.

The following security issues were fixed:

* CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier

(bsc#1245504).

* CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579).

* CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to

eltree twice (bsc#1244235).

* CVE-2025-21659: netdev: prevent accessing NAPI instances from another

namespace (bsc#1236207).

* CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in

hfsc_enqueue() (bsc#1245775).

* CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem

as child qdisc (bsc#1245791).

* CVE-2025-21701: net: avoid race between device unregistration and ethnl ops

(bsc#1245805).

* CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).

Topics%20covered

Topics Covered

security advisory security issue important kernel linux OpenSUSE

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap 15.6

zypper in -t patch SUSE-2025-3217=1

* SUSE Linux Enterprise Live Patching 15-SP6

zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2025-3217=1

Package List

* openSUSE Leap 15.6 (ppc64le s390x x86_64)

* kernel-livepatch-6_4_0-150600_23_30-default-11-150600.2.1

* kernel-livepatch-6_4_0-150600_23_30-default-debuginfo-11-150600.2.1

* kernel-livepatch-SLE15-SP6_Update_6-debugsource-11-150600.2.1

* SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64)

* kernel-livepatch-6_4_0-150600_23_30-default-11-150600.2.1

* kernel-livepatch-6_4_0-150600_23_30-default-debuginfo-11-150600.2.1

* kernel-livepatch-SLE15-SP6_Update_6-debugsource-11-150600.2.1

References

* bsc#1236207

* bsc#1242579

* bsc#1244235

* bsc#1245505

* bsc#1245775

* bsc#1245791

* bsc#1245805

* bsc#1246030

* bsc#1248108

## References:

* https://www.suse.com/security/cve/CVE-2025-21659.html

* https://www.suse.com/security/cve/CVE-2025-21701.html

* https://www.suse.com/security/cve/CVE-2025-21999.html

* https://www.suse.com/security/cve/CVE-2025-37890.html

* https://www.suse.com/security/cve/CVE-2025-38000.html

* https://www.suse.com/security/cve/CVE-2025-38001.html

* https://www.suse.com/security/cve/CVE-2025-38087.html

* https://www.suse.com/security/cve/CVE-2025-38212.html

* https://bugzilla.suse.com/show_bug.cgi?id=1236207

* https://bugzilla.suse.com/show_bug.cgi?id=1242579

* https://bugzilla.suse.com/show_bug.cgi?id=1244235

* https://bugzilla.suse.com/show_bug.cgi?id=1245505

* https://bugzilla.suse.com/show_bug.cgi?id=1245775

* https://bugzilla.suse.com/show_bug.cgi?id=1245791

* https://bugzilla.suse.com/show_bug.cgi?id=1245805

* https://bugzilla.suse.com/show_bug.cgi?id=1246030

*...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:03217-1
Release Date: 2025-09-15T08:34:21Z
Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6

Topics%20covered

Topics Covered

security advisory security issue important kernel linux OpenSUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.