Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 418
Alerts This Week
Warning Icon 1 418

openSUSE: Kernel Important Advisory 2025:03406-1, Multiple Issues Resolved

opensuse
Calendar Grey September 29, 2025
Scroller Opensuse
This important advisory details a kernel update addressing seven vulnerabilities for openSUSE users.
An update that solves seven vulnerabilities can now be installed.

Description

This update for the Linux Kernel 6.4.0-150600_23_22 fixes several issues.

The following security issues were fixed:

* CVE-2024-49860: ACPI: sysfs: validate return type of _STR method

(bsc#1231862).

* CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356).

* CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow

(bsc#1245685).

* CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr()

(bsc#1246001).

* CVE-2025-21756: vsock: Keep the binding until socket destruction

(bsc#1245795).

* CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours

mounts (bsc#1247499).

* CVE-2025-38555: usb: gadget : fix use-after-free in composite_dev_cleanup()

(bsc#1248298).

Topics%20covered

Topics Covered

security advisory patch important kernel system fix OpenSUSE

Patch

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

* openSUSE Leap 15.6

zypper in -t patch SUSE-2025-3406=1

* SUSE Linux Enterprise Live Patching 15-SP6

zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2025-3406=1

Package List

* openSUSE Leap 15.6 (ppc64le s390x x86_64)

* kernel-livepatch-6_4_0-150600_23_22-default-debuginfo-17-150600.2.1

* kernel-livepatch-SLE15-SP6_Update_4-debugsource-17-150600.2.1

* kernel-livepatch-6_4_0-150600_23_22-default-17-150600.2.1

* SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64)

* kernel-livepatch-6_4_0-150600_23_22-default-debuginfo-17-150600.2.1

* kernel-livepatch-SLE15-SP6_Update_4-debugsource-17-150600.2.1

* kernel-livepatch-6_4_0-150600_23_22-default-17-150600.2.1

References

* bsc#1231862

* bsc#1245685

* bsc#1245795

* bsc#1246001

* bsc#1246356

* bsc#1247499

* bsc#1248298

## References:

* https://www.suse.com/security/cve/CVE-2024-49860.html

* https://www.suse.com/security/cve/CVE-2025-21756.html

* https://www.suse.com/security/cve/CVE-2025-38109.html

* https://www.suse.com/security/cve/CVE-2025-38177.html

* https://www.suse.com/security/cve/CVE-2025-38181.html

* https://www.suse.com/security/cve/CVE-2025-38498.html

* https://www.suse.com/security/cve/CVE-2025-38555.html

* https://bugzilla.suse.com/show_bug.cgi?id=1231862

* https://bugzilla.suse.com/show_bug.cgi?id=1245685

* https://bugzilla.suse.com/show_bug.cgi?id=1245795

* https://bugzilla.suse.com/show_bug.cgi?id=1246001

* https://bugzilla.suse.com/show_bug.cgi?id=1246356

* https://bugzilla.suse.com/show_bug.cgi?id=1247499

* https://bugzilla.suse.com/show_bug.cgi?id=1248298

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:03406-1
Release Date: 2025-09-28T01:04:01Z
Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6

Topics%20covered

Topics Covered

security advisory patch important kernel system fix OpenSUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.