The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security
bugfixes.
The following security bugs were fixed:
* CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918).
* CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled
(bsc#1238919).
* CVE-2022-49739: gfs2: Always check inode size of inline inodes
(bsc#1240207).
* CVE-2023-52935: mm/khugepaged: fix ->anon_vma race (bsc#1240276).
* CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558
bsc#1234464).
* CVE-2024-56651: can: hi311x: hi3110_can_ist(): fix potential use-after-free
(bsc#1235528).
* CVE-2024-58083: KVM: Explicitly verify target vCPU is online in
kvm_get_vcpu() (bsc#1239036).
* CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU
hotunplug (bsc#1237029).
* CVE-2025-21714: RDMA/mlx5: Fix implicit ODP use after free (bsc#1237890).
* CVE-2025-21732: RDMA/mlx5: Fix a race for an ODP MR...
Read the Full Advisory## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* openSUSE Leap 15.4
zypper in -t patch SUSE-2025-1195=1
* SUSE Linux Enterprise Micro for Rancher 5.3
zypper in -t patch SUSE-SLE-Micro-5.3-2025-1195=1
* SUSE Linux Enterprise Micro 5.3
zypper in -t patch SUSE-SLE-Micro-5.3-2025-1195=1
* SUSE Linux Enterprise Micro for Rancher 5.4
zypper in -t patch SUSE-SLE-Micro-5.4-2025-1195=1
* SUSE Linux Enterprise Micro 5.4
zypper in -t patch SUSE-SLE-Micro-5.4-2025-1195=1
* SUSE Linux Enterprise Live Patching 15-SP4
zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2025-1195=1
Please note that this is the initial kernel livepatch without fixes itself, this
package is later updated by separate standalone kernel livepatch updates.
* SUSE Linux Enterprise High Availability Extension 15 SP4
zypper in -t patch SUSE-SLE-Product-HA-15-SP4-2025-1195=1
* SUSE Linux...
Read the Full Advisory* openSUSE Leap 15.4 (noarch nosrc)
* kernel-docs-5.14.21-150400.24.161.1
* openSUSE Leap 15.4 (noarch)
* kernel-macros-5.14.21-150400.24.161.1
* kernel-devel-5.14.21-150400.24.161.1
* kernel-source-5.14.21-150400.24.161.1
* kernel-source-vanilla-5.14.21-150400.24.161.1
* kernel-docs-html-5.14.21-150400.24.161.1
* openSUSE Leap 15.4 (nosrc ppc64le x86_64)
* kernel-debug-5.14.21-150400.24.161.1
* openSUSE Leap 15.4 (ppc64le x86_64)
* kernel-debug-debugsource-5.14.21-150400.24.161.1
* kernel-debug-debuginfo-5.14.21-150400.24.161.1
* kernel-debug-devel-5.14.21-150400.24.161.1
* kernel-debug-devel-debuginfo-5.14.21-150400.24.161.1
* openSUSE Leap 15.4 (aarch64 ppc64le x86_64)
* kernel-kvmsmall-debuginfo-5.14.21-150400.24.161.1
* kernel-kvmsmall-devel-5.14.21-150400.24.161.1
* kernel-kvmsmall-debugsource-5.14.21-150400.24.161.1
* kernel-default-base-5.14.21-150400.24.161.1.150400.24.80.1
* kernel-default-base-rebuild-5.14.21-150400.24.161.1.150400.24.80.1
*...
Read the Full Advisory* bsc#1193629
* bsc#1197227
* bsc#1207034
* bsc#1207186
* bsc#1207878
* bsc#1209262
* bsc#1209547
* bsc#1209788
* bsc#1210647
* bsc#1213167
* bsc#1225742
* bsc#1231375
* bsc#1233479
* bsc#1233557
* bsc#1233558
* bsc#1234464
* bsc#1235528
* bsc#1237029
* bsc#1237530
* bsc#1237875
* bsc#1237877
* bsc#1237890
* bsc#1237918
* bsc#1238911
* bsc#1238919
* bsc#1239016
* bsc#1239036
* bsc#1239061
* bsc#1239126
* bsc#1239452
* bsc#1239454
* bsc#1239968
* bsc#1239969
* bsc#1240133
* bsc#1240195
* bsc#1240205
* bsc#1240207
* bsc#1240208
* bsc#1240210
* bsc#1240212
* bsc#1240213
* bsc#1240218
* bsc#1240220
* bsc#1240227
* bsc#1240229
* bsc#1240231
* bsc#1240242
* bsc#1240245
* bsc#1240247
* bsc#1240250
* bsc#1240254
* bsc#1240256
* bsc#1240264
* bsc#1240266
* bsc#1240272
* bsc#1240275
* bsc#1240276
* bsc#1240278
* bsc#1240279
* bsc#1240280
* bsc#1240281
* bsc#1240282
* bsc#1240283
* bsc#1240284
* bsc#1240286
* bsc#1240288
* bsc#1240290
* bsc#1240292
* bsc#1240293
* bsc#1240297
* bsc#1240304
* bsc#1240308
* bsc#1240309
* bsc#1240317
* bsc#1240318
* bsc#1240322
##...
Read the Full AdvisoryGet the latest Linux and open source security news straight to your inbox.