Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: Linux Kernel RT Critical Security Patch 2025:03317-2

suse
Calendar Grey September 24, 2025
Dist Suse Esm H88
An important enhancement to fix various vulnerabilities in the SUSE Linux Kernel RT has been issued. Apply the updates to improve system security.
* bsc#1245685 * bsc#1245795 * bsc#1246001 * bsc#1246356 * bsc#1247499

Summary

## This update for the Linux Kernel 6.4.0-150600_10_23 fixes several issues. The following security issues were fixed: * CVE-2025-38177: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356). * CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow (bsc#1245685). * CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246001). * CVE-2025-21756: vsock: Keep the binding until socket destruction (bsc#1245795). * CVE-2025-21755: vsock: Orphan socket after transport release (bsc#1245795). * CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247499). * CVE-2025-38555: usb: gadget : fix use-after-free in composite_dev_cleanup() (bsc#1248298). ## Patch Instructions:

Topics%20covered

Topics Covered

security advisory security issue SuSE important kernel cross-reference

References

* bsc#1245685

* bsc#1245795

* bsc#1246001

* bsc#1246356

* bsc#1247499

* bsc#1248298

Cross-

* CVE-2025-21756

* CVE-2025-38109

* CVE-2025-38177

* CVE-2025-38181

* CVE-2025-38498

* CVE-2025-38555

CVSS scores:

* CVE-2025-21756 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2025-21756 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2025-38109 ( SUSE ): 8.5

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2025-38109 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2025-38177 ( SUSE ): 7.3

CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2025-38177 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2025-38181 ( SUSE ): 8.2

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:03317-1
Release Date: 2025-09-24T03:04:02Z
Rating: important

Topics%20covered

Topics Covered

security advisory security issue SuSE important kernel cross-reference

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here