Alerts This Week
Warning Icon 1 566
Alerts This Week
Warning Icon 1 566

SUSE 6.1: Kernel-Livepatch Important Denial of Service Threat 2025:20806-1

suse
Calendar Grey October 14, 2025
Dist Suse Esm H88
Stay secure with the latest SUSE kernel-livepatch update addressing critical issues and vulnerabilities. Install now.
* bsc#1233072 * bsc#1237048 * bsc#1240744 * bsc#1243650 * bsc#1245509

Summary

## This update for kernel-livepatch-MICRO-6-0_Update_2 fixes the following issues: * CVE-2024-50154: tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink() (bsc#1233072) * CVE-2025-21692: net: sched: fix ets qdisc OOB Indexing (bsc#1237048) * CVE-2025-21791: vrf: use RCU protection in l3mdev_l3_out() (bsc#1240744) * CVE-2024-53168: sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (bsc#1243650) * CVE-2025-38089: sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (bsc#1245509) * CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247315) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

References

* bsc#1233072

* bsc#1237048

* bsc#1240744

* bsc#1243650

* bsc#1245509

* bsc#1247315

Cross-

* CVE-2024-50154

* CVE-2024-53168

* CVE-2025-21692

* CVE-2025-21791

* CVE-2025-38089

* CVE-2025-38477

CVSS scores:

* CVE-2024-50154 ( SUSE ): 7.3

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2024-50154 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2024-50154 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2024-50154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2024-53168 ( SUSE ): 7.1

CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2024-53168 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2024-53168 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:20806-1
Release Date: 2025-10-07T15:38:23Z
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here