## The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: * CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (bsc#1254992). * CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET (bsc#1249587). * CVE-2025-39817: efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (bsc#1249998). * CVE-2025-39964: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (bsc#1251966). * CVE-2025-40099: cifs: parse_dfs_referrals: prevent oob on malformed input (bsc#1252911). * CVE-2025-40103: smb: client: Fix refcount leak for cifs_sb_tlink (bsc#1252924). * CVE-2025-40201: kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths
* bsc#1241345
* bsc#1245728
* bsc#1247180
* bsc#1249587
* bsc#1249998
* bsc#1251135
* bsc#1251186
* bsc#1251966
* bsc#1251971
* bsc#1252008
* bsc#1252266
* bsc#1252911
* bsc#1252924
* bsc#1253049
* bsc#1253129
* bsc#1253644
* bsc#1253691
* bsc#1254214
* bsc#1254306
* bsc#1254992
* bsc#1255084
* bsc#1255129
* bsc#1255265
* bsc#1255379
* bsc#1255530
* bsc#1255698
* bsc#1255811
* bsc#1256564
* bsc#1256640
* bsc#1256679
* bsc#1256683
* bsc#1256708
* bsc#1256716
* bsc#1256755
* bsc#1256784
* bsc#1256802
* bsc#1256863
* bsc#1257159
* bsc#1257179
* bsc#1257209
* bsc#1257228
* bsc#1257231
* bsc#1257246
* bsc#1257279
* bsc#1257332
* bsc#1257466
* bsc#1257472
* bsc#1257473
* bsc#1257552
* bsc#1257553
* bsc#1257554
* bsc#1257556
* bsc#1257557
* bsc#1257559
* bsc#1257560
* bsc#1257562
* bsc#1257570
* bsc#1257573
Get the latest Linux and open source security news straight to your inbox.