## This update for the SUSE Linux Enterprise Kernel 4.12.14-122.269 fixes various security issues The following security issues were fixed: * CVE-2022-50423: ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (bsc#1250785). * CVE-2022-50697: mrp: introduce active flags to prevent UAF when applicant uninit (bsc#1255595). * CVE-2022-50756: nvme-pci: fix mempool alloc size (bsc#1256217). * CVE-2023-53781: smc: Fix use-after-free in tcp_write_timer_handler() (bsc#1254755). * CVE-2025-21738: ata: libata-sff: ensure that we cannot write outside the allocated buffer (bsc#1257118). * CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247240). * CVE-2025-68285: libceph: fix potential use-after-free in
* bsc#1247240
* bsc#1250785
* bsc#1254755
* bsc#1255402
* bsc#1255595
* bsc#1256217
* bsc#1256624
* bsc#1256644
* bsc#1257118
Cross-
* CVE-2022-50423
* CVE-2022-50697
* CVE-2022-50756
* CVE-2023-53781
* CVE-2025-21738
* CVE-2025-38488
* CVE-2025-68285
* CVE-2025-68813
* CVE-2025-71085
CVSS scores:
* CVE-2022-50423 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2022-50423 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2022-50423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2022-50423 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2022-50697 ( SUSE ): 7.3
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Get the latest Linux and open source security news straight to your inbox.