* bsc#1244337 * bsc#1246030 * bsc#1247350 * bsc#1247351 * bsc#1248108 . # Security update for kernel-livepatch-MICRO-6-0-RT_Update_10 Announcement ID: SUSE-SU-2025:20781-1 Release Date: 2025-09-11T15:47:02Z Rating: moderate References: * bsc#1244337 * bsc#1246030 * bsc#1247350 * bsc#1247351 * bsc#1248108 Cross-References: * CVE-2025-38212 * CVE-2025-38494 * CVE-2025-38495 CVSS scores: * CVE-2025-38212 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-38212 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-38494 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-38494 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-38495 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-38495 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.1 An update that solves three vulnerabilities and has two fixes can now be installed. ## Description: This update for kernel-livepatch-MICRO-6-0-RT_Update_10 fixes the following issues: * CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030) * CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350) * CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID (bsc#1247351) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-kernel-119=1 ## Package List: * SUSE Linux Micro 6.1 (x86_64) * kernel-livepatch-6_4_0-34-rt-debuginfo-3-1.1 * kernel-livepatch-MICRO-6-0-RT_Update_10-debugsource-3-1.1 * kernel-livepatch-6_4_0-34-rt-3-1.1 ## References: *https://www.suse.com/security/cve/CVE-2025-38212.html * https://www.suse.com/security/cve/CVE-2025-38494.html * https://www.suse.com/security/cve/CVE-2025-38495.html * https://bugzilla.suse.com/show_bug.cgi?id=1244337 * https://bugzilla.suse.com/show_bug.cgi?id=1246030 * https://bugzilla.suse.com/show_bug.cgi?id=1247350 * https://bugzilla.suse.com/show_bug.cgi?id=1247351 * https://bugzilla.suse.com/show_bug.cgi?id=1248108 . Install SUSE kernel-livepatch-MICRO update for IPC and HID fixes with advisory SUSE-SU-2025:20781-1.. SUSE Linux Micro,kernel-livepatch,security updates. . LinuxSecurity.com Team
* bsc#1242579 * bsc#1244235 * bsc#1245505 * bsc#1245775 * bsc#1245791 . # Security update for kernel-livepatch-MICRO-6-0-RT_Update_7 Announcement ID: SUSE-SU-2025:20707-1 Release Date: 2025-09-11T15:44:56Z Rating: moderate References: * bsc#1242579 * bsc#1244235 * bsc#1245505 * bsc#1245775 * bsc#1245791 * bsc#1246030 * bsc#1248108 Cross-References: * CVE-2025-21999 * CVE-2025-37890 * CVE-2025-38000 * CVE-2025-38001 * CVE-2025-38087 * CVE-2025-38212 CVSS scores: * CVE-2025-21999 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2025-21999 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-21999 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-37890 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-38000 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-38000 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-38001 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-38001 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-38087 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-38087 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2025-38212 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-38212 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves six vulnerabilities and has one fix can now be installed. ## Description: This update for kernel-livepatch-MICRO-6-0-RT_Update_7 fixes the following issues: * CVE-2025-38087: net/sched: fix use-after-free in taprio_dev_notifier (bsc#1245505) * CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579) * CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue addingclass to eltree twice (bsc#1244235) * CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1245775) * CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1245791) * CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-113=1 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * kernel-livepatch-6_4_0-30-rt-5-1.3 * kernel-livepatch-6_4_0-30-rt-debuginfo-5-1.3 * kernel-livepatch-MICRO-6-0-RT_Update_7-debugsource-5-1.3 ## References: * https://www.suse.com/security/cve/CVE-2025-21999.html * https://www.suse.com/security/cve/CVE-2025-37890.html * https://www.suse.com/security/cve/CVE-2025-38000.html * https://www.suse.com/security/cve/CVE-2025-38001.html * https://www.suse.com/security/cve/CVE-2025-38087.html * https://www.suse.com/security/cve/CVE-2025-38212.html * https://bugzilla.suse.com/show_bug.cgi?id=1242579 * https://bugzilla.suse.com/show_bug.cgi?id=1244235 * https://bugzilla.suse.com/show_bug.cgi?id=1245505 * https://bugzilla.suse.com/show_bug.cgi?id=1245775 * https://bugzilla.suse.com/show_bug.cgi?id=1245791 * https://bugzilla.suse.com/show_bug.cgi?id=1246030 * https://bugzilla.suse.com/show_bug.cgi?id=1248108 . Kernel live patch MICRO-6-0-RT_Update_7 issued to resolve medium-level vulnerabilities and implement necessary enhancements.. SUSE Micro security kernel-livepatch updates net issues IPC fixes. . LinuxSecurity.com Team
* bsc#1246030 * bsc#1248108 Cross-References: * CVE-2025-38212 . # Security update for kernel-livepatch-MICRO-6-0_Update_9 Announcement ID: SUSE-SU-2025:20708-1 Release Date: 2025-09-11T15:45:59Z Rating: moderate References: * bsc#1246030 * bsc#1248108 Cross-References: * CVE-2025-38212 CVSS scores: * CVE-2025-38212 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-38212 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Micro 6.0 An update that solves one vulnerability and has one fix can now be installed. ## Description: This update for kernel-livepatch-MICRO-6-0_Update_9 fixes the following issues: * CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-kernel-120=1 ## Package List: * SUSE Linux Micro 6.0 (s390x x86_64) * kernel-livepatch-MICRO-6-0_Update_9-debugsource-4-1.2 * kernel-livepatch-6_4_0-31-default-debuginfo-4-1.2 * kernel-livepatch-6_4_0-31-default-4-1.2 ## References: * https://www.suse.com/security/cve/CVE-2025-38212.html * https://bugzilla.suse.com/show_bug.cgi?id=1246030 * https://bugzilla.suse.com/show_bug.cgi?id=1248108 . SUSE: Critical patch for kernel-livepatch-MICRO-6-0_Update_9 fixing IPC lookup vulnerabilities in SUSE Linux Micro 6.0.. SUSE Linux Micro,kernel livepatch,security update. . LinuxSecurity.com Team
An update that solves one vulnerability can now be installed.. # Security update for the Linux Kernel (Live Patch 59 for SLE 15 SP3) Announcement ID: SUSE-SU-2025:03149-1 Release Date: 2025-09-10T16:34:03Z Rating: important References: * bsc#1246030 Cross-References: * CVE-2025-38212 CVSS scores: * CVE-2025-38212 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-38212 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise Live Patching 15-SP3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 An update that solves one vulnerability can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150300_59_211 fixes one issue. The following security issue was fixed: * CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP3 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2025-3149=1 * openSUSE Leap 15.3 zypper in -t patch SUSE-2025-3149=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP3_Update_59-debugsource-4-150300.2.1 * kernel-livepatch-5_3_18-150300_59_211-default-debuginfo-4-150300.2.1 * kernel-livepatch-5_3_18-150300_59_211-default-4-150300.2.1 * openSUSE Leap 15.3 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP3_Update_59-debugsource-4-150300.2.1 * kernel-livepatch-5_3_18-150300_59_211-default-debuginfo-4-150300.2.1 *kernel-livepatch-5_3_18-150300_59_211-default-4-150300.2.1 * openSUSE Leap 15.3 (x86_64) * kernel-livepatch-5_3_18-150300_59_211-preempt-4-150300.2.1 * kernel-livepatch-5_3_18-150300_59_211-preempt-debuginfo-4-150300.2.1 ## References: * https://www.suse.com/security/cve/CVE-2025-38212.html * https://bugzilla.suse.com/show_bug.cgi?id=1246030 . Essential security patch for the Linux Kernel fixes IPC flaw, improving overall system safety and performance.. Linux Kernel, IPC Patch, openSUSE Update, security maintenance. . Severity: Important. LinuxSecurity.com Team
* bsc#1246030 * bsc#1248108 Cross-References: * CVE-2025-38212 . # Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP6) Announcement ID: SUSE-SU-2025:03105-1 Release Date: 2025-09-08T21:13:18Z Rating: important References: * bsc#1246030 * bsc#1248108 Cross-References: * CVE-2025-38212 CVSS scores: * CVE-2025-38212 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-38212 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves one vulnerability and has one security fix can now be installed. ## Description: This update for the Linux Kernel 6.4.0-150600_10_44 fixes several issues. The following security issue was fixed: * CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2025-3105=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP6 (x86_64) * kernel-livepatch-6_4_0-150600_10_44-rt-3-150600.2.1 * kernel-livepatch-SLE15-SP6-RT_Update_13-debugsource-3-150600.2.1 * kernel-livepatch-6_4_0-150600_10_44-rt-debuginfo-3-150600.2.1 ## References: * https://www.suse.com/security/cve/CVE-2025-38212.html * https://bugzilla.suse.com/show_bug.cgi?id=1246030 * https://bugzilla.suse.com/show_bug.cgi?id=1248108 . Urgent patch released for Linux Kernel RT within SUSE to address critical IPC security flaw. Swift implementation is recommended.. Linux Kernel Update,SUSE Kernel Security,Kernel RT Patch. . Severity: Important.LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.