SUSE-SU-2025:01982-1

Description

Security update for the Linux Kernel The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-32399: Fixed a race condition when removing the HCI controller (bsc#1184611). - CVE-2022-49110: netfilter: conntrack: revisit gc autotuning (bsc#1237981). - CVE-2022-49139: Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (bsc#1238032). - CVE-2022-49320: dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type (bsc#1238394). - CVE-2022-49767: 9p/trans_fd: always use O_NONBLOCK read/write (bsc#1242493). - CVE-2022-49769: gfs2: Check sb_bsize_shift after reading superblock (bsc#1242440). - CVE-2022-49770: ceph: avoid putting the realm twice when decoding snaps fails (bsc#1242597). - CVE-2022-49775: tcp: cdg: allow tcp_cdg_release() to be called multiple times (bsc#1242245). - CVE-2022-49789: scsi: zfcp: Fix double free of FSF request when qdio send fails (bsc#1242366). - CVE-2023-53039: HID: intel-ish-hid: ipc: Fix potential use-after-free in work function (bsc#1242745). - CVE-2024-53168: net: make sock_inuse_add() available (bsc#1234887). - CVE-2024-56558: nfsd: make sure exp active before svc_export_show (bsc#1235100). - CVE-2024-56705: media: atomisp: add check for rgby_data memory allocation failure (bsc#1235568). - CVE-2025-21812: ax25: rcu protect dev->ax25_ptr (bsc#1238471). - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1240802). - CVE-2025-22028: media: vimc: skip .s_stream() for stopped entities (bsc#1241362). - CVE-2025-22121: ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (bsc#1241593). - CVE-2025-37789: net: openvswitch: fix nested key length validation in the set() action (bsc#1242762). - CVE-2025-37846: arm64: mops: Do not dereference src reg for a set operation (bsc#1242963). - CVE-2025-40364: io_uring: fix io_req_prep_async with provided buffers (bsc#1241637). The following non-security bugs were fixed: - blk: Drop a couple of block layer git-fixes (bsc#1170891 bsc#1173139). - x86/entry: Remove skip_r11rcx (bsc#1201644, bsc#1201664, bsc#1201672, bsc#1201673, bsc#1201676). - HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev->devc (bsc#1242745) - kernel: Remove debug flavor (bsc#1243919). - devm-helpers: Add resource managed version of work init (bsc#1242745). - rpm: fixup 'rpm: support gz and zst compression methods' once more (bsc#1190428, bsc#1190358). - mtd: phram: Add the kernel lock down check (bsc#1232649). - ocfs2: fix the issue with discontiguous allocation in the global_bitmap (git-fixes). - usb: roles: Call try_module_get() from usb_role_switch_find_by_fwnode() (git-fixes). - usb: typec: tps6598x: Fix return value check in tps6598x_probe() (git-fixes). - workqueue: Add resource managed version of delayed work init (bsc#1242745)

Affected Systems

• suse•kernel-64kb&distro=SUSE Enterprise Storage 7.1

  < 5.3.18-150300.59.207.1

• suse•kernel-64kb&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

  < 5.3.18-150300.59.207.1

• suse•kernel-64kb&distro=SUSE Linux Enterprise Server 15 SP3-LTSS

  < 5.3.18-150300.59.207.1

• suse•kernel-default-base&distro=SUSE Enterprise Storage 7.1

  < 5.3.18-150300.59.207.1.150300.18.124.1

• suse•kernel-default-base&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

  < 5.3.18-150300.59.207.1.150300.18.124.1

• suse•kernel-default-base&distro=SUSE Linux Enterprise Micro 5.1

  < 5.3.18-150300.59.207.1.150300.18.124.1

• suse•kernel-default-base&distro=SUSE Linux Enterprise Micro 5.2

  < 5.3.18-150300.59.207.1.150300.18.124.1

• suse•kernel-default-base&distro=SUSE Linux Enterprise Server 15 SP3-LTSS

  < 5.3.18-150300.59.207.1.150300.18.124.1

• suse•kernel-default-base&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3

  < 5.3.18-150300.59.207.1.150300.18.124.1

• suse•kernel-default&distro=SUSE Enterprise Storage 7.1

  < 5.3.18-150300.59.207.1

• suse•kernel-default&distro=SUSE Linux Enterprise High Availability Extension 15 SP3

  < 5.3.18-150300.59.207.1

• suse•kernel-default&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

  < 5.3.18-150300.59.207.1

• suse•kernel-default&distro=SUSE Linux Enterprise Live Patching 15 SP3

  < 5.3.18-150300.59.207.1

• suse•kernel-default&distro=SUSE Linux Enterprise Micro 5.1

  < 5.3.18-150300.59.207.1

• suse•kernel-default&distro=SUSE Linux Enterprise Micro 5.2

  < 5.3.18-150300.59.207.1

• suse•kernel-default&distro=SUSE Linux Enterprise Server 15 SP3-LTSS

  < 5.3.18-150300.59.207.1

• suse•kernel-default&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3

  < 5.3.18-150300.59.207.1

• suse•kernel-docs&distro=SUSE Enterprise Storage 7.1

  < 5.3.18-150300.59.207.1

• suse•kernel-docs&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

  < 5.3.18-150300.59.207.1

• suse•kernel-docs&distro=SUSE Linux Enterprise Server 15 SP3-LTSS

  < 5.3.18-150300.59.207.1

• suse•kernel-docs&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3

  < 5.3.18-150300.59.207.1

• suse•kernel-livepatch-SLE15-SP3_Update_58&distro=SUSE Linux Enterprise Live Patching 15 SP3

  < 1-150300.7.3.1

• suse•kernel-obs-build&distro=SUSE Enterprise Storage 7.1

  < 5.3.18-150300.59.207.1

• suse•kernel-obs-build&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

  < 5.3.18-150300.59.207.1

• suse•kernel-obs-build&distro=SUSE Linux Enterprise Server 15 SP3-LTSS

  < 5.3.18-150300.59.207.1

• suse•kernel-obs-build&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3

  < 5.3.18-150300.59.207.1

• suse•kernel-preempt&distro=SUSE Enterprise Storage 7.1

  < 5.3.18-150300.59.207.1

• suse•kernel-preempt&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

  < 5.3.18-150300.59.207.1

• suse•kernel-preempt&distro=SUSE Linux Enterprise Server 15 SP3-LTSS

  < 5.3.18-150300.59.207.1

• suse•kernel-preempt&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3

  < 5.3.18-150300.59.207.1

• suse•kernel-source&distro=SUSE Enterprise Storage 7.1

  < 5.3.18-150300.59.207.1

• suse•kernel-source&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

  < 5.3.18-150300.59.207.1

• suse•kernel-source&distro=SUSE Linux Enterprise Server 15 SP3-LTSS

  < 5.3.18-150300.59.207.1

• suse•kernel-source&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3

  < 5.3.18-150300.59.207.1

• suse•kernel-syms&distro=SUSE Enterprise Storage 7.1

  < 5.3.18-150300.59.207.1

• suse•kernel-syms&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

  < 5.3.18-150300.59.207.1

• suse•kernel-syms&distro=SUSE Linux Enterprise Server 15 SP3-LTSS

  < 5.3.18-150300.59.207.1

• suse•kernel-syms&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3

  < 5.3.18-150300.59.207.1

• suse•kernel-zfcpdump&distro=SUSE Linux Enterprise Server 15 SP3-LTSS

  < 5.3.18-150300.59.207.1

References (150)

• https://www.suse.com/support/update/announcement/2025/suse-su-202501982-1/
• https://bugzilla.suse.com/1154353
• https://bugzilla.suse.com/1170891
• https://bugzilla.suse.com/1173139
• https://bugzilla.suse.com/1184350
• https://bugzilla.suse.com/1184611
• https://bugzilla.suse.com/1185010
• https://bugzilla.suse.com/1190358
• https://bugzilla.suse.com/1190428
• https://bugzilla.suse.com/1201644
• https://bugzilla.suse.com/1201664
• https://bugzilla.suse.com/1201672
• https://bugzilla.suse.com/1201673
• https://bugzilla.suse.com/1201676
• https://bugzilla.suse.com/1206073
• https://bugzilla.suse.com/1206649
• https://bugzilla.suse.com/1206886
• https://bugzilla.suse.com/1206887
• https://bugzilla.suse.com/1207198
• https://bugzilla.suse.com/1210337
• https://bugzilla.suse.com/1213476
• https://bugzilla.suse.com/1232649
• https://bugzilla.suse.com/1234887
• https://bugzilla.suse.com/1235100
• https://bugzilla.suse.com/1235568
• https://bugzilla.suse.com/1237981
• https://bugzilla.suse.com/1238032
• https://bugzilla.suse.com/1238394
• https://bugzilla.suse.com/1238471
• https://bugzilla.suse.com/1240802
• https://bugzilla.suse.com/1241362
• https://bugzilla.suse.com/1241593
• https://bugzilla.suse.com/1241637
• https://bugzilla.suse.com/1242145
• https://bugzilla.suse.com/1242147
• https://bugzilla.suse.com/1242150
• https://bugzilla.suse.com/1242154
• https://bugzilla.suse.com/1242215
• https://bugzilla.suse.com/1242232
• https://bugzilla.suse.com/1242245
• https://bugzilla.suse.com/1242264
• https://bugzilla.suse.com/1242270
• https://bugzilla.suse.com/1242352
• https://bugzilla.suse.com/1242353
• https://bugzilla.suse.com/1242355
• https://bugzilla.suse.com/1242366
• https://bugzilla.suse.com/1242378
• https://bugzilla.suse.com/1242385
• https://bugzilla.suse.com/1242387
• https://bugzilla.suse.com/1242391
• https://bugzilla.suse.com/1242392
• https://bugzilla.suse.com/1242402
• https://bugzilla.suse.com/1242409
• https://bugzilla.suse.com/1242416
• https://bugzilla.suse.com/1242440
• https://bugzilla.suse.com/1242443
• https://bugzilla.suse.com/1242449
• https://bugzilla.suse.com/1242452
• https://bugzilla.suse.com/1242455
• https://bugzilla.suse.com/1242464
• https://bugzilla.suse.com/1242473
• https://bugzilla.suse.com/1242481
• https://bugzilla.suse.com/1242484
• https://bugzilla.suse.com/1242493
• https://bugzilla.suse.com/1242527
• https://bugzilla.suse.com/1242542
• https://bugzilla.suse.com/1242545
• https://bugzilla.suse.com/1242547
• https://bugzilla.suse.com/1242548
• https://bugzilla.suse.com/1242549
• https://bugzilla.suse.com/1242551
• https://bugzilla.suse.com/1242580
• https://bugzilla.suse.com/1242597
• https://bugzilla.suse.com/1242686
• https://bugzilla.suse.com/1242689
• https://bugzilla.suse.com/1242716
• https://bugzilla.suse.com/1242733
• https://bugzilla.suse.com/1242734
• https://bugzilla.suse.com/1242736
• https://bugzilla.suse.com/1242745
• https://bugzilla.suse.com/1242749
• https://bugzilla.suse.com/1242762
• https://bugzilla.suse.com/1242835
• https://bugzilla.suse.com/1242963
• https://bugzilla.suse.com/1243919
• https://www.suse.com/security/cve/CVE-2020-36790
• https://www.suse.com/security/cve/CVE-2020-36791
• https://www.suse.com/security/cve/CVE-2021-32399
• https://www.suse.com/security/cve/CVE-2022-3564
• https://www.suse.com/security/cve/CVE-2022-49110
• https://www.suse.com/security/cve/CVE-2022-49139
• https://www.suse.com/security/cve/CVE-2022-49320
• https://www.suse.com/security/cve/CVE-2022-49767
• https://www.suse.com/security/cve/CVE-2022-49769
• https://www.suse.com/security/cve/CVE-2022-49770
• https://www.suse.com/security/cve/CVE-2022-49771
• https://www.suse.com/security/cve/CVE-2022-49772
• https://www.suse.com/security/cve/CVE-2022-49775
• https://www.suse.com/security/cve/CVE-2022-49777
• https://www.suse.com/security/cve/CVE-2022-49787
• https://www.suse.com/security/cve/CVE-2022-49788
• https://www.suse.com/security/cve/CVE-2022-49789
• https://www.suse.com/security/cve/CVE-2022-49790
• https://www.suse.com/security/cve/CVE-2022-49793
• https://www.suse.com/security/cve/CVE-2022-49794
• https://www.suse.com/security/cve/CVE-2022-49799
• https://www.suse.com/security/cve/CVE-2022-49802
• https://www.suse.com/security/cve/CVE-2022-49809
• https://www.suse.com/security/cve/CVE-2022-49818
• https://www.suse.com/security/cve/CVE-2022-49821
• https://www.suse.com/security/cve/CVE-2022-49823
• https://www.suse.com/security/cve/CVE-2022-49824
• https://www.suse.com/security/cve/CVE-2022-49825
• https://www.suse.com/security/cve/CVE-2022-49826
• https://www.suse.com/security/cve/CVE-2022-49827
• https://www.suse.com/security/cve/CVE-2022-49830
• https://www.suse.com/security/cve/CVE-2022-49832
• https://www.suse.com/security/cve/CVE-2022-49835
• https://www.suse.com/security/cve/CVE-2022-49836
• https://www.suse.com/security/cve/CVE-2022-49839
• https://www.suse.com/security/cve/CVE-2022-49841
• https://www.suse.com/security/cve/CVE-2022-49842
• https://www.suse.com/security/cve/CVE-2022-49846
• https://www.suse.com/security/cve/CVE-2022-49861
• https://www.suse.com/security/cve/CVE-2022-49870
• https://www.suse.com/security/cve/CVE-2022-49879
• https://www.suse.com/security/cve/CVE-2022-49880
• https://www.suse.com/security/cve/CVE-2022-49881
• https://www.suse.com/security/cve/CVE-2022-49887
• https://www.suse.com/security/cve/CVE-2022-49889
• https://www.suse.com/security/cve/CVE-2022-49892
• https://www.suse.com/security/cve/CVE-2022-49906
• https://www.suse.com/security/cve/CVE-2022-49910
• https://www.suse.com/security/cve/CVE-2022-49915
• https://www.suse.com/security/cve/CVE-2022-49922
• https://www.suse.com/security/cve/CVE-2022-49927
• https://www.suse.com/security/cve/CVE-2023-1990
• https://www.suse.com/security/cve/CVE-2023-53039
• https://www.suse.com/security/cve/CVE-2023-53052
• https://www.suse.com/security/cve/CVE-2023-53106
• https://www.suse.com/security/cve/CVE-2024-53168
• https://www.suse.com/security/cve/CVE-2024-56558
• https://www.suse.com/security/cve/CVE-2024-56705
• https://www.suse.com/security/cve/CVE-2025-21812
• https://www.suse.com/security/cve/CVE-2025-21999
• https://www.suse.com/security/cve/CVE-2025-22028
• https://www.suse.com/security/cve/CVE-2025-22121
• https://www.suse.com/security/cve/CVE-2025-37789
• https://www.suse.com/security/cve/CVE-2025-37846
• https://www.suse.com/security/cve/CVE-2025-40364