SUSE-SU-2025:03207-1: kernel-livepatch-SLE15-SP5_Update_25&distro=SUSE Linux Enterprise Live Patching 15 SP5 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2025:03207-1 is a vulnerability in kernel-livepatch-SLE15-SP5_Update_25&distro=SUSE Linux Enterprise Live Patching 15 SP5 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 6 · Downstream 0 · Related 6Timeline
- 12-09-2025PublishedVulnerability first disclosed.
- 23-03-2026Last modifiedVulnerability information updated.
Description
Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP5) This update for the Linux Kernel 5.14.21-150500_55_100 fixes several issues. The following security issues were fixed: - CVE-2025-21999: proc: fix UAF in proc_get_inode() (bsc#1242579). - CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244235). - CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1245775). - CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1245791). - CVE-2025-21701: net: avoid race between device unregistration and ethnl ops (bsc#1245805). - CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246030).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse1 product
- kernel-livepatch-SLE15-SP5_Update_25&distro=SUSE Linux Enterprise Live Patching 15 SP5< 5-150500.2.1
1 vendor · 1 product