{"schemaVersion":3,"id":"SUSE-SU-2025:03384-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for the Linux Kernel\n\nThe SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-49492: nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags (bsc#1238954).\n- CVE-2022-50116: kernel: tty: n_gsm: fix deadlock and link starvation in outgoing data path (bsc#1244824).\n- CVE-2023-53117: fs: prevent out-of-bounds array speculation when closing a file descriptor (bsc#1242780).\n- CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).\n- CVE-2024-58239: tls: stop recv() if initial process_rx_list gave us non-DATA (bsc#1248614).\n- CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1240799).\n- CVE-2025-22045: x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (bsc#1241433).\n- CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).\n- CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246073).\n- CVE-2025-38323: net: atm: add lec_mutex (bsc#1246473).\n- CVE-2025-38350: net/sched: Always pass notifications when child class becomes empty (bsc#1246781).\n- CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1246911).\n- CVE-2025-38460: atm: clip: Fix potential null-ptr-deref in to_atmarpd() (bsc#1247143).\n- CVE-2025-38468: net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (bsc#1247437).\n- CVE-2025-38477: net/sched: sch_qfq: Fix race condition on qfq_aggregate (bsc#1247314).\n- CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247374).\n- CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1247976).\n- CVE-2025-38546: atm: clip: Fix memory leak of struct clip_vcc (bsc#1248223).\n- CVE-2025-38563: perf/core: Prevent VMA split of buffer mappings (bsc#1248306).\n- CVE-2025-38608: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1248338).\n- CVE-2025-38617: net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1248621).\n- CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1248511).\n- CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248748).\n\nThe following non-security bugs were fixed:\n\n- Disable N_GSM (bsc#1244824 jsc#PED-8240).\n- NFSv4.1: fix backchannel max_resp_sz verification check (bsc#1247518).\n- scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() (bsc#1243278).\n- scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() (git-fixes).","dates":{"published":"2025-09-26T17:28:20.000Z","modified":"2026-03-23T04:50:32.489Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"kernel-rt&distro=SUSE Linux Enterprise Micro 5.1","name":"kernel-rt","label":"kernel-rt&distro=SUSE Linux Enterprise Micro 5.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-rt&distro=SUSE Linux Enterprise Micro 5.1","purlType":"rpm","versions":[{"text":"< 5.3.18-150300.220.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.3.18-150300.220.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-rt&distro=SUSE Linux Enterprise Micro 5.2","name":"kernel-rt","label":"kernel-rt&distro=SUSE Linux Enterprise Micro 5.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-rt&distro=SUSE Linux Enterprise Micro 5.2","purlType":"rpm","versions":[{"text":"< 5.3.18-150300.220.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.3.18-150300.220.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-source-rt&distro=SUSE Linux Enterprise Micro 5.1","name":"kernel-source-rt","label":"kernel-source-rt&distro=SUSE Linux Enterprise Micro 5.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-source-rt&distro=SUSE Linux Enterprise Micro 5.1","purlType":"rpm","versions":[{"text":"< 5.3.18-150300.220.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.3.18-150300.220.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-source-rt&distro=SUSE Linux Enterprise Micro 5.2","name":"kernel-source-rt","label":"kernel-source-rt&distro=SUSE Linux Enterprise Micro 5.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-source-rt&distro=SUSE Linux Enterprise Micro 5.2","purlType":"rpm","versions":[{"text":"< 5.3.18-150300.220.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.3.18-150300.220.1","eol":null,"hubHref":null}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503384-1/","label":"www.suse.com/support/update/announcement/2025/suse-su-202503384-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1229334","label":"bugzilla.suse.com/1229334","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1238954","label":"bugzilla.suse.com/1238954","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1240799","label":"bugzilla.suse.com/1240799","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1241433","label":"bugzilla.suse.com/1241433","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1242780","label":"bugzilla.suse.com/1242780","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1243278","label":"bugzilla.suse.com/1243278","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1244824","label":"bugzilla.suse.com/1244824","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1245970","label":"bugzilla.suse.com/1245970","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1246073","label":"bugzilla.suse.com/1246073","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1246473","label":"bugzilla.suse.com/1246473","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1246781","label":"bugzilla.suse.com/1246781","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1246911","label":"bugzilla.suse.com/1246911","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1247143","label":"bugzilla.suse.com/1247143","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1247314","label":"bugzilla.suse.com/1247314","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1247374","label":"bugzilla.suse.com/1247374","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1247437","label":"bugzilla.suse.com/1247437","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1247518","label":"bugzilla.suse.com/1247518","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1247976","label":"bugzilla.suse.com/1247976","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1248223","label":"bugzilla.suse.com/1248223","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1248306","label":"bugzilla.suse.com/1248306","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1248338","label":"bugzilla.suse.com/1248338","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1248511","label":"bugzilla.suse.com/1248511","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1248614","label":"bugzilla.suse.com/1248614","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1248621","label":"bugzilla.suse.com/1248621","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1248748","label":"bugzilla.suse.com/1248748","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2022-49492","label":"www.suse.com/security/cve/CVE-2022-49492","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-50116","label":"www.suse.com/security/cve/CVE-2022-50116","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-53117","label":"www.suse.com/security/cve/CVE-2023-53117","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42265","label":"www.suse.com/security/cve/CVE-2024-42265","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2024-58239","label":"www.suse.com/security/cve/CVE-2024-58239","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-21971","label":"www.suse.com/security/cve/CVE-2025-21971","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22045","label":"www.suse.com/security/cve/CVE-2025-22045","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38180","label":"www.suse.com/security/cve/CVE-2025-38180","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38206","label":"www.suse.com/security/cve/CVE-2025-38206","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38323","label":"www.suse.com/security/cve/CVE-2025-38323","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38350","label":"www.suse.com/security/cve/CVE-2025-38350","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38352","label":"www.suse.com/security/cve/CVE-2025-38352","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38460","label":"www.suse.com/security/cve/CVE-2025-38460","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38468","label":"www.suse.com/security/cve/CVE-2025-38468","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38477","label":"www.suse.com/security/cve/CVE-2025-38477","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38498","label":"www.suse.com/security/cve/CVE-2025-38498","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38499","label":"www.suse.com/security/cve/CVE-2025-38499","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38546","label":"www.suse.com/security/cve/CVE-2025-38546","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38563","label":"www.suse.com/security/cve/CVE-2025-38563","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38608","label":"www.suse.com/security/cve/CVE-2025-38608","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38617","label":"www.suse.com/security/cve/CVE-2025-38617","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38618","label":"www.suse.com/security/cve/CVE-2025-38618","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38644","label":"www.suse.com/security/cve/CVE-2025-38644","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2022-49492","CVE-2022-50116","CVE-2023-53117","CVE-2024-42265","CVE-2024-58239","CVE-2025-21971","CVE-2025-22045","CVE-2025-38180","CVE-2025-38206","CVE-2025-38323","CVE-2025-38350","CVE-2025-38352","CVE-2025-38460","CVE-2025-38468","CVE-2025-38477","CVE-2025-38498","CVE-2025-38499","CVE-2025-38546","CVE-2025-38563","CVE-2025-38608","CVE-2025-38617","CVE-2025-38618","CVE-2025-38644"],"downstream":[],"duplicates":[],"related":["CVE-2022-49492","CVE-2022-50116","CVE-2023-53117","CVE-2024-42265","CVE-2024-58239","CVE-2025-21971","CVE-2025-22045","CVE-2025-38180","CVE-2025-38206","CVE-2025-38323","CVE-2025-38350","CVE-2025-38352","CVE-2025-38460","CVE-2025-38468","CVE-2025-38477","CVE-2025-38498","CVE-2025-38499","CVE-2025-38546","CVE-2025-38563","CVE-2025-38608","CVE-2025-38617","CVE-2025-38618","CVE-2025-38644"]},"timeline":[{"kind":"published","date":"2025-09-26T17:28:20.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-03-23T04:50:32.489Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T15:49:49.557Z","stale":false,"partial":false}}