SUSE-SU-2025:1195-1

Description

Security update for the Linux Kernel The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-49053: scsi: target: tcmu: Fix possible page UAF (bsc#1237918). - CVE-2022-49465: blk-throttle: Set BIO_THROTTLED when bio has been throttled (bsc#1238919). - CVE-2022-49739: gfs2: Always check inode size of inline inodes (bsc#1240207). - CVE-2023-52935: mm/khugepaged: fix ->anon_vma race (bsc#1240276). - CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464). - CVE-2024-56651: can: hi311x: hi3110_can_ist(): fix potential use-after-free (bsc#1235528). - CVE-2024-58083: KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (bsc#1239036). - CVE-2025-21693: mm: zswap: properly synchronize freeing resources during CPU hotunplug (bsc#1237029). - CVE-2025-21714: RDMA/mlx5: Fix implicit ODP use after free (bsc#1237890). - CVE-2025-21732: RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (bsc#1237877). - CVE-2025-21753: btrfs: fix use-after-free when attempting to join an aborted transaction (bsc#1237875). - CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238911). The following non-security bugs were fixed: - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (bsc#1237530). - RDMA/mana_ib: Prefer struct_size over open coded arithmetic (bsc#1239016). - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (bsc#1239016). - RDMA/mlx5: Fix implicit ODP hang on parent deregistration (git-fixes) - btrfs: defrag: do not use merged extent map for their generation check (bsc#1239968). - btrfs: fix defrag not merging contiguous extents due to merged extent maps (bsc#1239968). - btrfs: fix extent map merging not happening for adjacent extents (bsc#1239968). - btrfs: send: allow cloning non-aligned extent if it ends at i_size (bsc#1239969). - btrfs: send: fix invalid clone operation for file that got its size decreased (bsc#1239969). - gfs2: Fix inode height consistency check (git-fixes). - mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() (bsc#1239126). - mm: zswap: move allocations during CPU init outside the lock (git-fixes). - net: mana: Add flex array to struct mana_cfg_rx_steer_req_v2 (bsc#1239016). - net: mana: Allow variable size indirection table (bsc#1239016). - net: mana: Avoid open coded arithmetic (bsc#1239016). - net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup (bsc#1240195). - net: mana: Support holes in device list reply msg (bsc#1240133).

Affected Systems

• suse•kernel-64kb&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

  < 5.14.21-150400.24.161.1

• suse•kernel-64kb&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

  < 5.14.21-150400.24.161.1

• suse•kernel-64kb&distro=SUSE Linux Enterprise Server 15 SP4-LTSS

  < 5.14.21-150400.24.161.1

• suse•kernel-default-base&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

  < 5.14.21-150400.24.161.1.150400.24.80.1

• suse•kernel-default-base&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

  < 5.14.21-150400.24.161.1.150400.24.80.1

• suse•kernel-default-base&distro=SUSE Linux Enterprise Micro 5.3

  < 5.14.21-150400.24.161.1.150400.24.80.1

• suse•kernel-default-base&distro=SUSE Linux Enterprise Micro 5.4

  < 5.14.21-150400.24.161.1.150400.24.80.1

• suse•kernel-default-base&distro=SUSE Linux Enterprise Server 15 SP4-LTSS

  < 5.14.21-150400.24.161.1.150400.24.80.1

• suse•kernel-default-base&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4

  < 5.14.21-150400.24.161.1.150400.24.80.1

• suse•kernel-default-base&distro=SUSE Manager Proxy 4.3

  < 5.14.21-150400.24.161.1.150400.24.80.1

• suse•kernel-default-base&distro=SUSE Manager Server 4.3

  < 5.14.21-150400.24.161.1.150400.24.80.1

• suse•kernel-default&distro=SUSE Linux Enterprise High Availability Extension 15 SP4

  < 5.14.21-150400.24.161.1

• suse•kernel-default&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

  < 5.14.21-150400.24.161.1

• suse•kernel-default&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

  < 5.14.21-150400.24.161.1

• suse•kernel-default&distro=SUSE Linux Enterprise Live Patching 15 SP4

  < 5.14.21-150400.24.161.1

• suse•kernel-default&distro=SUSE Linux Enterprise Micro 5.3

  < 5.14.21-150400.24.161.1

• suse•kernel-default&distro=SUSE Linux Enterprise Micro 5.4

  < 5.14.21-150400.24.161.1

• suse•kernel-default&distro=SUSE Linux Enterprise Server 15 SP4-LTSS

  < 5.14.21-150400.24.161.1

• suse•kernel-default&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4

  < 5.14.21-150400.24.161.1

• suse•kernel-default&distro=SUSE Manager Proxy 4.3

  < 5.14.21-150400.24.161.1

• suse•kernel-default&distro=SUSE Manager Server 4.3

  < 5.14.21-150400.24.161.1

• suse•kernel-docs&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

  < 5.14.21-150400.24.161.1

• suse•kernel-docs&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

  < 5.14.21-150400.24.161.1

• suse•kernel-docs&distro=SUSE Linux Enterprise Server 15 SP4-LTSS

  < 5.14.21-150400.24.161.1

• suse•kernel-docs&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4

  < 5.14.21-150400.24.161.1

• suse•kernel-livepatch-SLE15-SP4_Update_39&distro=SUSE Linux Enterprise Live Patching 15 SP4

  < 1-150400.9.3.1

• suse•kernel-obs-build&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

  < 5.14.21-150400.24.161.1

• suse•kernel-obs-build&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

  < 5.14.21-150400.24.161.1

• suse•kernel-obs-build&distro=SUSE Linux Enterprise Server 15 SP4-LTSS

  < 5.14.21-150400.24.161.1

• suse•kernel-obs-build&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4

  < 5.14.21-150400.24.161.1

• suse•kernel-source&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

  < 5.14.21-150400.24.161.1

• suse•kernel-source&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

  < 5.14.21-150400.24.161.1

• suse•kernel-source&distro=SUSE Linux Enterprise Server 15 SP4-LTSS

  < 5.14.21-150400.24.161.1

• suse•kernel-source&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4

  < 5.14.21-150400.24.161.1

• suse•kernel-source&distro=SUSE Manager Proxy 4.3

  < 5.14.21-150400.24.161.1

• suse•kernel-source&distro=SUSE Manager Server 4.3

  < 5.14.21-150400.24.161.1

• suse•kernel-syms&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

  < 5.14.21-150400.24.161.1

• suse•kernel-syms&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

  < 5.14.21-150400.24.161.1

• suse•kernel-syms&distro=SUSE Linux Enterprise Server 15 SP4-LTSS

  < 5.14.21-150400.24.161.1

• suse•kernel-syms&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP4

  < 5.14.21-150400.24.161.1

• suse•kernel-syms&distro=SUSE Manager Proxy 4.3

  < 5.14.21-150400.24.161.1

• suse•kernel-syms&distro=SUSE Manager Server 4.3

  < 5.14.21-150400.24.161.1

• suse•kernel-zfcpdump&distro=SUSE Linux Enterprise Server 15 SP4-LTSS

  < 5.14.21-150400.24.161.1

• suse•kernel-zfcpdump&distro=SUSE Manager Server 4.3

  < 5.14.21-150400.24.161.1

References (139)

• https://www.suse.com/support/update/announcement/2025/suse-su-20251195-1/
• https://bugzilla.suse.com/1193629
• https://bugzilla.suse.com/1197227
• https://bugzilla.suse.com/1207034
• https://bugzilla.suse.com/1207186
• https://bugzilla.suse.com/1207878
• https://bugzilla.suse.com/1209262
• https://bugzilla.suse.com/1209547
• https://bugzilla.suse.com/1209788
• https://bugzilla.suse.com/1210647
• https://bugzilla.suse.com/1213167
• https://bugzilla.suse.com/1225742
• https://bugzilla.suse.com/1231375
• https://bugzilla.suse.com/1233479
• https://bugzilla.suse.com/1233557
• https://bugzilla.suse.com/1233558
• https://bugzilla.suse.com/1234464
• https://bugzilla.suse.com/1235528
• https://bugzilla.suse.com/1237029
• https://bugzilla.suse.com/1237530
• https://bugzilla.suse.com/1237875
• https://bugzilla.suse.com/1237877
• https://bugzilla.suse.com/1237890
• https://bugzilla.suse.com/1237918
• https://bugzilla.suse.com/1238911
• https://bugzilla.suse.com/1238919
• https://bugzilla.suse.com/1239016
• https://bugzilla.suse.com/1239036
• https://bugzilla.suse.com/1239061
• https://bugzilla.suse.com/1239126
• https://bugzilla.suse.com/1239452
• https://bugzilla.suse.com/1239454
• https://bugzilla.suse.com/1239968
• https://bugzilla.suse.com/1239969
• https://bugzilla.suse.com/1240133
• https://bugzilla.suse.com/1240195
• https://bugzilla.suse.com/1240205
• https://bugzilla.suse.com/1240207
• https://bugzilla.suse.com/1240208
• https://bugzilla.suse.com/1240210
• https://bugzilla.suse.com/1240212
• https://bugzilla.suse.com/1240213
• https://bugzilla.suse.com/1240218
• https://bugzilla.suse.com/1240220
• https://bugzilla.suse.com/1240227
• https://bugzilla.suse.com/1240229
• https://bugzilla.suse.com/1240231
• https://bugzilla.suse.com/1240242
• https://bugzilla.suse.com/1240245
• https://bugzilla.suse.com/1240247
• https://bugzilla.suse.com/1240250
• https://bugzilla.suse.com/1240254
• https://bugzilla.suse.com/1240256
• https://bugzilla.suse.com/1240264
• https://bugzilla.suse.com/1240266
• https://bugzilla.suse.com/1240272
• https://bugzilla.suse.com/1240275
• https://bugzilla.suse.com/1240276
• https://bugzilla.suse.com/1240278
• https://bugzilla.suse.com/1240279
• https://bugzilla.suse.com/1240280
• https://bugzilla.suse.com/1240281
• https://bugzilla.suse.com/1240282
• https://bugzilla.suse.com/1240283
• https://bugzilla.suse.com/1240284
• https://bugzilla.suse.com/1240286
• https://bugzilla.suse.com/1240288
• https://bugzilla.suse.com/1240290
• https://bugzilla.suse.com/1240292
• https://bugzilla.suse.com/1240293
• https://bugzilla.suse.com/1240297
• https://bugzilla.suse.com/1240304
• https://bugzilla.suse.com/1240308
• https://bugzilla.suse.com/1240309
• https://bugzilla.suse.com/1240317
• https://bugzilla.suse.com/1240318
• https://bugzilla.suse.com/1240322
• https://www.suse.com/security/cve/CVE-2017-5753
• https://www.suse.com/security/cve/CVE-2021-4454
• https://www.suse.com/security/cve/CVE-2022-1016
• https://www.suse.com/security/cve/CVE-2022-49053
• https://www.suse.com/security/cve/CVE-2022-49293
• https://www.suse.com/security/cve/CVE-2022-49465
• https://www.suse.com/security/cve/CVE-2022-49650
• https://www.suse.com/security/cve/CVE-2022-49739
• https://www.suse.com/security/cve/CVE-2022-49746
• https://www.suse.com/security/cve/CVE-2022-49748
• https://www.suse.com/security/cve/CVE-2022-49751
• https://www.suse.com/security/cve/CVE-2022-49753
• https://www.suse.com/security/cve/CVE-2022-49755
• https://www.suse.com/security/cve/CVE-2022-49759
• https://www.suse.com/security/cve/CVE-2023-0179
• https://www.suse.com/security/cve/CVE-2023-1652
• https://www.suse.com/security/cve/CVE-2023-2162
• https://www.suse.com/security/cve/CVE-2023-3567
• https://www.suse.com/security/cve/CVE-2023-52930
• https://www.suse.com/security/cve/CVE-2023-52933
• https://www.suse.com/security/cve/CVE-2023-52935
• https://www.suse.com/security/cve/CVE-2023-52939
• https://www.suse.com/security/cve/CVE-2023-52941
• https://www.suse.com/security/cve/CVE-2023-52973
• https://www.suse.com/security/cve/CVE-2023-52974
• https://www.suse.com/security/cve/CVE-2023-52975
• https://www.suse.com/security/cve/CVE-2023-52976
• https://www.suse.com/security/cve/CVE-2023-52979
• https://www.suse.com/security/cve/CVE-2023-52983
• https://www.suse.com/security/cve/CVE-2023-52984
• https://www.suse.com/security/cve/CVE-2023-52988
• https://www.suse.com/security/cve/CVE-2023-52989
• https://www.suse.com/security/cve/CVE-2023-52992
• https://www.suse.com/security/cve/CVE-2023-52993
• https://www.suse.com/security/cve/CVE-2023-53000
• https://www.suse.com/security/cve/CVE-2023-53005
• https://www.suse.com/security/cve/CVE-2023-53006
• https://www.suse.com/security/cve/CVE-2023-53007
• https://www.suse.com/security/cve/CVE-2023-53008
• https://www.suse.com/security/cve/CVE-2023-53010
• https://www.suse.com/security/cve/CVE-2023-53015
• https://www.suse.com/security/cve/CVE-2023-53016
• https://www.suse.com/security/cve/CVE-2023-53019
• https://www.suse.com/security/cve/CVE-2023-53023
• https://www.suse.com/security/cve/CVE-2023-53024
• https://www.suse.com/security/cve/CVE-2023-53025
• https://www.suse.com/security/cve/CVE-2023-53026
• https://www.suse.com/security/cve/CVE-2023-53028
• https://www.suse.com/security/cve/CVE-2023-53029
• https://www.suse.com/security/cve/CVE-2023-53030
• https://www.suse.com/security/cve/CVE-2023-53033
• https://www.suse.com/security/cve/CVE-2024-50290
• https://www.suse.com/security/cve/CVE-2024-53063
• https://www.suse.com/security/cve/CVE-2024-53064
• https://www.suse.com/security/cve/CVE-2024-56651
• https://www.suse.com/security/cve/CVE-2024-58083
• https://www.suse.com/security/cve/CVE-2025-21693
• https://www.suse.com/security/cve/CVE-2025-21714
• https://www.suse.com/security/cve/CVE-2025-21732
• https://www.suse.com/security/cve/CVE-2025-21753
• https://www.suse.com/security/cve/CVE-2025-21772
• https://www.suse.com/security/cve/CVE-2025-21839