SUSE-SU-2025:20724-1: kernel-livepatch-MICRO-6-0_Update_4&distro=SUSE Linux Micro 6.0 SUSE Linux Enterprise

Published

Published 23-09-2025Last modified 23-03-2026

Vulnerability summary

SUSE-SU-2025:20724-1 is a vulnerability in kernel-livepatch-MICRO-6-0_Update_4&distro=SUSE Linux Micro 6.0 SUSE Linux Enterprise with no CVSS score yet.

Overall risk

0/100

0100

Minimal · default modelHow is this calculated?

CVSS score

Not scored

010

No CVSS score recorded

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 6 · Downstream 0 · Related 6

CVE-2025-21756 CVE-2025-38109 CVE-2025-38177 CVE-2025-38181 CVE-2025-38498 CVE-2025-38555

Timeline

23-09-2025
PublishedVulnerability first disclosed.
23-03-2026
Last modifiedVulnerability information updated.

Description

Security update for kernel-livepatch-MICRO-6-0_Update_4 This update for kernel-livepatch-MICRO-6-0_Update_4 fixes the following issues: - CVE-2025-38177: kernel: sch_hfsc: make hfsc_qlen_notify() idempotent (bsc#1246356) - CVE-2025-38109: net/mlx5: fix ECVF vports unload on shutdown flow (bsc#1245685) - CVE-2025-38181: calipso: fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246001) - CVE-2025-21756: vsock: Keep the binding until socket destruction (bsc#1245795) - CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247499) - CVE-2025-38555: usb: gadget : fix use-after-free in composite_dev_cleanup() (bsc#1248298)