SUSE-SU-2025:3748-1: kernel-livepatch-SLE15-SP6_Update_6&distro=SUSE Linux Enterprise Live Patching 15 SP6 SUSE Linux Enterprise

Published

Published 23-10-2025Last modified 04-02-2026

Vulnerability summary

SUSE-SU-2025:3748-1 is a vulnerability in kernel-livepatch-SLE15-SP6_Update_6&distro=SUSE Linux Enterprise Live Patching 15 SP6 SUSE Linux Enterprise with no CVSS score yet.

Overall risk

0/100

0100

Minimal · default modelHow is this calculated?

CVSS score

Not scored

010

No CVSS score recorded

EPSS scoreNot scoredRisk metrics not yet published.

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 9 · Downstream 0 · Related 9

CVE-2025-21971 CVE-2025-38110 CVE-2025-38206 CVE-2025-38396 CVE-2025-38471 CVE-2025-38499+3 more

Timeline

23-10-2025
PublishedVulnerability first disclosed.
04-02-2026
Last modifiedVulnerability information updated.

Description

Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP6) This update for the Linux Kernel 6.4.0-150600_23_30 fixes several issues. The following security issues were fixed: - CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249534). - CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1248673). - CVE-2025-38396: fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (bsc#1247158). - CVE-2025-38566: sunrpc: fix handling of server side tls alerts (bsc#1248376). - CVE-2025-21971: net_sched: Prevent creation of classes with TC_H_ROOT (bsc#1245794). - CVE-2025-38110: net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (bsc#1249458). - CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248749). - CVE-2025-38206: exfat: fix double free in delayed_free (bsc#1246075). - CVE-2025-38471: tls: always refresh the queue when reading sock (bsc#1247452).