SUSE-SU-2025:4315-1: kernel-default&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2025:4315-1 is a vulnerability in kernel-default&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 20 · Downstream 0 · Related 20Timeline
- 01-12-2025PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for the Linux Kernel The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2022-50116: Update config files. Disable N_GSM (bsc#1244824 jsc#PED-8240). - CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249846). - CVE-2022-50381: MD: add rdev reference for super write (bsc#1250257). - CVE-2022-50409: net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory (bsc#1250392). - CVE-2023-53282: scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write (bsc#1250311). - CVE-2023-53322: scsi: qla2xxx: Wait for io return on terminate rport (bsc#1250323). - CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (bsc#1249988). - CVE-2023-53395: ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer (bsc#1250358). - CVE-2023-53705: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (bsc#1252554). - CVE-2023-53722: md: raid1: fix potential OOB in raid1_remove_disk() (bsc#1252499). - CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1246911). - CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247374). - CVE-2025-38617: net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1248621). - CVE-2025-38685: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1249220). - CVE-2025-38713: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1249200). - CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse7 products
- kernel-default&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE< 3.0.101-108.192.1
- kernel-docs&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE< 3.0.101-108.192.1
- kernel-ec2&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE< 3.0.101-108.192.1
- kernel-source&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE< 3.0.101-108.192.1
- kernel-syms&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE< 3.0.101-108.192.1
1 vendor · 7 products
References
46 linksShow all 46 references
- bugzilla.suse.com/963449REPORT