{"schemaVersion":3,"id":"SUSE-SU-2025:4515-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for the Linux Kernel\n\nThe SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-50364: i2c: mux: reg: check return value after calling platform_get_resource() (bsc#1250083).\n- CVE-2022-50368: drm/msm/dsi: fix memory corruption with too many bridges (bsc#1250009).\n- CVE-2022-50494: thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash (bsc#1251173).\n- CVE-2022-50545: r6040: Fix kmemleak in probe and remove (bsc#1251285).\n- CVE-2022-50551: wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() (bsc#1251322).\n- CVE-2022-50569: xfrm: Update ipcomp_scratches with NULL when freed (bsc#1252640).\n- CVE-2022-50578: class: fix possible memory leak in __class_register() (bsc#1252519).\n- CVE-2023-53229: wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (bsc#1249650).\n- CVE-2023-53369: net: dcb: choose correct policy to parse DCB_ATTR_BCN (bsc#1250206).\n- CVE-2023-53431: scsi: ses: Don't attach if enclosure has no components (bsc#1250374).\n- CVE-2023-53542: ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy (bsc#1251154).\n- CVE-2023-53597: cifs: fix mid leak during reconnection after timeout threshold (bsc#1251159).\n- CVE-2023-53641: wifi: ath9k: hif_usb: fix memory leak of remain_skbs (bsc#1251728).\n- CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251786).\n- CVE-2025-38436: drm/scheduler: signal scheduled fence when kill job (bsc#1247227).\n- CVE-2025-39819: fs/smb: Fix inconsistent refcnt update (bsc#1250176).\n- CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033).\n- CVE-2025-40001: scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (bsc#1252303).\n- CVE-2025-40027: net/9p: fix double req put in p9_fd_cancelled (bsc#1252763).\n- CVE-2025-40030: pinctrl: check the return value of pinmux_ops::get_function_name() (bsc#1252773).\n- CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).\n- CVE-2025-40048: uio_hv_generic: Let userspace take care of interrupt mask (bsc#1252862).\n- CVE-2025-40055: ocfs2: fix double free in user_cluster_connect() (bsc#1252821).\n- CVE-2025-40070: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).\n- CVE-2025-40083: net/sched: sch_qfq: Fix null-deref in agg_dequeue (bsc#1252912).\n- CVE-2025-40173: net/ip6_tunnel: Prevent perpetual tunnel growth (bsc#1253421).\n- CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253436).\n- CVE-2025-40205: btrfs: avoid potential out-of-bounds in btrfs_encode_fh() (bsc#1253456).\n\nThe following non-security bugs were fixed:\n\n- KVM: x86: Give a hint when Win2016 might fail to boot due to XSAVES erratum (git-fixes).\n- PCI: aardvark: Fix checking for MEM resource type (git-fixes).\n- cifs: Check the lease context if we actually got a lease (bsc#1228688).\n- cifs: return a single-use cfid if we did not get a lease (bsc#1228688).\n- dmaengine: bcm2835: Avoid GFP_KERNEL in device_prep_slave_sg (bsc#1070872).\n- kabi/severities: Update info about kvm_86_ops.\n- net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (bsc#1220419).\n- skmsg: Return copied bytes in sk_msg_memcopy_from_iter (bsc#1250650).\n- smb3: fix Open files on server counter going negative (git-fixes).\n- tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork (bsc#1250705).\n- tcp_bpf: Fix copied value in tcp_bpf_sendmsg (bsc#1250650).\n- thermal: intel_powerclamp: Use first online CPU as control_cpu (bsc#1251173).","dates":{"published":"2025-12-23T16:19:45.000Z","modified":"2026-03-23T04:51:35.969Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"kernel-default&distro=SUSE Linux Enterprise Live Patching 12 SP5","name":"kernel-default","label":"kernel-default&distro=SUSE Linux Enterprise Live Patching 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-default&distro=SUSE Linux Enterprise Live Patching 12 SP5","purlType":"rpm","versions":[{"text":"< 4.12.14-122.283.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.12.14-122.283.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-default&distro=SUSE Linux Enterprise Server 12 SP5-LTSS","name":"kernel-default","label":"kernel-default&distro=SUSE Linux Enterprise Server 12 SP5-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-default&distro=SUSE Linux Enterprise Server 12 SP5-LTSS","purlType":"rpm","versions":[{"text":"< 4.12.14-122.283.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.12.14-122.283.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-default&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","name":"kernel-default","label":"kernel-default&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-default&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","purlType":"rpm","versions":[{"text":"< 4.12.14-122.283.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.12.14-122.283.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-source&distro=SUSE Linux Enterprise Server 12 SP5-LTSS","name":"kernel-source","label":"kernel-source&distro=SUSE Linux Enterprise Server 12 SP5-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-source&distro=SUSE Linux Enterprise Server 12 SP5-LTSS","purlType":"rpm","versions":[{"text":"< 4.12.14-122.283.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.12.14-122.283.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-source&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","name":"kernel-source","label":"kernel-source&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-source&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","purlType":"rpm","versions":[{"text":"< 4.12.14-122.283.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.12.14-122.283.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-syms&distro=SUSE Linux Enterprise Server 12 SP5-LTSS","name":"kernel-syms","label":"kernel-syms&distro=SUSE Linux Enterprise Server 12 SP5-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-syms&distro=SUSE Linux Enterprise Server 12 SP5-LTSS","purlType":"rpm","versions":[{"text":"< 4.12.14-122.283.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.12.14-122.283.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-syms&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","name":"kernel-syms","label":"kernel-syms&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-syms&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5","purlType":"rpm","versions":[{"text":"< 4.12.14-122.283.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.12.14-122.283.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kgraft-patch-SLE12-SP5_Update_75&distro=SUSE Linux Enterprise Live Patching 12 SP5","name":"kgraft-patch-SLE12-SP5_Update_75","label":"kgraft-patch-SLE12-SP5_Update_75&distro=SUSE Linux Enterprise Live Patching 12 SP5","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kgraft-patch-SLE12-SP5_Update_75&distro=SUSE Linux Enterprise Live Patching 12 SP5","purlType":"rpm","versions":[{"text":"< 1-8.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1-8.3.1","eol":null,"hubHref":null}],"affectedCount":8,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254515-1/","label":"www.suse.com/support/update/announcement/2025/suse-su-20254515-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1070872","label":"bugzilla.suse.com/1070872","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1220419","label":"bugzilla.suse.com/1220419","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1228688","label":"bugzilla.suse.com/1228688","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1247227","label":"bugzilla.suse.com/1247227","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1249650","label":"bugzilla.suse.com/1249650","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1250009","label":"bugzilla.suse.com/1250009","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1250083","label":"bugzilla.suse.com/1250083","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1250176","label":"bugzilla.suse.com/1250176","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1250206","label":"bugzilla.suse.com/1250206","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1250374","label":"bugzilla.suse.com/1250374","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1250650","label":"bugzilla.suse.com/1250650","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1250705","label":"bugzilla.suse.com/1250705","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1251154","label":"bugzilla.suse.com/1251154","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1251159","label":"bugzilla.suse.com/1251159","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1251173","label":"bugzilla.suse.com/1251173","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1251285","label":"bugzilla.suse.com/1251285","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1251322","label":"bugzilla.suse.com/1251322","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1251728","label":"bugzilla.suse.com/1251728","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1251786","label":"bugzilla.suse.com/1251786","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1252033","label":"bugzilla.suse.com/1252033","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1252303","label":"bugzilla.suse.com/1252303","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1252519","label":"bugzilla.suse.com/1252519","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1252640","label":"bugzilla.suse.com/1252640","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1252763","label":"bugzilla.suse.com/1252763","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1252773","label":"bugzilla.suse.com/1252773","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1252780","label":"bugzilla.suse.com/1252780","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1252821","label":"bugzilla.suse.com/1252821","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1252836","label":"bugzilla.suse.com/1252836","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1252862","label":"bugzilla.suse.com/1252862","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1252912","label":"bugzilla.suse.com/1252912","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1253237","label":"bugzilla.suse.com/1253237","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1253421","label":"bugzilla.suse.com/1253421","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1253436","label":"bugzilla.suse.com/1253436","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1253438","label":"bugzilla.suse.com/1253438","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1253456","label":"bugzilla.suse.com/1253456","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2022-50364","label":"www.suse.com/security/cve/CVE-2022-50364","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-50368","label":"www.suse.com/security/cve/CVE-2022-50368","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-50494","label":"www.suse.com/security/cve/CVE-2022-50494","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-50545","label":"www.suse.com/security/cve/CVE-2022-50545","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-50551","label":"www.suse.com/security/cve/CVE-2022-50551","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-50569","label":"www.suse.com/security/cve/CVE-2022-50569","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2022-50578","label":"www.suse.com/security/cve/CVE-2022-50578","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-53229","label":"www.suse.com/security/cve/CVE-2023-53229","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-53369","label":"www.suse.com/security/cve/CVE-2023-53369","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-53431","label":"www.suse.com/security/cve/CVE-2023-53431","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-53542","label":"www.suse.com/security/cve/CVE-2023-53542","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-53597","label":"www.suse.com/security/cve/CVE-2023-53597","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-53641","label":"www.suse.com/security/cve/CVE-2023-53641","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-53676","label":"www.suse.com/security/cve/CVE-2023-53676","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-38436","label":"www.suse.com/security/cve/CVE-2025-38436","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-39819","label":"www.suse.com/security/cve/CVE-2025-39819","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-39967","label":"www.suse.com/security/cve/CVE-2025-39967","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40001","label":"www.suse.com/security/cve/CVE-2025-40001","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40027","label":"www.suse.com/security/cve/CVE-2025-40027","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40030","label":"www.suse.com/security/cve/CVE-2025-40030","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40040","label":"www.suse.com/security/cve/CVE-2025-40040","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40048","label":"www.suse.com/security/cve/CVE-2025-40048","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40055","label":"www.suse.com/security/cve/CVE-2025-40055","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40070","label":"www.suse.com/security/cve/CVE-2025-40070","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40083","label":"www.suse.com/security/cve/CVE-2025-40083","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40173","label":"www.suse.com/security/cve/CVE-2025-40173","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40186","label":"www.suse.com/security/cve/CVE-2025-40186","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40204","label":"www.suse.com/security/cve/CVE-2025-40204","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2025-40205","label":"www.suse.com/security/cve/CVE-2025-40205","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2022-50364","CVE-2022-50368","CVE-2022-50494","CVE-2022-50545","CVE-2022-50551","CVE-2022-50569","CVE-2022-50578","CVE-2023-53229","CVE-2023-53369","CVE-2023-53431","CVE-2023-53542","CVE-2023-53597","CVE-2023-53641","CVE-2023-53676","CVE-2025-38436","CVE-2025-39819","CVE-2025-39967","CVE-2025-40001","CVE-2025-40027","CVE-2025-40030","CVE-2025-40040","CVE-2025-40048","CVE-2025-40055","CVE-2025-40070","CVE-2025-40083","CVE-2025-40173","CVE-2025-40186","CVE-2025-40204","CVE-2025-40205"],"downstream":[],"duplicates":[],"related":["CVE-2022-50364","CVE-2022-50368","CVE-2022-50494","CVE-2022-50545","CVE-2022-50551","CVE-2022-50569","CVE-2022-50578","CVE-2023-53229","CVE-2023-53369","CVE-2023-53431","CVE-2023-53542","CVE-2023-53597","CVE-2023-53641","CVE-2023-53676","CVE-2025-38436","CVE-2025-39819","CVE-2025-39967","CVE-2025-40001","CVE-2025-40027","CVE-2025-40030","CVE-2025-40040","CVE-2025-40048","CVE-2025-40055","CVE-2025-40070","CVE-2025-40083","CVE-2025-40173","CVE-2025-40186","CVE-2025-40204","CVE-2025-40205"]},"timeline":[{"kind":"published","date":"2025-12-23T16:19:45.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-03-23T04:51:35.969Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T03:08:50.573Z","stale":false,"partial":false}}