SUSE-SU-2025:4530-1

Description

Security update for the Linux Kernel The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-50280: pnode: terminate at peers of source (bsc#1249806). - CVE-2023-53659: iavf: Fix out-of-bounds when setting channels on remove (bsc#1251247). - CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251786). - CVE-2023-53717: wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() (bsc#1252560). - CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780). - CVE-2025-40121: ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping (bsc#1253367). - CVE-2025-40154: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (bsc#1253431). - CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253436). The following non-security bugs were fixed: - cifs: Check the lease context if we actually got a lease (bsc#1228688). - cifs: return a single-use cfid if we did not get a lease (bsc#1228688). - smb3: fix Open files on server counter going negative (git-fixes).

Affected Systems

• suse•kernel-64kb&distro=SUSE Enterprise Storage 7.1

  < 5.3.18-150300.59.229.3

• suse•kernel-64kb&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

  < 5.3.18-150300.59.229.3

• suse•kernel-64kb&distro=SUSE Linux Enterprise Server 15 SP3-LTSS

  < 5.3.18-150300.59.229.3

• suse•kernel-default-base&distro=SUSE Enterprise Storage 7.1

  < 5.3.18-150300.59.229.3.150300.18.136.3

• suse•kernel-default-base&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

  < 5.3.18-150300.59.229.3.150300.18.136.3

• suse•kernel-default-base&distro=SUSE Linux Enterprise Micro 5.2

  < 5.3.18-150300.59.229.3.150300.18.136.3

• suse•kernel-default-base&distro=SUSE Linux Enterprise Server 15 SP3-LTSS

  < 5.3.18-150300.59.229.3.150300.18.136.3

• suse•kernel-default-base&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3

  < 5.3.18-150300.59.229.3.150300.18.136.3

• suse•kernel-default&distro=SUSE Enterprise Storage 7.1

  < 5.3.18-150300.59.229.3

• suse•kernel-default&distro=SUSE Linux Enterprise High Availability Extension 15 SP3

  < 5.3.18-150300.59.229.3

• suse•kernel-default&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

  < 5.3.18-150300.59.229.3

• suse•kernel-default&distro=SUSE Linux Enterprise Live Patching 15 SP3

  < 5.3.18-150300.59.229.3

• suse•kernel-default&distro=SUSE Linux Enterprise Micro 5.2

  < 5.3.18-150300.59.229.3

• suse•kernel-default&distro=SUSE Linux Enterprise Server 15 SP3-LTSS

  < 5.3.18-150300.59.229.3

• suse•kernel-default&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3

  < 5.3.18-150300.59.229.3

• suse•kernel-docs&distro=SUSE Enterprise Storage 7.1

  < 5.3.18-150300.59.229.2

• suse•kernel-docs&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

  < 5.3.18-150300.59.229.2

• suse•kernel-docs&distro=SUSE Linux Enterprise Server 15 SP3-LTSS

  < 5.3.18-150300.59.229.2

• suse•kernel-docs&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3

  < 5.3.18-150300.59.229.2

• suse•kernel-livepatch-SLE15-SP3_Update_64&distro=SUSE Linux Enterprise Live Patching 15 SP3

  < 1-150300.7.3.3

• suse•kernel-obs-build&distro=SUSE Enterprise Storage 7.1

  < 5.3.18-150300.59.229.3

• suse•kernel-obs-build&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

  < 5.3.18-150300.59.229.3

• suse•kernel-obs-build&distro=SUSE Linux Enterprise Server 15 SP3-LTSS

  < 5.3.18-150300.59.229.3

• suse•kernel-obs-build&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3

  < 5.3.18-150300.59.229.3

• suse•kernel-preempt&distro=SUSE Enterprise Storage 7.1

  < 5.3.18-150300.59.229.3

• suse•kernel-preempt&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

  < 5.3.18-150300.59.229.3

• suse•kernel-preempt&distro=SUSE Linux Enterprise Server 15 SP3-LTSS

  < 5.3.18-150300.59.229.3

• suse•kernel-preempt&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3

  < 5.3.18-150300.59.229.3

• suse•kernel-source&distro=SUSE Enterprise Storage 7.1

  < 5.3.18-150300.59.229.3

• suse•kernel-source&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

  < 5.3.18-150300.59.229.3

• suse•kernel-source&distro=SUSE Linux Enterprise Server 15 SP3-LTSS

  < 5.3.18-150300.59.229.3

• suse•kernel-source&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3

  < 5.3.18-150300.59.229.3

• suse•kernel-syms&distro=SUSE Enterprise Storage 7.1

  < 5.3.18-150300.59.229.1

• suse•kernel-syms&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

  < 5.3.18-150300.59.229.1

• suse•kernel-syms&distro=SUSE Linux Enterprise Server 15 SP3-LTSS

  < 5.3.18-150300.59.229.1

• suse•kernel-syms&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3

  < 5.3.18-150300.59.229.1

• suse•kernel-zfcpdump&distro=SUSE Linux Enterprise Server 15 SP3-LTSS

  < 5.3.18-150300.59.229.3

References (18)

• https://www.suse.com/support/update/announcement/2025/suse-su-20254530-1/
• https://bugzilla.suse.com/1228688
• https://bugzilla.suse.com/1249806
• https://bugzilla.suse.com/1251247
• https://bugzilla.suse.com/1251786
• https://bugzilla.suse.com/1252560
• https://bugzilla.suse.com/1252780
• https://bugzilla.suse.com/1253367
• https://bugzilla.suse.com/1253431
• https://bugzilla.suse.com/1253436
• https://www.suse.com/security/cve/CVE-2022-50280
• https://www.suse.com/security/cve/CVE-2023-53659
• https://www.suse.com/security/cve/CVE-2023-53676
• https://www.suse.com/security/cve/CVE-2023-53717
• https://www.suse.com/security/cve/CVE-2025-40040
• https://www.suse.com/security/cve/CVE-2025-40121
• https://www.suse.com/security/cve/CVE-2025-40154
• https://www.suse.com/security/cve/CVE-2025-40204