RHSA-2025:17161
Vulnerability from csaf_opensuse - Published: 2025-10-01 00:00 - Updated: 2026-09-20 11:49Summary
security update for kernel
Severity
Moderate
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2025:17161.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2025:17161.
Patchnames: RHSA-2025:17161
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.141.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.141.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.141.1.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.141.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.141.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.141.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.141.1.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.141.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.141.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.141.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.141.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.141.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.141.1.el7.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
6.7 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-48701
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-48701
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-48701
Threats
Impact
moderate
6 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-48701
Threats
Impact
moderate
Affected products
Recommended
13 products, the same list as for
CVE-2022-48701
Threats
Impact
important
References
27 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2025:17161.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2025:17161.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2025:17161",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2025_17161.json"
},
{
"category": "self",
"summary": "URL for RHSA-2025:17161",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-October/002113.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2025:17161",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-October/002113.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-48701 page",
"url": "https://www.suse.com/security/cve/CVE-2022-48701/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50211 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50211/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50229 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50229/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-53125 page",
"url": "https://www.suse.com/security/cve/CVE-2023-53125/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-38200 page",
"url": "https://www.suse.com/security/cve/CVE-2025-38200/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-38477 page",
"url": "https://www.suse.com/security/cve/CVE-2025-38477/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:49:20Z",
"generator": {
"date": "2025-10-01T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2025:17161",
"initial_release_date": "2025-10-01T00:00:00Z",
"revision_history": [
{
"date": "2025-10-01T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:49:20Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-whitelists-0:3.10.0-1160.141.1.el7.noarch",
"product": {
"name": "kernel-abi-whitelists-0:3.10.0-1160.141.1.el7.noarch",
"product_id": "kernel-abi-whitelists-0:3.10.0-1160.141.1.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-whitelists@3.10.0-1160.141.1.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:3.10.0-1160.141.1.el7.noarch",
"product": {
"name": "kernel-doc-0:3.10.0-1160.141.1.el7.noarch",
"product_id": "kernel-doc-0:3.10.0-1160.141.1.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@3.10.0-1160.141.1.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:3.10.0-1160.141.1.el7.x86_64",
"product": {
"name": "bpftool-0:3.10.0-1160.141.1.el7.x86_64",
"product_id": "bpftool-0:3.10.0-1160.141.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@3.10.0-1160.141.1.el7?arch=x86_64\u0026upstream=bpftool-0:3.10.0-1160.141.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:3.10.0-1160.141.1.el7.x86_64",
"product": {
"name": "kernel-0:3.10.0-1160.141.1.el7.x86_64",
"product_id": "kernel-0:3.10.0-1160.141.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@3.10.0-1160.141.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:3.10.0-1160.141.1.el7.x86_64",
"product": {
"name": "kernel-debug-0:3.10.0-1160.141.1.el7.x86_64",
"product_id": "kernel-debug-0:3.10.0-1160.141.1.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@3.10.0-1160.141.1.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-1160.141.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:3.10.0-1160.141.1.el7.x86_64",
"product": {
"name": "kernel-debug-devel-0:3.10.0-1160.141.1.el7.x86_64",
"product_id": "kernel-debug-devel-0:3.10.0-1160.141.1.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@3.10.0-1160.141.1.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-1160.141.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:3.10.0-1160.141.1.el7.x86_64",
"product": {
"name": "kernel-devel-0:3.10.0-1160.141.1.el7.x86_64",
"product_id": "kernel-devel-0:3.10.0-1160.141.1.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@3.10.0-1160.141.1.el7?arch=x86_64\u0026upstream=kernel-source-0:3.10.0-1160.141.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:3.10.0-1160.141.1.el7.x86_64",
"product": {
"name": "kernel-headers-0:3.10.0-1160.141.1.el7.x86_64",
"product_id": "kernel-headers-0:3.10.0-1160.141.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@3.10.0-1160.141.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:3.10.0-1160.141.1.el7.x86_64",
"product": {
"name": "kernel-tools-0:3.10.0-1160.141.1.el7.x86_64",
"product_id": "kernel-tools-0:3.10.0-1160.141.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@3.10.0-1160.141.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:3.10.0-1160.141.1.el7.x86_64",
"product": {
"name": "kernel-tools-libs-0:3.10.0-1160.141.1.el7.x86_64",
"product_id": "kernel-tools-libs-0:3.10.0-1160.141.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@3.10.0-1160.141.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:3.10.0-1160.141.1.el7.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:3.10.0-1160.141.1.el7.x86_64",
"product_id": "kernel-tools-libs-devel-0:3.10.0-1160.141.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@3.10.0-1160.141.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:3.10.0-1160.141.1.el7.x86_64",
"product": {
"name": "perf-0:3.10.0-1160.141.1.el7.x86_64",
"product_id": "perf-0:3.10.0-1160.141.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@3.10.0-1160.141.1.el7?arch=x86_64\u0026upstream=perf-0:3.10.0-1160.141.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python-perf-0:3.10.0-1160.141.1.el7.x86_64",
"product": {
"name": "python-perf-0:3.10.0-1160.141.1.el7.x86_64",
"product_id": "python-perf-0:3.10.0-1160.141.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python-perf@3.10.0-1160.141.1.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 7 LTSS",
"product": {
"name": "SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:3.10.0-1160.141.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.141.1.el7.x86_64"
},
"product_reference": "bpftool-0:3.10.0-1160.141.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:3.10.0-1160.141.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.141.1.el7.x86_64"
},
"product_reference": "kernel-0:3.10.0-1160.141.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-whitelists-0:3.10.0-1160.141.1.el7.noarch as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.141.1.el7.noarch"
},
"product_reference": "kernel-abi-whitelists-0:3.10.0-1160.141.1.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:3.10.0-1160.141.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.141.1.el7.x86_64"
},
"product_reference": "kernel-debug-0:3.10.0-1160.141.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:3.10.0-1160.141.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.141.1.el7.x86_64"
},
"product_reference": "kernel-debug-devel-0:3.10.0-1160.141.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:3.10.0-1160.141.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.141.1.el7.x86_64"
},
"product_reference": "kernel-devel-0:3.10.0-1160.141.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:3.10.0-1160.141.1.el7.noarch as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.141.1.el7.noarch"
},
"product_reference": "kernel-doc-0:3.10.0-1160.141.1.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:3.10.0-1160.141.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.141.1.el7.x86_64"
},
"product_reference": "kernel-headers-0:3.10.0-1160.141.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:3.10.0-1160.141.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.141.1.el7.x86_64"
},
"product_reference": "kernel-tools-0:3.10.0-1160.141.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:3.10.0-1160.141.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.141.1.el7.x86_64"
},
"product_reference": "kernel-tools-libs-0:3.10.0-1160.141.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:3.10.0-1160.141.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.141.1.el7.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:3.10.0-1160.141.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:3.10.0-1160.141.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.141.1.el7.x86_64"
},
"product_reference": "perf-0:3.10.0-1160.141.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-0:3.10.0-1160.141.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.141.1.el7.x86_64"
},
"product_reference": "python-perf-0:3.10.0-1160.141.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-48701",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-48701"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()\n\nThere may be a bad USB audio device with a USB ID of (0x04fa, 0x4201) and\nthe number of it\u0027s interfaces less than 4, an out-of-bounds read bug occurs\nwhen parsing the interface descriptor for this device.\n\nFix this by checking the number of interfaces.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.141.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-48701",
"url": "https://www.suse.com/security/cve/CVE-2022-48701"
},
{
"category": "external",
"summary": "SUSE Bug 1223921 for CVE-2022-48701",
"url": "https://bugzilla.suse.com/1223921"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.141.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.141.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-10-01T00:00:00Z",
"details": "low"
}
],
"title": "CVE-2022-48701"
},
{
"cve": "CVE-2022-50211",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50211"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd-raid10: fix KASAN warning\n\nThere\u0027s a KASAN warning in raid10_remove_disk when running the lvm\ntest lvconvert-raid-reshape.sh. We fix this warning by verifying that the\nvalue \"number\" is valid.\n\nBUG: KASAN: slab-out-of-bounds in raid10_remove_disk+0x61/0x2a0 [raid10]\nRead of size 8 at addr ffff889108f3d300 by task mdX_raid10/124682\n\nCPU: 3 PID: 124682 Comm: mdX_raid10 Not tainted 5.19.0-rc6 #1\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-2 04/01/2014\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x34/0x44\n print_report.cold+0x45/0x57a\n ? __lock_text_start+0x18/0x18\n ? raid10_remove_disk+0x61/0x2a0 [raid10]\n kasan_report+0xa8/0xe0\n ? raid10_remove_disk+0x61/0x2a0 [raid10]\n raid10_remove_disk+0x61/0x2a0 [raid10]\nBuffer I/O error on dev dm-76, logical block 15344, async page read\n ? __mutex_unlock_slowpath.constprop.0+0x1e0/0x1e0\n remove_and_add_spares+0x367/0x8a0 [md_mod]\n ? super_written+0x1c0/0x1c0 [md_mod]\n ? mutex_trylock+0xac/0x120\n ? _raw_spin_lock+0x72/0xc0\n ? _raw_spin_lock_bh+0xc0/0xc0\n md_check_recovery+0x848/0x960 [md_mod]\n raid10d+0xcf/0x3360 [raid10]\n ? sched_clock_cpu+0x185/0x1a0\n ? rb_erase+0x4d4/0x620\n ? var_wake_function+0xe0/0xe0\n ? psi_group_change+0x411/0x500\n ? preempt_count_sub+0xf/0xc0\n ? _raw_spin_lock_irqsave+0x78/0xc0\n ? __lock_text_start+0x18/0x18\n ? raid10_sync_request+0x36c0/0x36c0 [raid10]\n ? preempt_count_sub+0xf/0xc0\n ? _raw_spin_unlock_irqrestore+0x19/0x40\n ? del_timer_sync+0xa9/0x100\n ? try_to_del_timer_sync+0xc0/0xc0\n ? _raw_spin_lock_irqsave+0x78/0xc0\n ? __lock_text_start+0x18/0x18\n ? _raw_spin_unlock_irq+0x11/0x24\n ? __list_del_entry_valid+0x68/0xa0\n ? finish_wait+0xa3/0x100\n md_thread+0x161/0x260 [md_mod]\n ? unregister_md_personality+0xa0/0xa0 [md_mod]\n ? _raw_spin_lock_irqsave+0x78/0xc0\n ? prepare_to_wait_event+0x2c0/0x2c0\n ? unregister_md_personality+0xa0/0xa0 [md_mod]\n kthread+0x148/0x180\n ? kthread_complete_and_exit+0x20/0x20\n ret_from_fork+0x1f/0x30\n \u003c/TASK\u003e\n\nAllocated by task 124495:\n kasan_save_stack+0x1e/0x40\n __kasan_kmalloc+0x80/0xa0\n setup_conf+0x140/0x5c0 [raid10]\n raid10_run+0x4cd/0x740 [raid10]\n md_run+0x6f9/0x1300 [md_mod]\n raid_ctr+0x2531/0x4ac0 [dm_raid]\n dm_table_add_target+0x2b0/0x620 [dm_mod]\n table_load+0x1c8/0x400 [dm_mod]\n ctl_ioctl+0x29e/0x560 [dm_mod]\n dm_compat_ctl_ioctl+0x7/0x20 [dm_mod]\n __do_compat_sys_ioctl+0xfa/0x160\n do_syscall_64+0x90/0xc0\n entry_SYSCALL_64_after_hwframe+0x46/0xb0\n\nLast potentially related work creation:\n kasan_save_stack+0x1e/0x40\n __kasan_record_aux_stack+0x9e/0xc0\n kvfree_call_rcu+0x84/0x480\n timerfd_release+0x82/0x140\nL __fput+0xfa/0x400\n task_work_run+0x80/0xc0\n exit_to_user_mode_prepare+0x155/0x160\n syscall_exit_to_user_mode+0x12/0x40\n do_syscall_64+0x42/0xc0\n entry_SYSCALL_64_after_hwframe+0x46/0xb0\n\nSecond to last potentially related work creation:\n kasan_save_stack+0x1e/0x40\n __kasan_record_aux_stack+0x9e/0xc0\n kvfree_call_rcu+0x84/0x480\n timerfd_release+0x82/0x140\n __fput+0xfa/0x400\n task_work_run+0x80/0xc0\n exit_to_user_mode_prepare+0x155/0x160\n syscall_exit_to_user_mode+0x12/0x40\n do_syscall_64+0x42/0xc0\n entry_SYSCALL_64_after_hwframe+0x46/0xb0\n\nThe buggy address belongs to the object at ffff889108f3d200\n which belongs to the cache kmalloc-256 of size 256\nThe buggy address is located 0 bytes to the right of\n 256-byte region [ffff889108f3d200, ffff889108f3d300)\n\nThe buggy address belongs to the physical page:\npage:000000007ef2a34c refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1108f3c\nhead:000000007ef2a34c order:2 compound_mapcount:0 compound_pincount:0\nflags: 0x4000000000010200(slab|head|zone=2)\nraw: 4000000000010200 0000000000000000 dead000000000001 ffff889100042b40\nraw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000\npage dumped because: kasan: bad access detected\n\nMemory state around the buggy address:\n ffff889108f3d200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n ffff889108f3d280: 00 00\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.141.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50211",
"url": "https://www.suse.com/security/cve/CVE-2022-50211"
},
{
"category": "external",
"summary": "SUSE Bug 1245140 for CVE-2022-50211",
"url": "https://bugzilla.suse.com/1245140"
},
{
"category": "external",
"summary": "SUSE Bug 1245141 for CVE-2022-50211",
"url": "https://bugzilla.suse.com/1245141"
},
{
"category": "external",
"summary": "SUSE Bug 1253291 for CVE-2022-50211",
"url": "https://bugzilla.suse.com/1253291"
},
{
"category": "external",
"summary": "SUSE Bug 1253292 for CVE-2022-50211",
"url": "https://bugzilla.suse.com/1253292"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.141.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.141.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-10-01T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-50211"
},
{
"cve": "CVE-2022-50229",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50229"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: bcd2000: Fix a UAF bug on the error path of probing\n\nWhen the driver fails in snd_card_register() at probe time, it will free\nthe \u0027bcd2k-\u003emidi_out_urb\u0027 before killing it, which may cause a UAF bug.\n\nThe following log can reveal it:\n\n[ 50.727020] BUG: KASAN: use-after-free in bcd2000_input_complete+0x1f1/0x2e0 [snd_bcd2000]\n[ 50.727623] Read of size 8 at addr ffff88810fab0e88 by task swapper/4/0\n[ 50.729530] Call Trace:\n[ 50.732899] bcd2000_input_complete+0x1f1/0x2e0 [snd_bcd2000]\n\nFix this by adding usb_kill_urb() before usb_free_urb().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.141.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50229",
"url": "https://www.suse.com/security/cve/CVE-2022-50229"
},
{
"category": "external",
"summary": "SUSE Bug 1244856 for CVE-2022-50229",
"url": "https://bugzilla.suse.com/1244856"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.141.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.141.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-10-01T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-50229"
},
{
"cve": "CVE-2023-53125",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-53125"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: smsc75xx: Limit packet length to skb-\u003elen\n\nPacket length retrieved from skb data may be larger than\nthe actual socket buffer length (up to 9026 bytes). In such\ncase the cloned skb passed up the network stack will leak\nkernel memory contents.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.141.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-53125",
"url": "https://www.suse.com/security/cve/CVE-2023-53125"
},
{
"category": "external",
"summary": "SUSE Bug 1242285 for CVE-2023-53125",
"url": "https://bugzilla.suse.com/1242285"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.141.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.141.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-10-01T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-53125"
},
{
"cve": "CVE-2025-38200",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-38200"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: fix MMIO write access to an invalid page in i40e_clear_hw\n\nWhen the device sends a specific input, an integer underflow can occur, leading\nto MMIO write access to an invalid page.\n\nPrevent the integer underflow by changing the type of related variables.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.141.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-38200",
"url": "https://www.suse.com/security/cve/CVE-2025-38200"
},
{
"category": "external",
"summary": "SUSE Bug 1246045 for CVE-2025-38200",
"url": "https://bugzilla.suse.com/1246045"
},
{
"category": "external",
"summary": "SUSE Bug 1246046 for CVE-2025-38200",
"url": "https://bugzilla.suse.com/1246046"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.141.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.141.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-10-01T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-38200"
},
{
"cve": "CVE-2025-38477",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-38477"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: sch_qfq: Fix race condition on qfq_aggregate\n\nA race condition can occur when \u0027agg\u0027 is modified in qfq_change_agg\n(called during qfq_enqueue) while other threads access it\nconcurrently. For example, qfq_dump_class may trigger a NULL\ndereference, and qfq_delete_class may cause a use-after-free.\n\nThis patch addresses the issue by:\n\n1. Moved qfq_destroy_class into the critical section.\n\n2. Added sch_tree_lock protection to qfq_dump_class and\nqfq_dump_class_stats.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.141.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-38477",
"url": "https://www.suse.com/security/cve/CVE-2025-38477"
},
{
"category": "external",
"summary": "SUSE Bug 1247314 for CVE-2025-38477",
"url": "https://bugzilla.suse.com/1247314"
},
{
"category": "external",
"summary": "SUSE Bug 1247315 for CVE-2025-38477",
"url": "https://bugzilla.suse.com/1247315"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.141.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.141.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.141.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.141.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-10-01T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2025-38477"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…