RHSA-2025:19102
Vulnerability from csaf_opensuse - Published: 2025-10-27 00:00 - Updated: 2026-09-20 11:49Summary
security update for kernel
Severity
Moderate
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2025:19102.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2025:19102.
Patchnames: RHSA-2025:19102
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:bpftool-0:4.18.0-553.81.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-0:4.18.0-553.81.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.81.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.81.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:perf-0:4.18.0-553.81.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.81.1.el8_10.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
20 products, the same list as for
CVE-2022-50386
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-50386
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-50386
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-50386
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-50386
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-50386
Threats
Impact
moderate
References
31 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2025:19102.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2025:19102.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2025:19102",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2025_19102.json"
},
{
"category": "self",
"summary": "URL for RHSA-2025:19102",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-October/002136.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2025:19102",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-October/002136.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50386 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50386/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-53297 page",
"url": "https://www.suse.com/security/cve/CVE-2023-53297/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-53386 page",
"url": "https://www.suse.com/security/cve/CVE-2023-53386/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-22045 page",
"url": "https://www.suse.com/security/cve/CVE-2025-22045/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-39817 page",
"url": "https://www.suse.com/security/cve/CVE-2025-39817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-39841 page",
"url": "https://www.suse.com/security/cve/CVE-2025-39841/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-39849 page",
"url": "https://www.suse.com/security/cve/CVE-2025-39849/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:49:52Z",
"generator": {
"date": "2025-10-27T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2025:19102",
"initial_release_date": "2025-10-27T00:00:00Z",
"revision_history": [
{
"date": "2025-10-27T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:49:52Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch",
"product": {
"name": "kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch",
"product_id": "kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@4.18.0-553.81.1.el8_10?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:4.18.0-553.81.1.el8_10.noarch",
"product": {
"name": "kernel-doc-0:4.18.0-553.81.1.el8_10.noarch",
"product_id": "kernel-doc-0:4.18.0-553.81.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@4.18.0-553.81.1.el8_10?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:4.18.0-553.81.1.el8_10.x86_64",
"product": {
"name": "bpftool-0:4.18.0-553.81.1.el8_10.x86_64",
"product_id": "bpftool-0:4.18.0-553.81.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@4.18.0-553.81.1.el8_10?arch=x86_64\u0026upstream=bpftool-0:4.18.0-553.81.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:4.18.0-553.81.1.el8_10.x86_64",
"product": {
"name": "kernel-0:4.18.0-553.81.1.el8_10.x86_64",
"product_id": "kernel-0:4.18.0-553.81.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@4.18.0-553.81.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-0:4.18.0-553.81.1.el8_10.x86_64",
"product": {
"name": "kernel-core-0:4.18.0-553.81.1.el8_10.x86_64",
"product_id": "kernel-core-0:4.18.0-553.81.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@4.18.0-553.81.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"product": {
"name": "kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"product_id": "kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@4.18.0-553.81.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64",
"product_id": "kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@4.18.0-553.81.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-553.81.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64",
"product_id": "kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@4.18.0-553.81.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"product_id": "kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@4.18.0-553.81.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-553.81.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@4.18.0-553.81.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@4.18.0-553.81.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"product": {
"name": "kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"product_id": "kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@4.18.0-553.81.1.el8_10?arch=x86_64\u0026upstream=kernel-source-0:4.18.0-553.81.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"product": {
"name": "kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"product_id": "kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@4.18.0-553.81.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"product_id": "kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@4.18.0-553.81.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"product_id": "kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@4.18.0-553.81.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64",
"product_id": "kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@4.18.0-553.81.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@4.18.0-553.81.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@4.18.0-553.81.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:4.18.0-553.81.1.el8_10.x86_64",
"product": {
"name": "perf-0:4.18.0-553.81.1.el8_10.x86_64",
"product_id": "perf-0:4.18.0-553.81.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@4.18.0-553.81.1.el8_10?arch=x86_64\u0026upstream=perf-0:4.18.0-553.81.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-0:4.18.0-553.81.1.el8_10.x86_64",
"product": {
"name": "python3-perf-0:4.18.0-553.81.1.el8_10.x86_64",
"product_id": "python3-perf-0:4.18.0-553.81.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@4.18.0-553.81.1.el8_10?arch=x86_64\u0026upstream=perf-0:4.18.0-553.81.1.el8_10.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:4.18.0-553.81.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:bpftool-0:4.18.0-553.81.1.el8_10.x86_64"
},
"product_reference": "bpftool-0:4.18.0-553.81.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:4.18.0-553.81.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-0:4.18.0-553.81.1.el8_10.x86_64"
},
"product_reference": "kernel-0:4.18.0-553.81.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch"
},
"product_reference": "kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-0:4.18.0-553.81.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.81.1.el8_10.x86_64"
},
"product_reference": "kernel-core-0:4.18.0-553.81.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64"
},
"product_reference": "kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64"
},
"product_reference": "kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:4.18.0-553.81.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.81.1.el8_10.noarch"
},
"product_reference": "kernel-doc-0:4.18.0-553.81.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64"
},
"product_reference": "kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:4.18.0-553.81.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:perf-0:4.18.0-553.81.1.el8_10.x86_64"
},
"product_reference": "perf-0:4.18.0-553.81.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-0:4.18.0-553.81.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.81.1.el8_10.x86_64"
},
"product_reference": "python3-perf-0:4.18.0-553.81.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-50386",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50386"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix user-after-free\n\nThis uses l2cap_chan_hold_unless_zero() after calling\n__l2cap_get_chan_blah() to prevent the following trace:\n\nBluetooth: l2cap_core.c:static void l2cap_chan_destroy(struct kref\n*kref)\nBluetooth: chan 0000000023c4974d\nBluetooth: parent 00000000ae861c08\n==================================================================\nBUG: KASAN: use-after-free in __mutex_waiter_is_first\nkernel/locking/mutex.c:191 [inline]\nBUG: KASAN: use-after-free in __mutex_lock_common\nkernel/locking/mutex.c:671 [inline]\nBUG: KASAN: use-after-free in __mutex_lock+0x278/0x400\nkernel/locking/mutex.c:729\nRead of size 8 at addr ffff888006a49b08 by task kworker/u3:2/389",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.81.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50386",
"url": "https://www.suse.com/security/cve/CVE-2022-50386"
},
{
"category": "external",
"summary": "SUSE Bug 1247374 for CVE-2022-50386",
"url": "https://bugzilla.suse.com/1247374"
},
{
"category": "external",
"summary": "SUSE Bug 1250301 for CVE-2022-50386",
"url": "https://bugzilla.suse.com/1250301"
},
{
"category": "external",
"summary": "SUSE Bug 1250302 for CVE-2022-50386",
"url": "https://bugzilla.suse.com/1250302"
},
{
"category": "external",
"summary": "SUSE Bug 1253291 for CVE-2022-50386",
"url": "https://bugzilla.suse.com/1253291"
},
{
"category": "external",
"summary": "SUSE Bug 1253292 for CVE-2022-50386",
"url": "https://bugzilla.suse.com/1253292"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.81.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.81.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-10-27T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-50386"
},
{
"cve": "CVE-2023-53297",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-53297"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: fix \"bad unlock balance\" in l2cap_disconnect_rsp\n\nconn-\u003echan_lock isn\u0027t acquired before l2cap_get_chan_by_scid,\nif l2cap_get_chan_by_scid returns NULL, then \u0027bad unlock balance\u0027\nis triggered.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.81.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-53297",
"url": "https://www.suse.com/security/cve/CVE-2023-53297"
},
{
"category": "external",
"summary": "SUSE Bug 1250322 for CVE-2023-53297",
"url": "https://bugzilla.suse.com/1250322"
},
{
"category": "external",
"summary": "SUSE Bug 1250728 for CVE-2023-53297",
"url": "https://bugzilla.suse.com/1250728"
},
{
"category": "external",
"summary": "SUSE Bug 1251916 for CVE-2023-53297",
"url": "https://bugzilla.suse.com/1251916"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.81.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.81.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-10-27T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-53297"
},
{
"cve": "CVE-2023-53386",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-53386"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: Fix potential use-after-free when clear keys\n\nSimilar to commit c5d2b6fa26b5 (\"Bluetooth: Fix use-after-free in\nhci_remove_ltk/hci_remove_irk\"). We can not access k after kfree_rcu()\ncall.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.81.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-53386",
"url": "https://www.suse.com/security/cve/CVE-2023-53386"
},
{
"category": "external",
"summary": "SUSE Bug 1250106 for CVE-2023-53386",
"url": "https://bugzilla.suse.com/1250106"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.81.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.81.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-10-27T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-53386"
},
{
"cve": "CVE-2025-22045",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-22045"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/mm: Fix flush_tlb_range() when used for zapping normal PMDs\n\nOn the following path, flush_tlb_range() can be used for zapping normal\nPMD entries (PMD entries that point to page tables) together with the PTE\nentries in the pointed-to page table:\n\n collapse_pte_mapped_thp\n pmdp_collapse_flush\n flush_tlb_range\n\nThe arm64 version of flush_tlb_range() has a comment describing that it can\nbe used for page table removal, and does not use any last-level\ninvalidation optimizations. Fix the X86 version by making it behave the\nsame way.\n\nCurrently, X86 only uses this information for the following two purposes,\nwhich I think means the issue doesn\u0027t have much impact:\n\n - In native_flush_tlb_multi() for checking if lazy TLB CPUs need to be\n IPI\u0027d to avoid issues with speculative page table walks.\n - In Hyper-V TLB paravirtualization, again for lazy TLB stuff.\n\nThe patch \"x86/mm: only invalidate final translations with INVLPGB\" which\nis currently under review (see\n\u003chttps://lore.kernel.org/all/20241230175550.4046587-13-riel@surriel.com/\u003e)\nwould probably be making the impact of this a lot worse.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.81.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-22045",
"url": "https://www.suse.com/security/cve/CVE-2025-22045"
},
{
"category": "external",
"summary": "SUSE Bug 1241433 for CVE-2025-22045",
"url": "https://bugzilla.suse.com/1241433"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.81.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.81.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-10-27T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-22045"
},
{
"cve": "CVE-2025-39817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-39817"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nefivarfs: Fix slab-out-of-bounds in efivarfs_d_compare\n\nObserved on kernel 6.6 (present on master as well):\n\n BUG: KASAN: slab-out-of-bounds in memcmp+0x98/0xd0\n Call trace:\n kasan_check_range+0xe8/0x190\n __asan_loadN+0x1c/0x28\n memcmp+0x98/0xd0\n efivarfs_d_compare+0x68/0xd8\n __d_lookup_rcu_op_compare+0x178/0x218\n __d_lookup_rcu+0x1f8/0x228\n d_alloc_parallel+0x150/0x648\n lookup_open.isra.0+0x5f0/0x8d0\n open_last_lookups+0x264/0x828\n path_openat+0x130/0x3f8\n do_filp_open+0x114/0x248\n do_sys_openat2+0x340/0x3c0\n __arm64_sys_openat+0x120/0x1a0\n\nIf dentry-\u003ed_name.len \u003c EFI_VARIABLE_GUID_LEN , \u0027guid\u0027 can become\nnegative, leadings to oob. The issue can be triggered by parallel\nlookups using invalid filename:\n\n T1\t\t\tT2\n lookup_open\n -\u003elookup\n simple_lookup\n d_add\n // invalid dentry is added to hash list\n\n\t\t\tlookup_open\n\t\t\t d_alloc_parallel\n\t\t\t __d_lookup_rcu\n\t\t\t __d_lookup_rcu_op_compare\n\t\t\t hlist_bl_for_each_entry_rcu\n\t\t\t // invalid dentry can be retrieved\n\t\t\t -\u003ed_compare\n\t\t\t efivarfs_d_compare\n\t\t\t // oob\n\nFix it by checking \u0027guid\u0027 before cmp.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.81.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-39817",
"url": "https://www.suse.com/security/cve/CVE-2025-39817"
},
{
"category": "external",
"summary": "SUSE Bug 1249998 for CVE-2025-39817",
"url": "https://bugzilla.suse.com/1249998"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.81.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.81.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-10-27T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-39817"
},
{
"cve": "CVE-2025-39841",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-39841"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: lpfc: Fix buffer free/clear order in deferred receive path\n\nFix a use-after-free window by correcting the buffer release sequence in\nthe deferred receive path. The code freed the RQ buffer first and only\nthen cleared the context pointer under the lock. Concurrent paths (e.g.,\nABTS and the repost path) also inspect and release the same pointer under\nthe lock, so the old order could lead to double-free/UAF.\n\nNote that the repost path already uses the correct pattern: detach the\npointer under the lock, then free it after dropping the lock. The\ndeferred path should do the same.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.81.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-39841",
"url": "https://www.suse.com/security/cve/CVE-2025-39841"
},
{
"category": "external",
"summary": "SUSE Bug 1250274 for CVE-2025-39841",
"url": "https://bugzilla.suse.com/1250274"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.81.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.81.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-10-27T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-39841"
},
{
"cve": "CVE-2025-39849",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-39849"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()\n\nIf the ssid-\u003edatalen is more than IEEE80211_MAX_SSID_LEN (32) it would\nlead to memory corruption so add some bounds checking.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.81.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-39849",
"url": "https://www.suse.com/security/cve/CVE-2025-39849"
},
{
"category": "external",
"summary": "SUSE Bug 1250266 for CVE-2025-39849",
"url": "https://bugzilla.suse.com/1250266"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.81.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.81.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.81.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.81.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-10-27T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-39849"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…