Security update for the Linux Kernel

Announcement ID:	SUSE-SU-2025:02850-1
Release Date:	2025-08-18T15:57:32Z
Rating:	important
References:	bsc#1233551 bsc#1234863 bsc#1236333 bsc#1239644 bsc#1242414 bsc#1242417 bsc#1245217 bsc#1245711 bsc#1245986 bsc#1246000 bsc#1246029 bsc#1246037 bsc#1246045 bsc#1246186 bsc#1247347 bsc#1247348 bsc#1247349
Cross-References:	CVE-2023-52927 CVE-2024-53057 CVE-2024-53164 CVE-2024-57947 CVE-2025-37797 CVE-2025-37798 CVE-2025-38079 CVE-2025-38120 CVE-2025-38177 CVE-2025-38181 CVE-2025-38200 CVE-2025-38212 CVE-2025-38213 CVE-2025-38257 CVE-2025-38494 CVE-2025-38495 CVE-2025-38497
CVSS scores:	CVE-2023-52927 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2023-52927 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2023-52927 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2024-53057 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2024-53057 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2024-53057 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2024-53164 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVE-2024-53164 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2024-57947 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2024-57947 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2025-37797 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2025-37798 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2025-38079 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2025-38079 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2025-38120 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N CVE-2025-38120 ( SUSE ): 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2025-38177 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2025-38177 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2025-38181 ( SUSE ): 8.2 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVE-2025-38181 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2025-38200 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2025-38200 ( SUSE ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H CVE-2025-38212 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2025-38212 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2025-38213 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2025-38213 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2025-38257 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2025-38257 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2025-38494 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2025-38494 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2025-38495 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVE-2025-38495 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2025-38497 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N CVE-2025-38497 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H
Affected Products:	SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro for Rancher 5.2

An update that solves 17 vulnerabilities can now be installed.

Description:

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
• CVE-2023-52927: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644).
• CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
• CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
• CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
• CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245217).
• CVE-2025-38181: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr() (bsc#1246000).
• CVE-2025-38200: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (bsc#1246045).
• CVE-2025-38212: ipc: fix to protect IPCS lookups using RCU (bsc#1246029).
• CVE-2025-38213: vgacon: Add check for vc_origin address range in vgacon_scroll() (bsc#1246037).
• CVE-2025-38257: s390/pkey: Prevent overflow in size calculation for memdup_user() (bsc#1246186).
• CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247349).
• CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID (bsc#1247348).
• CVE-2025-38497: usb: gadget: configfs: Fix OOB read on empty string write (bsc#1247347).

Special Instructions and Notes:

• Please reboot the system after installing this update.

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• SUSE Linux Enterprise Micro 5.1
  zypper in -t patch SUSE-SUSE-MicroOS-5.1-2025-2850=1
• SUSE Linux Enterprise Micro 5.2
  zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-2850=1
• SUSE Linux Enterprise Micro for Rancher 5.2
  zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-2850=1

Package List:

• SUSE Linux Enterprise Micro 5.1 (nosrc x86_64)
  • kernel-rt-5.3.18-150300.217.1
• SUSE Linux Enterprise Micro 5.1 (x86_64)
  • kernel-rt-debuginfo-5.3.18-150300.217.1
  • kernel-rt-debugsource-5.3.18-150300.217.1
• SUSE Linux Enterprise Micro 5.1 (noarch)
  • kernel-source-rt-5.3.18-150300.217.1
• SUSE Linux Enterprise Micro 5.2 (nosrc x86_64)
  • kernel-rt-5.3.18-150300.217.1
• SUSE Linux Enterprise Micro 5.2 (x86_64)
  • kernel-rt-debuginfo-5.3.18-150300.217.1
  • kernel-rt-debugsource-5.3.18-150300.217.1
• SUSE Linux Enterprise Micro 5.2 (noarch)
  • kernel-source-rt-5.3.18-150300.217.1
• SUSE Linux Enterprise Micro for Rancher 5.2 (nosrc x86_64)
  • kernel-rt-5.3.18-150300.217.1
• SUSE Linux Enterprise Micro for Rancher 5.2 (x86_64)
  • kernel-rt-debuginfo-5.3.18-150300.217.1
  • kernel-rt-debugsource-5.3.18-150300.217.1
• SUSE Linux Enterprise Micro for Rancher 5.2 (noarch)
  • kernel-source-rt-5.3.18-150300.217.1

References:

• https://www.suse.com/security/cve/CVE-2023-52927.html
• https://www.suse.com/security/cve/CVE-2024-53057.html
• https://www.suse.com/security/cve/CVE-2024-53164.html
• https://www.suse.com/security/cve/CVE-2024-57947.html
• https://www.suse.com/security/cve/CVE-2025-37797.html
• https://www.suse.com/security/cve/CVE-2025-37798.html
• https://www.suse.com/security/cve/CVE-2025-38079.html
• https://www.suse.com/security/cve/CVE-2025-38120.html
• https://www.suse.com/security/cve/CVE-2025-38177.html
• https://www.suse.com/security/cve/CVE-2025-38181.html
• https://www.suse.com/security/cve/CVE-2025-38200.html
• https://www.suse.com/security/cve/CVE-2025-38212.html
• https://www.suse.com/security/cve/CVE-2025-38213.html
• https://www.suse.com/security/cve/CVE-2025-38257.html
• https://www.suse.com/security/cve/CVE-2025-38494.html
• https://www.suse.com/security/cve/CVE-2025-38495.html
• https://www.suse.com/security/cve/CVE-2025-38497.html
• https://bugzilla.suse.com/show_bug.cgi?id=1233551
• https://bugzilla.suse.com/show_bug.cgi?id=1234863
• https://bugzilla.suse.com/show_bug.cgi?id=1236333
• https://bugzilla.suse.com/show_bug.cgi?id=1239644
• https://bugzilla.suse.com/show_bug.cgi?id=1242414
• https://bugzilla.suse.com/show_bug.cgi?id=1242417
• https://bugzilla.suse.com/show_bug.cgi?id=1245217
• https://bugzilla.suse.com/show_bug.cgi?id=1245711
• https://bugzilla.suse.com/show_bug.cgi?id=1245986
• https://bugzilla.suse.com/show_bug.cgi?id=1246000
• https://bugzilla.suse.com/show_bug.cgi?id=1246029
• https://bugzilla.suse.com/show_bug.cgi?id=1246037
• https://bugzilla.suse.com/show_bug.cgi?id=1246045
• https://bugzilla.suse.com/show_bug.cgi?id=1246186
• https://bugzilla.suse.com/show_bug.cgi?id=1247347
• https://bugzilla.suse.com/show_bug.cgi?id=1247348
• https://bugzilla.suse.com/show_bug.cgi?id=1247349