Security update for the Linux Kernel
| Announcement ID: | SUSE-SU-2025:4506-1 |
|---|---|
| Release Date: | 2025-12-22T16:39:04Z |
| Rating: | important |
| References: | |
| Cross-References: | |
| CVSS scores: |
|
| Affected Products: |
|
An update that solves eight vulnerabilities and has two security fixes can now be installed.
Description:
The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2022-50280: pnode: terminate at peers of source (bsc#1249806).
- CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251786).
- CVE-2024-53093: nvme-multipath: defer partition scanning (bsc#1233640).
- CVE-2025-40040: mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1252780).
- CVE-2025-40048: uio_hv_generic: Let userspace take care of interrupt mask (bsc#1252862).
- CVE-2025-40121: ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping (bsc#1253367).
- CVE-2025-40154: ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (bsc#1253431).
- CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253436).
The following non-security bugs were fixed:
- Fix type signess in fbcon_set_font() (bsc#1252033).
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (bsc#1252267).
Special Instructions and Notes:
- Please reboot the system after installing this update.
Patch Instructions:
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
-
openSUSE Leap 15.5
zypper in -t patch SUSE-2025-4506=1 -
SUSE Linux Enterprise Micro 5.5
zypper in -t patch SUSE-SLE-Micro-5.5-2025-4506=1 -
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-4506=1 -
SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-4506=1 -
SUSE Linux Enterprise Server 15 SP5 LTSS
zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-4506=1 -
SUSE Linux Enterprise Server for SAP Applications 15 SP5
zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-4506=1 -
SUSE Linux Enterprise Live Patching 15-SP5
zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2025-4506=1
Package List:
-
openSUSE Leap 15.5 (noarch nosrc)
- kernel-docs-5.14.21-150500.55.130.1
-
openSUSE Leap 15.5 (noarch)
- kernel-devel-5.14.21-150500.55.130.3
- kernel-source-vanilla-5.14.21-150500.55.130.3
- kernel-macros-5.14.21-150500.55.130.3
- kernel-source-5.14.21-150500.55.130.3
- kernel-docs-html-5.14.21-150500.55.130.1
-
openSUSE Leap 15.5 (aarch64 ppc64le x86_64)
- kernel-kvmsmall-devel-debuginfo-5.14.21-150500.55.130.3
- kernel-kvmsmall-debugsource-5.14.21-150500.55.130.3
- kernel-kvmsmall-debuginfo-5.14.21-150500.55.130.3
- kernel-default-base-rebuild-5.14.21-150500.55.130.3.150500.6.63.3
- kernel-default-base-5.14.21-150500.55.130.3.150500.6.63.3
- kernel-kvmsmall-devel-5.14.21-150500.55.130.3
-
openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64)
- kselftests-kmp-default-5.14.21-150500.55.130.3
- ocfs2-kmp-default-5.14.21-150500.55.130.3
- reiserfs-kmp-default-debuginfo-5.14.21-150500.55.130.3
- cluster-md-kmp-default-5.14.21-150500.55.130.3
- kernel-default-optional-debuginfo-5.14.21-150500.55.130.3
- gfs2-kmp-default-5.14.21-150500.55.130.3
- reiserfs-kmp-default-5.14.21-150500.55.130.3
- kernel-default-extra-5.14.21-150500.55.130.3
- gfs2-kmp-default-debuginfo-5.14.21-150500.55.130.3
- dlm-kmp-default-5.14.21-150500.55.130.3
- kernel-default-extra-debuginfo-5.14.21-150500.55.130.3
- kernel-default-devel-debuginfo-5.14.21-150500.55.130.3
- dlm-kmp-default-debuginfo-5.14.21-150500.55.130.3
- cluster-md-kmp-default-debuginfo-5.14.21-150500.55.130.3
- kernel-default-optional-5.14.21-150500.55.130.3
- kernel-obs-build-5.14.21-150500.55.130.3
- kernel-syms-5.14.21-150500.55.130.1
- kernel-obs-build-debugsource-5.14.21-150500.55.130.3
- kernel-obs-qa-5.14.21-150500.55.130.1
- kselftests-kmp-default-debuginfo-5.14.21-150500.55.130.3
- kernel-default-debugsource-5.14.21-150500.55.130.3
- ocfs2-kmp-default-debuginfo-5.14.21-150500.55.130.3
- kernel-default-livepatch-5.14.21-150500.55.130.3
- kernel-default-debuginfo-5.14.21-150500.55.130.3
- kernel-default-devel-5.14.21-150500.55.130.3
-
openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 nosrc)
- kernel-default-5.14.21-150500.55.130.3
-
openSUSE Leap 15.5 (ppc64le s390x x86_64)
- kernel-livepatch-SLE15-SP5_Update_33-debugsource-1-150500.11.3.3
- kernel-livepatch-5_14_21-150500_55_130-default-debuginfo-1-150500.11.3.3
- kernel-livepatch-5_14_21-150500_55_130-default-1-150500.11.3.3
- kernel-default-livepatch-devel-5.14.21-150500.55.130.3
-
openSUSE Leap 15.5 (x86_64)
- kernel-kvmsmall-vdso-debuginfo-5.14.21-150500.55.130.3
- kernel-default-vdso-debuginfo-5.14.21-150500.55.130.3
- kernel-kvmsmall-vdso-5.14.21-150500.55.130.3
- kernel-default-vdso-5.14.21-150500.55.130.3
-
openSUSE Leap 15.5 (aarch64 nosrc ppc64le x86_64)
- kernel-kvmsmall-5.14.21-150500.55.130.3
-
openSUSE Leap 15.5 (nosrc s390x)
- kernel-zfcpdump-5.14.21-150500.55.130.3
-
openSUSE Leap 15.5 (s390x)
- kernel-zfcpdump-debugsource-5.14.21-150500.55.130.3
- kernel-zfcpdump-debuginfo-5.14.21-150500.55.130.3
-
openSUSE Leap 15.5 (nosrc)
- dtb-aarch64-5.14.21-150500.55.130.1
-
openSUSE Leap 15.5 (aarch64)
- kernel-64kb-optional-5.14.21-150500.55.130.3
- ocfs2-kmp-64kb-5.14.21-150500.55.130.3
- kselftests-kmp-64kb-debuginfo-5.14.21-150500.55.130.3
- dtb-marvell-5.14.21-150500.55.130.1
- dlm-kmp-64kb-5.14.21-150500.55.130.3
- gfs2-kmp-64kb-debuginfo-5.14.21-150500.55.130.3
- dtb-hisilicon-5.14.21-150500.55.130.1
- ocfs2-kmp-64kb-debuginfo-5.14.21-150500.55.130.3
- reiserfs-kmp-64kb-debuginfo-5.14.21-150500.55.130.3
- dtb-broadcom-5.14.21-150500.55.130.1
- dtb-apm-5.14.21-150500.55.130.1
- kernel-64kb-optional-debuginfo-5.14.21-150500.55.130.3
- dtb-amd-5.14.21-150500.55.130.1
- dtb-arm-5.14.21-150500.55.130.1
- kernel-64kb-extra-debuginfo-5.14.21-150500.55.130.3
- kernel-64kb-devel-debuginfo-5.14.21-150500.55.130.3
- dtb-freescale-5.14.21-150500.55.130.1
- dtb-exynos-5.14.21-150500.55.130.1
- kernel-64kb-extra-5.14.21-150500.55.130.3
- kselftests-kmp-64kb-5.14.21-150500.55.130.3
- cluster-md-kmp-64kb-5.14.21-150500.55.130.3
- dtb-cavium-5.14.21-150500.55.130.1
- dtb-rockchip-5.14.21-150500.55.130.1
- dtb-xilinx-5.14.21-150500.55.130.1
- reiserfs-kmp-64kb-5.14.21-150500.55.130.3
- cluster-md-kmp-64kb-debuginfo-5.14.21-150500.55.130.3
- dtb-qcom-5.14.21-150500.55.130.1
- dtb-allwinner-5.14.21-150500.55.130.1
- dtb-renesas-5.14.21-150500.55.130.1
- dtb-apple-5.14.21-150500.55.130.1
- dtb-sprd-5.14.21-150500.55.130.1
- dtb-lg-5.14.21-150500.55.130.1
- dtb-mediatek-5.14.21-150500.55.130.1
- gfs2-kmp-64kb-5.14.21-150500.55.130.3
- dtb-amazon-5.14.21-150500.55.130.1
- kernel-64kb-debuginfo-5.14.21-150500.55.130.3
- kernel-64kb-devel-5.14.21-150500.55.130.3
- kernel-64kb-debugsource-5.14.21-150500.55.130.3
- dlm-kmp-64kb-debuginfo-5.14.21-150500.55.130.3
- dtb-socionext-5.14.21-150500.55.130.1
- dtb-amlogic-5.14.21-150500.55.130.1
- dtb-nvidia-5.14.21-150500.55.130.1
- dtb-altera-5.14.21-150500.55.130.1
-
openSUSE Leap 15.5 (aarch64 nosrc)
- kernel-64kb-5.14.21-150500.55.130.3
-
SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64 nosrc)
- kernel-default-5.14.21-150500.55.130.3
-
SUSE Linux Enterprise Micro 5.5 (aarch64 x86_64)
- kernel-default-base-5.14.21-150500.55.130.3.150500.6.63.3
-
SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64)
- kernel-default-debugsource-5.14.21-150500.55.130.3
- kernel-default-debuginfo-5.14.21-150500.55.130.3
-
SUSE Linux Enterprise Micro 5.5 (noarch)
- kernel-macros-5.14.21-150500.55.130.3
-
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64)
- cluster-md-kmp-default-debuginfo-5.14.21-150500.55.130.3
- ocfs2-kmp-default-5.14.21-150500.55.130.3
- gfs2-kmp-default-debuginfo-5.14.21-150500.55.130.3
- kernel-default-debugsource-5.14.21-150500.55.130.3
- ocfs2-kmp-default-debuginfo-5.14.21-150500.55.130.3
- cluster-md-kmp-default-5.14.21-150500.55.130.3
- kernel-obs-build-5.14.21-150500.55.130.3
- kernel-syms-5.14.21-150500.55.130.1
- dlm-kmp-default-5.14.21-150500.55.130.3
- kernel-default-base-5.14.21-150500.55.130.3.150500.6.63.3
- kernel-default-debuginfo-5.14.21-150500.55.130.3
- dlm-kmp-default-debuginfo-5.14.21-150500.55.130.3
- kernel-obs-build-debugsource-5.14.21-150500.55.130.3
- kernel-default-devel-5.14.21-150500.55.130.3
- kernel-default-devel-debuginfo-5.14.21-150500.55.130.3
- gfs2-kmp-default-5.14.21-150500.55.130.3
-
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 nosrc)
- kernel-64kb-5.14.21-150500.55.130.3
-
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64)
- kernel-64kb-devel-5.14.21-150500.55.130.3
- kernel-64kb-debuginfo-5.14.21-150500.55.130.3
- kernel-64kb-debugsource-5.14.21-150500.55.130.3
- kernel-64kb-devel-debuginfo-5.14.21-150500.55.130.3
-
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 nosrc x86_64)
- kernel-default-5.14.21-150500.55.130.3
-
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch)
- kernel-source-5.14.21-150500.55.130.3
- kernel-devel-5.14.21-150500.55.130.3
- kernel-macros-5.14.21-150500.55.130.3
-
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch nosrc)
- kernel-docs-5.14.21-150500.55.130.1
-
SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64)
- cluster-md-kmp-default-debuginfo-5.14.21-150500.55.130.3
- ocfs2-kmp-default-5.14.21-150500.55.130.3
- gfs2-kmp-default-debuginfo-5.14.21-150500.55.130.3
- kernel-default-debugsource-5.14.21-150500.55.130.3
- ocfs2-kmp-default-debuginfo-5.14.21-150500.55.130.3
- cluster-md-kmp-default-5.14.21-150500.55.130.3
- kernel-obs-build-5.14.21-150500.55.130.3
- kernel-syms-5.14.21-150500.55.130.1
- dlm-kmp-default-5.14.21-150500.55.130.3
- kernel-default-base-5.14.21-150500.55.130.3.150500.6.63.3
- kernel-default-debuginfo-5.14.21-150500.55.130.3
- dlm-kmp-default-debuginfo-5.14.21-150500.55.130.3
- kernel-obs-build-debugsource-5.14.21-150500.55.130.3
- kernel-default-devel-5.14.21-150500.55.130.3
- kernel-default-devel-debuginfo-5.14.21-150500.55.130.3
- gfs2-kmp-default-5.14.21-150500.55.130.3
-
SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 nosrc)
- kernel-64kb-5.14.21-150500.55.130.3
-
SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64)
- kernel-64kb-devel-5.14.21-150500.55.130.3
- kernel-64kb-debuginfo-5.14.21-150500.55.130.3
- kernel-64kb-debugsource-5.14.21-150500.55.130.3
- kernel-64kb-devel-debuginfo-5.14.21-150500.55.130.3
-
SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 nosrc x86_64)
- kernel-default-5.14.21-150500.55.130.3
-
SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch)
- kernel-source-5.14.21-150500.55.130.3
- kernel-devel-5.14.21-150500.55.130.3
- kernel-macros-5.14.21-150500.55.130.3
-
SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch nosrc)
- kernel-docs-5.14.21-150500.55.130.1
-
SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64)
- cluster-md-kmp-default-debuginfo-5.14.21-150500.55.130.3
- reiserfs-kmp-default-5.14.21-150500.55.130.3
- ocfs2-kmp-default-5.14.21-150500.55.130.3
- gfs2-kmp-default-debuginfo-5.14.21-150500.55.130.3
- kernel-default-debugsource-5.14.21-150500.55.130.3
- ocfs2-kmp-default-debuginfo-5.14.21-150500.55.130.3
- cluster-md-kmp-default-5.14.21-150500.55.130.3
- reiserfs-kmp-default-debuginfo-5.14.21-150500.55.130.3
- kernel-obs-build-5.14.21-150500.55.130.3
- kernel-syms-5.14.21-150500.55.130.1
- dlm-kmp-default-5.14.21-150500.55.130.3
- kernel-default-debuginfo-5.14.21-150500.55.130.3
- dlm-kmp-default-debuginfo-5.14.21-150500.55.130.3
- kernel-obs-build-debugsource-5.14.21-150500.55.130.3
- kernel-default-devel-5.14.21-150500.55.130.3
- kernel-default-devel-debuginfo-5.14.21-150500.55.130.3
- gfs2-kmp-default-5.14.21-150500.55.130.3
-
SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 nosrc)
- kernel-64kb-5.14.21-150500.55.130.3
-
SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64)
- kernel-64kb-devel-5.14.21-150500.55.130.3
- kernel-64kb-debuginfo-5.14.21-150500.55.130.3
- kernel-64kb-debugsource-5.14.21-150500.55.130.3
- kernel-64kb-devel-debuginfo-5.14.21-150500.55.130.3
-
SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64 nosrc)
- kernel-default-5.14.21-150500.55.130.3
-
SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le x86_64)
- kernel-default-base-5.14.21-150500.55.130.3.150500.6.63.3
-
SUSE Linux Enterprise Server 15 SP5 LTSS (noarch)
- kernel-source-5.14.21-150500.55.130.3
- kernel-devel-5.14.21-150500.55.130.3
- kernel-macros-5.14.21-150500.55.130.3
-
SUSE Linux Enterprise Server 15 SP5 LTSS (noarch nosrc)
- kernel-docs-5.14.21-150500.55.130.1
-
SUSE Linux Enterprise Server 15 SP5 LTSS (nosrc s390x)
- kernel-zfcpdump-5.14.21-150500.55.130.3
-
SUSE Linux Enterprise Server 15 SP5 LTSS (s390x)
- kernel-zfcpdump-debugsource-5.14.21-150500.55.130.3
- kernel-zfcpdump-debuginfo-5.14.21-150500.55.130.3
-
SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64)
- cluster-md-kmp-default-debuginfo-5.14.21-150500.55.130.3
- reiserfs-kmp-default-5.14.21-150500.55.130.3
- ocfs2-kmp-default-5.14.21-150500.55.130.3
- gfs2-kmp-default-debuginfo-5.14.21-150500.55.130.3
- kernel-default-debugsource-5.14.21-150500.55.130.3
- ocfs2-kmp-default-debuginfo-5.14.21-150500.55.130.3
- cluster-md-kmp-default-5.14.21-150500.55.130.3
- reiserfs-kmp-default-debuginfo-5.14.21-150500.55.130.3
- kernel-obs-build-5.14.21-150500.55.130.3
- kernel-syms-5.14.21-150500.55.130.1
- dlm-kmp-default-5.14.21-150500.55.130.3
- kernel-default-base-5.14.21-150500.55.130.3.150500.6.63.3
- kernel-default-debuginfo-5.14.21-150500.55.130.3
- dlm-kmp-default-debuginfo-5.14.21-150500.55.130.3
- kernel-obs-build-debugsource-5.14.21-150500.55.130.3
- kernel-default-devel-5.14.21-150500.55.130.3
- kernel-default-devel-debuginfo-5.14.21-150500.55.130.3
- gfs2-kmp-default-5.14.21-150500.55.130.3
-
SUSE Linux Enterprise Server for SAP Applications 15 SP5 (nosrc ppc64le x86_64)
- kernel-default-5.14.21-150500.55.130.3
-
SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch)
- kernel-source-5.14.21-150500.55.130.3
- kernel-devel-5.14.21-150500.55.130.3
- kernel-macros-5.14.21-150500.55.130.3
-
SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch nosrc)
- kernel-docs-5.14.21-150500.55.130.1
-
SUSE Linux Enterprise Live Patching 15-SP5 (nosrc)
- kernel-default-5.14.21-150500.55.130.3
-
SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64)
- kernel-default-debugsource-5.14.21-150500.55.130.3
- kernel-livepatch-SLE15-SP5_Update_33-debugsource-1-150500.11.3.3
- kernel-livepatch-5_14_21-150500_55_130-default-debuginfo-1-150500.11.3.3
- kernel-livepatch-5_14_21-150500_55_130-default-1-150500.11.3.3
- kernel-default-livepatch-5.14.21-150500.55.130.3
- kernel-default-livepatch-devel-5.14.21-150500.55.130.3
- kernel-default-debuginfo-5.14.21-150500.55.130.3
References:
- https://www.suse.com/security/cve/CVE-2022-50280.html
- https://www.suse.com/security/cve/CVE-2023-53676.html
- https://www.suse.com/security/cve/CVE-2024-53093.html
- https://www.suse.com/security/cve/CVE-2025-40040.html
- https://www.suse.com/security/cve/CVE-2025-40048.html
- https://www.suse.com/security/cve/CVE-2025-40121.html
- https://www.suse.com/security/cve/CVE-2025-40154.html
- https://www.suse.com/security/cve/CVE-2025-40204.html
- https://bugzilla.suse.com/show_bug.cgi?id=1233640
- https://bugzilla.suse.com/show_bug.cgi?id=1249806
- https://bugzilla.suse.com/show_bug.cgi?id=1251786
- https://bugzilla.suse.com/show_bug.cgi?id=1252033
- https://bugzilla.suse.com/show_bug.cgi?id=1252267
- https://bugzilla.suse.com/show_bug.cgi?id=1252780
- https://bugzilla.suse.com/show_bug.cgi?id=1252862
- https://bugzilla.suse.com/show_bug.cgi?id=1253367
- https://bugzilla.suse.com/show_bug.cgi?id=1253431
- https://bugzilla.suse.com/show_bug.cgi?id=1253436