Upstream information
Description
In the Linux kernel, the following vulnerability has been resolved:eventpoll: don't decrement ep refcount while still holding the ep mutex
Jann Horn points out that epoll is decrementing the ep refcount and then
doing a
mutex_unlock(&ep->mtx);
afterwards. That's very wrong, because it can lead to a use-after-free.
That pattern is actually fine for the very last reference, because the
code in question will delay the actual call to "ep_free(ep)" until after
it has unlocked the mutex.
But it's wrong for the much subtler "next to last" case when somebody
*else* may also be dropping their reference and free the ep while we're
still using the mutex.
Note that this is true even if that other user is also using the same ep
mutex: mutexes, unlike spinlocks, can not be used for object ownership,
even if they guarantee mutual exclusion.
A mutex "unlock" operation is not atomic, and as one user is still
accessing the mutex as part of unlocking it, another user can come in
and get the now released mutex and free the data structure while the
first user is still cleaning up.
See our mutex documentation in Documentation/locking/mutex-design.rst,
in particular the section [1] about semantics:
"mutex_unlock() may access the mutex structure even after it has
internally released the lock already - so it's not safe for
another context to acquire the mutex and assume that the
mutex_unlock() context is not using the structure anymore"
So if we drop our ep ref before the mutex unlock, but we weren't the
last one, we may then unlock the mutex, another user comes in, drops
_their_ reference and releases the 'ep' as it now has no users - all
while the mutex_unlock() is still accessing it.
Fix this by simply moving the ep refcount dropping to outside the mutex:
the refcount itself is atomic, and doesn't need mutex protection (that's
the whole _point_ of refcounts: unlike mutexes, they are inherently
about object lifetimes).
SUSE information
Overall state of this security issue: Pending
This issue is currently rated as having moderate severity.
SUSE | |
---|---|
Base Score | 6.5 |
Vector | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H |
Attack Vector | Local |
Attack Complexity | High |
Privileges Required | Low |
User Interaction | None |
Scope | Unchanged |
Confidentiality Impact | Low |
Integrity Impact | High |
Availability Impact | High |
CVSSv3 Version | 3.1 |
SUSE | |
---|---|
Base Score | 5.9 |
Vector | CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N |
Attack Vector | Local |
Attack Complexity | High |
Attack Requirements | None |
Privileges Required | Low |
User Interaction | None |
Vulnerable System Confidentiality Impact | Low |
Vulnerable System Integrity Impact | High |
Vulnerable System Availability Impact | High |
Subsequent System Confidentiality Impact | None |
Subsequent System Integrity Impact | None |
Subsequent System Availability Impact | None |
CVSSv4 Version | 4.0 |
Note from the SUSE Security Team on the kernel-default package
SUSE will no longer fix all CVEs in the Linux Kernel anymore, but declare some bug classes as won't fix. Please refer to TID 21496 for more details. SUSE Bugzilla entry: 1246777 [NEW]SUSE Security Advisories:
- SUSE-SU-2025:02853-1, published 2025-08-18T16:01:55Z
- SUSE-SU-2025:02923-1, published 2025-08-20T07:24:59Z
- SUSE-SU-2025:02969-1, published 2025-08-25T06:22:25Z
- SUSE-SU-2025:02996-1, published 2025-08-27T12:03:11Z
- SUSE-SU-2025:02997-1, published 2025-08-27T12:04:25Z
- SUSE-SU-2025:03011-1, published 2025-08-28T12:06:16Z
- SUSE-SU-2025:03023-1, published 2025-08-29T11:54:10Z
- SUSE-SU-2025:20577-1, published 2025-08-25T12:34:20Z
- SUSE-SU-2025:20586-1, published 2025-08-25T12:51:43Z
- SUSE-SU-2025:20601-1, published 2025-08-25T13:29:45Z
- SUSE-SU-2025:20602-1, published 2025-08-25T13:33:57Z
List of released packages
Product(s) | Fixed package version(s) | References |
---|---|---|
Container bci/bci-sle15-kernel-module-devel:15.6.47.15 |
| |
Container bci/bci-sle15-kernel-module-devel:latest |
| |
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:15.6.17.8.103 |
| |
Container suse/sl-micro/6.0/base-os-container:2.1.3-7.44 |
| |
Container suse/sl-micro/6.0/kvm-os-container:2.1.3-6.67 |
| |
Container suse/sl-micro/6.0/rt-os-container:2.1.3-7.76 |
| |
Image SLES15-SP6 Image SLES15-SP6-Azure-3P Image SLES15-SP6-Azure-Standard |
| |
SUSE Linux Enterprise Desktop 15 SP6 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP6-2025-2996 SUSE-SLE-Module-Development-Tools-15-SP6-2025-2996 SUSE-SLE-Product-WE-15-SP6-2025-2996 |
SUSE Linux Enterprise Desktop 15 SP7 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP7-2025-2997 SUSE-SLE-Module-Development-Tools-15-SP7-2025-2997 SUSE-SLE-Product-WE-15-SP7-2025-2997 |
SUSE Linux Enterprise High Availability Extension 15 SP6 |
| Patchnames: SUSE-SLE-Product-HA-15-SP6-2025-2996 |
SUSE Linux Enterprise High Availability Extension 15 SP7 |
| Patchnames: SUSE-SLE-Product-HA-15-SP7-2025-2997 |
SUSE Linux Enterprise High Performance Computing 15 SP6 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP6-2025-2996 SUSE-SLE-Module-Development-Tools-15-SP6-2025-2996 SUSE-SLE-Module-Legacy-15-SP6-2025-2996 SUSE-SLE-Module-Public-Cloud-15-SP6-2025-2969 |
SUSE Linux Enterprise High Performance Computing 15 SP7 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP7-2025-2997 SUSE-SLE-Module-Development-Tools-15-SP7-2025-2997 SUSE-SLE-Module-Legacy-15-SP7-2025-2997 SUSE-SLE-Module-Public-Cloud-15-SP7-2025-3011 |
SUSE Linux Enterprise Live Patching 15 SP6 | Patchnames: SUSE-SLE-Module-Live-Patching-15-SP6-2025-3023 | |
SUSE Linux Enterprise Live Patching 15 SP7 | Patchnames: SUSE-SLE-Module-Live-Patching-15-SP7-2025-2853 | |
SUSE Linux Enterprise Module for Basesystem 15 SP6 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP6-2025-2996 |
SUSE Linux Enterprise Module for Basesystem 15 SP7 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP7-2025-2997 |
SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 |
| Patchnames: SUSE-SLE-Module-Confidential-Computing-15-SP6-2025-2923 |
SUSE Linux Enterprise Module for Development Tools 15 SP6 |
| Patchnames: SUSE-SLE-Module-Development-Tools-15-SP6-2025-2996 |
SUSE Linux Enterprise Module for Development Tools 15 SP7 |
| Patchnames: SUSE-SLE-Module-Development-Tools-15-SP7-2025-2997 |
SUSE Linux Enterprise Module for Legacy 15 SP6 |
| Patchnames: SUSE-SLE-Module-Legacy-15-SP6-2025-2996 |
SUSE Linux Enterprise Module for Legacy 15 SP7 |
| Patchnames: SUSE-SLE-Module-Legacy-15-SP7-2025-2997 |
SUSE Linux Enterprise Module for Public Cloud 15 SP6 |
| Patchnames: SUSE-SLE-Module-Public-Cloud-15-SP6-2025-2969 |
SUSE Linux Enterprise Module for Public Cloud 15 SP7 |
| Patchnames: SUSE-SLE-Module-Public-Cloud-15-SP7-2025-3011 |
SUSE Linux Enterprise Real Time 15 SP6 SUSE Real Time Module 15 SP6 |
| Patchnames: SUSE-SLE-Module-RT-15-SP6-2025-3023 |
SUSE Linux Enterprise Real Time 15 SP7 SUSE Real Time Module 15 SP7 |
| Patchnames: SUSE-SLE-Module-RT-15-SP7-2025-2853 |
SUSE Linux Enterprise Server 15 SP6 SUSE Linux Enterprise Server for SAP Applications 15 SP6 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP6-2025-2996 SUSE-SLE-Module-Development-Tools-15-SP6-2025-2996 SUSE-SLE-Module-Legacy-15-SP6-2025-2996 SUSE-SLE-Module-Public-Cloud-15-SP6-2025-2969 SUSE-SLE-Product-WE-15-SP6-2025-2996 |
SUSE Linux Enterprise Server 15 SP7 SUSE Linux Enterprise Server for SAP Applications 15 SP7 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP7-2025-2997 SUSE-SLE-Module-Development-Tools-15-SP7-2025-2997 SUSE-SLE-Module-Legacy-15-SP7-2025-2997 SUSE-SLE-Module-Public-Cloud-15-SP7-2025-3011 SUSE-SLE-Product-WE-15-SP7-2025-2997 |
SUSE Linux Enterprise Workstation Extension 15 SP6 |
| Patchnames: SUSE-SLE-Product-WE-15-SP6-2025-2996 |
SUSE Linux Enterprise Workstation Extension 15 SP7 |
| Patchnames: SUSE-SLE-Product-WE-15-SP7-2025-2997 |
SUSE Linux Micro 6.0 |
| Patchnames: SUSE-SLE-Micro-6.0-kernel-82 SUSE-SLE-Micro-6.0-kernel-83 |
SUSE Linux Micro 6.1 |
| Patchnames: SUSE-SLE-Micro-6.1-kernel-82 SUSE-SLE-Micro-6.1-kernel-83 |
openSUSE Leap 15.6 |
| Patchnames: openSUSE-SLE-15.6-2025-2969 openSUSE-SLE-15.6-2025-2996 openSUSE-SLE-15.6-2025-3023 |
First public cloud image revisions this CVE is fixed in:
- microsoft/suse-sle-micro-6-1-byos-v20250831-x86_64
- microsoft/suse-sles-15-sp6-v20250829-arm64
- microsoft/suse-sles-15-sp6-v20250829-arm64-llc
- microsoft/suse-sles-15-sp6-v20250829-arm64-ltd
- microsoft/suse-sles-15-sp6-v20250829-x86_64
- microsoft/suse-sles-15-sp6-v20250829-x86_64-llc
- microsoft/suse-sles-15-sp6-v20250829-x86_64-ltd
Status of this issue by product and package
Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification. The updates are grouped by state of their lifecycle. SUSE product lifecycles are documented on the lifecycle page.
Product(s) | Source package | State |
---|---|---|
Products under general support and receiving all security fixes. | ||
SUSE Linux Enterprise Desktop 15 SP6 | kernel-64kb | Released |
SUSE Linux Enterprise Desktop 15 SP6 | kernel-default | Released |
SUSE Linux Enterprise Desktop 15 SP6 | kernel-default-base | Released |
SUSE Linux Enterprise Desktop 15 SP6 | kernel-docs | Released |
SUSE Linux Enterprise Desktop 15 SP6 | kernel-obs-build | Released |
SUSE Linux Enterprise Desktop 15 SP6 | kernel-source | Released |
SUSE Linux Enterprise Desktop 15 SP6 | kernel-syms | Released |
SUSE Linux Enterprise Desktop 15 SP6 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Desktop 15 SP7 | kernel-64kb | Released |
SUSE Linux Enterprise Desktop 15 SP7 | kernel-default | Released |
SUSE Linux Enterprise Desktop 15 SP7 | kernel-default-base | Released |
SUSE Linux Enterprise Desktop 15 SP7 | kernel-docs | Released |
SUSE Linux Enterprise Desktop 15 SP7 | kernel-obs-build | Released |
SUSE Linux Enterprise Desktop 15 SP7 | kernel-source | Released |
SUSE Linux Enterprise Desktop 15 SP7 | kernel-syms | Released |
SUSE Linux Enterprise Desktop 15 SP7 | kernel-zfcpdump | Released |
SUSE Linux Enterprise High Availability Extension 15 SP6 | kernel-default | Released |
SUSE Linux Enterprise High Availability Extension 15 SP7 | kernel-default | Released |
SUSE Linux Enterprise High Availability Extension 15 SP7 | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-64kb | Released |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-azure | Released |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-default | Released |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-default-base | Released |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-docs | Released |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-obs-build | Released |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-source | Released |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-source-azure | Released |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-syms | Released |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-syms-azure | Released |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-zfcpdump | Released |
SUSE Linux Enterprise High Performance Computing 15 SP7 | kernel-64kb | Released |
SUSE Linux Enterprise High Performance Computing 15 SP7 | kernel-azure | Released |
SUSE Linux Enterprise High Performance Computing 15 SP7 | kernel-default | Released |
SUSE Linux Enterprise High Performance Computing 15 SP7 | kernel-default-base | Released |
SUSE Linux Enterprise High Performance Computing 15 SP7 | kernel-docs | Released |
SUSE Linux Enterprise High Performance Computing 15 SP7 | kernel-obs-build | Released |
SUSE Linux Enterprise High Performance Computing 15 SP7 | kernel-source | Released |
SUSE Linux Enterprise High Performance Computing 15 SP7 | kernel-source-azure | Released |
SUSE Linux Enterprise High Performance Computing 15 SP7 | kernel-syms | Released |
SUSE Linux Enterprise High Performance Computing 15 SP7 | kernel-syms-azure | Released |
SUSE Linux Enterprise High Performance Computing 15 SP7 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Live Patching 15 SP6 | kernel-default | Affected |
SUSE Linux Enterprise Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6-RT_Update_14 | Released |
SUSE Linux Enterprise Live Patching 15 SP6 | kernel-source | Affected |
SUSE Linux Enterprise Live Patching 15 SP7 | kernel-default | Affected |
SUSE Linux Enterprise Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_3 | Released |
SUSE Linux Enterprise Live Patching 15 SP7 | kernel-source | Affected |
SUSE Linux Enterprise Micro 5.1 | kernel-default | Not affected |
SUSE Linux Enterprise Micro 5.1 | kernel-rt | Not affected |
SUSE Linux Enterprise Micro 5.1 | kernel-source | Not affected |
SUSE Linux Enterprise Micro 5.1 | kernel-source-rt | Not affected |
SUSE Linux Enterprise Micro 5.2 | kernel-default | Not affected |
SUSE Linux Enterprise Micro 5.2 | kernel-rt | Not affected |
SUSE Linux Enterprise Micro 5.2 | kernel-source | Not affected |
SUSE Linux Enterprise Micro 5.2 | kernel-source-rt | Not affected |
SUSE Linux Enterprise Micro 5.3 | kernel-default | Not affected |
SUSE Linux Enterprise Micro 5.3 | kernel-rt | Not affected |
SUSE Linux Enterprise Micro 5.3 | kernel-source | Not affected |
SUSE Linux Enterprise Micro 5.3 | kernel-source-rt | Not affected |
SUSE Linux Enterprise Micro 5.4 | kernel-default | Not affected |
SUSE Linux Enterprise Micro 5.4 | kernel-rt | Not affected |
SUSE Linux Enterprise Micro 5.4 | kernel-source | Not affected |
SUSE Linux Enterprise Micro 5.4 | kernel-source-rt | Not affected |
SUSE Linux Enterprise Micro 5.5 | kernel-default | Not affected |
SUSE Linux Enterprise Micro 5.5 | kernel-source | Not affected |
SUSE Linux Enterprise Micro 5.5 | kernel-source-rt | Not affected |
SUSE Linux Enterprise Module for Basesystem 15 SP6 | kernel-64kb | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP6 | kernel-default | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP6 | kernel-default-base | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP6 | kernel-source | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP6 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP7 | kernel-64kb | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP7 | kernel-default | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP7 | kernel-default-base | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP7 | kernel-source | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP7 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 | kernel-coco | Released |
SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 | kernel-coco_debug | Released |
SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 | kernel-source-coco | Released |
SUSE Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 | kernel-syms-coco | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP6 | kernel-default | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP6 | kernel-docs | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP6 | kernel-obs-build | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP6 | kernel-source | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP6 | kernel-syms | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP7 | kernel-default | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP7 | kernel-docs | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP7 | kernel-obs-build | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP7 | kernel-source | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP7 | kernel-syms | Released |
SUSE Linux Enterprise Module for Legacy 15 SP6 | kernel-default | Released |
SUSE Linux Enterprise Module for Legacy 15 SP7 | kernel-default | Released |
SUSE Linux Enterprise Module for Legacy 15 SP7 | kernel-source | Affected |
SUSE Linux Enterprise Module for Public Cloud 15 SP6 | kernel-azure | Released |
SUSE Linux Enterprise Module for Public Cloud 15 SP6 | kernel-source-azure | Released |
SUSE Linux Enterprise Module for Public Cloud 15 SP6 | kernel-syms-azure | Released |
SUSE Linux Enterprise Module for Public Cloud 15 SP7 | kernel-azure | Released |
SUSE Linux Enterprise Module for Public Cloud 15 SP7 | kernel-source-azure | Released |
SUSE Linux Enterprise Module for Public Cloud 15 SP7 | kernel-syms-azure | Released |
SUSE Linux Enterprise Real Time 15 SP6 | kernel-rt | Released |
SUSE Linux Enterprise Real Time 15 SP6 | kernel-rt_debug | Released |
SUSE Linux Enterprise Real Time 15 SP6 | kernel-source-rt | Released |
SUSE Linux Enterprise Real Time 15 SP6 | kernel-syms-rt | Released |
SUSE Linux Enterprise Real Time 15 SP7 | kernel-rt | Released |
SUSE Linux Enterprise Real Time 15 SP7 | kernel-source-rt | Released |
SUSE Linux Enterprise Real Time 15 SP7 | kernel-syms-rt | Released |
SUSE Linux Enterprise Server 15 SP6 | kernel-64kb | Released |
SUSE Linux Enterprise Server 15 SP6 | kernel-azure | Released |
SUSE Linux Enterprise Server 15 SP6 | kernel-default | Released |
SUSE Linux Enterprise Server 15 SP6 | kernel-default-base | Released |
SUSE Linux Enterprise Server 15 SP6 | kernel-docs | Released |
SUSE Linux Enterprise Server 15 SP6 | kernel-obs-build | Released |
SUSE Linux Enterprise Server 15 SP6 | kernel-source | Released |
SUSE Linux Enterprise Server 15 SP6 | kernel-source-azure | Released |
SUSE Linux Enterprise Server 15 SP6 | kernel-syms | Released |
SUSE Linux Enterprise Server 15 SP6 | kernel-syms-azure | Released |
SUSE Linux Enterprise Server 15 SP6 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Server 15 SP7 | kernel-64kb | Released |
SUSE Linux Enterprise Server 15 SP7 | kernel-azure | Released |
SUSE Linux Enterprise Server 15 SP7 | kernel-default | Released |
SUSE Linux Enterprise Server 15 SP7 | kernel-default-base | Released |
SUSE Linux Enterprise Server 15 SP7 | kernel-docs | Released |
SUSE Linux Enterprise Server 15 SP7 | kernel-obs-build | Released |
SUSE Linux Enterprise Server 15 SP7 | kernel-source | Released |
SUSE Linux Enterprise Server 15 SP7 | kernel-source-azure | Released |
SUSE Linux Enterprise Server 15 SP7 | kernel-syms | Released |
SUSE Linux Enterprise Server 15 SP7 | kernel-syms-azure | Released |
SUSE Linux Enterprise Server 15 SP7 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Server 16.0 | kernel-default | Affected |
SUSE Linux Enterprise Server 16.0 | kernel-source | Affected |
SUSE Linux Enterprise Server 16.0 | kernel-source-azure | Affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-64kb | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-azure | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-default | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-default-base | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-docs | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-obs-build | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-source | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-source-azure | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-syms | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-syms-azure | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP7 | kernel-64kb | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP7 | kernel-azure | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP7 | kernel-default | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP7 | kernel-default-base | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP7 | kernel-docs | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP7 | kernel-obs-build | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP7 | kernel-source | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP7 | kernel-source-azure | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP7 | kernel-syms | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP7 | kernel-syms-azure | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP7 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Server for SAP Applications 16.0 | kernel-source | Affected |
SUSE Linux Enterprise Server for SAP Applications 16.0 | kernel-source-azure | Affected |
SUSE Linux Enterprise Workstation Extension 15 SP6 | kernel-default | Released |
SUSE Linux Enterprise Workstation Extension 15 SP6 | kernel-source | Affected |
SUSE Linux Enterprise Workstation Extension 15 SP7 | kernel-default | Released |
SUSE Linux Enterprise Workstation Extension 15 SP7 | kernel-source | Affected |
SUSE Linux Micro 6.0 | kernel-default | Released |
SUSE Linux Micro 6.0 | kernel-default-base | Released |
SUSE Linux Micro 6.0 | kernel-kvmsmall | Released |
SUSE Linux Micro 6.0 | kernel-rt | Released |
SUSE Linux Micro 6.0 | kernel-source | Released |
SUSE Linux Micro 6.0 | kernel-source-rt | Released |
SUSE Linux Micro 6.1 | kernel-default | Released |
SUSE Linux Micro 6.1 | kernel-default-base | Released |
SUSE Linux Micro 6.1 | kernel-kvmsmall | Released |
SUSE Linux Micro 6.1 | kernel-rt | Released |
SUSE Linux Micro 6.1 | kernel-source | Released |
SUSE Linux Micro 6.1 | kernel-source-rt | Released |
SUSE Linux Micro 6.2 | kernel-source | Affected |
SUSE Real Time Module 15 SP6 | kernel-rt | Released |
SUSE Real Time Module 15 SP6 | kernel-rt_debug | Released |
SUSE Real Time Module 15 SP6 | kernel-source-rt | Released |
SUSE Real Time Module 15 SP6 | kernel-syms-rt | Released |
SUSE Real Time Module 15 SP7 | kernel-rt | Released |
SUSE Real Time Module 15 SP7 | kernel-source-rt | Released |
SUSE Real Time Module 15 SP7 | kernel-syms-rt | Released |
openSUSE Leap 15.6 | kernel-default | Released |
openSUSE Leap 15.6 | kernel-source | Released |
openSUSE Leap 15.6 | kernel-source-azure | Released |
openSUSE Leap 15.6 | kernel-source-rt | Released |
Products under Long Term Service Pack support and receiving important and critical security fixes. | ||
SUSE Linux Enterprise High Performance Computing 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-source-azure | Unsupported |
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | kernel-default | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Live Patching 12 SP5 | kernel-default | Not affected |
SUSE Linux Enterprise Live Patching 12 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise Live Patching 15 SP3 | kernel-default | Not affected |
SUSE Linux Enterprise Live Patching 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Live Patching 15 SP4 | kernel-default | Not affected |
SUSE Linux Enterprise Live Patching 15 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Live Patching 15 SP5 | kernel-default | Not affected |
SUSE Linux Enterprise Live Patching 15 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Basesystem 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Basesystem 15 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Basesystem 15 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Development Tools 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Development Tools 15 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Development Tools 15 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Public Cloud 15 SP5 | kernel-source-azure | Unsupported |
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE | kernel-default | Not affected |
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP5 | kernel-source-azure | Unsupported |
SUSE Linux Enterprise Server 12 SP5-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 12 SP5-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP5-LTSS | kernel-source-azure | Unsupported |
SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security | kernel-default | Not affected |
SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP3-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 15 SP3-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP5 | kernel-source-azure | Unsupported |
SUSE Linux Enterprise Server 15 SP5-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 15 SP5-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | kernel-source-azure | Unsupported |
SUSE Manager Proxy 4.3 | kernel-default | Not affected |
SUSE Manager Proxy 4.3 | kernel-source | Not affected |
SUSE Manager Proxy LTS 4.3 | kernel-default | Not affected |
SUSE Manager Proxy LTS 4.3 | kernel-source | Not affected |
SUSE Manager Retail Branch Server 4.3 | kernel-default | Not affected |
SUSE Manager Retail Branch Server 4.3 | kernel-source | Not affected |
SUSE Manager Retail Branch Server LTS 4.3 | kernel-default | Not affected |
SUSE Manager Retail Branch Server LTS 4.3 | kernel-source | Not affected |
SUSE Manager Server 4.3 | kernel-default | Not affected |
SUSE Manager Server 4.3 | kernel-source | Not affected |
SUSE Manager Server LTS 4.3 | kernel-default | Not affected |
SUSE Manager Server LTS 4.3 | kernel-source | Not affected |
Products past their end of life and not receiving proactive updates anymore. | ||
SUSE CaaS Platform 4.0 | kernel-source | Not affected |
SUSE Enterprise Storage 6 | kernel-source | Not affected |
SUSE Enterprise Storage 7 | kernel-source | Not affected |
SUSE Enterprise Storage 7.1 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 11 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 12 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 12 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 15 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 15 SP1 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 15 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 15 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP1 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Micro 5.0 | kernel-default | Not affected |
SUSE Linux Enterprise Module for Basesystem 15 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Basesystem 15 SP1 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Basesystem 15 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Development Tools 15 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Development Tools 15 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT | kernel-source | Not affected |
SUSE Linux Enterprise Real Time 15 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Real Time 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Real Time 15 SP3 | kernel-source-rt | Not affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-source-rt | Not affected |
SUSE Linux Enterprise Real Time 15 SP5 | kernel-source-rt | Not affected |
SUSE Linux Enterprise Server 11 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Server 11 SP4 LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 11 SP4 LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 11 SP4-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP2-BCL | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP2-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP2-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 12 SP2-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP4-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP4-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 12 SP4-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP1 | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP1-BCL | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP1-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 15 SP1-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP2-BCL | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP2-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 15 SP2-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP3-BCL | kernel-source | Not affected |
SUSE Linux Enterprise Server 15-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 15-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 12 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP1 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP3 | kernel-default | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-default | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-default | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-source-azure | Unsupported |
SUSE Manager Proxy 4.0 | kernel-source | Not affected |
SUSE Manager Proxy 4.1 | kernel-source | Not affected |
SUSE Manager Proxy 4.2 | kernel-source | Not affected |
SUSE Manager Retail Branch Server 4.0 | kernel-source | Not affected |
SUSE Manager Retail Branch Server 4.1 | kernel-source | Not affected |
SUSE Manager Retail Branch Server 4.2 | kernel-source | Not affected |
SUSE Manager Server 4.0 | kernel-source | Not affected |
SUSE Manager Server 4.1 | kernel-source | Not affected |
SUSE Manager Server 4.2 | kernel-source | Not affected |
SUSE OpenStack Cloud 7 | kernel-source | Not affected |
SUSE OpenStack Cloud 9 | kernel-source | Not affected |
SUSE OpenStack Cloud Crowbar 9 | kernel-source | Not affected |
SUSE Real Time Module 15 SP3 | kernel-source-rt | Not affected |
SUSE Real Time Module 15 SP4 | kernel-source-rt | Not affected |
SUSE Real Time Module 15 SP5 | kernel-source-rt | Not affected |
openSUSE Leap 15.3 | kernel-source | Not affected |
openSUSE Leap 15.3 | kernel-source-rt | Not affected |
openSUSE Leap 15.4 | kernel-source | Not affected |
openSUSE Leap 15.4 | kernel-source-azure | Unsupported |
openSUSE Leap 15.4 | kernel-source-rt | Not affected |
openSUSE Leap 15.5 | kernel-source | Not affected |
openSUSE Leap 15.5 | kernel-source-azure | Unsupported |
openSUSE Leap 15.5 | kernel-source-rt | Not affected |
Products at an unknown state of their lifecycle. | ||
SUSE Linux Enterprise Module for Confidential Computing 15 SP6 | kernel-source-coco | Released |
SUSE Timeline for this CVE
CVE page created: Fri Jul 18 12:00:58 2025CVE page last modified: Tue Sep 2 12:52:43 2025