Upstream information

CVE-2025-39993 at MITRE

Description

In the Linux kernel, the following vulnerability has been resolved:

media: rc: fix races with imon_disconnect()

Syzbot reports a KASAN issue as below:
BUG: KASAN: use-after-free in __create_pipe include/linux/usb.h:1945 [inline]
BUG: KASAN: use-after-free in send_packet+0xa2d/0xbc0 drivers/media/rc/imon.c:627
Read of size 4 at addr ffff8880256fb000 by task syz-executor314/4465

CPU: 2 PID: 4465 Comm: syz-executor314 Not tainted 6.0.0-rc1-syzkaller #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014
Call Trace:
<TASK>
__dump_stack lib/dump_stack.c:88 [inline]
dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106
print_address_description mm/kasan/report.c:317 [inline]
print_report.cold+0x2ba/0x6e9 mm/kasan/report.c:433
kasan_report+0xb1/0x1e0 mm/kasan/report.c:495
__create_pipe include/linux/usb.h:1945 [inline]
send_packet+0xa2d/0xbc0 drivers/media/rc/imon.c:627
vfd_write+0x2d9/0x550 drivers/media/rc/imon.c:991
vfs_write+0x2d7/0xdd0 fs/read_write.c:576
ksys_write+0x127/0x250 fs/read_write.c:631
do_syscall_x64 arch/x86/entry/common.c:50 [inline]
do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80
entry_SYSCALL_64_after_hwframe+0x63/0xcd

The iMON driver improperly releases the usb_device reference in
imon_disconnect without coordinating with active users of the
device.

Specifically, the fields usbdev_intf0 and usbdev_intf1 are not
protected by the users counter (ictx->users). During probe,
imon_init_intf0 or imon_init_intf1 increments the usb_device
reference count depending on the interface. However, during
disconnect, usb_put_dev is called unconditionally, regardless of
actual usage.

As a result, if vfd_write or other operations are still in
progress after disconnect, this can lead to a use-after-free of
the usb_device pointer.

Thread 1 vfd_write Thread 2 imon_disconnect
...
if
usb_put_dev(ictx->usbdev_intf0)
else
usb_put_dev(ictx->usbdev_intf1)
...
while
send_packet
if
pipe = usb_sndintpipe(
ictx->usbdev_intf0) UAF
else
pipe = usb_sndctrlpipe(
ictx->usbdev_intf0, 0) UAF

Guard access to usbdev_intf0 and usbdev_intf1 after disconnect by
checking ictx->disconnected in all writer paths. Add early return
with -ENODEV in send_packet(), vfd_write(), lcd_write() and
display_open() if the device is no longer present.

Set and read ictx->disconnected under ictx->lock to ensure memory
synchronization. Acquire the lock in imon_disconnect() before setting
the flag to synchronize with any ongoing operations.

Ensure writers exit early and safely after disconnect before the USB
core proceeds with cleanup.

Found by Linux Verification Center (linuxtesting.org) with Syzkaller.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v3 Scores
CVSS detail SUSE
Base Score 5.5
Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality Impact None
Integrity Impact None
Availability Impact High
CVSSv3 Version 3.1

Note from the SUSE Security Team on the kernel-default package

SUSE will no longer fix all CVEs in the Linux Kernel anymore, but declare some bug classes as won't fix. Please refer to TID 21496 for more details.

SUSE Bugzilla entry: 1252070 [NEW]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
Container bci/bci-sle15-kernel-module-devel:15.6.55.9
  • kernel-default-devel >= 6.4.0-150600.23.78.1
  • kernel-devel >= 6.4.0-150600.23.78.1
  • kernel-macros >= 6.4.0-150600.23.78.1
  • kernel-syms >= 6.4.0-150600.23.78.1
Container bci/bci-sle15-kernel-module-devel:15.7-52.3
  • kernel-default-devel >= 6.4.0-150700.53.22.1
  • kernel-devel >= 6.4.0-150700.53.22.1
  • kernel-macros >= 6.4.0-150700.53.22.1
  • kernel-syms >= 6.4.0-150700.53.22.1
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:15.6.17.8.134
  • kernel-default >= 6.4.0-150600.23.78.1
Container suse/sl-micro/6.0/baremetal-os-container:latest
Container suse/sl-micro/6.0/toolbox:latest
  • libjitterentropy3 >= 3.4.1-3.1
  • libopenssl3 >= 3.1.4-6.1
Container suse/sl-micro/6.0/base-os-container:2.1.3-7.65
  • kernel-default >= 6.4.0-36.1
  • libjitterentropy3 >= 3.4.1-3.1
  • libopenssl3 >= 3.1.4-6.1
  • openssl-3 >= 3.1.4-6.1
Container suse/sl-micro/6.0/kvm-os-container:2.1.3-6.88
  • kernel-default-base >= 6.4.0-36.1.21.13
  • libjitterentropy3 >= 3.4.1-3.1
  • libopenssl3 >= 3.1.4-6.1
Container suse/sl-micro/6.0/rt-os-container:2.1.3-7.105
  • kernel-rt >= 6.4.0-38.1
  • libjitterentropy3 >= 3.4.1-3.1
  • libopenssl3 >= 3.1.4-6.1
Container suse/sl-micro/6.1/base-os-container:2.2.1-5.52
Image SL-Micro-BYOS-EC2
Image SL-Micro-BYOS-GCE
Image SL-Micro-EC2
  • kernel-default >= 6.4.0-36.1
Container suse/sl-micro/6.1/kvm-os-container:2.2.1-5.53
  • kernel-default-base >= 6.4.0-36.1.21.13
Container suse/sl-micro/6.1/rt-os-container:2.2.1-5.45
  • kernel-rt >= 6.4.0-38.1
Image SL-Micro-Default
Image SL-Micro-Default-SelfInstall
Image SL-Micro-Default-encrypted
Image SL-Micro-Default-qcow
Image SUSE-Multi-Linux-Manager-Server-EC2-llc
Image SUSE-Multi-Linux-Manager-Server-EC2-ltd
  • python311-jmespath >= 1.0.1-slfo.1.1_3.1
Image SL-Micro
  • libjitterentropy3 >= 3.4.1-3.1
  • libopenssl3 >= 3.1.4-6.1
  • python311-jmespath >= 1.0.1-slfo.1.1_3.1
Image SLE-Micro
Image SLE-Micro-Azure
Image SLE-Micro-BYOS
Image SLE-Micro-BYOS-Azure
Image SLE-Micro-BYOS-EC2
Image SLE-Micro-BYOS-GCE
Image SLE-Micro-EC2
Image SLE-Micro-GCE
  • libjitterentropy3 >= 3.4.1-3.1
  • libopenssl3 >= 3.1.4-6.1
  • openssl-3 >= 3.1.4-6.1
Image kiwi-templates-Minimal
Image kiwi-templates-Minimal-Cloud-sap
Image kiwi-templates-Minimal-MS-HyperV-sap
Image kiwi-templates-Minimal-kvm-and-xen-sap
  • kernel-default-base >= 6.12.0-160000.6.1.160000.2.4
SUSE Linux Enterprise Desktop 15 SP6
  • kernel-64kb >= 6.4.0-150600.23.78.1
  • kernel-64kb-devel >= 6.4.0-150600.23.78.1
  • kernel-default >= 6.4.0-150600.23.78.1
  • kernel-default-base >= 6.4.0-150600.23.78.1.150600.12.34.2
  • kernel-default-devel >= 6.4.0-150600.23.78.1
  • kernel-default-extra >= 6.4.0-150600.23.78.1
  • kernel-devel >= 6.4.0-150600.23.78.1
  • kernel-docs >= 6.4.0-150600.23.78.1
  • kernel-macros >= 6.4.0-150600.23.78.1
  • kernel-obs-build >= 6.4.0-150600.23.78.1
  • kernel-source >= 6.4.0-150600.23.78.1
  • kernel-syms >= 6.4.0-150600.23.78.1
  • kernel-zfcpdump >= 6.4.0-150600.23.78.1
Patchnames:
SUSE-SLE-Module-Basesystem-15-SP6-2025-4140
SUSE-SLE-Module-Development-Tools-15-SP6-2025-4140
SUSE-SLE-Product-WE-15-SP6-2025-4140
SUSE Linux Enterprise Desktop 15 SP7
  • kernel-64kb >= 6.4.0-150700.53.22.1
  • kernel-64kb-devel >= 6.4.0-150700.53.22.1
  • kernel-default >= 6.4.0-150700.53.22.1
  • kernel-default-base >= 6.4.0-150700.53.22.1.150700.17.15.1
  • kernel-default-devel >= 6.4.0-150700.53.22.1
  • kernel-default-extra >= 6.4.0-150700.53.22.1
  • kernel-devel >= 6.4.0-150700.53.22.1
  • kernel-docs >= 6.4.0-150700.53.22.1
  • kernel-macros >= 6.4.0-150700.53.22.1
  • kernel-obs-build >= 6.4.0-150700.53.22.1
  • kernel-source >= 6.4.0-150700.53.22.1
  • kernel-syms >= 6.4.0-150700.53.22.1
  • kernel-zfcpdump >= 6.4.0-150700.53.22.1
Patchnames:
SUSE-SLE-Module-Basesystem-15-SP7-2025-4057
SUSE-SLE-Module-Development-Tools-15-SP7-2025-4057
SUSE-SLE-Product-WE-15-SP7-2025-4057
SUSE Linux Enterprise High Availability Extension 15 SP6
  • cluster-md-kmp-default >= 6.4.0-150600.23.78.1
  • dlm-kmp-default >= 6.4.0-150600.23.78.1
  • gfs2-kmp-default >= 6.4.0-150600.23.78.1
  • ocfs2-kmp-default >= 6.4.0-150600.23.78.1
Patchnames:
SUSE-SLE-Product-HA-15-SP6-2025-4140
SUSE Linux Enterprise High Availability Extension 15 SP7
  • cluster-md-kmp-default >= 6.4.0-150700.53.22.1
  • dlm-kmp-default >= 6.4.0-150700.53.22.1
  • gfs2-kmp-default >= 6.4.0-150700.53.22.1
  • ocfs2-kmp-default >= 6.4.0-150700.53.22.1
Patchnames:
SUSE-SLE-Product-HA-15-SP7-2025-4057
SUSE Linux Enterprise High Performance Computing 15 SP6
  • kernel-64kb >= 6.4.0-150600.23.78.1
  • kernel-64kb-devel >= 6.4.0-150600.23.78.1
  • kernel-azure >= 6.4.0-150600.8.55.1
  • kernel-azure-devel >= 6.4.0-150600.8.55.1
  • kernel-default >= 6.4.0-150600.23.78.1
  • kernel-default-base >= 6.4.0-150600.23.78.1.150600.12.34.2
  • kernel-default-devel >= 6.4.0-150600.23.78.1
  • kernel-devel >= 6.4.0-150600.23.78.1
  • kernel-devel-azure >= 6.4.0-150600.8.55.1
  • kernel-docs >= 6.4.0-150600.23.78.1
  • kernel-macros >= 6.4.0-150600.23.78.1
  • kernel-obs-build >= 6.4.0-150600.23.78.1
  • kernel-source >= 6.4.0-150600.23.78.1
  • kernel-source-azure >= 6.4.0-150600.8.55.1
  • kernel-syms >= 6.4.0-150600.23.78.1
  • kernel-syms-azure >= 6.4.0-150600.8.55.1
  • kernel-zfcpdump >= 6.4.0-150600.23.78.1
  • reiserfs-kmp-default >= 6.4.0-150600.23.78.1
Patchnames:
SUSE-SLE-Module-Basesystem-15-SP6-2025-4140
SUSE-SLE-Module-Development-Tools-15-SP6-2025-4140
SUSE-SLE-Module-Legacy-15-SP6-2025-4140
SUSE-SLE-Module-Public-Cloud-15-SP6-2025-4128
SUSE Linux Enterprise High Performance Computing 15 SP7
  • kernel-64kb >= 6.4.0-150700.53.22.1
  • kernel-64kb-devel >= 6.4.0-150700.53.22.1
  • kernel-azure >= 6.4.0-150700.20.18.1
  • kernel-azure-devel >= 6.4.0-150700.20.18.1
  • kernel-default >= 6.4.0-150700.53.22.1
  • kernel-default-base >= 6.4.0-150700.53.22.1.150700.17.15.1
  • kernel-default-devel >= 6.4.0-150700.53.22.1
  • kernel-devel >= 6.4.0-150700.53.22.1
  • kernel-devel-azure >= 6.4.0-150700.20.18.1
  • kernel-docs >= 6.4.0-150700.53.22.1
  • kernel-macros >= 6.4.0-150700.53.22.1
  • kernel-obs-build >= 6.4.0-150700.53.22.1
  • kernel-source >= 6.4.0-150700.53.22.1
  • kernel-source-azure >= 6.4.0-150700.20.18.1
  • kernel-syms >= 6.4.0-150700.53.22.1
  • kernel-syms-azure >= 6.4.0-150700.20.18.1
  • kernel-zfcpdump >= 6.4.0-150700.53.22.1
  • reiserfs-kmp-default >= 6.4.0-150700.53.22.1
Patchnames:
SUSE-SLE-Module-Basesystem-15-SP7-2025-4057
SUSE-SLE-Module-Development-Tools-15-SP7-2025-4057
SUSE-SLE-Module-Legacy-15-SP7-2025-4057
SUSE-SLE-Module-Public-Cloud-15-SP7-2025-4132
SUSE Linux Enterprise Live Patching 15 SP7
    Patchnames:
    SUSE-SLE-Module-Live-Patching-15-SP7-2025-4141
    SUSE Linux Enterprise Module for Basesystem 15 SP6
    • kernel-64kb >= 6.4.0-150600.23.78.1
    • kernel-64kb-devel >= 6.4.0-150600.23.78.1
    • kernel-default >= 6.4.0-150600.23.78.1
    • kernel-default-base >= 6.4.0-150600.23.78.1.150600.12.34.2
    • kernel-default-devel >= 6.4.0-150600.23.78.1
    • kernel-devel >= 6.4.0-150600.23.78.1
    • kernel-macros >= 6.4.0-150600.23.78.1
    • kernel-zfcpdump >= 6.4.0-150600.23.78.1
    Patchnames:
    SUSE-SLE-Module-Basesystem-15-SP6-2025-4140
    SUSE Linux Enterprise Module for Basesystem 15 SP7
    • kernel-64kb >= 6.4.0-150700.53.22.1
    • kernel-64kb-devel >= 6.4.0-150700.53.22.1
    • kernel-default >= 6.4.0-150700.53.22.1
    • kernel-default-base >= 6.4.0-150700.53.22.1.150700.17.15.1
    • kernel-default-devel >= 6.4.0-150700.53.22.1
    • kernel-devel >= 6.4.0-150700.53.22.1
    • kernel-macros >= 6.4.0-150700.53.22.1
    • kernel-zfcpdump >= 6.4.0-150700.53.22.1
    Patchnames:
    SUSE-SLE-Module-Basesystem-15-SP7-2025-4057
    SUSE Linux Enterprise Module for Development Tools 15 SP6
    • kernel-docs >= 6.4.0-150600.23.78.1
    • kernel-obs-build >= 6.4.0-150600.23.78.1
    • kernel-source >= 6.4.0-150600.23.78.1
    • kernel-syms >= 6.4.0-150600.23.78.1
    Patchnames:
    SUSE-SLE-Module-Development-Tools-15-SP6-2025-4140
    SUSE Linux Enterprise Module for Development Tools 15 SP7
    • kernel-docs >= 6.4.0-150700.53.22.1
    • kernel-obs-build >= 6.4.0-150700.53.22.1
    • kernel-source >= 6.4.0-150700.53.22.1
    • kernel-syms >= 6.4.0-150700.53.22.1
    Patchnames:
    SUSE-SLE-Module-Development-Tools-15-SP7-2025-4057
    SUSE Linux Enterprise Module for Legacy 15 SP6
    • reiserfs-kmp-default >= 6.4.0-150600.23.78.1
    Patchnames:
    SUSE-SLE-Module-Legacy-15-SP6-2025-4140
    SUSE Linux Enterprise Module for Legacy 15 SP7
    • reiserfs-kmp-default >= 6.4.0-150700.53.22.1
    Patchnames:
    SUSE-SLE-Module-Legacy-15-SP7-2025-4057
    SUSE Linux Enterprise Module for Public Cloud 15 SP6
    • kernel-azure >= 6.4.0-150600.8.55.1
    • kernel-azure-devel >= 6.4.0-150600.8.55.1
    • kernel-devel-azure >= 6.4.0-150600.8.55.1
    • kernel-source-azure >= 6.4.0-150600.8.55.1
    • kernel-syms-azure >= 6.4.0-150600.8.55.1
    Patchnames:
    SUSE-SLE-Module-Public-Cloud-15-SP6-2025-4128
    SUSE Linux Enterprise Module for Public Cloud 15 SP7
    • kernel-azure >= 6.4.0-150700.20.18.1
    • kernel-azure-devel >= 6.4.0-150700.20.18.1
    • kernel-devel-azure >= 6.4.0-150700.20.18.1
    • kernel-source-azure >= 6.4.0-150700.20.18.1
    • kernel-syms-azure >= 6.4.0-150700.20.18.1
    Patchnames:
    SUSE-SLE-Module-Public-Cloud-15-SP7-2025-4132
    SUSE Linux Enterprise Real Time 15 SP7
    SUSE Real Time Module 15 SP7
    • cluster-md-kmp-rt >= 6.4.0-150700.7.22.1
    • dlm-kmp-rt >= 6.4.0-150700.7.22.1
    • gfs2-kmp-rt >= 6.4.0-150700.7.22.1
    • kernel-devel-rt >= 6.4.0-150700.7.22.1
    • kernel-rt >= 6.4.0-150700.7.22.1
    • kernel-rt-devel >= 6.4.0-150700.7.22.1
    • kernel-source-rt >= 6.4.0-150700.7.22.1
    • kernel-syms-rt >= 6.4.0-150700.7.22.1
    • ocfs2-kmp-rt >= 6.4.0-150700.7.22.1
    Patchnames:
    SUSE-SLE-Module-RT-15-SP7-2025-4141
    SUSE Linux Enterprise Server 15 SP6
    SUSE Linux Enterprise Server for SAP Applications 15 SP6
    • kernel-64kb >= 6.4.0-150600.23.78.1
    • kernel-64kb-devel >= 6.4.0-150600.23.78.1
    • kernel-azure >= 6.4.0-150600.8.55.1
    • kernel-azure-devel >= 6.4.0-150600.8.55.1
    • kernel-default >= 6.4.0-150600.23.78.1
    • kernel-default-base >= 6.4.0-150600.23.78.1.150600.12.34.2
    • kernel-default-devel >= 6.4.0-150600.23.78.1
    • kernel-default-extra >= 6.4.0-150600.23.78.1
    • kernel-devel >= 6.4.0-150600.23.78.1
    • kernel-devel-azure >= 6.4.0-150600.8.55.1
    • kernel-docs >= 6.4.0-150600.23.78.1
    • kernel-macros >= 6.4.0-150600.23.78.1
    • kernel-obs-build >= 6.4.0-150600.23.78.1
    • kernel-source >= 6.4.0-150600.23.78.1
    • kernel-source-azure >= 6.4.0-150600.8.55.1
    • kernel-syms >= 6.4.0-150600.23.78.1
    • kernel-syms-azure >= 6.4.0-150600.8.55.1
    • kernel-zfcpdump >= 6.4.0-150600.23.78.1
    • reiserfs-kmp-default >= 6.4.0-150600.23.78.1
    Patchnames:
    SUSE-SLE-Module-Basesystem-15-SP6-2025-4140
    SUSE-SLE-Module-Development-Tools-15-SP6-2025-4140
    SUSE-SLE-Module-Legacy-15-SP6-2025-4140
    SUSE-SLE-Module-Public-Cloud-15-SP6-2025-4128
    SUSE-SLE-Product-WE-15-SP6-2025-4140
    SUSE Linux Enterprise Server 15 SP7
    SUSE Linux Enterprise Server for SAP Applications 15 SP7
    • kernel-64kb >= 6.4.0-150700.53.22.1
    • kernel-64kb-devel >= 6.4.0-150700.53.22.1
    • kernel-azure >= 6.4.0-150700.20.18.1
    • kernel-azure-devel >= 6.4.0-150700.20.18.1
    • kernel-default >= 6.4.0-150700.53.22.1
    • kernel-default-base >= 6.4.0-150700.53.22.1.150700.17.15.1
    • kernel-default-devel >= 6.4.0-150700.53.22.1
    • kernel-default-extra >= 6.4.0-150700.53.22.1
    • kernel-devel >= 6.4.0-150700.53.22.1
    • kernel-devel-azure >= 6.4.0-150700.20.18.1
    • kernel-docs >= 6.4.0-150700.53.22.1
    • kernel-macros >= 6.4.0-150700.53.22.1
    • kernel-obs-build >= 6.4.0-150700.53.22.1
    • kernel-source >= 6.4.0-150700.53.22.1
    • kernel-source-azure >= 6.4.0-150700.20.18.1
    • kernel-syms >= 6.4.0-150700.53.22.1
    • kernel-syms-azure >= 6.4.0-150700.20.18.1
    • kernel-zfcpdump >= 6.4.0-150700.53.22.1
    • reiserfs-kmp-default >= 6.4.0-150700.53.22.1
    Patchnames:
    SUSE-SLE-Module-Basesystem-15-SP7-2025-4057
    SUSE-SLE-Module-Development-Tools-15-SP7-2025-4057
    SUSE-SLE-Module-Legacy-15-SP7-2025-4057
    SUSE-SLE-Module-Public-Cloud-15-SP7-2025-4132
    SUSE-SLE-Product-WE-15-SP7-2025-4057
    SUSE Linux Enterprise Workstation Extension 15 SP6
    • kernel-default-extra >= 6.4.0-150600.23.78.1
    Patchnames:
    SUSE-SLE-Product-WE-15-SP6-2025-4140
    SUSE Linux Enterprise Workstation Extension 15 SP7
    • kernel-default-extra >= 6.4.0-150700.53.22.1
    Patchnames:
    SUSE-SLE-Product-WE-15-SP7-2025-4057
    SUSE Linux Micro 6.0
    • kernel-default >= 6.4.0-36.1
    • kernel-default-base >= 6.4.0-36.1.21.13
    • kernel-default-livepatch >= 6.4.0-36.1
    • kernel-devel >= 6.4.0-36.1
    • kernel-devel-rt >= 6.4.0-38.1
    • kernel-kvmsmall >= 6.4.0-36.1
    • kernel-macros >= 6.4.0-36.1
    • kernel-rt >= 6.4.0-38.1
    • kernel-rt-livepatch >= 6.4.0-38.1
    • kernel-source >= 6.4.0-36.1
    • kernel-source-rt >= 6.4.0-38.1
    Patchnames:
    SUSE-SLE-Micro-6.0-kernel-204
    SUSE-SLE-Micro-6.0-kernel-206
    openSUSE Leap 15.6
    • cluster-md-kmp-64kb >= 6.4.0-150600.23.78.1
    • cluster-md-kmp-azure >= 6.4.0-150600.8.55.1
    • cluster-md-kmp-default >= 6.4.0-150600.23.78.1
    • dlm-kmp-64kb >= 6.4.0-150600.23.78.1
    • dlm-kmp-azure >= 6.4.0-150600.8.55.1
    • dlm-kmp-default >= 6.4.0-150600.23.78.1
    • dtb-allwinner >= 6.4.0-150600.23.78.1
    • dtb-altera >= 6.4.0-150600.23.78.1
    • dtb-amazon >= 6.4.0-150600.23.78.1
    • dtb-amd >= 6.4.0-150600.23.78.1
    • dtb-amlogic >= 6.4.0-150600.23.78.1
    • dtb-apm >= 6.4.0-150600.23.78.1
    • dtb-apple >= 6.4.0-150600.23.78.1
    • dtb-arm >= 6.4.0-150600.23.78.1
    • dtb-broadcom >= 6.4.0-150600.23.78.1
    • dtb-cavium >= 6.4.0-150600.23.78.1
    • dtb-exynos >= 6.4.0-150600.23.78.1
    • dtb-freescale >= 6.4.0-150600.23.78.1
    • dtb-hisilicon >= 6.4.0-150600.23.78.1
    • dtb-lg >= 6.4.0-150600.23.78.1
    • dtb-marvell >= 6.4.0-150600.23.78.1
    • dtb-mediatek >= 6.4.0-150600.23.78.1
    • dtb-nvidia >= 6.4.0-150600.23.78.1
    • dtb-qcom >= 6.4.0-150600.23.78.1
    • dtb-renesas >= 6.4.0-150600.23.78.1
    • dtb-rockchip >= 6.4.0-150600.23.78.1
    • dtb-socionext >= 6.4.0-150600.23.78.1
    • dtb-sprd >= 6.4.0-150600.23.78.1
    • dtb-xilinx >= 6.4.0-150600.23.78.1
    • gfs2-kmp-64kb >= 6.4.0-150600.23.78.1
    • gfs2-kmp-azure >= 6.4.0-150600.8.55.1
    • gfs2-kmp-default >= 6.4.0-150600.23.78.1
    • kernel-64kb >= 6.4.0-150600.23.78.1
    • kernel-64kb-devel >= 6.4.0-150600.23.78.1
    • kernel-64kb-extra >= 6.4.0-150600.23.78.1
    • kernel-64kb-optional >= 6.4.0-150600.23.78.1
    • kernel-azure >= 6.4.0-150600.8.55.1
    • kernel-azure-devel >= 6.4.0-150600.8.55.1
    • kernel-azure-extra >= 6.4.0-150600.8.55.1
    • kernel-azure-optional >= 6.4.0-150600.8.55.1
    • kernel-azure-vdso >= 6.4.0-150600.8.55.1
    • kernel-debug >= 6.4.0-150600.23.78.1
    • kernel-debug-devel >= 6.4.0-150600.23.78.1
    • kernel-debug-vdso >= 6.4.0-150600.23.78.1
    • kernel-default >= 6.4.0-150600.23.78.1
    • kernel-default-base >= 6.4.0-150600.23.78.1.150600.12.34.2
    • kernel-default-base-rebuild >= 6.4.0-150600.23.78.1.150600.12.34.2
    • kernel-default-devel >= 6.4.0-150600.23.78.1
    • kernel-default-extra >= 6.4.0-150600.23.78.1
    • kernel-default-livepatch >= 6.4.0-150600.23.78.1
    • kernel-default-livepatch-devel >= 6.4.0-150600.23.78.1
    • kernel-default-optional >= 6.4.0-150600.23.78.1
    • kernel-default-vdso >= 6.4.0-150600.23.78.1
    • kernel-devel >= 6.4.0-150600.23.78.1
    • kernel-devel-azure >= 6.4.0-150600.8.55.1
    • kernel-docs >= 6.4.0-150600.23.78.1
    • kernel-docs-html >= 6.4.0-150600.23.78.1
    • kernel-kvmsmall >= 6.4.0-150600.23.78.1
    • kernel-kvmsmall-devel >= 6.4.0-150600.23.78.1
    • kernel-kvmsmall-vdso >= 6.4.0-150600.23.78.1
    • kernel-macros >= 6.4.0-150600.23.78.1
    • kernel-obs-build >= 6.4.0-150600.23.78.1
    • kernel-obs-qa >= 6.4.0-150600.23.78.1
    • kernel-source >= 6.4.0-150600.23.78.1
    • kernel-source-azure >= 6.4.0-150600.8.55.1
    • kernel-source-vanilla >= 6.4.0-150600.23.78.1
    • kernel-syms >= 6.4.0-150600.23.78.1
    • kernel-syms-azure >= 6.4.0-150600.8.55.1
    • kernel-zfcpdump >= 6.4.0-150600.23.78.1
    • kselftests-kmp-64kb >= 6.4.0-150600.23.78.1
    • kselftests-kmp-azure >= 6.4.0-150600.8.55.1
    • kselftests-kmp-default >= 6.4.0-150600.23.78.1
    • ocfs2-kmp-64kb >= 6.4.0-150600.23.78.1
    • ocfs2-kmp-azure >= 6.4.0-150600.8.55.1
    • ocfs2-kmp-default >= 6.4.0-150600.23.78.1
    • reiserfs-kmp-64kb >= 6.4.0-150600.23.78.1
    • reiserfs-kmp-azure >= 6.4.0-150600.8.55.1
    • reiserfs-kmp-default >= 6.4.0-150600.23.78.1
    Patchnames:
    openSUSE-SLE-15.6-2025-4128
    openSUSE-SLE-15.6-2025-4140
    openSUSE Leap 16.0
    • cluster-md-kmp-64kb >= 6.12.0-160000.7.1
    • cluster-md-kmp-default >= 6.12.0-160000.7.1
    • cluster-md-kmp-rt >= 6.12.0-160000.7.1
    • dlm-kmp-64kb >= 6.12.0-160000.7.1
    • dlm-kmp-default >= 6.12.0-160000.7.1
    • dlm-kmp-rt >= 6.12.0-160000.7.1
    • dtb-allwinner >= 6.12.0-160000.7.1
    • dtb-altera >= 6.12.0-160000.7.1
    • dtb-amazon >= 6.12.0-160000.7.1
    • dtb-amd >= 6.12.0-160000.7.1
    • dtb-amlogic >= 6.12.0-160000.7.1
    • dtb-apm >= 6.12.0-160000.7.1
    • dtb-apple >= 6.12.0-160000.7.1
    • dtb-arm >= 6.12.0-160000.7.1
    • dtb-broadcom >= 6.12.0-160000.7.1
    • dtb-cavium >= 6.12.0-160000.7.1
    • dtb-exynos >= 6.12.0-160000.7.1
    • dtb-freescale >= 6.12.0-160000.7.1
    • dtb-hisilicon >= 6.12.0-160000.7.1
    • dtb-lg >= 6.12.0-160000.7.1
    • dtb-marvell >= 6.12.0-160000.7.1
    • dtb-mediatek >= 6.12.0-160000.7.1
    • dtb-nvidia >= 6.12.0-160000.7.1
    • dtb-qcom >= 6.12.0-160000.7.1
    • dtb-renesas >= 6.12.0-160000.7.1
    • dtb-rockchip >= 6.12.0-160000.7.1
    • dtb-socionext >= 6.12.0-160000.7.1
    • dtb-sprd >= 6.12.0-160000.7.1
    • dtb-xilinx >= 6.12.0-160000.7.1
    • gfs2-kmp-64kb >= 6.12.0-160000.7.1
    • gfs2-kmp-default >= 6.12.0-160000.7.1
    • gfs2-kmp-rt >= 6.12.0-160000.7.1
    • kernel-64kb >= 6.12.0-160000.7.1
    • kernel-64kb-devel >= 6.12.0-160000.7.1
    • kernel-64kb-extra >= 6.12.0-160000.7.1
    • kernel-64kb-optional >= 6.12.0-160000.7.1
    • kernel-default >= 6.12.0-160000.7.1
    • kernel-default-base >= 6.12.0-160000.6.1.160000.2.4
    • kernel-default-devel >= 6.12.0-160000.7.1
    • kernel-default-extra >= 6.12.0-160000.7.1
    • kernel-default-optional >= 6.12.0-160000.7.1
    • kernel-default-vdso >= 6.12.0-160000.7.1
    • kernel-devel >= 6.12.0-160000.7.1
    • kernel-docs >= 6.12.0-160000.7.1
    • kernel-docs-html >= 6.12.0-160000.7.1
    • kernel-kvmsmall >= 6.12.0-160000.7.1
    • kernel-kvmsmall-devel >= 6.12.0-160000.7.1
    • kernel-kvmsmall-vdso >= 6.12.0-160000.7.1
    • kernel-macros >= 6.12.0-160000.7.1
    • kernel-obs-build >= 6.12.0-160000.7.1
    • kernel-obs-qa >= 6.12.0-160000.7.1
    • kernel-rt >= 6.12.0-160000.7.1
    • kernel-rt-devel >= 6.12.0-160000.7.1
    • kernel-rt-extra >= 6.12.0-160000.7.1
    • kernel-rt-optional >= 6.12.0-160000.7.1
    • kernel-rt-vdso >= 6.12.0-160000.7.1
    • kernel-source >= 6.12.0-160000.7.1
    • kernel-source-vanilla >= 6.12.0-160000.7.1
    • kernel-syms >= 6.12.0-160000.7.1
    • kernel-zfcpdump >= 6.12.0-160000.7.1
    • kselftests-kmp-64kb >= 6.12.0-160000.7.1
    • kselftests-kmp-default >= 6.12.0-160000.7.1
    • kselftests-kmp-rt >= 6.12.0-160000.7.1
    • ocfs2-kmp-64kb >= 6.12.0-160000.7.1
    • ocfs2-kmp-default >= 6.12.0-160000.7.1
    • ocfs2-kmp-rt >= 6.12.0-160000.7.1
    Patchnames:
    openSUSE-Leap-16.0-58
    openSUSE Tumbleweed
    • kernel-devel >= 6.17.5-1.1
    • kernel-macros >= 6.17.5-1.1
    • kernel-source >= 6.17.5-1.1
    • kernel-source-vanilla >= 6.17.5-1.1
    Patchnames:
    openSUSE-Tumbleweed-2025-15671

    List of packages in QA

    Product(s) Package(s)
    SUSE Linux Enterprise Live Patching 15 SP6
    • kernel-livepatch-6_4_0-150600_10_58-rt >= 1-150600.1.3.1
    SUSE Real Time Module 15 SP6
    • cluster-md-kmp-rt >= 6.4.0-150600.10.58.1
    • dlm-kmp-rt >= 6.4.0-150600.10.58.1
    • gfs2-kmp-rt >= 6.4.0-150600.10.58.1
    • kernel-devel-rt >= 6.4.0-150600.10.58.1
    • kernel-rt >= 6.4.0-150600.10.58.1
    • kernel-rt-devel >= 6.4.0-150600.10.58.1
    • kernel-rt_debug >= 6.4.0-150600.10.58.1
    • kernel-rt_debug-devel >= 6.4.0-150600.10.58.1
    • kernel-source-rt >= 6.4.0-150600.10.58.1
    • kernel-syms-rt >= 6.4.0-150600.10.58.1
    • ocfs2-kmp-rt >= 6.4.0-150600.10.58.1
    SUSE Linux Enterprise Real Time 15 SP6
    • cluster-md-kmp-rt >= 6.4.0-150600.10.58.1
    • dlm-kmp-rt >= 6.4.0-150600.10.58.1
    • gfs2-kmp-rt >= 6.4.0-150600.10.58.1
    • kernel-devel-rt >= 6.4.0-150600.10.58.1
    • kernel-rt >= 6.4.0-150600.10.58.1
    • kernel-rt-devel >= 6.4.0-150600.10.58.1
    • kernel-rt_debug >= 6.4.0-150600.10.58.1
    • kernel-rt_debug-devel >= 6.4.0-150600.10.58.1
    • kernel-source-rt >= 6.4.0-150600.10.58.1
    • kernel-syms-rt >= 6.4.0-150600.10.58.1
    • ocfs2-kmp-rt >= 6.4.0-150600.10.58.1


    First public cloud image revisions this CVE is fixed in:


    Status of this issue by product and package

    Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification. The updates are grouped by state of their lifecycle. SUSE product lifecycles are documented on the lifecycle page.

    Product(s) Source package State
    Products under general support and receiving all security fixes.
    SUSE Linux Enterprise Desktop 15 SP6 kernel-64kb Released
    SUSE Linux Enterprise Desktop 15 SP6 kernel-default Released
    SUSE Linux Enterprise Desktop 15 SP6 kernel-default-base Released
    SUSE Linux Enterprise Desktop 15 SP6 kernel-docs Released
    SUSE Linux Enterprise Desktop 15 SP6 kernel-obs-build Released
    SUSE Linux Enterprise Desktop 15 SP6 kernel-source Released
    SUSE Linux Enterprise Desktop 15 SP6 kernel-syms Released
    SUSE Linux Enterprise Desktop 15 SP6 kernel-zfcpdump Released
    SUSE Linux Enterprise Desktop 15 SP7 kernel-64kb Released
    SUSE Linux Enterprise Desktop 15 SP7 kernel-default Released
    SUSE Linux Enterprise Desktop 15 SP7 kernel-default-base Released
    SUSE Linux Enterprise Desktop 15 SP7 kernel-docs Released
    SUSE Linux Enterprise Desktop 15 SP7 kernel-obs-build Released
    SUSE Linux Enterprise Desktop 15 SP7 kernel-source Released
    SUSE Linux Enterprise Desktop 15 SP7 kernel-syms Released
    SUSE Linux Enterprise Desktop 15 SP7 kernel-zfcpdump Released
    SUSE Linux Enterprise High Availability Extension 15 SP6 kernel-default Released
    SUSE Linux Enterprise High Availability Extension 15 SP6 kernel-source Released
    SUSE Linux Enterprise High Availability Extension 15 SP7 kernel-default Released
    SUSE Linux Enterprise High Availability Extension 15 SP7 kernel-source Released
    SUSE Linux Enterprise High Availability Extension 16.0 kernel-default Not affected
    SUSE Linux Enterprise High Availability Extension 16.0 kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-64kb Released
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-azure Released
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-default Released
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-default-base Released
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-docs Released
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-obs-build Released
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-source Released
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-source-azure Released
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-syms Released
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-syms-azure Released
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-zfcpdump Released
    SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-64kb Released
    SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-azure Released
    SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-default Released
    SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-default-base Released
    SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-docs Released
    SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-obs-build Released
    SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-source Released
    SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-source-azure Released
    SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-syms Released
    SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-syms-azure Released
    SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-zfcpdump Released
    SUSE Linux Enterprise Live Patching 15 SP6 kernel-default Released
    SUSE Linux Enterprise Live Patching 15 SP6 kernel-livepatch-SLE15-SP6-RT_Update_17 In progress
    SUSE Linux Enterprise Live Patching 15 SP6 kernel-source Released
    SUSE Linux Enterprise Live Patching 15 SP7 kernel-default Released
    SUSE Linux Enterprise Live Patching 15 SP7 kernel-livepatch-SLE15-SP7-RT_Update_6 Released
    SUSE Linux Enterprise Live Patching 15 SP7 kernel-source Released
    SUSE Linux Enterprise Micro 5.2 kernel-default Not affected
    SUSE Linux Enterprise Micro 5.2 kernel-rt Not affected
    SUSE Linux Enterprise Micro 5.2 kernel-source Not affected
    SUSE Linux Enterprise Micro 5.2 kernel-source-rt Not affected
    SUSE Linux Enterprise Micro 5.3 kernel-default Not affected
    SUSE Linux Enterprise Micro 5.3 kernel-rt Not affected
    SUSE Linux Enterprise Micro 5.3 kernel-source Not affected
    SUSE Linux Enterprise Micro 5.3 kernel-source-rt Not affected
    SUSE Linux Enterprise Micro 5.4 kernel-default Not affected
    SUSE Linux Enterprise Micro 5.4 kernel-rt Not affected
    SUSE Linux Enterprise Micro 5.4 kernel-source Not affected
    SUSE Linux Enterprise Micro 5.4 kernel-source-rt Not affected
    SUSE Linux Enterprise Micro 5.5 kernel-default Not affected
    SUSE Linux Enterprise Micro 5.5 kernel-source Not affected
    SUSE Linux Enterprise Micro 5.5 kernel-source-rt Not affected
    SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-64kb Released
    SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-default Released
    SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-default-base Released
    SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-source Released
    SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-zfcpdump Released
    SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-64kb Released
    SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-default Released
    SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-default-base Released
    SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-source Released
    SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-zfcpdump Released
    SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-default Released
    SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-docs Released
    SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-obs-build Released
    SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-source Released
    SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-syms Released
    SUSE Linux Enterprise Module for Development Tools 15 SP7 kernel-default Released
    SUSE Linux Enterprise Module for Development Tools 15 SP7 kernel-docs Released
    SUSE Linux Enterprise Module for Development Tools 15 SP7 kernel-obs-build Released
    SUSE Linux Enterprise Module for Development Tools 15 SP7 kernel-source Released
    SUSE Linux Enterprise Module for Development Tools 15 SP7 kernel-syms Released
    SUSE Linux Enterprise Module for Legacy 15 SP6 kernel-default Released
    SUSE Linux Enterprise Module for Legacy 15 SP6 kernel-source Released
    SUSE Linux Enterprise Module for Legacy 15 SP7 kernel-default Released
    SUSE Linux Enterprise Module for Legacy 15 SP7 kernel-source Released
    SUSE Linux Enterprise Module for Public Cloud 15 SP6 kernel-azure Released
    SUSE Linux Enterprise Module for Public Cloud 15 SP6 kernel-source-azure Released
    SUSE Linux Enterprise Module for Public Cloud 15 SP6 kernel-syms-azure Released
    SUSE Linux Enterprise Module for Public Cloud 15 SP7 kernel-azure Released
    SUSE Linux Enterprise Module for Public Cloud 15 SP7 kernel-source-azure Released
    SUSE Linux Enterprise Module for Public Cloud 15 SP7 kernel-syms-azure Released
    SUSE Linux Enterprise Real Time 15 SP6 kernel-rt In progress
    SUSE Linux Enterprise Real Time 15 SP6 kernel-rt_debug In progress
    SUSE Linux Enterprise Real Time 15 SP6 kernel-source-rt In progress
    SUSE Linux Enterprise Real Time 15 SP6 kernel-syms-rt In progress
    SUSE Linux Enterprise Real Time 15 SP7 kernel-rt Released
    SUSE Linux Enterprise Real Time 15 SP7 kernel-source-rt Released
    SUSE Linux Enterprise Real Time 15 SP7 kernel-syms-rt Released
    SUSE Linux Enterprise Server 15 SP6 kernel-64kb Released
    SUSE Linux Enterprise Server 15 SP6 kernel-azure Released
    SUSE Linux Enterprise Server 15 SP6 kernel-default Released
    SUSE Linux Enterprise Server 15 SP6 kernel-default-base Released
    SUSE Linux Enterprise Server 15 SP6 kernel-docs Released
    SUSE Linux Enterprise Server 15 SP6 kernel-obs-build Released
    SUSE Linux Enterprise Server 15 SP6 kernel-source Released
    SUSE Linux Enterprise Server 15 SP6 kernel-source-azure Released
    SUSE Linux Enterprise Server 15 SP6 kernel-syms Released
    SUSE Linux Enterprise Server 15 SP6 kernel-syms-azure Released
    SUSE Linux Enterprise Server 15 SP6 kernel-zfcpdump Released
    SUSE Linux Enterprise Server 15 SP7 kernel-64kb Released
    SUSE Linux Enterprise Server 15 SP7 kernel-azure Released
    SUSE Linux Enterprise Server 15 SP7 kernel-default Released
    SUSE Linux Enterprise Server 15 SP7 kernel-default-base Released
    SUSE Linux Enterprise Server 15 SP7 kernel-docs Released
    SUSE Linux Enterprise Server 15 SP7 kernel-obs-build Released
    SUSE Linux Enterprise Server 15 SP7 kernel-source Released
    SUSE Linux Enterprise Server 15 SP7 kernel-source-azure Released
    SUSE Linux Enterprise Server 15 SP7 kernel-syms Released
    SUSE Linux Enterprise Server 15 SP7 kernel-syms-azure Released
    SUSE Linux Enterprise Server 15 SP7 kernel-zfcpdump Released
    SUSE Linux Enterprise Server 16.0 kernel-default Not affected
    SUSE Linux Enterprise Server 16.0 kernel-source Not affected
    SUSE Linux Enterprise Server 16.0 kernel-source-azure Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-64kb Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-azure Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-default Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-default-base Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-docs Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-obs-build Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-source Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-source-azure Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-syms Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-syms-azure Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-zfcpdump Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-64kb Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-azure Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-default Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-default-base Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-docs Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-obs-build Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-source Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-source-azure Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-syms Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-syms-azure Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-zfcpdump Released
    SUSE Linux Enterprise Workstation Extension 15 SP6 kernel-default Released
    SUSE Linux Enterprise Workstation Extension 15 SP6 kernel-source Released
    SUSE Linux Enterprise Workstation Extension 15 SP7 kernel-default Released
    SUSE Linux Enterprise Workstation Extension 15 SP7 kernel-source Released
    SUSE Linux Micro 6.0 kernel-default Released
    SUSE Linux Micro 6.0 kernel-default-base Released
    SUSE Linux Micro 6.0 kernel-kvmsmall Released
    SUSE Linux Micro 6.0 kernel-rt Released
    SUSE Linux Micro 6.0 kernel-source Released
    SUSE Linux Micro 6.0 kernel-source-rt Released
    SUSE Linux Micro 6.1 kernel-default Released
    SUSE Linux Micro 6.1 kernel-source Released
    SUSE Linux Micro 6.1 kernel-source-rt Released
    SUSE Linux Micro 6.2 kernel-source Not affected
    SUSE Real Time Module 15 SP6 kernel-rt In progress
    SUSE Real Time Module 15 SP6 kernel-rt_debug In progress
    SUSE Real Time Module 15 SP6 kernel-source-rt In progress
    SUSE Real Time Module 15 SP6 kernel-syms-rt In progress
    SUSE Real Time Module 15 SP7 kernel-rt Released
    SUSE Real Time Module 15 SP7 kernel-source-rt Released
    SUSE Real Time Module 15 SP7 kernel-syms-rt Released
    openSUSE Leap 15.6 kernel-default Released
    openSUSE Leap 15.6 kernel-source Released
    openSUSE Leap 15.6 kernel-source-azure Released
    openSUSE Leap 15.6 kernel-source-rt Not affected
    Products under Long Term Service Pack support and receiving important and critical security fixes.
    SUSE Linux Enterprise High Performance Computing 15 SP3 kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-default Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP4 kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP5 kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-default Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-default Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-source Not affected
    SUSE Linux Enterprise Live Patching 12 SP5 kernel-default Not affected
    SUSE Linux Enterprise Live Patching 12 SP5 kernel-source Not affected
    SUSE Linux Enterprise Live Patching 15 SP3 kernel-default Not affected
    SUSE Linux Enterprise Live Patching 15 SP3 kernel-source Not affected
    SUSE Linux Enterprise Live Patching 15 SP4 kernel-default Not affected
    SUSE Linux Enterprise Live Patching 15 SP4 kernel-source Not affected
    SUSE Linux Enterprise Live Patching 15 SP5 kernel-default Not affected
    SUSE Linux Enterprise Live Patching 15 SP5 kernel-source Not affected
    SUSE Linux Enterprise Module for Basesystem 15 SP3 kernel-source Not affected
    SUSE Linux Enterprise Module for Basesystem 15 SP4 kernel-source Not affected
    SUSE Linux Enterprise Module for Basesystem 15 SP5 kernel-source Not affected
    SUSE Linux Enterprise Module for Development Tools 15 SP3 kernel-source Not affected
    SUSE Linux Enterprise Module for Development Tools 15 SP4 kernel-source Not affected
    SUSE Linux Enterprise Module for Development Tools 15 SP5 kernel-source Not affected
    SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-default Not affected
    SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP5 kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default Not affected
    SUSE Linux Enterprise Server 12 SP5-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security kernel-default Not affected
    SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP3 kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-default Not affected
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP4 kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP4-LTSS kernel-default Not affected
    SUSE Linux Enterprise Server 15 SP4-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP5 kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP5-LTSS kernel-default Not affected
    SUSE Linux Enterprise Server 15 SP5-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 kernel-source Not affected
    SUSE Manager Proxy 4.3 kernel-source Not affected
    SUSE Manager Proxy LTS 4.3 kernel-default Not affected
    SUSE Manager Proxy LTS 4.3 kernel-source Not affected
    SUSE Manager Retail Branch Server 4.3 kernel-source Not affected
    SUSE Manager Retail Branch Server LTS 4.3 kernel-default Not affected
    SUSE Manager Retail Branch Server LTS 4.3 kernel-source Not affected
    SUSE Manager Server 4.3 kernel-source Not affected
    SUSE Manager Server LTS 4.3 kernel-default Not affected
    SUSE Manager Server LTS 4.3 kernel-source Not affected
    Products past their end of life and not receiving proactive updates anymore.
    SUSE CaaS Platform 4.0 kernel-source Not affected
    SUSE Enterprise Storage 6 kernel-source Not affected
    SUSE Enterprise Storage 7 kernel-source Not affected
    SUSE Enterprise Storage 7.1 kernel-source Not affected
    SUSE Linux Enterprise Desktop 11 SP4 kernel-source Not affected
    SUSE Linux Enterprise Desktop 12 SP2 kernel-source Not affected
    SUSE Linux Enterprise Desktop 12 SP4 kernel-source Not affected
    SUSE Linux Enterprise Desktop 15 kernel-source Not affected
    SUSE Linux Enterprise Desktop 15 SP1 kernel-source Not affected
    SUSE Linux Enterprise Desktop 15 SP2 kernel-source Not affected
    SUSE Linux Enterprise Desktop 15 SP3 kernel-source Not affected
    SUSE Linux Enterprise Desktop 15 SP4 kernel-source Not affected
    SUSE Linux Enterprise Desktop 15 SP5 kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP1 kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP2 kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15-ESPOS kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15-LTSS kernel-source Not affected
    SUSE Linux Enterprise Micro 5.0 kernel-default Not affected
    SUSE Linux Enterprise Micro 5.1 kernel-default Not affected
    SUSE Linux Enterprise Micro 5.1 kernel-rt Not affected
    SUSE Linux Enterprise Micro 5.1 kernel-source Not affected
    SUSE Linux Enterprise Micro 5.1 kernel-source-rt Not affected
    SUSE Linux Enterprise Module for Basesystem 15 kernel-source Not affected
    SUSE Linux Enterprise Module for Basesystem 15 SP1 kernel-source Not affected
    SUSE Linux Enterprise Module for Basesystem 15 SP2 kernel-source Not affected
    SUSE Linux Enterprise Module for Development Tools 15 kernel-source Not affected
    SUSE Linux Enterprise Module for Development Tools 15 SP1 kernel-source Not affected
    SUSE Linux Enterprise Module for Development Tools 15 SP2 kernel-source Not affected
    SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT kernel-source Not affected
    SUSE Linux Enterprise Real Time 15 SP2 kernel-source Not affected
    SUSE Linux Enterprise Real Time 15 SP3 kernel-source Not affected
    SUSE Linux Enterprise Real Time 15 SP3 kernel-source-rt Not affected
    SUSE Linux Enterprise Real Time 15 SP4 kernel-source Not affected
    SUSE Linux Enterprise Real Time 15 SP4 kernel-source-rt Not affected
    SUSE Linux Enterprise Real Time 15 SP5 kernel-source-rt Not affected
    SUSE Linux Enterprise Server 11 SP4 kernel-source Not affected
    SUSE Linux Enterprise Server 11 SP4 LTSS kernel-default Not affected
    SUSE Linux Enterprise Server 11 SP4 LTSS kernel-source Not affected
    SUSE Linux Enterprise Server 11 SP4-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP2 kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP2-BCL kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP2-ESPOS kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default Not affected
    SUSE Linux Enterprise Server 12 SP2-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP4 kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP4-ESPOS kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default Not affected
    SUSE Linux Enterprise Server 12 SP4-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server 15 kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP1 kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP1-BCL kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default Not affected
    SUSE Linux Enterprise Server 15 SP1-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP2 kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP2-BCL kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP2-LTSS kernel-default Not affected
    SUSE Linux Enterprise Server 15 SP2-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP3-BCL kernel-source Not affected
    SUSE Linux Enterprise Server 15-LTSS kernel-default Not affected
    SUSE Linux Enterprise Server 15-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 kernel-source Not affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-source Not affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-source Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 kernel-source Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP1 kernel-source Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-source Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-default Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-source Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-default Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-source Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-default Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-source Not affected
    SUSE Manager Proxy 4.0 kernel-source Not affected
    SUSE Manager Proxy 4.1 kernel-source Not affected
    SUSE Manager Proxy 4.2 kernel-source Not affected
    SUSE Manager Retail Branch Server 4.0 kernel-source Not affected
    SUSE Manager Retail Branch Server 4.1 kernel-source Not affected
    SUSE Manager Retail Branch Server 4.2 kernel-source Not affected
    SUSE Manager Server 4.0 kernel-source Not affected
    SUSE Manager Server 4.1 kernel-source Not affected
    SUSE Manager Server 4.2 kernel-source Not affected
    SUSE OpenStack Cloud 7 kernel-source Not affected
    SUSE OpenStack Cloud 9 kernel-source Not affected
    SUSE OpenStack Cloud Crowbar 9 kernel-source Not affected
    SUSE Real Time Module 15 SP3 kernel-source-rt Not affected
    SUSE Real Time Module 15 SP4 kernel-source-rt Not affected
    SUSE Real Time Module 15 SP5 kernel-source-rt Not affected
    openSUSE Leap 15.3 kernel-source Not affected
    openSUSE Leap 15.3 kernel-source-rt Not affected
    openSUSE Leap 15.4 kernel-source Not affected
    openSUSE Leap 15.4 kernel-source-rt Not affected
    openSUSE Leap 15.5 kernel-source Not affected
    openSUSE Leap 15.5 kernel-source-rt Not affected
    Products at an unknown state of their lifecycle.
    SUSE Linux Enterprise Server for SAP Applications 16.0 kernel-source Not affected
    SUSE Linux Enterprise Server for SAP Applications 16.0 kernel-source-azure Not affected


    SUSE Timeline for this CVE

    CVE page created: Wed Oct 15 12:00:35 2025
    CVE page last modified: Thu Nov 27 17:38:14 2025