Security update for the Linux Kernel (Live Patch 71 for SUSE Linux Enterprise 12 SP5)
| Announcement ID: | SUSE-SU-2025:4058-1 |
|---|---|
| Release Date: | 2025-11-11T18:36:18Z |
| Rating: | important |
| References: | |
| Cross-References: | |
| CVSS scores: |
|
| Affected Products: |
|
An update that solves three vulnerabilities and has one security fix can now be installed.
Description:
This update for the SUSE Linux Enterprise kernel 4.12.14-122.269 fixes various security issues
The following security issues were fixed:
- CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249847).
- CVE-2025-38617: net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1249208).
- CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207).
The following non security issue was fixed:
- bsc#1249208: fix livepatching target module name (bsc#1252946)
Patch Instructions:
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
-
SUSE Linux Enterprise Live Patching 12-SP5
zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2025-4058=1
Package List:
-
SUSE Linux Enterprise Live Patching 12-SP5 (ppc64le s390x x86_64)
- kgraft-patch-4_12_14-122_269-default-4-4.1
References:
- https://www.suse.com/security/cve/CVE-2022-50252.html
- https://www.suse.com/security/cve/CVE-2025-38617.html
- https://www.suse.com/security/cve/CVE-2025-38618.html
- https://bugzilla.suse.com/show_bug.cgi?id=1249207
- https://bugzilla.suse.com/show_bug.cgi?id=1249208
- https://bugzilla.suse.com/show_bug.cgi?id=1249847
- https://bugzilla.suse.com/show_bug.cgi?id=1252946