{"affected":[{"ecosystem_specific":{"binaries":[{"kernel-rt":"5.14.21-150400.15.130.1","kernel-source-rt":"5.14.21-150400.15.130.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","name":"kernel-rt","purl":"pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.130.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kernel-rt":"5.14.21-150400.15.130.1","kernel-source-rt":"5.14.21-150400.15.130.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","name":"kernel-source-rt","purl":"pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.130.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kernel-rt":"5.14.21-150400.15.130.1","kernel-source-rt":"5.14.21-150400.15.130.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","name":"kernel-rt","purl":"pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.130.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kernel-rt":"5.14.21-150400.15.130.1","kernel-source-rt":"5.14.21-150400.15.130.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","name":"kernel-source-rt","purl":"pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.130.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-50116: kernel: tty: n_gsm: fix deadlock and link starvation in outgoing data path (bsc#1244824).\n- CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).\n- CVE-2024-58239: tls: stop recv() if initial process_rx_list gave us non-DATA (bsc#1248614).\n- CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).\n- CVE-2025-38323: net: atm: add lec_mutex (bsc#1246473).\n- CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1246911).\n- CVE-2025-38460: atm: clip: Fix potential null-ptr-deref in to_atmarpd() (bsc#1247143).\n- CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247374).\n- CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1247976).\n- CVE-2025-38546: atm: clip: Fix memory leak of struct clip_vcc (bsc#1248223).\n- CVE-2025-38555: usb: gadget : fix use-after-free in composite_dev_cleanup() (bsc#1248297).\n- CVE-2025-38560: x86/sev: Evict cache lines during SNP memory validation (bsc#1248312).\n- CVE-2025-38563: perf/core: Prevent VMA split of buffer mappings (bsc#1248306).\n- CVE-2025-38608: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1248338).\n- CVE-2025-38617: net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1248621).\n- CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1248511).\n- CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248748).\n\nThe following non-security bugs were fixed:\n\n- NFSv4.1: fix backchannel max_resp_sz verification check (bsc#1247518).\n- Disable N_GSM (bsc#1244824 jsc#PED-8240).\n","id":"SUSE-SU-2025:03383-1","modified":"2025-09-26T17:27:32Z","published":"2025-09-26T17:27:32Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503383-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1234896"},{"type":"REPORT","url":"https://bugzilla.suse.com/1244824"},{"type":"REPORT","url":"https://bugzilla.suse.com/1245970"},{"type":"REPORT","url":"https://bugzilla.suse.com/1246473"},{"type":"REPORT","url":"https://bugzilla.suse.com/1246911"},{"type":"REPORT","url":"https://bugzilla.suse.com/1247143"},{"type":"REPORT","url":"https://bugzilla.suse.com/1247374"},{"type":"REPORT","url":"https://bugzilla.suse.com/1247518"},{"type":"REPORT","url":"https://bugzilla.suse.com/1247976"},{"type":"REPORT","url":"https://bugzilla.suse.com/1248223"},{"type":"REPORT","url":"https://bugzilla.suse.com/1248297"},{"type":"REPORT","url":"https://bugzilla.suse.com/1248306"},{"type":"REPORT","url":"https://bugzilla.suse.com/1248312"},{"type":"REPORT","url":"https://bugzilla.suse.com/1248338"},{"type":"REPORT","url":"https://bugzilla.suse.com/1248511"},{"type":"REPORT","url":"https://bugzilla.suse.com/1248614"},{"type":"REPORT","url":"https://bugzilla.suse.com/1248621"},{"type":"REPORT","url":"https://bugzilla.suse.com/1248748"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-50116"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-53177"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-58239"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38180"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38323"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38352"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38460"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38498"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38499"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38546"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38555"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38560"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38563"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38608"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38617"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38618"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38644"}],"related":["CVE-2022-50116","CVE-2024-53177","CVE-2024-58239","CVE-2025-38180","CVE-2025-38323","CVE-2025-38352","CVE-2025-38460","CVE-2025-38498","CVE-2025-38499","CVE-2025-38546","CVE-2025-38555","CVE-2025-38560","CVE-2025-38563","CVE-2025-38608","CVE-2025-38617","CVE-2025-38618","CVE-2025-38644"],"summary":"Security update for the Linux Kernel","upstream":["CVE-2022-50116","CVE-2024-53177","CVE-2024-58239","CVE-2025-38180","CVE-2025-38323","CVE-2025-38352","CVE-2025-38460","CVE-2025-38498","CVE-2025-38499","CVE-2025-38546","CVE-2025-38555","CVE-2025-38560","CVE-2025-38563","CVE-2025-38608","CVE-2025-38617","CVE-2025-38618","CVE-2025-38644"]}