Upstream information

CVE-2025-21693 at MITRE

Description

In the Linux kernel, the following vulnerability has been resolved:

mm: zswap: properly synchronize freeing resources during CPU hotunplug

In zswap_compress() and zswap_decompress(), the per-CPU acomp_ctx of the
current CPU at the beginning of the operation is retrieved and used
throughout. However, since neither preemption nor migration are disabled,
it is possible that the operation continues on a different CPU.

If the original CPU is hotunplugged while the acomp_ctx is still in use,
we run into a UAF bug as some of the resources attached to the acomp_ctx
are freed during hotunplug in zswap_cpu_comp_dead() (i.e.
acomp_ctx.buffer, acomp_ctx.req, or acomp_ctx.acomp).

The problem was introduced in commit 1ec3b5fe6eec ("mm/zswap: move to use
crypto_acomp API for hardware acceleration") when the switch to the
crypto_acomp API was made. Prior to that, the per-CPU crypto_comp was
retrieved using get_cpu_ptr() which disables preemption and makes sure the
CPU cannot go away from under us. Preemption cannot be disabled with the
crypto_acomp API as a sleepable context is needed.

Use the acomp_ctx.mutex to synchronize CPU hotplug callbacks allocating
and freeing resources with compression/decompression paths. Make sure
that acomp_ctx.req is NULL when the resources are freed. In the
compression/decompression paths, check if acomp_ctx.req is NULL after
acquiring the mutex (meaning the CPU was offlined) and retry on the new
CPU.

The initialization of acomp_ctx.mutex is moved from the CPU hotplug
callback to the pool initialization where it belongs (where the mutex is
allocated). In addition to adding clarity, this makes sure that CPU
hotplug cannot reinitialize a mutex that is already locked by
compression/decompression.

Previously a fix was attempted by holding cpus_read_lock() [1]. This
would have caused a potential deadlock as it is possible for code already
holding the lock to fall into reclaim and enter zswap (causing a
deadlock). A fix was also attempted using SRCU for synchronization, but
Johannes pointed out that synchronize_srcu() cannot be used in CPU hotplug
notifiers [2].

Alternative fixes that were considered/attempted and could have worked:
- Refcounting the per-CPU acomp_ctx. This involves complexity in
handling the race between the refcount dropping to zero in
zswap_[de]compress() and the refcount being re-initialized when the
CPU is onlined.
- Disabling migration before getting the per-CPU acomp_ctx [3], but
that's discouraged and is a much bigger hammer than needed, and could
result in subtle performance issues.

[1]https://lkml.kernel.org/20241219212437.2714151-1-yosryahmed@google.com/
[2]https://lkml.kernel.org/20250107074724.1756696-2-yosryahmed@google.com/
[3]https://lkml.kernel.org/20250107222236.2715883-2-yosryahmed@google.com/

[yosryahmed@google.com: remove comment]

SUSE information

Overall state of this security issue: Revisit

This issue is currently rated as having important severity.

CVSS v3 Scores
  CNA (CISA-ADP) SUSE
Base Score 7.8 7
Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local Local
Attack Complexity Low High
Privileges Required Low Low
User Interaction None None
Scope Unchanged Unchanged
Confidentiality Impact High High
Integrity Impact High High
Availability Impact High High
CVSSv3 Version 3.1 3.1
CVSS v4 Scores
  SUSE
Base Score 7.3
Vector CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Attack Vector Local
Attack Complexity Low
Attack Requirements Present
Privileges Required Low
User Interaction None
Vulnerable System Confidentiality Impact High
Vulnerable System Integrity Impact High
Vulnerable System Availability Impact High
Subsequent System Confidentiality Impact None
Subsequent System Integrity Impact None
Subsequent System Availability Impact None
CVSSv4 Version 4.0

Note from the SUSE Security Team on the kernel-default package

SUSE will no longer fix all CVEs in the Linux Kernel anymore, but declare some bug classes as won't fix. Please refer to TID 21496 for more details.

SUSE Bugzilla entries: 1237029 [IN_PROGRESS], 1237047 [NEW]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
Container bci/bci-sle15-kernel-module-devel:15.6.32.27
  • kernel-default-devel >= 6.4.0-150600.23.47.2
  • kernel-devel >= 6.4.0-150600.23.47.2
  • kernel-macros >= 6.4.0-150600.23.47.2
  • kernel-syms >= 6.4.0-150600.23.47.1
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:15.6.17.8.25
Image SLES15-SP6
Image SLES15-SP6-BYOS
Image SLES15-SP6-BYOS-Azure
Image SLES15-SP6-BYOS-EC2
Image SLES15-SP6-CHOST-BYOS
Image SLES15-SP6-CHOST-BYOS-Aliyun
Image SLES15-SP6-CHOST-BYOS-Azure
Image SLES15-SP6-CHOST-BYOS-EC2
Image SLES15-SP6-CHOST-BYOS-GCE
Image SLES15-SP6-CHOST-BYOS-GDC
Image SLES15-SP6-CHOST-BYOS-SAP-CCloud
Image SLES15-SP6-EC2
Image SLES15-SP6-EC2-ECS-HVM
Image SLES15-SP6-GCE
Image SLES15-SP6-HPC-BYOS
Image SLES15-SP6-HPC-BYOS-Azure
Image SLES15-SP6-HPC-BYOS-EC2
Image SLES15-SP6-HPC-BYOS-GCE
Image SLES15-SP6-HPC-EC2
Image SLES15-SP6-HPC-GCE
Image SLES15-SP6-Hardened-BYOS
Image SLES15-SP6-Hardened-BYOS-Azure
Image SLES15-SP6-Hardened-BYOS-EC2
Image SLES15-SP6-Hardened-BYOS-GCE
Image SLES15-SP6-SAP
Image SLES15-SP6-SAP-Azure
Image SLES15-SP6-SAP-EC2
Image SLES15-SP6-SAP-GCE
Image SLES15-SP6-SAPCAL
Image SLES15-SP6-SAPCAL-Azure
Image SLES15-SP6-SAPCAL-EC2
Image SLES15-SP6-SAPCAL-GCE
  • kernel-default >= 6.4.0-150600.23.47.2
Container suse/sl-micro/6.0/base-os-container:2.1.3-6.11
Container suse/sl-micro/6.1/base-os-container:2.2.0-4.21
  • kernel-default >= 6.4.0-28.1
Container suse/sl-micro/6.0/kvm-os-container:2.1.3-6.12
Container suse/sl-micro/6.1/kvm-os-container:2.2.0-4.20
  • kernel-default-base >= 6.4.0-28.1.21.6
Container suse/sl-micro/6.0/rt-os-container:2.1.3-7.15
Container suse/sl-micro/6.1/rt-os-container:2.2.0-4.21
  • kernel-rt >= 6.4.0-28.1
Container suse/sle-micro-rancher/5.3:latest
Container suse/sle-micro-rancher/5.4:latest
Image SLES15-SP4-BYOS
Image SLES15-SP4-BYOS-Azure
Image SLES15-SP4-HPC-BYOS
Image SLES15-SP4-HPC-BYOS-Azure
Image SLES15-SP4-HPC-BYOS-EC2
Image SLES15-SP4-HPC-EC2
Image SLES15-SP4-Hardened-BYOS
Image SLES15-SP4-Hardened-BYOS-Azure
Image SLES15-SP4-Hardened-BYOS-EC2
Image SLES15-SP4-Manager-Proxy-4-3-BYOS
Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure
Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE
Image SLES15-SP4-Micro-5-3-BYOS
Image SLES15-SP4-Micro-5-3-BYOS-Azure
Image SLES15-SP4-Micro-5-3-BYOS-GCE
Image SLES15-SP4-Micro-5-4-BYOS
Image SLES15-SP4-Micro-5-4-BYOS-Azure
Image SLES15-SP4-Micro-5-4-BYOS-GCE
Image SLES15-SP4-Micro-5-4-GCE
Image SLES15-SP4-SAP
Image SLES15-SP4-SAP-Azure
Image SLES15-SP4-SAPCAL
Image SLES15-SP4-SAPCAL-Azure
  • kernel-default >= 5.14.21-150400.24.161.1
Container suse/sle-micro/base-5.5:2.0.4-5.8.160
Image SLES15-SP5-BYOS-Azure
Image SLES15-SP5-HPC-BYOS-Azure
Image SLES15-SP5-Micro-5-5
Image SLES15-SP5-Micro-5-5-Azure
Image SLES15-SP5-SAPCAL-Azure
  • kernel-default >= 5.14.21-150500.55.100.1
Container suse/sle-micro/kvm-5.5:2.0.4-3.5.304
  • kernel-default-base >= 5.14.21-150500.55.100.1.150500.6.47.1
Container suse/sle-micro/rt-5.5:2.0.4-4.5.352
  • kernel-rt >= 5.14.21-150500.13.91.1
Image SLES15-SP4-SAP-Azure-LI-BYOS
Image SLES15-SP4-SAP-Azure-LI-BYOS-Production
Image SLES15-SP4-SAP-Azure-VLI-BYOS
Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production
Image SLES15-SP4-SAP-BYOS
Image SLES15-SP4-SAP-BYOS-Azure
Image SLES15-SP4-SAP-BYOS-EC2
Image SLES15-SP4-SAP-Hardened
Image SLES15-SP4-SAP-Hardened-Azure
Image SLES15-SP4-SAP-Hardened-BYOS
Image SLES15-SP4-SAP-Hardened-BYOS-Azure
Image SLES15-SP4-SAP-Hardened-GCE
  • cluster-md-kmp-default >= 5.14.21-150400.24.161.1
  • dlm-kmp-default >= 5.14.21-150400.24.161.1
  • gfs2-kmp-default >= 5.14.21-150400.24.161.1
  • kernel-default >= 5.14.21-150400.24.161.1
  • ocfs2-kmp-default >= 5.14.21-150400.24.161.1
Image SLES15-SP6-Azure-Basic
Image SLES15-SP6-HPC
Image SLES15-SP6-HPC-Azure
  • kernel-azure >= 6.4.0-150600.8.34.2
Image SLES15-SP6-SAP-Azure-3P
Image SLES15-SP6-SAP-BYOS
Image SLES15-SP6-SAP-BYOS-Azure
Image SLES15-SP6-SAP-BYOS-EC2
Image SLES15-SP6-SAP-BYOS-GCE
Image SLES15-SP6-SAP-Hardened
Image SLES15-SP6-SAP-Hardened-Azure
Image SLES15-SP6-SAP-Hardened-BYOS
Image SLES15-SP6-SAP-Hardened-BYOS-Azure
Image SLES15-SP6-SAP-Hardened-BYOS-GCE
Image SLES15-SP6-SAP-Hardened-GCE
  • cluster-md-kmp-default >= 6.4.0-150600.23.47.2
  • dlm-kmp-default >= 6.4.0-150600.23.47.2
  • gfs2-kmp-default >= 6.4.0-150600.23.47.2
  • kernel-default >= 6.4.0-150600.23.47.2
  • ocfs2-kmp-default >= 6.4.0-150600.23.47.2
SUSE Linux Enterprise Desktop 15 SP6
  • kernel-64kb >= 6.4.0-150600.23.47.2
  • kernel-64kb-devel >= 6.4.0-150600.23.47.2
  • kernel-default >= 6.4.0-150600.23.47.2
  • kernel-default-base >= 6.4.0-150600.23.47.2.150600.12.20.2
  • kernel-default-devel >= 6.4.0-150600.23.47.2
  • kernel-default-extra >= 6.4.0-150600.23.47.2
  • kernel-devel >= 6.4.0-150600.23.47.2
  • kernel-docs >= 6.4.0-150600.23.47.1
  • kernel-macros >= 6.4.0-150600.23.47.2
  • kernel-obs-build >= 6.4.0-150600.23.47.1
  • kernel-source >= 6.4.0-150600.23.47.2
  • kernel-syms >= 6.4.0-150600.23.47.1
  • kernel-zfcpdump >= 6.4.0-150600.23.47.2
Patchnames:
SUSE-SLE-Module-Basesystem-15-SP6-2025-1180
SUSE-SLE-Module-Development-Tools-15-SP6-2025-1180
SUSE-SLE-Product-WE-15-SP6-2025-1180
SUSE Linux Enterprise High Availability Extension 15 SP4
  • cluster-md-kmp-default >= 5.14.21-150400.24.161.1
  • dlm-kmp-default >= 5.14.21-150400.24.161.1
  • gfs2-kmp-default >= 5.14.21-150400.24.161.1
  • ocfs2-kmp-default >= 5.14.21-150400.24.161.1
Patchnames:
SUSE-SLE-Product-HA-15-SP4-2025-1195
SUSE Linux Enterprise High Availability Extension 15 SP6
  • cluster-md-kmp-default >= 6.4.0-150600.23.47.2
  • dlm-kmp-default >= 6.4.0-150600.23.47.2
  • gfs2-kmp-default >= 6.4.0-150600.23.47.2
  • ocfs2-kmp-default >= 6.4.0-150600.23.47.2
Patchnames:
SUSE-SLE-Product-HA-15-SP6-2025-1180
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
  • kernel-64kb >= 5.14.21-150400.24.161.1
  • kernel-64kb-devel >= 5.14.21-150400.24.161.1
  • kernel-default >= 5.14.21-150400.24.161.1
  • kernel-default-base >= 5.14.21-150400.24.161.1.150400.24.80.1
  • kernel-default-devel >= 5.14.21-150400.24.161.1
  • kernel-devel >= 5.14.21-150400.24.161.1
  • kernel-docs >= 5.14.21-150400.24.161.1
  • kernel-macros >= 5.14.21-150400.24.161.1
  • kernel-obs-build >= 5.14.21-150400.24.161.1
  • kernel-source >= 5.14.21-150400.24.161.1
  • kernel-syms >= 5.14.21-150400.24.161.1
  • reiserfs-kmp-default >= 5.14.21-150400.24.161.1
Patchnames:
SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-1195
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
  • kernel-64kb >= 5.14.21-150400.24.161.1
  • kernel-64kb-devel >= 5.14.21-150400.24.161.1
  • kernel-default >= 5.14.21-150400.24.161.1
  • kernel-default-base >= 5.14.21-150400.24.161.1.150400.24.80.1
  • kernel-default-devel >= 5.14.21-150400.24.161.1
  • kernel-devel >= 5.14.21-150400.24.161.1
  • kernel-docs >= 5.14.21-150400.24.161.1
  • kernel-macros >= 5.14.21-150400.24.161.1
  • kernel-obs-build >= 5.14.21-150400.24.161.1
  • kernel-source >= 5.14.21-150400.24.161.1
  • kernel-syms >= 5.14.21-150400.24.161.1
  • reiserfs-kmp-default >= 5.14.21-150400.24.161.1
Patchnames:
SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-1195
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
  • cluster-md-kmp-default >= 5.14.21-150500.55.100.1
  • dlm-kmp-default >= 5.14.21-150500.55.100.1
  • gfs2-kmp-default >= 5.14.21-150500.55.100.1
  • kernel-64kb >= 5.14.21-150500.55.100.1
  • kernel-64kb-devel >= 5.14.21-150500.55.100.1
  • kernel-default >= 5.14.21-150500.55.100.1
  • kernel-default-base >= 5.14.21-150500.55.100.1.150500.6.47.1
  • kernel-default-devel >= 5.14.21-150500.55.100.1
  • kernel-devel >= 5.14.21-150500.55.100.1
  • kernel-docs >= 5.14.21-150500.55.100.1
  • kernel-macros >= 5.14.21-150500.55.100.1
  • kernel-obs-build >= 5.14.21-150500.55.100.1
  • kernel-source >= 5.14.21-150500.55.100.1
  • kernel-syms >= 5.14.21-150500.55.100.1
  • ocfs2-kmp-default >= 5.14.21-150500.55.100.1
Patchnames:
SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-1241
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
  • cluster-md-kmp-default >= 5.14.21-150500.55.100.1
  • dlm-kmp-default >= 5.14.21-150500.55.100.1
  • gfs2-kmp-default >= 5.14.21-150500.55.100.1
  • kernel-64kb >= 5.14.21-150500.55.100.1
  • kernel-64kb-devel >= 5.14.21-150500.55.100.1
  • kernel-default >= 5.14.21-150500.55.100.1
  • kernel-default-base >= 5.14.21-150500.55.100.1.150500.6.47.1
  • kernel-default-devel >= 5.14.21-150500.55.100.1
  • kernel-devel >= 5.14.21-150500.55.100.1
  • kernel-docs >= 5.14.21-150500.55.100.1
  • kernel-macros >= 5.14.21-150500.55.100.1
  • kernel-obs-build >= 5.14.21-150500.55.100.1
  • kernel-source >= 5.14.21-150500.55.100.1
  • kernel-syms >= 5.14.21-150500.55.100.1
  • ocfs2-kmp-default >= 5.14.21-150500.55.100.1
Patchnames:
SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-1241
SUSE Linux Enterprise High Performance Computing 15 SP6
  • kernel-64kb >= 6.4.0-150600.23.47.2
  • kernel-64kb-devel >= 6.4.0-150600.23.47.2
  • kernel-azure >= 6.4.0-150600.8.34.2
  • kernel-azure-devel >= 6.4.0-150600.8.34.2
  • kernel-default >= 6.4.0-150600.23.47.2
  • kernel-default-base >= 6.4.0-150600.23.47.2.150600.12.20.2
  • kernel-default-devel >= 6.4.0-150600.23.47.2
  • kernel-devel >= 6.4.0-150600.23.47.2
  • kernel-devel-azure >= 6.4.0-150600.8.34.2
  • kernel-docs >= 6.4.0-150600.23.47.1
  • kernel-macros >= 6.4.0-150600.23.47.2
  • kernel-obs-build >= 6.4.0-150600.23.47.1
  • kernel-source >= 6.4.0-150600.23.47.2
  • kernel-source-azure >= 6.4.0-150600.8.34.2
  • kernel-syms >= 6.4.0-150600.23.47.1
  • kernel-syms-azure >= 6.4.0-150600.8.34.1
  • kernel-zfcpdump >= 6.4.0-150600.23.47.2
  • reiserfs-kmp-default >= 6.4.0-150600.23.47.2
Patchnames:
SUSE-SLE-Module-Basesystem-15-SP6-2025-1180
SUSE-SLE-Module-Development-Tools-15-SP6-2025-1180
SUSE-SLE-Module-Legacy-15-SP6-2025-1180
SUSE-SLE-Module-Public-Cloud-15-SP6-2025-1177
SUSE Linux Enterprise Live Patching 15 SP4
    Patchnames:
    SUSE-SLE-Module-Live-Patching-15-SP4-2025-1195
    SUSE Linux Enterprise Live Patching 15 SP5
      Patchnames:
      SUSE-SLE-Module-Live-Patching-15-SP5-2025-1241
      SUSE Linux Enterprise Live Patching 15 SP6
        Patchnames:
        SUSE-SLE-Module-Live-Patching-15-SP6-2025-1178
        SUSE-SLE-Module-Live-Patching-15-SP6-2025-1180
        SUSE Linux Enterprise Micro 5.3
        • kernel-default >= 5.14.21-150400.24.161.1
        • kernel-default-base >= 5.14.21-150400.24.161.1.150400.24.80.1
        • kernel-rt >= 5.14.21-150400.15.115.1
        • kernel-source-rt >= 5.14.21-150400.15.115.1
        Patchnames:
        SUSE-SLE-Micro-5.3-2025-1183
        SUSE-SLE-Micro-5.3-2025-1195
        SUSE Linux Enterprise Micro 5.4
        • kernel-default >= 5.14.21-150400.24.161.1
        • kernel-default-base >= 5.14.21-150400.24.161.1.150400.24.80.1
        • kernel-rt >= 5.14.21-150400.15.115.1
        • kernel-source-rt >= 5.14.21-150400.15.115.1
        Patchnames:
        SUSE-SLE-Micro-5.4-2025-1183
        SUSE-SLE-Micro-5.4-2025-1195
        SUSE Linux Enterprise Micro 5.5
        • kernel-default >= 5.14.21-150500.55.100.1
        • kernel-default-base >= 5.14.21-150500.55.100.1.150500.6.47.1
        • kernel-devel-rt >= 5.14.21-150500.13.91.1
        • kernel-macros >= 5.14.21-150500.55.100.1
        • kernel-rt >= 5.14.21-150500.13.91.1
        • kernel-source-rt >= 5.14.21-150500.13.91.1
        Patchnames:
        SUSE-SLE-Micro-5.5-2025-1176
        SUSE-SLE-Micro-5.5-2025-1241
        SUSE Linux Enterprise Module for Basesystem 15 SP6
        • kernel-64kb >= 6.4.0-150600.23.47.2
        • kernel-64kb-devel >= 6.4.0-150600.23.47.2
        • kernel-default >= 6.4.0-150600.23.47.2
        • kernel-default-base >= 6.4.0-150600.23.47.2.150600.12.20.2
        • kernel-default-devel >= 6.4.0-150600.23.47.2
        • kernel-devel >= 6.4.0-150600.23.47.2
        • kernel-macros >= 6.4.0-150600.23.47.2
        • kernel-zfcpdump >= 6.4.0-150600.23.47.2
        Patchnames:
        SUSE-SLE-Module-Basesystem-15-SP6-2025-1180
        SUSE Linux Enterprise Module for Development Tools 15 SP6
        • kernel-docs >= 6.4.0-150600.23.47.1
        • kernel-obs-build >= 6.4.0-150600.23.47.1
        • kernel-source >= 6.4.0-150600.23.47.2
        • kernel-syms >= 6.4.0-150600.23.47.1
        Patchnames:
        SUSE-SLE-Module-Development-Tools-15-SP6-2025-1180
        SUSE Linux Enterprise Module for Legacy 15 SP6
        • reiserfs-kmp-default >= 6.4.0-150600.23.47.2
        Patchnames:
        SUSE-SLE-Module-Legacy-15-SP6-2025-1180
        SUSE Linux Enterprise Module for Public Cloud 15 SP6
        • kernel-azure >= 6.4.0-150600.8.34.2
        • kernel-azure-devel >= 6.4.0-150600.8.34.2
        • kernel-devel-azure >= 6.4.0-150600.8.34.2
        • kernel-source-azure >= 6.4.0-150600.8.34.2
        • kernel-syms-azure >= 6.4.0-150600.8.34.1
        Patchnames:
        SUSE-SLE-Module-Public-Cloud-15-SP6-2025-1177
        SUSE Linux Enterprise Real Time 15 SP6
        SUSE Real Time Module 15 SP6
        • cluster-md-kmp-rt >= 6.4.0-150600.10.34.1
        • dlm-kmp-rt >= 6.4.0-150600.10.34.1
        • gfs2-kmp-rt >= 6.4.0-150600.10.34.1
        • kernel-devel-rt >= 6.4.0-150600.10.34.1
        • kernel-rt >= 6.4.0-150600.10.34.1
        • kernel-rt-devel >= 6.4.0-150600.10.34.1
        • kernel-rt_debug >= 6.4.0-150600.10.34.1
        • kernel-rt_debug-devel >= 6.4.0-150600.10.34.1
        • kernel-source-rt >= 6.4.0-150600.10.34.1
        • kernel-syms-rt >= 6.4.0-150600.10.34.1
        • ocfs2-kmp-rt >= 6.4.0-150600.10.34.1
        Patchnames:
        SUSE-SLE-Module-RT-15-SP6-2025-1178
        SUSE Linux Enterprise Server 15 SP4-LTSS
        • kernel-64kb >= 5.14.21-150400.24.161.1
        • kernel-64kb-devel >= 5.14.21-150400.24.161.1
        • kernel-default >= 5.14.21-150400.24.161.1
        • kernel-default-base >= 5.14.21-150400.24.161.1.150400.24.80.1
        • kernel-default-devel >= 5.14.21-150400.24.161.1
        • kernel-devel >= 5.14.21-150400.24.161.1
        • kernel-docs >= 5.14.21-150400.24.161.1
        • kernel-macros >= 5.14.21-150400.24.161.1
        • kernel-obs-build >= 5.14.21-150400.24.161.1
        • kernel-source >= 5.14.21-150400.24.161.1
        • kernel-syms >= 5.14.21-150400.24.161.1
        • kernel-zfcpdump >= 5.14.21-150400.24.161.1
        • reiserfs-kmp-default >= 5.14.21-150400.24.161.1
        Patchnames:
        SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-1195
        SUSE Linux Enterprise Server 15 SP5-LTSS
        • cluster-md-kmp-default >= 5.14.21-150500.55.100.1
        • dlm-kmp-default >= 5.14.21-150500.55.100.1
        • gfs2-kmp-default >= 5.14.21-150500.55.100.1
        • kernel-64kb >= 5.14.21-150500.55.100.1
        • kernel-64kb-devel >= 5.14.21-150500.55.100.1
        • kernel-default >= 5.14.21-150500.55.100.1
        • kernel-default-base >= 5.14.21-150500.55.100.1.150500.6.47.1
        • kernel-default-devel >= 5.14.21-150500.55.100.1
        • kernel-devel >= 5.14.21-150500.55.100.1
        • kernel-docs >= 5.14.21-150500.55.100.1
        • kernel-macros >= 5.14.21-150500.55.100.1
        • kernel-obs-build >= 5.14.21-150500.55.100.1
        • kernel-source >= 5.14.21-150500.55.100.1
        • kernel-syms >= 5.14.21-150500.55.100.1
        • kernel-zfcpdump >= 5.14.21-150500.55.100.1
        • ocfs2-kmp-default >= 5.14.21-150500.55.100.1
        • reiserfs-kmp-default >= 5.14.21-150500.55.100.1
        Patchnames:
        SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-1241
        SUSE Linux Enterprise Server 15 SP6
        SUSE Linux Enterprise Server for SAP Applications 15 SP6
        • kernel-64kb >= 6.4.0-150600.23.47.2
        • kernel-64kb-devel >= 6.4.0-150600.23.47.2
        • kernel-azure >= 6.4.0-150600.8.34.2
        • kernel-azure-devel >= 6.4.0-150600.8.34.2
        • kernel-default >= 6.4.0-150600.23.47.2
        • kernel-default-base >= 6.4.0-150600.23.47.2.150600.12.20.2
        • kernel-default-devel >= 6.4.0-150600.23.47.2
        • kernel-default-extra >= 6.4.0-150600.23.47.2
        • kernel-devel >= 6.4.0-150600.23.47.2
        • kernel-devel-azure >= 6.4.0-150600.8.34.2
        • kernel-docs >= 6.4.0-150600.23.47.1
        • kernel-macros >= 6.4.0-150600.23.47.2
        • kernel-obs-build >= 6.4.0-150600.23.47.1
        • kernel-source >= 6.4.0-150600.23.47.2
        • kernel-source-azure >= 6.4.0-150600.8.34.2
        • kernel-syms >= 6.4.0-150600.23.47.1
        • kernel-syms-azure >= 6.4.0-150600.8.34.1
        • kernel-zfcpdump >= 6.4.0-150600.23.47.2
        • reiserfs-kmp-default >= 6.4.0-150600.23.47.2
        Patchnames:
        SUSE-SLE-Module-Basesystem-15-SP6-2025-1180
        SUSE-SLE-Module-Development-Tools-15-SP6-2025-1180
        SUSE-SLE-Module-Legacy-15-SP6-2025-1180
        SUSE-SLE-Module-Public-Cloud-15-SP6-2025-1177
        SUSE-SLE-Product-WE-15-SP6-2025-1180
        SUSE Linux Enterprise Server for SAP Applications 15 SP4
        • kernel-default >= 5.14.21-150400.24.161.1
        • kernel-default-base >= 5.14.21-150400.24.161.1.150400.24.80.1
        • kernel-default-devel >= 5.14.21-150400.24.161.1
        • kernel-devel >= 5.14.21-150400.24.161.1
        • kernel-docs >= 5.14.21-150400.24.161.1
        • kernel-macros >= 5.14.21-150400.24.161.1
        • kernel-obs-build >= 5.14.21-150400.24.161.1
        • kernel-source >= 5.14.21-150400.24.161.1
        • kernel-syms >= 5.14.21-150400.24.161.1
        • reiserfs-kmp-default >= 5.14.21-150400.24.161.1
        Patchnames:
        SUSE-SLE-Product-SLES_SAP-15-SP4-2025-1195
        SUSE Linux Enterprise Server for SAP Applications 15 SP5
        • cluster-md-kmp-default >= 5.14.21-150500.55.100.1
        • dlm-kmp-default >= 5.14.21-150500.55.100.1
        • gfs2-kmp-default >= 5.14.21-150500.55.100.1
        • kernel-default >= 5.14.21-150500.55.100.1
        • kernel-default-base >= 5.14.21-150500.55.100.1.150500.6.47.1
        • kernel-default-devel >= 5.14.21-150500.55.100.1
        • kernel-devel >= 5.14.21-150500.55.100.1
        • kernel-docs >= 5.14.21-150500.55.100.1
        • kernel-macros >= 5.14.21-150500.55.100.1
        • kernel-obs-build >= 5.14.21-150500.55.100.1
        • kernel-source >= 5.14.21-150500.55.100.1
        • kernel-syms >= 5.14.21-150500.55.100.1
        • ocfs2-kmp-default >= 5.14.21-150500.55.100.1
        • reiserfs-kmp-default >= 5.14.21-150500.55.100.1
        Patchnames:
        SUSE-SLE-Product-SLES_SAP-15-SP5-2025-1241
        SUSE Linux Enterprise Workstation Extension 15 SP6
        • kernel-default-extra >= 6.4.0-150600.23.47.2
        Patchnames:
        SUSE-SLE-Product-WE-15-SP6-2025-1180
        SUSE Linux Micro 6.0
        • kernel-default >= 6.4.0-28.1
        • kernel-default-base >= 6.4.0-28.1.21.6
        • kernel-default-livepatch >= 6.4.0-28.1
        • kernel-devel >= 6.4.0-28.1
        • kernel-devel-rt >= 6.4.0-28.1
        • kernel-kvmsmall >= 6.4.0-28.1
        • kernel-livepatch-6_4_0-28-default >= 1-3.1
        • kernel-livepatch-6_4_0-28-rt >= 1-3.1
        • kernel-macros >= 6.4.0-28.1
        • kernel-rt >= 6.4.0-28.1
        • kernel-rt-livepatch >= 6.4.0-28.1
        • kernel-source >= 6.4.0-28.1
        • kernel-source-rt >= 6.4.0-28.1
        Patchnames:
        SUSE-SLE-Micro-6.0-kernel-14
        SUSE-SLE-Micro-6.0-kernel-8
        SUSE Linux Micro 6.1
        • kernel-default >= 6.4.0-28.1
        • kernel-default-base >= 6.4.0-28.1.21.6
        • kernel-default-devel >= 6.4.0-28.1
        • kernel-default-livepatch >= 6.4.0-28.1
        • kernel-devel >= 6.4.0-28.1
        • kernel-devel-rt >= 6.4.0-28.1
        • kernel-kvmsmall >= 6.4.0-28.1
        • kernel-livepatch-6_4_0-28-default >= 1-3.1
        • kernel-livepatch-6_4_0-28-rt >= 1-3.1
        • kernel-macros >= 6.4.0-28.1
        • kernel-rt >= 6.4.0-28.1
        • kernel-rt-devel >= 6.4.0-28.1
        • kernel-rt-livepatch >= 6.4.0-28.1
        • kernel-source >= 6.4.0-28.1
        • kernel-source-rt >= 6.4.0-28.1
        Patchnames:
        SUSE-SLE-Micro-6.1-kernel-14
        SUSE-SLE-Micro-6.1-kernel-8
        SUSE Manager Proxy 4.3
        • kernel-default >= 5.14.21-150400.24.161.1
        • kernel-default-base >= 5.14.21-150400.24.161.1.150400.24.80.1
        • kernel-default-devel >= 5.14.21-150400.24.161.1
        • kernel-devel >= 5.14.21-150400.24.161.1
        • kernel-macros >= 5.14.21-150400.24.161.1
        • kernel-source >= 5.14.21-150400.24.161.1
        • kernel-syms >= 5.14.21-150400.24.161.1
        Patchnames:
        SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-1195
        SUSE Manager Retail Branch Server 4.3
        • kernel-default >= 5.14.21-150400.24.161.1
        • kernel-default-base >= 5.14.21-150400.24.161.1.150400.24.80.1
        • kernel-default-devel >= 5.14.21-150400.24.161.1
        • kernel-devel >= 5.14.21-150400.24.161.1
        • kernel-macros >= 5.14.21-150400.24.161.1
        Patchnames:
        SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.3-2025-1195
        SUSE Manager Server 4.3
        • kernel-default >= 5.14.21-150400.24.161.1
        • kernel-default-base >= 5.14.21-150400.24.161.1.150400.24.80.1
        • kernel-default-devel >= 5.14.21-150400.24.161.1
        • kernel-devel >= 5.14.21-150400.24.161.1
        • kernel-macros >= 5.14.21-150400.24.161.1
        • kernel-source >= 5.14.21-150400.24.161.1
        • kernel-syms >= 5.14.21-150400.24.161.1
        • kernel-zfcpdump >= 5.14.21-150400.24.161.1
        Patchnames:
        SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-1195
        openSUSE Leap 15.6
        • cluster-md-kmp-64kb >= 6.4.0-150600.23.47.2
        • cluster-md-kmp-azure >= 6.4.0-150600.8.34.2
        • cluster-md-kmp-default >= 6.4.0-150600.23.47.2
        • cluster-md-kmp-rt >= 6.4.0-150600.10.34.1
        • dlm-kmp-64kb >= 6.4.0-150600.23.47.2
        • dlm-kmp-azure >= 6.4.0-150600.8.34.2
        • dlm-kmp-default >= 6.4.0-150600.23.47.2
        • dlm-kmp-rt >= 6.4.0-150600.10.34.1
        • dtb-allwinner >= 6.4.0-150600.23.47.1
        • dtb-altera >= 6.4.0-150600.23.47.1
        • dtb-amazon >= 6.4.0-150600.23.47.1
        • dtb-amd >= 6.4.0-150600.23.47.1
        • dtb-amlogic >= 6.4.0-150600.23.47.1
        • dtb-apm >= 6.4.0-150600.23.47.1
        • dtb-apple >= 6.4.0-150600.23.47.1
        • dtb-arm >= 6.4.0-150600.23.47.1
        • dtb-broadcom >= 6.4.0-150600.23.47.1
        • dtb-cavium >= 6.4.0-150600.23.47.1
        • dtb-exynos >= 6.4.0-150600.23.47.1
        • dtb-freescale >= 6.4.0-150600.23.47.1
        • dtb-hisilicon >= 6.4.0-150600.23.47.1
        • dtb-lg >= 6.4.0-150600.23.47.1
        • dtb-marvell >= 6.4.0-150600.23.47.1
        • dtb-mediatek >= 6.4.0-150600.23.47.1
        • dtb-nvidia >= 6.4.0-150600.23.47.1
        • dtb-qcom >= 6.4.0-150600.23.47.1
        • dtb-renesas >= 6.4.0-150600.23.47.1
        • dtb-rockchip >= 6.4.0-150600.23.47.1
        • dtb-socionext >= 6.4.0-150600.23.47.1
        • dtb-sprd >= 6.4.0-150600.23.47.1
        • dtb-xilinx >= 6.4.0-150600.23.47.1
        • gfs2-kmp-64kb >= 6.4.0-150600.23.47.2
        • gfs2-kmp-azure >= 6.4.0-150600.8.34.2
        • gfs2-kmp-default >= 6.4.0-150600.23.47.2
        • gfs2-kmp-rt >= 6.4.0-150600.10.34.1
        • kernel-64kb >= 6.4.0-150600.23.47.2
        • kernel-64kb-devel >= 6.4.0-150600.23.47.2
        • kernel-64kb-extra >= 6.4.0-150600.23.47.2
        • kernel-64kb-optional >= 6.4.0-150600.23.47.2
        • kernel-azure >= 6.4.0-150600.8.34.2
        • kernel-azure-devel >= 6.4.0-150600.8.34.2
        • kernel-azure-extra >= 6.4.0-150600.8.34.2
        • kernel-azure-optional >= 6.4.0-150600.8.34.2
        • kernel-azure-vdso >= 6.4.0-150600.8.34.2
        • kernel-debug >= 6.4.0-150600.23.47.2
        • kernel-debug-devel >= 6.4.0-150600.23.47.2
        • kernel-debug-vdso >= 6.4.0-150600.23.47.2
        • kernel-default >= 6.4.0-150600.23.47.2
        • kernel-default-base >= 6.4.0-150600.23.47.2.150600.12.20.2
        • kernel-default-base-rebuild >= 6.4.0-150600.23.47.2.150600.12.20.2
        • kernel-default-devel >= 6.4.0-150600.23.47.2
        • kernel-default-extra >= 6.4.0-150600.23.47.2
        • kernel-default-livepatch >= 6.4.0-150600.23.47.2
        • kernel-default-livepatch-devel >= 6.4.0-150600.23.47.2
        • kernel-default-optional >= 6.4.0-150600.23.47.2
        • kernel-default-vdso >= 6.4.0-150600.23.47.2
        • kernel-devel >= 6.4.0-150600.23.47.2
        • kernel-devel-azure >= 6.4.0-150600.8.34.2
        • kernel-devel-rt >= 6.4.0-150600.10.34.1
        • kernel-docs >= 6.4.0-150600.23.47.1
        • kernel-docs-html >= 6.4.0-150600.23.47.1
        • kernel-kvmsmall >= 6.4.0-150600.23.47.2
        • kernel-kvmsmall-devel >= 6.4.0-150600.23.47.2
        • kernel-kvmsmall-vdso >= 6.4.0-150600.23.47.2
        • kernel-macros >= 6.4.0-150600.23.47.2
        • kernel-obs-build >= 6.4.0-150600.23.47.1
        • kernel-obs-qa >= 6.4.0-150600.23.47.1
        • kernel-rt >= 6.4.0-150600.10.34.1
        • kernel-rt-devel >= 6.4.0-150600.10.34.1
        • kernel-rt-extra >= 6.4.0-150600.10.34.1
        • kernel-rt-livepatch-devel >= 6.4.0-150600.10.34.1
        • kernel-rt-optional >= 6.4.0-150600.10.34.1
        • kernel-rt-vdso >= 6.4.0-150600.10.34.1
        • kernel-rt_debug >= 6.4.0-150600.10.34.1
        • kernel-rt_debug-devel >= 6.4.0-150600.10.34.1
        • kernel-rt_debug-vdso >= 6.4.0-150600.10.34.1
        • kernel-source >= 6.4.0-150600.23.47.2
        • kernel-source-azure >= 6.4.0-150600.8.34.2
        • kernel-source-rt >= 6.4.0-150600.10.34.1
        • kernel-source-vanilla >= 6.4.0-150600.23.47.2
        • kernel-syms >= 6.4.0-150600.23.47.1
        • kernel-syms-azure >= 6.4.0-150600.8.34.1
        • kernel-syms-rt >= 6.4.0-150600.10.34.1
        • kernel-zfcpdump >= 6.4.0-150600.23.47.2
        • kselftests-kmp-64kb >= 6.4.0-150600.23.47.2
        • kselftests-kmp-azure >= 6.4.0-150600.8.34.2
        • kselftests-kmp-default >= 6.4.0-150600.23.47.2
        • kselftests-kmp-rt >= 6.4.0-150600.10.34.1
        • ocfs2-kmp-64kb >= 6.4.0-150600.23.47.2
        • ocfs2-kmp-azure >= 6.4.0-150600.8.34.2
        • ocfs2-kmp-default >= 6.4.0-150600.23.47.2
        • ocfs2-kmp-rt >= 6.4.0-150600.10.34.1
        • reiserfs-kmp-64kb >= 6.4.0-150600.23.47.2
        • reiserfs-kmp-azure >= 6.4.0-150600.8.34.2
        • reiserfs-kmp-default >= 6.4.0-150600.23.47.2
        • reiserfs-kmp-rt >= 6.4.0-150600.10.34.1
        Patchnames:
        openSUSE-SLE-15.6-2025-1177
        openSUSE-SLE-15.6-2025-1178
        openSUSE-SLE-15.6-2025-1180


        First public cloud image revisions this CVE is fixed in:


        Status of this issue by product and package

        Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification. The updates are grouped by state of their lifecycle. SUSE product lifecycles are documented on the lifecycle page.

        Product(s) Source package State
        Products under general support and receiving all security fixes.
        SUSE Linux Enterprise Desktop 15 SP6 kernel-64kb Released
        SUSE Linux Enterprise Desktop 15 SP6 kernel-default Released
        SUSE Linux Enterprise Desktop 15 SP6 kernel-default-base Released
        SUSE Linux Enterprise Desktop 15 SP6 kernel-docs Released
        SUSE Linux Enterprise Desktop 15 SP6 kernel-obs-build Released
        SUSE Linux Enterprise Desktop 15 SP6 kernel-source Released
        SUSE Linux Enterprise Desktop 15 SP6 kernel-syms Released
        SUSE Linux Enterprise Desktop 15 SP6 kernel-zfcpdump Released
        SUSE Linux Enterprise Desktop 15 SP7 kernel-default Already fixed
        SUSE Linux Enterprise Desktop 15 SP7 kernel-source Already fixed
        SUSE Linux Enterprise High Availability Extension 15 SP6 kernel-default Released
        SUSE Linux Enterprise High Availability Extension 15 SP7 kernel-default Already fixed
        SUSE Linux Enterprise High Availability Extension 15 SP7 kernel-source Already fixed
        SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-64kb Released
        SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-azure Released
        SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-default Released
        SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-default-base Released
        SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-docs Released
        SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-obs-build Released
        SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-source Released
        SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-source-azure Released
        SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-syms Released
        SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-syms-azure Released
        SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-zfcpdump Released
        SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-default Already fixed
        SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-source Already fixed
        SUSE Linux Enterprise High Performance Computing 15 SP7 kernel-source-azure Analysis
        SUSE Linux Enterprise Live Patching 15 SP6 kernel-default Released
        SUSE Linux Enterprise Live Patching 15 SP6 kernel-livepatch-SLE15-SP6-RT_Update_10 Released
        SUSE Linux Enterprise Live Patching 15 SP6 kernel-livepatch-SLE15-SP6_Update_10 Released
        SUSE Linux Enterprise Live Patching 15 SP6 kernel-source Affected
        SUSE Linux Enterprise Live Patching 15 SP7 kernel-default Already fixed
        SUSE Linux Enterprise Live Patching 15 SP7 kernel-source Already fixed
        SUSE Linux Enterprise Micro 5.1 kernel-default Not affected
        SUSE Linux Enterprise Micro 5.1 kernel-rt Not affected
        SUSE Linux Enterprise Micro 5.1 kernel-source Not affected
        SUSE Linux Enterprise Micro 5.1 kernel-source-rt Not affected
        SUSE Linux Enterprise Micro 5.2 kernel-default Not affected
        SUSE Linux Enterprise Micro 5.2 kernel-rt Not affected
        SUSE Linux Enterprise Micro 5.2 kernel-source Not affected
        SUSE Linux Enterprise Micro 5.2 kernel-source-rt Not affected
        SUSE Linux Enterprise Micro 5.3 kernel-default Released
        SUSE Linux Enterprise Micro 5.3 kernel-default-base Released
        SUSE Linux Enterprise Micro 5.3 kernel-rt Released
        SUSE Linux Enterprise Micro 5.3 kernel-source Affected
        SUSE Linux Enterprise Micro 5.3 kernel-source-rt Released
        SUSE Linux Enterprise Micro 5.4 kernel-default Released
        SUSE Linux Enterprise Micro 5.4 kernel-default-base Released
        SUSE Linux Enterprise Micro 5.4 kernel-rt Released
        SUSE Linux Enterprise Micro 5.4 kernel-source Affected
        SUSE Linux Enterprise Micro 5.4 kernel-source-rt Released
        SUSE Linux Enterprise Micro 5.5 kernel-default Released
        SUSE Linux Enterprise Micro 5.5 kernel-default-base Released
        SUSE Linux Enterprise Micro 5.5 kernel-rt Released
        SUSE Linux Enterprise Micro 5.5 kernel-source Released
        SUSE Linux Enterprise Micro 5.5 kernel-source-rt Released
        SUSE Linux Enterprise Micro for Rancher 5.3 kernel-source-rt Released
        SUSE Linux Enterprise Micro for Rancher 5.4 kernel-source-rt Released
        SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-64kb Released
        SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-default Released
        SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-default-base Released
        SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-source Released
        SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-zfcpdump Released
        SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-source Already fixed
        SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-default Released
        SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-docs Released
        SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-obs-build Released
        SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-source Released
        SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-syms Released
        SUSE Linux Enterprise Module for Development Tools 15 SP7 kernel-default Already fixed
        SUSE Linux Enterprise Module for Development Tools 15 SP7 kernel-source Already fixed
        SUSE Linux Enterprise Module for Legacy 15 SP6 kernel-default Released
        SUSE Linux Enterprise Module for Legacy 15 SP7 kernel-default Already fixed
        SUSE Linux Enterprise Module for Legacy 15 SP7 kernel-source Already fixed
        SUSE Linux Enterprise Module for Public Cloud 15 SP6 kernel-azure Released
        SUSE Linux Enterprise Module for Public Cloud 15 SP6 kernel-source-azure Released
        SUSE Linux Enterprise Module for Public Cloud 15 SP6 kernel-syms-azure Released
        SUSE Linux Enterprise Module for Public Cloud 15 SP7 kernel-source-azure Analysis
        SUSE Linux Enterprise Real Time 15 SP6 kernel-rt Released
        SUSE Linux Enterprise Real Time 15 SP6 kernel-rt_debug Released
        SUSE Linux Enterprise Real Time 15 SP6 kernel-source-rt Released
        SUSE Linux Enterprise Real Time 15 SP6 kernel-syms-rt Released
        SUSE Linux Enterprise Server 15 SP6 kernel-64kb Released
        SUSE Linux Enterprise Server 15 SP6 kernel-azure Released
        SUSE Linux Enterprise Server 15 SP6 kernel-default Released
        SUSE Linux Enterprise Server 15 SP6 kernel-default-base Released
        SUSE Linux Enterprise Server 15 SP6 kernel-docs Released
        SUSE Linux Enterprise Server 15 SP6 kernel-obs-build Released
        SUSE Linux Enterprise Server 15 SP6 kernel-source Released
        SUSE Linux Enterprise Server 15 SP6 kernel-source-azure Released
        SUSE Linux Enterprise Server 15 SP6 kernel-syms Released
        SUSE Linux Enterprise Server 15 SP6 kernel-syms-azure Released
        SUSE Linux Enterprise Server 15 SP6 kernel-zfcpdump Released
        SUSE Linux Enterprise Server 15 SP7 kernel-default Already fixed
        SUSE Linux Enterprise Server 15 SP7 kernel-source Already fixed
        SUSE Linux Enterprise Server 15 SP7 kernel-source-azure Analysis
        SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-64kb Released
        SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-azure Released
        SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-default Released
        SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-default-base Released
        SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-docs Released
        SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-obs-build Released
        SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-source Released
        SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-source-azure Released
        SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-syms Released
        SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-syms-azure Released
        SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-zfcpdump Released
        SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-default Already fixed
        SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-source Already fixed
        SUSE Linux Enterprise Server for SAP Applications 15 SP7 kernel-source-azure Analysis
        SUSE Linux Enterprise Workstation Extension 15 SP6 kernel-default Released
        SUSE Linux Enterprise Workstation Extension 15 SP6 kernel-source Affected
        SUSE Linux Enterprise Workstation Extension 15 SP7 kernel-default Already fixed
        SUSE Linux Enterprise Workstation Extension 15 SP7 kernel-source Already fixed
        SUSE Linux Micro 6.0 kernel-default Released
        SUSE Linux Micro 6.0 kernel-default-base Released
        SUSE Linux Micro 6.0 kernel-kvmsmall Released
        SUSE Linux Micro 6.0 kernel-livepatch-MICRO-6-0-RT_Update_6 Released
        SUSE Linux Micro 6.0 kernel-livepatch-MICRO-6-0_Update_6 Released
        SUSE Linux Micro 6.0 kernel-rt Released
        SUSE Linux Micro 6.0 kernel-source Released
        SUSE Linux Micro 6.0 kernel-source-rt Released
        SUSE Linux Micro 6.1 kernel-default Released
        SUSE Linux Micro 6.1 kernel-default-base Released
        SUSE Linux Micro 6.1 kernel-kvmsmall Released
        SUSE Linux Micro 6.1 kernel-livepatch-MICRO-6-0-RT_Update_6 Released
        SUSE Linux Micro 6.1 kernel-livepatch-MICRO-6-0_Update_6 Released
        SUSE Linux Micro 6.1 kernel-rt Released
        SUSE Linux Micro 6.1 kernel-source Released
        SUSE Linux Micro 6.1 kernel-source-rt Released
        SUSE Manager Proxy 4.3 kernel-default Released
        SUSE Manager Proxy 4.3 kernel-default-base Released
        SUSE Manager Proxy 4.3 kernel-source Released
        SUSE Manager Proxy 4.3 kernel-syms Released
        SUSE Manager Retail Branch Server 4.3 kernel-default Released
        SUSE Manager Retail Branch Server 4.3 kernel-default-base Released
        SUSE Manager Retail Branch Server 4.3 kernel-source Released
        SUSE Manager Server 4.3 kernel-default Released
        SUSE Manager Server 4.3 kernel-default-base Released
        SUSE Manager Server 4.3 kernel-source Released
        SUSE Manager Server 4.3 kernel-syms Released
        SUSE Manager Server 4.3 kernel-zfcpdump Released
        SUSE Real Time Module 15 SP6 kernel-rt Released
        SUSE Real Time Module 15 SP6 kernel-rt_debug Released
        SUSE Real Time Module 15 SP6 kernel-source-rt Released
        SUSE Real Time Module 15 SP6 kernel-syms-rt Released
        openSUSE Leap 15.6 kernel-default Released
        openSUSE Leap 15.6 kernel-source Released
        openSUSE Leap 15.6 kernel-source-azure Released
        openSUSE Leap 15.6 kernel-source-rt Released
        Products under Long Term Service Pack support and receiving important and critical security fixes.
        SUSE Linux Enterprise High Availability Extension 12 SP5 kernel-default Not affected
        SUSE Linux Enterprise High Availability Extension 12 SP5 kernel-source Not affected
        SUSE Linux Enterprise High Availability Extension 15 SP4 kernel-default Released
        SUSE Linux Enterprise High Availability Extension 15 SP5 kernel-default Affected
        SUSE Linux Enterprise High Availability Extension 15 SP5 kernel-source Affected
        SUSE Linux Enterprise High Performance Computing 15 SP3 kernel-source Not affected
        SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kernel-source Not affected
        SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-default Not affected
        SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-source Not affected
        SUSE Linux Enterprise High Performance Computing 15 SP4 kernel-source Affected
        SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-64kb Released
        SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default Released
        SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default-base Released
        SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-docs Released
        SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-obs-build Released
        SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-source Released
        SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-syms Released
        SUSE Linux Enterprise High Performance Computing 15 SP5 kernel-source Affected
        SUSE Linux Enterprise High Performance Computing 15 SP5 kernel-source-azure Unsupported
        SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-64kb Released
        SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-default Released
        SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-default-base Released
        SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-docs Released
        SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-obs-build Released
        SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-source Released
        SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-syms Released
        SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-64kb Released
        SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-default Released
        SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-default-base Released
        SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-docs Released
        SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-obs-build Released
        SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-source Released
        SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-syms Released
        SUSE Linux Enterprise Live Patching 12 SP5 kernel-default Not affected
        SUSE Linux Enterprise Live Patching 12 SP5 kernel-source Not affected
        SUSE Linux Enterprise Live Patching 15 SP3 kernel-default Not affected
        SUSE Linux Enterprise Live Patching 15 SP3 kernel-source Not affected
        SUSE Linux Enterprise Live Patching 15 SP4 kernel-default Released
        SUSE Linux Enterprise Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_39 Released
        SUSE Linux Enterprise Live Patching 15 SP4 kernel-source Affected
        SUSE Linux Enterprise Live Patching 15 SP5 kernel-default Released
        SUSE Linux Enterprise Live Patching 15 SP5 kernel-livepatch-SLE15-SP5_Update_25 Released
        SUSE Linux Enterprise Live Patching 15 SP5 kernel-source Affected
        SUSE Linux Enterprise Module for Basesystem 15 SP3 kernel-source Not affected
        SUSE Linux Enterprise Module for Basesystem 15 SP4 kernel-source Affected
        SUSE Linux Enterprise Module for Basesystem 15 SP5 kernel-source Affected
        SUSE Linux Enterprise Module for Development Tools 15 SP3 kernel-source Not affected
        SUSE Linux Enterprise Module for Development Tools 15 SP4 kernel-source Affected
        SUSE Linux Enterprise Module for Development Tools 15 SP5 kernel-source Affected
        SUSE Linux Enterprise Module for Public Cloud 15 SP5 kernel-source-azure Unsupported
        SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-default Not affected
        SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-source Not affected
        SUSE Linux Enterprise Server 12 SP5 kernel-source Not affected
        SUSE Linux Enterprise Server 12 SP5 kernel-source-azure Not affected
        SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default Not affected
        SUSE Linux Enterprise Server 12 SP5-LTSS kernel-source Not affected
        SUSE Linux Enterprise Server 12 SP5-LTSS kernel-source-azure Not affected
        SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security kernel-default Not affected
        SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security kernel-source Not affected
        SUSE Linux Enterprise Server 15 SP3 kernel-source Not affected
        SUSE Linux Enterprise Server 15 SP3-LTSS kernel-default Not affected
        SUSE Linux Enterprise Server 15 SP3-LTSS kernel-source Not affected
        SUSE Linux Enterprise Server 15 SP4 kernel-source Affected
        SUSE Linux Enterprise Server 15 SP4-LTSS kernel-64kb Released
        SUSE Linux Enterprise Server 15 SP4-LTSS kernel-default Released
        SUSE Linux Enterprise Server 15 SP4-LTSS kernel-default-base Released
        SUSE Linux Enterprise Server 15 SP4-LTSS kernel-docs Released
        SUSE Linux Enterprise Server 15 SP4-LTSS kernel-obs-build Released
        SUSE Linux Enterprise Server 15 SP4-LTSS kernel-source Released
        SUSE Linux Enterprise Server 15 SP4-LTSS kernel-syms Released
        SUSE Linux Enterprise Server 15 SP4-LTSS kernel-zfcpdump Released
        SUSE Linux Enterprise Server 15 SP5 kernel-source Affected
        SUSE Linux Enterprise Server 15 SP5 kernel-source-azure Unsupported
        SUSE Linux Enterprise Server 15 SP5-LTSS kernel-64kb Released
        SUSE Linux Enterprise Server 15 SP5-LTSS kernel-default Released
        SUSE Linux Enterprise Server 15 SP5-LTSS kernel-default-base Released
        SUSE Linux Enterprise Server 15 SP5-LTSS kernel-docs Released
        SUSE Linux Enterprise Server 15 SP5-LTSS kernel-obs-build Released
        SUSE Linux Enterprise Server 15 SP5-LTSS kernel-source Released
        SUSE Linux Enterprise Server 15 SP5-LTSS kernel-syms Released
        SUSE Linux Enterprise Server 15 SP5-LTSS kernel-zfcpdump Released
        SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 kernel-source Not affected
        SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 kernel-source-azure Not affected
        SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-default Not affected
        SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-source Not affected
        SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-default Not affected
        SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-source Not affected
        SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-default Released
        SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-default-base Released
        SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-docs Released
        SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-obs-build Released
        SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-source Released
        SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-syms Released
        SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-default Released
        SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-default-base Released
        SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-docs Released
        SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-obs-build Released
        SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-source Released
        SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-source-azure Unsupported
        SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-syms Released
        Products past their end of life and not receiving proactive updates anymore.
        HPE Helion OpenStack 8 kernel-source Not affected
        SUSE CaaS Platform 4.0 kernel-source Not affected
        SUSE CaaS Platform Toolchain 3 kernel-source Not affected
        SUSE Enterprise Storage 6 kernel-source Not affected
        SUSE Enterprise Storage 7 kernel-source Not affected
        SUSE Enterprise Storage 7.1 kernel-source Not affected
        SUSE Linux Enterprise Desktop 11 SP4 kernel-source Not affected
        SUSE Linux Enterprise Desktop 12 SP2 kernel-source Not affected
        SUSE Linux Enterprise Desktop 12 SP3 kernel-source Not affected
        SUSE Linux Enterprise Desktop 12 SP4 kernel-source Not affected
        SUSE Linux Enterprise Desktop 15 kernel-source Not affected
        SUSE Linux Enterprise Desktop 15 SP1 kernel-source Not affected
        SUSE Linux Enterprise Desktop 15 SP2 kernel-source Not affected
        SUSE Linux Enterprise Desktop 15 SP3 kernel-source Not affected
        SUSE Linux Enterprise Desktop 15 SP4 kernel-source Affected
        SUSE Linux Enterprise Desktop 15 SP5 kernel-source Affected
        SUSE Linux Enterprise High Performance Computing 15 kernel-source Not affected
        SUSE Linux Enterprise High Performance Computing 15 SP1 kernel-source Not affected
        SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS kernel-source Not affected
        SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-source Not affected
        SUSE Linux Enterprise High Performance Computing 15 SP2 kernel-source Not affected
        SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS kernel-source Not affected
        SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-source Not affected
        SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-64kb Released
        SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-default Released
        SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-default-base Released
        SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-docs Released
        SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-obs-build Released
        SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-source Released
        SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-syms Released
        SUSE Linux Enterprise High Performance Computing 15-ESPOS kernel-source Not affected
        SUSE Linux Enterprise High Performance Computing 15-LTSS kernel-source Not affected
        SUSE Linux Enterprise Micro 5.0 kernel-default Not affected
        SUSE Linux Enterprise Module for Basesystem 15 kernel-source Not affected
        SUSE Linux Enterprise Module for Basesystem 15 SP1 kernel-source Not affected
        SUSE Linux Enterprise Module for Basesystem 15 SP2 kernel-source Not affected
        SUSE Linux Enterprise Module for Development Tools 15 kernel-source Not affected
        SUSE Linux Enterprise Module for Development Tools 15 SP1 kernel-source Not affected
        SUSE Linux Enterprise Module for Development Tools 15 SP2 kernel-source Not affected
        SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT kernel-source Not affected
        SUSE Linux Enterprise Real Time 15 SP2 kernel-source Not affected
        SUSE Linux Enterprise Real Time 15 SP3 kernel-source Not affected
        SUSE Linux Enterprise Real Time 15 SP3 kernel-source-rt Not affected
        SUSE Linux Enterprise Real Time 15 SP4 kernel-source Affected
        SUSE Linux Enterprise Real Time 15 SP4 kernel-source-rt Affected
        SUSE Linux Enterprise Real Time 15 SP5 kernel-source-rt Affected
        SUSE Linux Enterprise Server 11 SP4 kernel-source Not affected
        SUSE Linux Enterprise Server 11 SP4 LTSS kernel-default Not affected
        SUSE Linux Enterprise Server 11 SP4 LTSS kernel-source Not affected
        SUSE Linux Enterprise Server 11 SP4-LTSS kernel-source Not affected
        SUSE Linux Enterprise Server 12 SP2 kernel-source Not affected
        SUSE Linux Enterprise Server 12 SP2-BCL kernel-source Not affected
        SUSE Linux Enterprise Server 12 SP2-ESPOS kernel-source Not affected
        SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default Not affected
        SUSE Linux Enterprise Server 12 SP2-LTSS kernel-source Not affected
        SUSE Linux Enterprise Server 12 SP3 kernel-source Not affected
        SUSE Linux Enterprise Server 12 SP3-BCL kernel-source Not affected
        SUSE Linux Enterprise Server 12 SP3-ESPOS kernel-source Not affected
        SUSE Linux Enterprise Server 12 SP3-LTSS kernel-source Not affected
        SUSE Linux Enterprise Server 12 SP4 kernel-source Not affected
        SUSE Linux Enterprise Server 12 SP4-ESPOS kernel-source Not affected
        SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default Not affected
        SUSE Linux Enterprise Server 12 SP4-LTSS kernel-source Not affected
        SUSE Linux Enterprise Server 15 kernel-source Not affected
        SUSE Linux Enterprise Server 15 SP1 kernel-source Not affected
        SUSE Linux Enterprise Server 15 SP1-BCL kernel-source Not affected
        SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default Not affected
        SUSE Linux Enterprise Server 15 SP1-LTSS kernel-source Not affected
        SUSE Linux Enterprise Server 15 SP2 kernel-source Not affected
        SUSE Linux Enterprise Server 15 SP2-BCL kernel-source Not affected
        SUSE Linux Enterprise Server 15 SP2-LTSS kernel-default Not affected
        SUSE Linux Enterprise Server 15 SP2-LTSS kernel-source Not affected
        SUSE Linux Enterprise Server 15 SP3-BCL kernel-source Not affected
        SUSE Linux Enterprise Server 15-LTSS kernel-default Not affected
        SUSE Linux Enterprise Server 15-LTSS kernel-source Not affected
        SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 kernel-source Not affected
        SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-source Not affected
        SUSE Linux Enterprise Server for SAP Applications 12 SP3 kernel-source Not affected
        SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-source Not affected
        SUSE Linux Enterprise Server for SAP Applications 15 kernel-source Not affected
        SUSE Linux Enterprise Server for SAP Applications 15 SP1 kernel-source Not affected
        SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-source Not affected
        SUSE Manager Proxy 4.0 kernel-source Not affected
        SUSE Manager Proxy 4.1 kernel-source Not affected
        SUSE Manager Proxy 4.2 kernel-source Not affected
        SUSE Manager Retail Branch Server 4.0 kernel-source Not affected
        SUSE Manager Retail Branch Server 4.1 kernel-source Not affected
        SUSE Manager Retail Branch Server 4.2 kernel-source Not affected
        SUSE Manager Server 4.0 kernel-source Not affected
        SUSE Manager Server 4.1 kernel-source Not affected
        SUSE Manager Server 4.2 kernel-source Not affected
        SUSE OpenStack Cloud 7 kernel-source Not affected
        SUSE OpenStack Cloud 8 kernel-source Not affected
        SUSE OpenStack Cloud 9 kernel-source Not affected
        SUSE OpenStack Cloud Crowbar 8 kernel-source Not affected
        SUSE OpenStack Cloud Crowbar 9 kernel-source Not affected
        SUSE Real Time Module 15 SP3 kernel-source-rt Not affected
        SUSE Real Time Module 15 SP4 kernel-source-rt Affected
        SUSE Real Time Module 15 SP5 kernel-source-rt Affected
        openSUSE Leap 15.3 kernel-source Not affected
        openSUSE Leap 15.3 kernel-source-rt Not affected
        openSUSE Leap 15.4 kernel-default Released
        openSUSE Leap 15.4 kernel-source Released
        openSUSE Leap 15.4 kernel-source-azure Unsupported
        openSUSE Leap 15.4 kernel-source-rt Affected
        openSUSE Leap 15.5 kernel-default Released
        openSUSE Leap 15.5 kernel-source Released
        openSUSE Leap 15.5 kernel-source-azure Unsupported
        openSUSE Leap 15.5 kernel-source-rt Released


        SUSE Timeline for this CVE

        CVE page created: Mon Feb 10 18:00:46 2025
        CVE page last modified: Fri May 2 12:20:08 2025