Security update for the Linux Kernel

Announcement ID: SUSE-SU-2025:0201-1
Release Date: 2025-01-21T12:51:49Z
Rating: important
References:
Cross-References:
CVSS scores:
  • CVE-2021-47202 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2021-47202 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2022-36280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2022-36280 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H
  • CVE-2022-48742 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2022-48742 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2022-49033 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
  • CVE-2022-49033 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2022-49033 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2022-49035 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  • CVE-2022-49035 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2022-49035 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2023-1382 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2023-1382 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2023-33951 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
  • CVE-2023-33951 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
  • CVE-2023-33952 ( SUSE ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
  • CVE-2023-33952 ( NVD ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
  • CVE-2023-52920 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
  • CVE-2023-52920 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2023-52920 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-24860 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-24860 ( NVD ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-26886 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-26886 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-26924 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-26924 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-36915 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
  • CVE-2024-42232 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-42232 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-42232 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-44934 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-44934 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-47666 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-47666 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-47666 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-47678 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
  • CVE-2024-47678 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
  • CVE-2024-47678 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
  • CVE-2024-49944 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-49944 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-49952 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-49952 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-50018 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
  • CVE-2024-50018 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-50143 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-50143 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
  • CVE-2024-50143 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-50154 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-50154 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-50154 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-50154 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-50166 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-50166 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-50181 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-50181 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-50181 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-50202 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-50202 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-50202 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-50211 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-50211 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-50211 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
  • CVE-2024-50256 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-50256 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-50256 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-50262 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-50262 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
  • CVE-2024-50262 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-50262 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-50278 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H
  • CVE-2024-50278 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
  • CVE-2024-50279 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
  • CVE-2024-50279 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
  • CVE-2024-50280 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-50280 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-50296 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-50296 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53051 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53051 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53055 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53055 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53056 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53056 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53064 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53064 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53072 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53072 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53090 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53090 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53095 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53095 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-53101 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-53101 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
  • CVE-2024-53101 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53113 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53113 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53114 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53114 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53119 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53119 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53120 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53120 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53122 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53122 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53125 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53130 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53130 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53131 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53131 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53142 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
  • CVE-2024-53142 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-53146 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-53146 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-53146 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53150 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-53150 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
  • CVE-2024-53150 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
  • CVE-2024-53156 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-53156 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-53156 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-53157 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-53157 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53157 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53158 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-53158 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
  • CVE-2024-53161 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-53161 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
  • CVE-2024-53162 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-53162 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
  • CVE-2024-53173 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-53173 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-53173 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-53179 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-53179 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-53179 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-53206 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-53206 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
  • CVE-2024-53206 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-53210 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-53210 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53210 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-53213 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-53213 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
  • CVE-2024-53213 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-53214 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-53214 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-53239 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-53239 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-53241 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
  • CVE-2024-53241 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
  • CVE-2024-56539 ( SUSE ): 8.6 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-56539 ( SUSE ): 8.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
  • CVE-2024-56548 ( SUSE ): 8.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-56548 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-56549 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-56549 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-56549 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-56570 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-56570 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-56571 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-56571 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-56575 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-56575 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-56598 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-56598 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-56598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-56604 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-56604 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-56604 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-56605 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-56605 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-56605 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-56619 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  • CVE-2024-56619 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-56755 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
  • CVE-2024-56755 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
  • CVE-2024-56755 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  • CVE-2024-8805 ( SUSE ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-8805 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  • CVE-2024-8805 ( NVD ): 8.8 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products:
  • openSUSE Leap 15.5
  • SUSE Linux Enterprise High Availability Extension 15 SP5
  • SUSE Linux Enterprise High Performance Computing 15 SP5
  • SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
  • SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
  • SUSE Linux Enterprise Live Patching 15-SP5
  • SUSE Linux Enterprise Micro 5.5
  • SUSE Linux Enterprise Real Time 15 SP5
  • SUSE Linux Enterprise Server 15 SP5
  • SUSE Linux Enterprise Server 15 SP5 LTSS
  • SUSE Linux Enterprise Server for SAP Applications 15 SP5

An update that solves 77 vulnerabilities and has 31 security fixes can now be installed.

Description:

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332).
  • CVE-2022-48742: rtnetlink: make sure to refresh master_dev/m_ops in __rtnl_newlink() (bsc#1226694).
  • CVE-2022-49033: btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() (bsc#1232045).
  • CVE-2023-1382: Fixed denial of service in tipc_conn_close (bsc#1209288).
  • CVE-2023-33951: Fixed a race condition that could have led to an information disclosure inside the vmwgfx driver (bsc#1211593).
  • CVE-2023-33952: Fixed a double free that could have led to a local privilege escalation inside the vmwgfx driver (bsc#1211595).
  • CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
  • CVE-2024-26886: Bluetooth: af_bluetooth: Fix deadlock (bsc#1223044).
  • CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
  • CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
  • CVE-2024-44934: net: bridge: mcast: wait for previous gc cycles when removing port (bsc#1229809).
  • CVE-2024-47666: scsi: pm80xx: Set phy->enable_completion only when we wait for it (bsc#1231453).
  • CVE-2024-47678: icmp: change the order of rate limits (bsc#1231854).
  • CVE-2024-49944: sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start (bsc#1232166).
  • CVE-2024-49952: netfilter: nf_tables: prevent nf_skb_duplicated corruption (bsc#1232157).
  • CVE-2024-50018: net: napi: Prevent overflow of napi_defer_hard_irqs (bsc#1232419).
  • CVE-2024-50143: udf: fix uninit-value use in udf_get_fileshortad (bsc#1233038).
  • CVE-2024-50166: fsl/fman: Fix refcount handling of fman-related devices (bsc#1233050).
  • CVE-2024-50181: clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D (bsc#1233127).
  • CVE-2024-50202: nilfs2: propagate directory read errors from nilfs_find_entry() (bsc#1233324).
  • CVE-2024-50211: udf: refactor inode_bmap() to handle error (bsc#1233096).
  • CVE-2024-50256: netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (bsc#1233200).
  • CVE-2024-50262: bpf: Fix out-of-bounds write in trie_get_next_key() (bsc#1233239).
  • CVE-2024-50278, CVE-2024-50280: dm cache: fix flushing uninitialized delayed_work on cache_ctr error (bsc#1233467 bsc#1233469).
  • CVE-2024-50278: dm cache: fix potential out-of-bounds access on the first resume (bsc#1233467).
  • CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
  • CVE-2024-50296: net: hns3: fix kernel crash when uninstalling driver (bsc#1233485).
  • CVE-2024-53051: drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability (bsc#1233547).
  • CVE-2024-53055: wifi: iwlwifi: mvm: fix 6 GHz scan construction (bsc#1233550).
  • CVE-2024-53056: drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() (bsc#1233568).
  • CVE-2024-53064: idpf: fix idpf_vc_core_init error path (bsc#1233558 bsc#1234464).
  • CVE-2024-53072: platform/x86/amd/pmc: Detect when STB is not available (bsc#1233564).
  • CVE-2024-53090: afs: Fix lock recursion (bsc#1233637).
  • CVE-2024-53095: smb: client: Fix use-after-free of network namespace (bsc#1233642).
  • CVE-2024-53101: fs: Fix uninitialized value issue in from_kuid and from_kgid (bsc#1233769).
  • CVE-2024-53113: mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (bsc#1234077).
  • CVE-2024-53114: x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client (bsc#1234072).
  • CVE-2024-53119: virtio/vsock: Fix accept_queue memory leak (bsc#1234073).
  • CVE-2024-53122: mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (bsc#1234076).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-53130: nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint (bsc#1234219).
  • CVE-2024-53131: nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint (bsc#1234220).
  • CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234853).
  • CVE-2024-53150: ALSA: usb-audio: Fix out of bounds reads when finding clock sources (bsc#1234834).
  • CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234846).
  • CVE-2024-53157: firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (bsc#1234827).
  • CVE-2024-53158: soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get() (bsc#1234811).
  • CVE-2024-53161: EDAC/bluefield: Fix potential integer overflow (bsc#1234856).
  • CVE-2024-53162: crypto: qat/qat_4xxx - fix off by one in uof_get_name() (bsc#1234843).
  • CVE-2024-53173: NFSv4.0: Fix a use-after-free problem in the asynchronous open() (bsc#1234891).
  • CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921).
  • CVE-2024-53210: s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (bsc#1234971).
  • CVE-2024-53213: net: usb: lan78xx: Fix double free issue with interrupt buffer allocation (bsc#1234973).
  • CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004).
  • CVE-2024-53239: ALSA: 6fire: Release resources at card release (bsc#1235054).
  • CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281).
  • CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282).
  • CVE-2024-56539: wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (bsc#1234963).
  • CVE-2024-56548: hfsplus: do not query the device logical block size multiple times (bsc#1235073).
  • CVE-2024-56549: cachefiles: Fix NULL pointer dereference in object->file (bsc#1234912).
  • CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035).
  • CVE-2024-56571: media: uvcvideo: Require entities to have a non-zero unique ID (bsc#1235037).
  • CVE-2024-56575: media: imx-jpeg: Ensure power suppliers be suspended before detach them (bsc#1235039).
  • CVE-2024-56598: jfs: array-index-out-of-bounds fix in dtReadFirst (bsc#1235220).
  • CVE-2024-56604: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() (bsc#1235056).
  • CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235061).
  • CVE-2024-56619: nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (bsc#1235224).
  • CVE-2024-56755: netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (bsc#1234920).

The following non-security bugs were fixed:

  • ACPI/HMAT: Move HMAT messages to pr_debug() (bsc#1234294)
  • Documentation: Add x86/amd_hsmp driver (jsc#PED-1295).
  • Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet (git-fixes).
  • Drop a couple of block layer git-fixes (bsc#1170891 bsc#1173139)
  • KVM: x86: fix sending PV IPI (git-fixes).
  • NFS/pnfs: Fix a live lock between recalled layouts and layoutget (git-fixes).
  • NFSD: Fix nfsd4_shutdown_copy() (git-fixes).
  • NFSD: Move fill_pre_wcc() and fill_post_wcc() (bsc#1234650 bsc#1233701 bsc#1232472).
  • NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (git-fixes).
  • NFSD: Prevent a potential integer overflow (git-fixes).
  • NFSD: reduce locking in nfsd_lookup() (bsc#1234650 bsc#1233701 bsc#1232472).
  • NFSv4.0: Fix a use-after-free problem in the asynchronous open() (git-fixes).
  • PCI: vmd: Fix secondary bus reset for Intel bridges (git-fixes).
  • RDMA/hns: Disassociate mmap pages for all uctx when HW is being reset (git-fixes)
  • README: Clean-up trailing whitespace
  • SUNRPC: make sure cache entry active before cache_show (git-fixes).
  • amd_hsmp: Add HSMP protocol version 5 messages (jsc#PED-1295).
  • arm64: Ensure bits ASID[15:8] are masked out when the kernel uses (bsc#1234605)
  • arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer (git-fixes).
  • arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc (git-fixes).
  • arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards (git-fixes).
  • arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator (git-fixes).
  • arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion (git-fixes).
  • arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 (git-fixes).
  • autofs: fix memory leak of waitqueues in autofs_catatonic_mode (git-fixes).
  • autofs: use flexible array in ioctl structure (git-fixes).
  • devlink: allow registering parameters after the instance (bsc#1231388 bsc#1230422).
  • devlink: do not require setting features before registration (bsc#1231388 bsc#1230422).
  • dma-fence: Fix reference leak on fence merge failure path (git-fixes).
  • dmaengine: idxd: Check for driver name match before sva user feature (bsc#1234357).
  • dmaengine: idxd: add wq driver name support for accel-config user tool (bsc#1234357).
  • drm/sti: Add __iomem for mixer_dbg_mxn's parameter (git-fixes).
  • drm/v3d: Enable Performance Counters before clearing them (git-fixes).
  • exfat: fix uninit-value in __exfat_get_dentry_set (git-fixes).
  • fixup "rpm: support gz and zst compression methods" once more (bsc#1190428, bsc#1190358) Fixes: 3b8c4d9bcc24 ("rpm: support gz and zst compression methods") Fixes: 23510fce36ec ("fixup "rpm: support gz and zst compression methods"")
  • hfsplus: do not query the device logical block size multiple times (git-fixes).
  • idpf: add support for SW triggered interrupts (bsc#1235507).
  • idpf: enable WB_ON_ITR (bsc#1235507).
  • idpf: trigger SW interrupt when exiting wb_on_itr mode (bsc#1235507).
  • ipc/sem: Fix dangling sem_array access in semtimedop race (bsc#1234727).
  • jffs2: Fix rtime decompressor (git-fixes).
  • jffs2: Prevent rtime decompress memory corruption (git-fixes).
  • jffs2: fix use of uninitialized variable (git-fixes).
  • jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree (git-fixes).
  • jfs: array-index-out-of-bounds fix in dtReadFirst (git-fixes).
  • jfs: fix array-index-out-of-bounds in jfs_readdir (git-fixes).
  • jfs: fix shift-out-of-bounds in dbSplit (git-fixes).
  • jfs: xattr: check invalid xattr size more strictly (git-fixes).
  • kabi/severities: ignore intermodule symbols between fsl_fman and fsl_dpaa_eth
  • kernel-binary: do not BuildIgnore m4. It is actually needed for regenerating zconf when it is not up-to-date due to merge.
  • kobject: Add sanity check for kset->kobj.ktype in kset_register() (bsc#1234639).
  • memory: tegra: Add API for retrieving carveout bounds (jsc#PED-1763).
  • mm/kfence: reset PG_slab and memcg_data before freeing __kfence_pool (bsc#1234120).
  • mmc: core: Further prevent card detect during shutdown (git-fixes).
  • net/ipv6: release expired exception dst cached in socket (bsc#1216813).
  • net: mana: Increase the DEF_RX_BUFFERS_PER_QUEUE to 1024 (bsc#1235246).
  • nfsd: make sure exp active before svc_export_show (git-fixes).
  • nfsd: remove unsafe BUG_ON from set_change_info (bsc#1234650 bsc#1233701 bsc#1232472).
  • nfsd: restore callback functionality for NFSv4.0 (git-fixes).
  • nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (git-fixes).
  • nilfs2: prevent use of deleted inode (git-fixes).
  • ocfs2: uncache inode which has failed entering the group (bsc#1234087).
  • phy: tegra: p2u: Set ENABLE_L2_EXIT_RATE_CHANGE in calibration (jsc#PED-1763).
  • platform/x86: Add AMD system management interface (jsc#PED-1295).
  • proc/softirqs: replace seq_printf with seq_put_decimal_ull_width (git-fixes).
  • pwm: tegra: Improve required rate calculation (jsc#PED-1763).
  • regmap: detach regmap from dev on regmap_exit (git-fixes).
  • rpm/kernel-binary.spec.in: Fix build regression The previous fix forgot to take over grep -c option that broke the conditional expression
  • scatterlist: fix incorrect func name in kernel-doc (git-fixes).
  • scripts/git_sort/git_sort.py: add tegra DRM and linux-pwm repo
  • scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (git-fixes).
  • serial: tegra: Read DMA status before terminating (jsc#PED-1763).
  • smb: client: fix TCP timers deadlock after rmmod (git-fixes) [hcarvalho: this fixes issue discussed in bsc#1233642].
  • spi: mpc52xx: Add cancel_work_sync before module remove (git-fixes).
  • sunrpc: simplify two-level sysctl registration for svcrdma_parm_table (git-fixes).
  • supported.conf: add bsc1185010 dependency
  • supported.conf: hyperv_drm (jsc#sle-19733)
  • svcrdma: Address an integer overflow (git-fixes).
  • svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (git-fixes).
  • tpm_tis_spi: Release chip select when flow control fails (bsc#1234338)
  • ubifs: Correct the total block count by deducting journal reservation (git-fixes).
  • ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit (git-fixes).
  • udf: Handle error when adding extent to a file (bsc#1234437).
  • udf: refactor udf_current_aext() to handle error (bsc#1234240).
  • udf: refactor udf_next_aext() to handle error (bsc#1234241).
  • usb: roles: Call try_module_get() from usb_role_switch_find_by_fwnode() (git-fixes).
  • usb: typec: tps6598x: Fix return value check in tps6598x_probe() (git-fixes).
  • x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes).
  • x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes).
  • x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes).
  • x86/fpu: Remove unused supervisor only offsets (git-fixes).
  • x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes).
  • x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes).
  • x86/mce: Allow instrumentation during task work queueing (git-fixes).
  • x86/mce: Mark mce_end() noinstr (git-fixes).
  • x86/mce: Mark mce_panic() noinstr (git-fixes).
  • x86/mce: Mark mce_read_aux() noinstr (git-fixes).
  • x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes).
  • x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635).
  • x86/sgx: Free backing memory after faulting the enclave page (git-fixes).
  • x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes).
  • x86/uaccess: Move variable into switch case statement (git-fixes).
  • x86: Annotate call_on_stack() (git-fixes).
  • xfs: can't use kmem_zalloc() for attribute buffers (bsc#1216909).
  • zonefs: fix zone report size in __zonefs_io_error() (git-fixes).

Special Instructions and Notes:

  • Please reboot the system after installing this update.

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.5
    zypper in -t patch SUSE-2025-201=1
  • SUSE Linux Enterprise Micro 5.5
    zypper in -t patch SUSE-SLE-Micro-5.5-2025-201=1
  • SUSE Linux Enterprise Live Patching 15-SP5
    zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2025-201=1
  • SUSE Linux Enterprise High Availability Extension 15 SP5
    zypper in -t patch SUSE-SLE-Product-HA-15-SP5-2025-201=1
  • SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5
    zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2025-201=1
  • SUSE Linux Enterprise High Performance Computing LTSS 15 SP5
    zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2025-201=1
  • SUSE Linux Enterprise Server 15 SP5 LTSS
    zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2025-201=1
  • SUSE Linux Enterprise Server for SAP Applications 15 SP5
    zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2025-201=1

Package List:

  • openSUSE Leap 15.5 (noarch nosrc)
    • kernel-docs-5.14.21-150500.55.91.1
  • openSUSE Leap 15.5 (noarch)
    • kernel-macros-5.14.21-150500.55.91.1
    • kernel-source-vanilla-5.14.21-150500.55.91.1
    • kernel-docs-html-5.14.21-150500.55.91.1
    • kernel-source-5.14.21-150500.55.91.1
    • kernel-devel-5.14.21-150500.55.91.1
  • openSUSE Leap 15.5 (nosrc ppc64le x86_64)
    • kernel-debug-5.14.21-150500.55.91.1
  • openSUSE Leap 15.5 (ppc64le x86_64)
    • kernel-debug-debuginfo-5.14.21-150500.55.91.1
    • kernel-debug-devel-debuginfo-5.14.21-150500.55.91.1
    • kernel-debug-debugsource-5.14.21-150500.55.91.1
    • kernel-debug-devel-5.14.21-150500.55.91.1
  • openSUSE Leap 15.5 (x86_64)
    • kernel-default-vdso-debuginfo-5.14.21-150500.55.91.1
    • kernel-kvmsmall-vdso-5.14.21-150500.55.91.1
    • kernel-default-vdso-5.14.21-150500.55.91.1
    • kernel-debug-vdso-5.14.21-150500.55.91.1
    • kernel-kvmsmall-vdso-debuginfo-5.14.21-150500.55.91.1
    • kernel-debug-vdso-debuginfo-5.14.21-150500.55.91.1
  • openSUSE Leap 15.5 (aarch64 ppc64le x86_64)
    • kernel-kvmsmall-debugsource-5.14.21-150500.55.91.1
    • kernel-default-base-5.14.21-150500.55.91.1.150500.6.41.1
    • kernel-kvmsmall-debuginfo-5.14.21-150500.55.91.1
    • kernel-kvmsmall-devel-debuginfo-5.14.21-150500.55.91.1
    • kernel-default-base-rebuild-5.14.21-150500.55.91.1.150500.6.41.1
    • kernel-kvmsmall-devel-5.14.21-150500.55.91.1
  • openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64)
    • kernel-default-optional-5.14.21-150500.55.91.1
    • kernel-default-devel-5.14.21-150500.55.91.1
    • gfs2-kmp-default-debuginfo-5.14.21-150500.55.91.1
    • reiserfs-kmp-default-5.14.21-150500.55.91.1
    • kselftests-kmp-default-5.14.21-150500.55.91.1
    • kernel-syms-5.14.21-150500.55.91.1
    • ocfs2-kmp-default-5.14.21-150500.55.91.1
    • kernel-obs-build-debugsource-5.14.21-150500.55.91.1
    • kernel-default-livepatch-5.14.21-150500.55.91.1
    • kernel-default-debuginfo-5.14.21-150500.55.91.1
    • reiserfs-kmp-default-debuginfo-5.14.21-150500.55.91.1
    • kernel-default-optional-debuginfo-5.14.21-150500.55.91.1
    • kernel-obs-qa-5.14.21-150500.55.91.1
    • dlm-kmp-default-5.14.21-150500.55.91.1
    • ocfs2-kmp-default-debuginfo-5.14.21-150500.55.91.1
    • dlm-kmp-default-debuginfo-5.14.21-150500.55.91.1
    • kernel-default-extra-5.14.21-150500.55.91.1
    • cluster-md-kmp-default-5.14.21-150500.55.91.1
    • kselftests-kmp-default-debuginfo-5.14.21-150500.55.91.1
    • kernel-default-debugsource-5.14.21-150500.55.91.1
    • cluster-md-kmp-default-debuginfo-5.14.21-150500.55.91.1
    • kernel-default-devel-debuginfo-5.14.21-150500.55.91.1
    • gfs2-kmp-default-5.14.21-150500.55.91.1
    • kernel-obs-build-5.14.21-150500.55.91.1
    • kernel-default-extra-debuginfo-5.14.21-150500.55.91.1
  • openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64 nosrc)
    • kernel-default-5.14.21-150500.55.91.1
  • openSUSE Leap 15.5 (ppc64le s390x x86_64)
    • kernel-livepatch-SLE15-SP5_Update_22-debugsource-1-150500.11.3.1
    • kernel-livepatch-5_14_21-150500_55_91-default-debuginfo-1-150500.11.3.1
    • kernel-livepatch-5_14_21-150500_55_91-default-1-150500.11.3.1
    • kernel-default-livepatch-devel-5.14.21-150500.55.91.1
  • openSUSE Leap 15.5 (aarch64 nosrc ppc64le x86_64)
    • kernel-kvmsmall-5.14.21-150500.55.91.1
  • openSUSE Leap 15.5 (nosrc s390x)
    • kernel-zfcpdump-5.14.21-150500.55.91.1
  • openSUSE Leap 15.5 (s390x)
    • kernel-zfcpdump-debuginfo-5.14.21-150500.55.91.1
    • kernel-zfcpdump-debugsource-5.14.21-150500.55.91.1
  • openSUSE Leap 15.5 (nosrc)
    • dtb-aarch64-5.14.21-150500.55.91.1
  • openSUSE Leap 15.5 (aarch64)
    • dtb-nvidia-5.14.21-150500.55.91.1
    • kernel-64kb-debugsource-5.14.21-150500.55.91.1
    • dtb-apple-5.14.21-150500.55.91.1
    • dtb-amlogic-5.14.21-150500.55.91.1
    • ocfs2-kmp-64kb-5.14.21-150500.55.91.1
    • dtb-socionext-5.14.21-150500.55.91.1
    • dtb-allwinner-5.14.21-150500.55.91.1
    • kselftests-kmp-64kb-debuginfo-5.14.21-150500.55.91.1
    • kernel-64kb-extra-5.14.21-150500.55.91.1
    • kernel-64kb-optional-5.14.21-150500.55.91.1
    • dtb-arm-5.14.21-150500.55.91.1
    • dtb-qcom-5.14.21-150500.55.91.1
    • dtb-rockchip-5.14.21-150500.55.91.1
    • dtb-marvell-5.14.21-150500.55.91.1
    • dtb-lg-5.14.21-150500.55.91.1
    • kernel-64kb-devel-debuginfo-5.14.21-150500.55.91.1
    • dtb-sprd-5.14.21-150500.55.91.1
    • dtb-freescale-5.14.21-150500.55.91.1
    • dtb-xilinx-5.14.21-150500.55.91.1
    • dtb-exynos-5.14.21-150500.55.91.1
    • cluster-md-kmp-64kb-5.14.21-150500.55.91.1
    • dlm-kmp-64kb-5.14.21-150500.55.91.1
    • kernel-64kb-extra-debuginfo-5.14.21-150500.55.91.1
    • dlm-kmp-64kb-debuginfo-5.14.21-150500.55.91.1
    • reiserfs-kmp-64kb-debuginfo-5.14.21-150500.55.91.1
    • dtb-apm-5.14.21-150500.55.91.1
    • kernel-64kb-optional-debuginfo-5.14.21-150500.55.91.1
    • dtb-cavium-5.14.21-150500.55.91.1
    • dtb-altera-5.14.21-150500.55.91.1
    • dtb-amazon-5.14.21-150500.55.91.1
    • dtb-hisilicon-5.14.21-150500.55.91.1
    • kernel-64kb-debuginfo-5.14.21-150500.55.91.1
    • kernel-64kb-devel-5.14.21-150500.55.91.1
    • dtb-broadcom-5.14.21-150500.55.91.1
    • kselftests-kmp-64kb-5.14.21-150500.55.91.1
    • cluster-md-kmp-64kb-debuginfo-5.14.21-150500.55.91.1
    • dtb-mediatek-5.14.21-150500.55.91.1
    • dtb-amd-5.14.21-150500.55.91.1
    • dtb-renesas-5.14.21-150500.55.91.1
    • gfs2-kmp-64kb-debuginfo-5.14.21-150500.55.91.1
    • reiserfs-kmp-64kb-5.14.21-150500.55.91.1
    • ocfs2-kmp-64kb-debuginfo-5.14.21-150500.55.91.1
    • gfs2-kmp-64kb-5.14.21-150500.55.91.1
  • openSUSE Leap 15.5 (aarch64 nosrc)
    • kernel-64kb-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64 nosrc)
    • kernel-default-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise Micro 5.5 (aarch64 x86_64)
    • kernel-default-base-5.14.21-150500.55.91.1.150500.6.41.1
  • SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64)
    • kernel-default-debugsource-5.14.21-150500.55.91.1
    • kernel-default-debuginfo-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise Live Patching 15-SP5 (nosrc)
    • kernel-default-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise Live Patching 15-SP5 (ppc64le s390x x86_64)
    • kernel-default-debugsource-5.14.21-150500.55.91.1
    • kernel-livepatch-5_14_21-150500_55_91-default-debuginfo-1-150500.11.3.1
    • kernel-default-livepatch-5.14.21-150500.55.91.1
    • kernel-default-debuginfo-5.14.21-150500.55.91.1
    • kernel-default-livepatch-devel-5.14.21-150500.55.91.1
    • kernel-livepatch-SLE15-SP5_Update_22-debugsource-1-150500.11.3.1
    • kernel-livepatch-5_14_21-150500_55_91-default-1-150500.11.3.1
  • SUSE Linux Enterprise High Availability Extension 15 SP5 (aarch64 ppc64le s390x x86_64)
    • dlm-kmp-default-5.14.21-150500.55.91.1
    • ocfs2-kmp-default-5.14.21-150500.55.91.1
    • kernel-default-debugsource-5.14.21-150500.55.91.1
    • ocfs2-kmp-default-debuginfo-5.14.21-150500.55.91.1
    • cluster-md-kmp-default-debuginfo-5.14.21-150500.55.91.1
    • dlm-kmp-default-debuginfo-5.14.21-150500.55.91.1
    • gfs2-kmp-default-debuginfo-5.14.21-150500.55.91.1
    • cluster-md-kmp-default-5.14.21-150500.55.91.1
    • kernel-default-debuginfo-5.14.21-150500.55.91.1
    • gfs2-kmp-default-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise High Availability Extension 15 SP5 (nosrc)
    • kernel-default-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 nosrc)
    • kernel-64kb-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64)
    • kernel-64kb-debugsource-5.14.21-150500.55.91.1
    • kernel-64kb-devel-debuginfo-5.14.21-150500.55.91.1
    • kernel-64kb-debuginfo-5.14.21-150500.55.91.1
    • kernel-64kb-devel-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 nosrc x86_64)
    • kernel-default-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (aarch64 x86_64)
    • kernel-default-debugsource-5.14.21-150500.55.91.1
    • kernel-obs-build-debugsource-5.14.21-150500.55.91.1
    • kernel-default-devel-5.14.21-150500.55.91.1
    • kernel-default-base-5.14.21-150500.55.91.1.150500.6.41.1
    • kernel-default-debuginfo-5.14.21-150500.55.91.1
    • kernel-default-devel-debuginfo-5.14.21-150500.55.91.1
    • kernel-syms-5.14.21-150500.55.91.1
    • kernel-obs-build-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch)
    • kernel-macros-5.14.21-150500.55.91.1
    • kernel-devel-5.14.21-150500.55.91.1
    • kernel-source-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch nosrc)
    • kernel-docs-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 nosrc)
    • kernel-64kb-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64)
    • kernel-64kb-debugsource-5.14.21-150500.55.91.1
    • kernel-64kb-devel-debuginfo-5.14.21-150500.55.91.1
    • kernel-64kb-debuginfo-5.14.21-150500.55.91.1
    • kernel-64kb-devel-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 nosrc x86_64)
    • kernel-default-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (aarch64 x86_64)
    • kernel-default-debugsource-5.14.21-150500.55.91.1
    • kernel-obs-build-debugsource-5.14.21-150500.55.91.1
    • kernel-default-devel-5.14.21-150500.55.91.1
    • kernel-default-base-5.14.21-150500.55.91.1.150500.6.41.1
    • kernel-default-debuginfo-5.14.21-150500.55.91.1
    • kernel-default-devel-debuginfo-5.14.21-150500.55.91.1
    • kernel-syms-5.14.21-150500.55.91.1
    • kernel-obs-build-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch)
    • kernel-macros-5.14.21-150500.55.91.1
    • kernel-devel-5.14.21-150500.55.91.1
    • kernel-source-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch nosrc)
    • kernel-docs-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 nosrc)
    • kernel-64kb-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64)
    • kernel-64kb-debugsource-5.14.21-150500.55.91.1
    • kernel-64kb-devel-debuginfo-5.14.21-150500.55.91.1
    • kernel-64kb-debuginfo-5.14.21-150500.55.91.1
    • kernel-64kb-devel-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64 nosrc)
    • kernel-default-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le x86_64)
    • kernel-default-base-5.14.21-150500.55.91.1.150500.6.41.1
  • SUSE Linux Enterprise Server 15 SP5 LTSS (aarch64 ppc64le s390x x86_64)
    • kernel-default-debugsource-5.14.21-150500.55.91.1
    • kernel-obs-build-debugsource-5.14.21-150500.55.91.1
    • kernel-default-devel-5.14.21-150500.55.91.1
    • reiserfs-kmp-default-5.14.21-150500.55.91.1
    • kernel-default-debuginfo-5.14.21-150500.55.91.1
    • reiserfs-kmp-default-debuginfo-5.14.21-150500.55.91.1
    • kernel-default-devel-debuginfo-5.14.21-150500.55.91.1
    • kernel-syms-5.14.21-150500.55.91.1
    • kernel-obs-build-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise Server 15 SP5 LTSS (noarch)
    • kernel-macros-5.14.21-150500.55.91.1
    • kernel-devel-5.14.21-150500.55.91.1
    • kernel-source-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise Server 15 SP5 LTSS (noarch nosrc)
    • kernel-docs-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise Server 15 SP5 LTSS (nosrc s390x)
    • kernel-zfcpdump-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise Server 15 SP5 LTSS (s390x)
    • kernel-zfcpdump-debuginfo-5.14.21-150500.55.91.1
    • kernel-zfcpdump-debugsource-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise Server for SAP Applications 15 SP5 (nosrc ppc64le x86_64)
    • kernel-default-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ppc64le x86_64)
    • kernel-default-debugsource-5.14.21-150500.55.91.1
    • kernel-obs-build-debugsource-5.14.21-150500.55.91.1
    • kernel-default-devel-5.14.21-150500.55.91.1
    • reiserfs-kmp-default-5.14.21-150500.55.91.1
    • kernel-default-base-5.14.21-150500.55.91.1.150500.6.41.1
    • kernel-default-debuginfo-5.14.21-150500.55.91.1
    • reiserfs-kmp-default-debuginfo-5.14.21-150500.55.91.1
    • kernel-default-devel-debuginfo-5.14.21-150500.55.91.1
    • kernel-syms-5.14.21-150500.55.91.1
    • kernel-obs-build-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch)
    • kernel-macros-5.14.21-150500.55.91.1
    • kernel-devel-5.14.21-150500.55.91.1
    • kernel-source-5.14.21-150500.55.91.1
  • SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch nosrc)
    • kernel-docs-5.14.21-150500.55.91.1

References: