{"schema_version":"1.7.3","id":"SUSE-SU-2025:03283-1","published":"2025-09-19T17:49:42Z","modified":"2026-02-04T03:35:17.421344Z","related":["CVE-2022-49980","CVE-2022-50116","CVE-2023-53117","CVE-2024-42265","CVE-2024-53093","CVE-2024-53177","CVE-2024-58239","CVE-2025-38180","CVE-2025-38184","CVE-2025-38323","CVE-2025-38352","CVE-2025-38460","CVE-2025-38498","CVE-2025-38499","CVE-2025-38546","CVE-2025-38555","CVE-2025-38560","CVE-2025-38563","CVE-2025-38608","CVE-2025-38617","CVE-2025-38618","CVE-2025-38644"],"upstream":["CVE-2022-49980","CVE-2022-50116","CVE-2023-53117","CVE-2024-42265","CVE-2024-53093","CVE-2024-53177","CVE-2024-58239","CVE-2025-38180","CVE-2025-38184","CVE-2025-38323","CVE-2025-38352","CVE-2025-38460","CVE-2025-38498","CVE-2025-38499","CVE-2025-38546","CVE-2025-38555","CVE-2025-38560","CVE-2025-38563","CVE-2025-38608","CVE-2025-38617","CVE-2025-38618","CVE-2025-38644"],"summary":"Security update for the Linux Kernel","details":"The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-49980: USB: gadget: fix use-after-free read in usb_udc_uevent() (bsc#1245110).\n- CVE-2022-50116: tty: n_gsm: fix deadlock and link starvation in outgoing data path (bsc#1244824).\n- CVE-2023-53117: fs: prevent out-of-bounds array speculation when closing a file descriptor (bsc#1242780).\n- CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334).\n- CVE-2024-53093: nvme-multipath: defer partition scanning (bsc#122824 bsc#1233640).\n- CVE-2024-53177: smb: prevent use-after-free due to open_cached_dir error paths (bsc#1234896).\n- CVE-2024-58239: tls: stop recv() if initial process_rx_list gave us non-DATA (bsc#1248614).\n- CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).\n- CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).\n- CVE-2025-38323: net: atm: add lec_mutex (bsc#1246473).\n- CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1246911).\n- CVE-2025-38460: atm: clip: Fix potential null-ptr-deref in to_atmarpd() (bsc#1247143).\n- CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247374).\n- CVE-2025-38499: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (bsc#1247976).\n- CVE-2025-38546: atm: clip: Fix memory leak of struct clip_vcc (bsc#1248223).\n- CVE-2025-38555: usb: gadget : fix use-after-free in composite_dev_cleanup() (bsc#1248297).\n- CVE-2025-38560: x86/sev: Evict cache lines during SNP memory validation (bsc#1248312).\n- CVE-2025-38563: perf/core: Prevent VMA split of buffer mappings (bsc#1248306).\n- CVE-2025-38608: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1248338).\n- CVE-2025-38617: net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1248621).\n- CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1248511).\n- CVE-2025-38644: wifi: mac80211: reject TDLS operations when station is not associated (bsc#1248748).\n\nThe following non-security bugs were fixed:\n\n- Disable N_GSM (jsc#PED-8240, bsc#1244824).\n- NFSv4.1: fix backchannel max_resp_sz verification check (bsc#1247518).\n- NFSv4: fairly test all delegations on a SEQ4_ revocation (bsc#1246211).\n- kabi fix for NFSv4: fairly test all delegations on a SEQ4_ revocation (bsc#1246211).\n- security, lsm: Introduce security_mptcp_add_subflow() (bsc#1240375).\n- selinux: Implement mptcp_add_subflow hook (bsc#1240375).\n\n","affected":[{"package":{"name":"kernel-rt","ecosystem":"SUSE:Linux Enterprise Micro 5.5","purl":"pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.106.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-devel-rt":"5.14.21-150500.13.106.1","kernel-rt":"5.14.21-150500.13.106.1","kernel-source-rt":"5.14.21-150500.13.106.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:03283-1.json"}},{"package":{"name":"kernel-source-rt","ecosystem":"SUSE:Linux Enterprise Micro 5.5","purl":"pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.5"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14.21-150500.13.106.1"}]}],"ecosystem_specific":{"binaries":[{"kernel-devel-rt":"5.14.21-150500.13.106.1","kernel-rt":"5.14.21-150500.13.106.1","kernel-source-rt":"5.14.21-150500.13.106.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:03283-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503283-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1229334"},{"type":"REPORT","url":"https://bugzilla.suse.com/1233640"},{"type":"REPORT","url":"https://bugzilla.suse.com/1234896"},{"type":"REPORT","url":"https://bugzilla.suse.com/1240375"},{"type":"REPORT","url":"https://bugzilla.suse.com/1242780"},{"type":"REPORT","url":"https://bugzilla.suse.com/1244824"},{"type":"REPORT","url":"https://bugzilla.suse.com/1245110"},{"type":"REPORT","url":"https://bugzilla.suse.com/1245956"},{"type":"REPORT","url":"https://bugzilla.suse.com/1245970"},{"type":"REPORT","url":"https://bugzilla.suse.com/1246211"},{"type":"REPORT","url":"https://bugzilla.suse.com/1246473"},{"type":"REPORT","url":"https://bugzilla.suse.com/1246911"},{"type":"REPORT","url":"https://bugzilla.suse.com/1247143"},{"type":"REPORT","url":"https://bugzilla.suse.com/1247374"},{"type":"REPORT","url":"https://bugzilla.suse.com/1247518"},{"type":"REPORT","url":"https://bugzilla.suse.com/1247976"},{"type":"REPORT","url":"https://bugzilla.suse.com/1248223"},{"type":"REPORT","url":"https://bugzilla.suse.com/1248297"},{"type":"REPORT","url":"https://bugzilla.suse.com/1248306"},{"type":"REPORT","url":"https://bugzilla.suse.com/1248312"},{"type":"REPORT","url":"https://bugzilla.suse.com/1248338"},{"type":"REPORT","url":"https://bugzilla.suse.com/1248511"},{"type":"REPORT","url":"https://bugzilla.suse.com/1248614"},{"type":"REPORT","url":"https://bugzilla.suse.com/1248621"},{"type":"REPORT","url":"https://bugzilla.suse.com/1248748"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-49980"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-50116"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-53117"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-42265"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-53093"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-53177"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-58239"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38180"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38184"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38323"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38352"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38460"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38498"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38499"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38546"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38555"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38560"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38563"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38608"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38617"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38618"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2025-38644"}]}