RHSA-2025:13960
Vulnerability from csaf_opensuse - Published: 2025-08-18 00:00 - Updated: 2026-09-20 11:48Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2025:13960.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2025:13960.
Patchnames: RHSA-2025:13960
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:bpftool-0:4.18.0-553.70.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-0:4.18.0-553.70.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.70.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.70.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.70.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.70.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.70.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.70.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.70.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.70.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.70.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.70.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.70.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.70.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.70.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.70.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:perf-0:4.18.0-553.70.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.70.1.el8_10.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.1 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-50269
Threats
Impact
moderate
7.1 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2022-50269
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-50269
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-50269
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2022-50269
Threats
Impact
important
References
26 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2025:13960.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2025:13960.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2025:13960",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2025_13960.json"
},
{
"category": "self",
"summary": "URL for RHSA-2025:13960",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-August/001923.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2025:13960",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-August/001923.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50269 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50269/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50369 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50369/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-22097 page",
"url": "https://www.suse.com/security/cve/CVE-2025-22097/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-37914 page",
"url": "https://www.suse.com/security/cve/CVE-2025-37914/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-38250 page",
"url": "https://www.suse.com/security/cve/CVE-2025-38250/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-38380 page",
"url": "https://www.suse.com/security/cve/CVE-2025-38380/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:48:01Z",
"generator": {
"date": "2025-08-18T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2025:13960",
"initial_release_date": "2025-08-18T00:00:00Z",
"revision_history": [
{
"date": "2025-08-18T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:48:01Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-0:4.18.0-553.70.1.el8_10.noarch",
"product": {
"name": "kernel-abi-stablelists-0:4.18.0-553.70.1.el8_10.noarch",
"product_id": "kernel-abi-stablelists-0:4.18.0-553.70.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@4.18.0-553.70.1.el8_10?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:4.18.0-553.70.1.el8_10.noarch",
"product": {
"name": "kernel-doc-0:4.18.0-553.70.1.el8_10.noarch",
"product_id": "kernel-doc-0:4.18.0-553.70.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@4.18.0-553.70.1.el8_10?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:4.18.0-553.70.1.el8_10.x86_64",
"product": {
"name": "bpftool-0:4.18.0-553.70.1.el8_10.x86_64",
"product_id": "bpftool-0:4.18.0-553.70.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@4.18.0-553.70.1.el8_10?arch=x86_64\u0026upstream=bpftool-0:4.18.0-553.70.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:4.18.0-553.70.1.el8_10.x86_64",
"product": {
"name": "kernel-0:4.18.0-553.70.1.el8_10.x86_64",
"product_id": "kernel-0:4.18.0-553.70.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@4.18.0-553.70.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-0:4.18.0-553.70.1.el8_10.x86_64",
"product": {
"name": "kernel-core-0:4.18.0-553.70.1.el8_10.x86_64",
"product_id": "kernel-core-0:4.18.0-553.70.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@4.18.0-553.70.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"product": {
"name": "kernel-cross-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"product_id": "kernel-cross-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@4.18.0-553.70.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:4.18.0-553.70.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-0:4.18.0-553.70.1.el8_10.x86_64",
"product_id": "kernel-debug-0:4.18.0-553.70.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@4.18.0-553.70.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-553.70.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-0:4.18.0-553.70.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-core-0:4.18.0-553.70.1.el8_10.x86_64",
"product_id": "kernel-debug-core-0:4.18.0-553.70.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@4.18.0-553.70.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"product_id": "kernel-debug-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@4.18.0-553.70.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-553.70.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@4.18.0-553.70.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@4.18.0-553.70.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"product": {
"name": "kernel-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"product_id": "kernel-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@4.18.0-553.70.1.el8_10?arch=x86_64\u0026upstream=kernel-source-0:4.18.0-553.70.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"product": {
"name": "kernel-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"product_id": "kernel-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@4.18.0-553.70.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"product_id": "kernel-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@4.18.0-553.70.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"product_id": "kernel-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@4.18.0-553.70.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:4.18.0-553.70.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-0:4.18.0-553.70.1.el8_10.x86_64",
"product_id": "kernel-tools-0:4.18.0-553.70.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@4.18.0-553.70.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:4.18.0-553.70.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-0:4.18.0-553.70.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-0:4.18.0-553.70.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@4.18.0-553.70.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@4.18.0-553.70.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:4.18.0-553.70.1.el8_10.x86_64",
"product": {
"name": "perf-0:4.18.0-553.70.1.el8_10.x86_64",
"product_id": "perf-0:4.18.0-553.70.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@4.18.0-553.70.1.el8_10?arch=x86_64\u0026upstream=perf-0:4.18.0-553.70.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-0:4.18.0-553.70.1.el8_10.x86_64",
"product": {
"name": "python3-perf-0:4.18.0-553.70.1.el8_10.x86_64",
"product_id": "python3-perf-0:4.18.0-553.70.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@4.18.0-553.70.1.el8_10?arch=x86_64\u0026upstream=perf-0:4.18.0-553.70.1.el8_10.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:4.18.0-553.70.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:bpftool-0:4.18.0-553.70.1.el8_10.x86_64"
},
"product_reference": "bpftool-0:4.18.0-553.70.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:4.18.0-553.70.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-0:4.18.0-553.70.1.el8_10.x86_64"
},
"product_reference": "kernel-0:4.18.0-553.70.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-0:4.18.0-553.70.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.70.1.el8_10.noarch"
},
"product_reference": "kernel-abi-stablelists-0:4.18.0-553.70.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-0:4.18.0-553.70.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.70.1.el8_10.x86_64"
},
"product_reference": "kernel-core-0:4.18.0-553.70.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-0:4.18.0-553.70.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.70.1.el8_10.x86_64"
},
"product_reference": "kernel-cross-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:4.18.0-553.70.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.70.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-0:4.18.0-553.70.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-0:4.18.0-553.70.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.70.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-core-0:4.18.0-553.70.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:4.18.0-553.70.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.70.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-0:4.18.0-553.70.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.70.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:4.18.0-553.70.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.70.1.el8_10.x86_64"
},
"product_reference": "kernel-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:4.18.0-553.70.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.70.1.el8_10.noarch"
},
"product_reference": "kernel-doc-0:4.18.0-553.70.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:4.18.0-553.70.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.70.1.el8_10.x86_64"
},
"product_reference": "kernel-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-0:4.18.0-553.70.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.70.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:4.18.0-553.70.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.70.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-0:4.18.0-553.70.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:4.18.0-553.70.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.70.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-0:4.18.0-553.70.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:4.18.0-553.70.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.70.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:4.18.0-553.70.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:perf-0:4.18.0-553.70.1.el8_10.x86_64"
},
"product_reference": "perf-0:4.18.0-553.70.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-0:4.18.0-553.70.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.70.1.el8_10.x86_64"
},
"product_reference": "python3-perf-0:4.18.0-553.70.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-50269",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50269"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vkms: Fix memory leak in vkms_init()\n\nA memory leak was reported after the vkms module install failed.\n\nunreferenced object 0xffff88810bc28520 (size 16):\n comm \"modprobe\", pid 9662, jiffies 4298009455 (age 42.590s)\n hex dump (first 16 bytes):\n 01 01 00 64 81 88 ff ff 00 00 dc 0a 81 88 ff ff ...d............\n backtrace:\n [\u003c00000000e7561ff8\u003e] kmalloc_trace+0x27/0x60\n [\u003c000000000b1954a0\u003e] 0xffffffffc45200a9\n [\u003c00000000abbf1da0\u003e] do_one_initcall+0xd0/0x4f0\n [\u003c000000001505ee87\u003e] do_init_module+0x1a4/0x680\n [\u003c00000000958079ad\u003e] load_module+0x6249/0x7110\n [\u003c00000000117e4696\u003e] __do_sys_finit_module+0x140/0x200\n [\u003c00000000f74b12d2\u003e] do_syscall_64+0x35/0x80\n [\u003c000000008fc6fcde\u003e] entry_SYSCALL_64_after_hwframe+0x46/0xb0\n\nThe reason is that the vkms_init() returns without checking the return\nvalue of vkms_create(), and if the vkms_create() failed, the config\nallocated at the beginning of vkms_init() is leaked.\n\n vkms_init()\n config = kmalloc(...) # config allocated\n ...\n return vkms_create() # vkms_create failed and config is leaked\n\nFix this problem by checking return value of vkms_create() and free the\nconfig if error happened.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.70.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50269",
"url": "https://www.suse.com/security/cve/CVE-2022-50269"
},
{
"category": "external",
"summary": "SUSE Bug 1249777 for CVE-2022-50269",
"url": "https://bugzilla.suse.com/1249777"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.70.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.70.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-50269"
},
{
"cve": "CVE-2022-50369",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50369"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vkms: Fix null-ptr-deref in vkms_release()\n\nA null-ptr-deref is triggered when it tries to destroy the workqueue in\nvkms-\u003eoutput.composer_workq in vkms_release().\n\n KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f]\n CPU: 5 PID: 17193 Comm: modprobe Not tainted 6.0.0-11331-gd465bff130bf #24\n RIP: 0010:destroy_workqueue+0x2f/0x710\n ...\n Call Trace:\n \u003cTASK\u003e\n ? vkms_config_debugfs_init+0x50/0x50 [vkms]\n __devm_drm_dev_alloc+0x15a/0x1c0 [drm]\n vkms_init+0x245/0x1000 [vkms]\n do_one_initcall+0xd0/0x4f0\n do_init_module+0x1a4/0x680\n load_module+0x6249/0x7110\n __do_sys_finit_module+0x140/0x200\n do_syscall_64+0x35/0x80\n entry_SYSCALL_64_after_hwframe+0x46/0xb0\n\nThe reason is that an OOM happened which triggers the destroy of the\nworkqueue, however, the workqueue is alloced in the later process,\nthus a null-ptr-deref happened. A simple call graph is shown as below:\n\n vkms_init()\n vkms_create()\n devm_drm_dev_alloc()\n __devm_drm_dev_alloc()\n devm_drm_dev_init()\n devm_add_action_or_reset()\n devm_add_action() # an error happened\n devm_drm_dev_init_release()\n drm_dev_put()\n kref_put()\n drm_dev_release()\n vkms_release()\n destroy_workqueue() # null-ptr-deref happened\n vkms_modeset_init()\n vkms_output_init()\n vkms_crtc_init() # where the workqueue get allocated\n\nFix this by checking if composer_workq is NULL before passing it to\nthe destroy_workqueue() in vkms_release().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.70.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50369",
"url": "https://www.suse.com/security/cve/CVE-2022-50369"
},
{
"category": "external",
"summary": "SUSE Bug 1250026 for CVE-2022-50369",
"url": "https://bugzilla.suse.com/1250026"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.70.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.70.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-50369"
},
{
"cve": "CVE-2025-22097",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-22097"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vkms: Fix use after free and double free on init error\n\nIf the driver initialization fails, the vkms_exit() function might\naccess an uninitialized or freed default_config pointer and it might\ndouble free it.\n\nFix both possible errors by initializing default_config only when the\ndriver initialization succeeded.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.70.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-22097",
"url": "https://www.suse.com/security/cve/CVE-2025-22097"
},
{
"category": "external",
"summary": "SUSE Bug 1241541 for CVE-2025-22097",
"url": "https://bugzilla.suse.com/1241541"
},
{
"category": "external",
"summary": "SUSE Bug 1241542 for CVE-2025-22097",
"url": "https://bugzilla.suse.com/1241542"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.70.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.70.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-18T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2025-22097"
},
{
"cve": "CVE-2025-37914",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-37914"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet_sched: ets: Fix double list add in class with netem as child qdisc\n\nAs described in Gerrard\u0027s report [1], there are use cases where a netem\nchild qdisc will make the parent qdisc\u0027s enqueue callback reentrant.\nIn the case of ets, there won\u0027t be a UAF, but the code will add the same\nclassifier to the list twice, which will cause memory corruption.\n\nIn addition to checking for qlen being zero, this patch checks whether\nthe class was already added to the active_list (cl_is_active) before\ndoing the addition to cater for the reentrant case.\n\n[1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.70.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-37914",
"url": "https://www.suse.com/security/cve/CVE-2025-37914"
},
{
"category": "external",
"summary": "SUSE Bug 1243472 for CVE-2025-37914",
"url": "https://bugzilla.suse.com/1243472"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.70.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.70.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-37914"
},
{
"cve": "CVE-2025-38250",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-38250"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_core: Fix use-after-free in vhci_flush()\n\nsyzbot reported use-after-free in vhci_flush() without repro. [0]\n\nFrom the splat, a thread close()d a vhci file descriptor while\nits device was being used by iotcl() on another thread.\n\nOnce the last fd refcnt is released, vhci_release() calls\nhci_unregister_dev(), hci_free_dev(), and kfree() for struct\nvhci_data, which is set to hci_dev-\u003edev-\u003edriver_data.\n\nThe problem is that there is no synchronisation after unlinking\nhdev from hci_dev_list in hci_unregister_dev(). There might be\nanother thread still accessing the hdev which was fetched before\nthe unlink operation.\n\nWe can use SRCU for such synchronisation.\n\nLet\u0027s run hci_dev_reset() under SRCU and wait for its completion\nin hci_unregister_dev().\n\nAnother option would be to restore hci_dev-\u003edestruct(), which was\nremoved in commit 587ae086f6e4 (\"Bluetooth: Remove unused\nhci-destruct cb\"). However, this would not be a good solution, as\nwe should not run hci_unregister_dev() while there are in-flight\nioctl() requests, which could lead to another data-race KCSAN splat.\n\nNote that other drivers seem to have the same problem, for exmaple,\nvirtbt_remove().\n\n[0]:\nBUG: KASAN: slab-use-after-free in skb_queue_empty_lockless include/linux/skbuff.h:1891 [inline]\nBUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0x99/0x360 net/core/skbuff.c:3937\nRead of size 8 at addr ffff88807cb8d858 by task syz.1.219/6718\n\nCPU: 1 UID: 0 PID: 6718 Comm: syz.1.219 Not tainted 6.16.0-rc1-syzkaller-00196-g08207f42d3ff #0 PREEMPT(full)\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:408 [inline]\n print_report+0xd2/0x2b0 mm/kasan/report.c:521\n kasan_report+0x118/0x150 mm/kasan/report.c:634\n skb_queue_empty_lockless include/linux/skbuff.h:1891 [inline]\n skb_queue_purge_reason+0x99/0x360 net/core/skbuff.c:3937\n skb_queue_purge include/linux/skbuff.h:3368 [inline]\n vhci_flush+0x44/0x50 drivers/bluetooth/hci_vhci.c:69\n hci_dev_do_reset net/bluetooth/hci_core.c:552 [inline]\n hci_dev_reset+0x420/0x5c0 net/bluetooth/hci_core.c:592\n sock_do_ioctl+0xd9/0x300 net/socket.c:1190\n sock_ioctl+0x576/0x790 net/socket.c:1311\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl+0xf9/0x170 fs/ioctl.c:893\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7fcf5b98e929\nCode: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 \u003c48\u003e 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007fcf5c7b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\nRAX: ffffffffffffffda RBX: 00007fcf5bbb6160 RCX: 00007fcf5b98e929\nRDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000009\nRBP: 00007fcf5ba10b39 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 0000000000000000 R14: 00007fcf5bbb6160 R15: 00007ffd6353d528\n \u003c/TASK\u003e\n\nAllocated by task 6535:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3e/0x80 mm/kasan/common.c:68\n poison_kmalloc_redzone mm/kasan/common.c:377 [inline]\n __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:394\n kasan_kmalloc include/linux/kasan.h:260 [inline]\n __kmalloc_cache_noprof+0x230/0x3d0 mm/slub.c:4359\n kmalloc_noprof include/linux/slab.h:905 [inline]\n kzalloc_noprof include/linux/slab.h:1039 [inline]\n vhci_open+0x57/0x360 drivers/bluetooth/hci_vhci.c:635\n misc_open+0x2bc/0x330 drivers/char/misc.c:161\n chrdev_open+0x4c9/0x5e0 fs/char_dev.c:414\n do_dentry_open+0xdf0/0x1970 fs/open.c:964\n vfs_open+0x3b/0x340 fs/open.c:1094\n do_open fs/namei.c:3887 [inline]\n path_openat+0x2ee5/0x3830 fs/name\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.70.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-38250",
"url": "https://www.suse.com/security/cve/CVE-2025-38250"
},
{
"category": "external",
"summary": "SUSE Bug 1246182 for CVE-2025-38250",
"url": "https://bugzilla.suse.com/1246182"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.70.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.70.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-18T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-38250"
},
{
"cve": "CVE-2025-38380",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-38380"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.70.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-38380",
"url": "https://www.suse.com/security/cve/CVE-2025-38380"
},
{
"category": "external",
"summary": "SUSE Bug 1247028 for CVE-2025-38380",
"url": "https://bugzilla.suse.com/1247028"
},
{
"category": "external",
"summary": "SUSE Bug 1247029 for CVE-2025-38380",
"url": "https://bugzilla.suse.com/1247029"
},
{
"category": "external",
"summary": "SUSE Bug 1253291 for CVE-2025-38380",
"url": "https://bugzilla.suse.com/1253291"
},
{
"category": "external",
"summary": "SUSE Bug 1253292 for CVE-2025-38380",
"url": "https://bugzilla.suse.com/1253292"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.70.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.70.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.70.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.70.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-18T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2025-38380"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…