RHSA-2025:21063
Vulnerability from csaf_opensuse - Published: 2025-11-12 00:00 - Updated: 2026-09-20 11:50Summary
security update for kernel
Severity
Moderate
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2025:21063.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2025:21063.
Patchnames: RHSA-2025:21063
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.3 (Medium)
Affected products
Recommended
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.142.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.142.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.142.1.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.142.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.142.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.142.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.142.1.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.142.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.142.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.142.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.142.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.142.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.142.1.el7.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-48978
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-48978
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
13 products, the same list as for
CVE-2022-48978
Threats
Impact
important
6.6 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-48978
Threats
Impact
moderate
4.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-48978
Threats
Impact
moderate
References
24 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2025:21063.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2025:21063.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2025:21063",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2025_21063.json"
},
{
"category": "self",
"summary": "URL for RHSA-2025:21063",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-December/002273.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2025:21063",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-December/002273.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-48978 page",
"url": "https://www.suse.com/security/cve/CVE-2022-48978/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-53373 page",
"url": "https://www.suse.com/security/cve/CVE-2023-53373/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-22026 page",
"url": "https://www.suse.com/security/cve/CVE-2025-22026/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-37797 page",
"url": "https://www.suse.com/security/cve/CVE-2025-37797/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-38556 page",
"url": "https://www.suse.com/security/cve/CVE-2025-38556/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-39751 page",
"url": "https://www.suse.com/security/cve/CVE-2025-39751/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:50:57Z",
"generator": {
"date": "2025-11-12T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2025:21063",
"initial_release_date": "2025-11-12T00:00:00Z",
"revision_history": [
{
"date": "2025-11-12T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:50:57Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-whitelists-0:3.10.0-1160.142.1.el7.noarch",
"product": {
"name": "kernel-abi-whitelists-0:3.10.0-1160.142.1.el7.noarch",
"product_id": "kernel-abi-whitelists-0:3.10.0-1160.142.1.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-whitelists@3.10.0-1160.142.1.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:3.10.0-1160.142.1.el7.noarch",
"product": {
"name": "kernel-doc-0:3.10.0-1160.142.1.el7.noarch",
"product_id": "kernel-doc-0:3.10.0-1160.142.1.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@3.10.0-1160.142.1.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:3.10.0-1160.142.1.el7.x86_64",
"product": {
"name": "bpftool-0:3.10.0-1160.142.1.el7.x86_64",
"product_id": "bpftool-0:3.10.0-1160.142.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@3.10.0-1160.142.1.el7?arch=x86_64\u0026upstream=bpftool-0:3.10.0-1160.142.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:3.10.0-1160.142.1.el7.x86_64",
"product": {
"name": "kernel-0:3.10.0-1160.142.1.el7.x86_64",
"product_id": "kernel-0:3.10.0-1160.142.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@3.10.0-1160.142.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:3.10.0-1160.142.1.el7.x86_64",
"product": {
"name": "kernel-debug-0:3.10.0-1160.142.1.el7.x86_64",
"product_id": "kernel-debug-0:3.10.0-1160.142.1.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@3.10.0-1160.142.1.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-1160.142.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:3.10.0-1160.142.1.el7.x86_64",
"product": {
"name": "kernel-debug-devel-0:3.10.0-1160.142.1.el7.x86_64",
"product_id": "kernel-debug-devel-0:3.10.0-1160.142.1.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@3.10.0-1160.142.1.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-1160.142.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:3.10.0-1160.142.1.el7.x86_64",
"product": {
"name": "kernel-devel-0:3.10.0-1160.142.1.el7.x86_64",
"product_id": "kernel-devel-0:3.10.0-1160.142.1.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@3.10.0-1160.142.1.el7?arch=x86_64\u0026upstream=kernel-source-0:3.10.0-1160.142.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:3.10.0-1160.142.1.el7.x86_64",
"product": {
"name": "kernel-headers-0:3.10.0-1160.142.1.el7.x86_64",
"product_id": "kernel-headers-0:3.10.0-1160.142.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@3.10.0-1160.142.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:3.10.0-1160.142.1.el7.x86_64",
"product": {
"name": "kernel-tools-0:3.10.0-1160.142.1.el7.x86_64",
"product_id": "kernel-tools-0:3.10.0-1160.142.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@3.10.0-1160.142.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:3.10.0-1160.142.1.el7.x86_64",
"product": {
"name": "kernel-tools-libs-0:3.10.0-1160.142.1.el7.x86_64",
"product_id": "kernel-tools-libs-0:3.10.0-1160.142.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@3.10.0-1160.142.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:3.10.0-1160.142.1.el7.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:3.10.0-1160.142.1.el7.x86_64",
"product_id": "kernel-tools-libs-devel-0:3.10.0-1160.142.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@3.10.0-1160.142.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:3.10.0-1160.142.1.el7.x86_64",
"product": {
"name": "perf-0:3.10.0-1160.142.1.el7.x86_64",
"product_id": "perf-0:3.10.0-1160.142.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@3.10.0-1160.142.1.el7?arch=x86_64\u0026upstream=perf-0:3.10.0-1160.142.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python-perf-0:3.10.0-1160.142.1.el7.x86_64",
"product": {
"name": "python-perf-0:3.10.0-1160.142.1.el7.x86_64",
"product_id": "python-perf-0:3.10.0-1160.142.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python-perf@3.10.0-1160.142.1.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 7 LTSS",
"product": {
"name": "SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:3.10.0-1160.142.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.142.1.el7.x86_64"
},
"product_reference": "bpftool-0:3.10.0-1160.142.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:3.10.0-1160.142.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.142.1.el7.x86_64"
},
"product_reference": "kernel-0:3.10.0-1160.142.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-whitelists-0:3.10.0-1160.142.1.el7.noarch as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.142.1.el7.noarch"
},
"product_reference": "kernel-abi-whitelists-0:3.10.0-1160.142.1.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:3.10.0-1160.142.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.142.1.el7.x86_64"
},
"product_reference": "kernel-debug-0:3.10.0-1160.142.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:3.10.0-1160.142.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.142.1.el7.x86_64"
},
"product_reference": "kernel-debug-devel-0:3.10.0-1160.142.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:3.10.0-1160.142.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.142.1.el7.x86_64"
},
"product_reference": "kernel-devel-0:3.10.0-1160.142.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:3.10.0-1160.142.1.el7.noarch as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.142.1.el7.noarch"
},
"product_reference": "kernel-doc-0:3.10.0-1160.142.1.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:3.10.0-1160.142.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.142.1.el7.x86_64"
},
"product_reference": "kernel-headers-0:3.10.0-1160.142.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:3.10.0-1160.142.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.142.1.el7.x86_64"
},
"product_reference": "kernel-tools-0:3.10.0-1160.142.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:3.10.0-1160.142.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.142.1.el7.x86_64"
},
"product_reference": "kernel-tools-libs-0:3.10.0-1160.142.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:3.10.0-1160.142.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.142.1.el7.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:3.10.0-1160.142.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:3.10.0-1160.142.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.142.1.el7.x86_64"
},
"product_reference": "perf-0:3.10.0-1160.142.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-0:3.10.0-1160.142.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.142.1.el7.x86_64"
},
"product_reference": "python-perf-0:3.10.0-1160.142.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-48978",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-48978"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: core: fix shift-out-of-bounds in hid_report_raw_event\n\nSyzbot reported shift-out-of-bounds in hid_report_raw_event.\n\nmicrosoft 0003:045E:07DA.0001: hid_field_extract() called with n (128) \u003e\n32! (swapper/0)\n======================================================================\nUBSAN: shift-out-of-bounds in drivers/hid/hid-core.c:1323:20\nshift exponent 127 is too large for 32-bit type \u0027int\u0027\nCPU: 0 PID: 0 Comm: swapper/0 Not tainted\n6.1.0-rc4-syzkaller-00159-g4bbf3422df78 #0\nHardware name: Google Compute Engine/Google Compute Engine, BIOS\nGoogle 10/26/2022\nCall Trace:\n \u003cIRQ\u003e\n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0x1e3/0x2cb lib/dump_stack.c:106\n ubsan_epilogue lib/ubsan.c:151 [inline]\n __ubsan_handle_shift_out_of_bounds+0x3a6/0x420 lib/ubsan.c:322\n snto32 drivers/hid/hid-core.c:1323 [inline]\n hid_input_fetch_field drivers/hid/hid-core.c:1572 [inline]\n hid_process_report drivers/hid/hid-core.c:1665 [inline]\n hid_report_raw_event+0xd56/0x18b0 drivers/hid/hid-core.c:1998\n hid_input_report+0x408/0x4f0 drivers/hid/hid-core.c:2066\n hid_irq_in+0x459/0x690 drivers/hid/usbhid/hid-core.c:284\n __usb_hcd_giveback_urb+0x369/0x530 drivers/usb/core/hcd.c:1671\n dummy_timer+0x86b/0x3110 drivers/usb/gadget/udc/dummy_hcd.c:1988\n call_timer_fn+0xf5/0x210 kernel/time/timer.c:1474\n expire_timers kernel/time/timer.c:1519 [inline]\n __run_timers+0x76a/0x980 kernel/time/timer.c:1790\n run_timer_softirq+0x63/0xf0 kernel/time/timer.c:1803\n __do_softirq+0x277/0x75b kernel/softirq.c:571\n __irq_exit_rcu+0xec/0x170 kernel/softirq.c:650\n irq_exit_rcu+0x5/0x20 kernel/softirq.c:662\n sysvec_apic_timer_interrupt+0x91/0xb0 arch/x86/kernel/apic/apic.c:1107\n======================================================================\n\nIf the size of the integer (unsigned n) is bigger than 32 in snto32(),\nshift exponent will be too large for 32-bit type \u0027int\u0027, resulting in a\nshift-out-of-bounds bug.\nFix this by adding a check on the size of the integer (unsigned n) in\nsnto32(). To add support for n greater than 32 bits, set n to 32, if n\nis greater than 32.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.142.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-48978",
"url": "https://www.suse.com/security/cve/CVE-2022-48978"
},
{
"category": "external",
"summary": "SUSE Bug 1232038 for CVE-2022-48978",
"url": "https://bugzilla.suse.com/1232038"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.142.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.142.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-11-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-48978"
},
{
"cve": "CVE-2023-53373",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-53373"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: seqiv - Handle EBUSY correctly\n\nAs it is seqiv only handles the special return value of EINPROGERSS,\nwhich means that in all other cases it will free data related to the\nrequest.\n\nHowever, as the caller of seqiv may specify MAY_BACKLOG, we also need\nto expect EBUSY and treat it in the same way. Otherwise backlogged\nrequests will trigger a use-after-free.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.142.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-53373",
"url": "https://www.suse.com/security/cve/CVE-2023-53373"
},
{
"category": "external",
"summary": "SUSE Bug 1250137 for CVE-2023-53373",
"url": "https://bugzilla.suse.com/1250137"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.142.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.142.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-11-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-53373"
},
{
"cve": "CVE-2025-22026",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-22026"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: don\u0027t ignore the return code of svc_proc_register()\n\nCurrently, nfsd_proc_stat_init() ignores the return value of\nsvc_proc_register(). If the procfile creation fails, then the kernel\nwill WARN when it tries to remove the entry later.\n\nFix nfsd_proc_stat_init() to return the same type of pointer as\nsvc_proc_register(), and fix up nfsd_net_init() to check that and fail\nthe nfsd_net construction if it occurs.\n\nsvc_proc_register() can fail if the dentry can\u0027t be allocated, or if an\nidentical dentry already exists. The second case is pretty unlikely in\nthe nfsd_net construction codepath, so if this happens, return -ENOMEM.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.142.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-22026",
"url": "https://www.suse.com/security/cve/CVE-2025-22026"
},
{
"category": "external",
"summary": "SUSE Bug 1241349 for CVE-2025-22026",
"url": "https://bugzilla.suse.com/1241349"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.142.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.142.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-11-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-22026"
},
{
"cve": "CVE-2025-37797",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-37797"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet_sched: hfsc: Fix a UAF vulnerability in class handling\n\nThis patch fixes a Use-After-Free vulnerability in the HFSC qdisc class\nhandling. The issue occurs due to a time-of-check/time-of-use condition\nin hfsc_change_class() when working with certain child qdiscs like netem\nor codel.\n\nThe vulnerability works as follows:\n1. hfsc_change_class() checks if a class has packets (q.qlen != 0)\n2. It then calls qdisc_peek_len(), which for certain qdiscs (e.g.,\n codel, netem) might drop packets and empty the queue\n3. The code continues assuming the queue is still non-empty, adding\n the class to vttree\n4. This breaks HFSC scheduler assumptions that only non-empty classes\n are in vttree\n5. Later, when the class is destroyed, this can lead to a Use-After-Free\n\nThe fix adds a second queue length check after qdisc_peek_len() to verify\nthe queue wasn\u0027t emptied.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.142.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-37797",
"url": "https://www.suse.com/security/cve/CVE-2025-37797"
},
{
"category": "external",
"summary": "SUSE Bug 1242417 for CVE-2025-37797",
"url": "https://bugzilla.suse.com/1242417"
},
{
"category": "external",
"summary": "SUSE Bug 1245793 for CVE-2025-37797",
"url": "https://bugzilla.suse.com/1245793"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.142.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.142.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-11-12T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2025-37797"
},
{
"cve": "CVE-2025-38556",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-38556"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: core: Harden s32ton() against conversion to 0 bits\n\nTesting by the syzbot fuzzer showed that the HID core gets a\nshift-out-of-bounds exception when it tries to convert a 32-bit\nquantity to a 0-bit quantity. Ideally this should never occur, but\nthere are buggy devices and some might have a report field with size\nset to zero; we shouldn\u0027t reject the report or the device just because\nof that.\n\nInstead, harden the s32ton() routine so that it returns a reasonable\nresult instead of crashing when it is called with the number of bits\nset to 0 -- the same as what snto32() does.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.142.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-38556",
"url": "https://www.suse.com/security/cve/CVE-2025-38556"
},
{
"category": "external",
"summary": "SUSE Bug 1248296 for CVE-2025-38556",
"url": "https://bugzilla.suse.com/1248296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.142.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.142.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-11-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-38556"
},
{
"cve": "CVE-2025-39751",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-39751"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.142.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-39751",
"url": "https://www.suse.com/security/cve/CVE-2025-39751"
},
{
"category": "external",
"summary": "SUSE Bug 1249538 for CVE-2025-39751",
"url": "https://bugzilla.suse.com/1249538"
},
{
"category": "external",
"summary": "SUSE Bug 1249539 for CVE-2025-39751",
"url": "https://bugzilla.suse.com/1249539"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.142.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.142.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.142.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.142.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-11-12T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-39751"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…