RHSA-2025:23947
Vulnerability from csaf_opensuse - Published: 2025-12-22 00:00 - Updated: 2026-09-20 11:52Summary
security update for kernel
Severity
Moderate
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2025:23947.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2025:23947.
Patchnames: RHSA-2025:23947
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Affected products
Recommended
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
13 products, the same list as for
CVE-2022-50356
Threats
Impact
important
Affected products
Recommended
13 products, the same list as for
CVE-2022-50356
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-50356
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-50356
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-50356
Threats
Impact
moderate
Affected products
Recommended
13 products, the same list as for
CVE-2022-50356
Threats
Impact
important
6.3 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-50356
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-50356
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-50356
Threats
Impact
moderate
6.1 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2022-50356
Threats
Impact
moderate
References
43 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2025:23947.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2025:23947.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2025:23947",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2025_23947.json"
},
{
"category": "self",
"summary": "URL for RHSA-2025:23947",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-January/002373.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2025:23947",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-January/002373.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50356 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50356/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50367 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50367/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50403 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50403/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50406 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50406/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50410 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50410/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-53178 page",
"url": "https://www.suse.com/security/cve/CVE-2023-53178/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-53297 page",
"url": "https://www.suse.com/security/cve/CVE-2023-53297/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-53322 page",
"url": "https://www.suse.com/security/cve/CVE-2023-53322/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-38729 page",
"url": "https://www.suse.com/security/cve/CVE-2025-38729/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-39757 page",
"url": "https://www.suse.com/security/cve/CVE-2025-39757/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-39955 page",
"url": "https://www.suse.com/security/cve/CVE-2025-39955/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:52:51Z",
"generator": {
"date": "2025-12-22T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2025:23947",
"initial_release_date": "2025-12-22T00:00:00Z",
"revision_history": [
{
"date": "2025-12-22T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:52:51Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"product": {
"name": "kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"product_id": "kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-whitelists@3.10.0-1160.144.1.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"product": {
"name": "kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"product_id": "kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@3.10.0-1160.144.1.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"product": {
"name": "bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"product_id": "bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@3.10.0-1160.144.1.el7?arch=x86_64\u0026upstream=bpftool-0:3.10.0-1160.144.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:3.10.0-1160.144.1.el7.x86_64",
"product": {
"name": "kernel-0:3.10.0-1160.144.1.el7.x86_64",
"product_id": "kernel-0:3.10.0-1160.144.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@3.10.0-1160.144.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"product": {
"name": "kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"product_id": "kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@3.10.0-1160.144.1.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-1160.144.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"product": {
"name": "kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"product_id": "kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@3.10.0-1160.144.1.el7?arch=x86_64\u0026upstream=kernel-debug-0:3.10.0-1160.144.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"product": {
"name": "kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"product_id": "kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:3.10.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@3.10.0-1160.144.1.el7?arch=x86_64\u0026upstream=kernel-source-0:3.10.0-1160.144.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"product": {
"name": "kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"product_id": "kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@3.10.0-1160.144.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"product": {
"name": "kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"product_id": "kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@3.10.0-1160.144.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"product": {
"name": "kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"product_id": "kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@3.10.0-1160.144.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"product_id": "kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@3.10.0-1160.144.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:3.10.0-1160.144.1.el7.x86_64",
"product": {
"name": "perf-0:3.10.0-1160.144.1.el7.x86_64",
"product_id": "perf-0:3.10.0-1160.144.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@3.10.0-1160.144.1.el7?arch=x86_64\u0026upstream=perf-0:3.10.0-1160.144.1.el7.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python-perf-0:3.10.0-1160.144.1.el7.x86_64",
"product": {
"name": "python-perf-0:3.10.0-1160.144.1.el7.x86_64",
"product_id": "python-perf-0:3.10.0-1160.144.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python-perf@3.10.0-1160.144.1.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 7 LTSS",
"product": {
"name": "SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:3.10.0-1160.144.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64"
},
"product_reference": "bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:3.10.0-1160.144.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64"
},
"product_reference": "kernel-0:3.10.0-1160.144.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch"
},
"product_reference": "kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:3.10.0-1160.144.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64"
},
"product_reference": "kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64"
},
"product_reference": "kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:3.10.0-1160.144.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64"
},
"product_reference": "kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:3.10.0-1160.144.1.el7.noarch as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch"
},
"product_reference": "kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:3.10.0-1160.144.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64"
},
"product_reference": "kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:3.10.0-1160.144.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64"
},
"product_reference": "kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64"
},
"product_reference": "kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:3.10.0-1160.144.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64"
},
"product_reference": "perf-0:3.10.0-1160.144.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-0:3.10.0-1160.144.1.el7.x86_64 as component of SUSE Liberty Linux 7 LTSS",
"product_id": "SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
},
"product_reference": "python-perf-0:3.10.0-1160.144.1.el7.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 7 LTSS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-50356",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50356"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: sched: sfb: fix null pointer access issue when sfb_init() fails\n\nWhen the default qdisc is sfb, if the qdisc of dev_queue fails to be\ninited during mqprio_init(), sfb_reset() is invoked to clear resources.\nIn this case, the q-\u003eqdisc is NULL, and it will cause gpf issue.\n\nThe process is as follows:\nqdisc_create_dflt()\n\tsfb_init()\n\t\ttcf_block_get() ---\u003efailed, q-\u003eqdisc is NULL\n\t...\n\tqdisc_put()\n\t\t...\n\t\tsfb_reset()\n\t\t\tqdisc_reset(q-\u003eqdisc) ---\u003eq-\u003eqdisc is NULL\n\t\t\t\tops = qdisc-\u003eops\n\nThe following is the Call Trace information:\ngeneral protection fault, probably for non-canonical address\n0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN\nKASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f]\nRIP: 0010:qdisc_reset+0x2b/0x6f0\nCall Trace:\n\u003cTASK\u003e\nsfb_reset+0x37/0xd0\nqdisc_reset+0xed/0x6f0\nqdisc_destroy+0x82/0x4c0\nqdisc_put+0x9e/0xb0\nqdisc_create_dflt+0x2c3/0x4a0\nmqprio_init+0xa71/0x1760\nqdisc_create+0x3eb/0x1000\ntc_modify_qdisc+0x408/0x1720\nrtnetlink_rcv_msg+0x38e/0xac0\nnetlink_rcv_skb+0x12d/0x3a0\nnetlink_unicast+0x4a2/0x740\nnetlink_sendmsg+0x826/0xcc0\nsock_sendmsg+0xc5/0x100\n____sys_sendmsg+0x583/0x690\n___sys_sendmsg+0xe8/0x160\n__sys_sendmsg+0xbf/0x160\ndo_syscall_64+0x35/0x80\nentry_SYSCALL_64_after_hwframe+0x46/0xb0\nRIP: 0033:0x7f2164122d04\n\u003c/TASK\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50356",
"url": "https://www.suse.com/security/cve/CVE-2022-50356"
},
{
"category": "external",
"summary": "SUSE Bug 1250040 for CVE-2022-50356",
"url": "https://bugzilla.suse.com/1250040"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-12-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-50356"
},
{
"cve": "CVE-2022-50367",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50367"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs: fix UAF/GPF bug in nilfs_mdt_destroy\n\nIn alloc_inode, inode_init_always() could return -ENOMEM if\nsecurity_inode_alloc() fails, which causes inode-\u003ei_private\nuninitialized. Then nilfs_is_metadata_file_inode() returns\ntrue and nilfs_free_inode() wrongly calls nilfs_mdt_destroy(),\nwhich frees the uninitialized inode-\u003ei_private\nand leads to crashes(e.g., UAF/GPF).\n\nFix this by moving security_inode_alloc just prior to\nthis_cpu_inc(nr_inodes)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50367",
"url": "https://www.suse.com/security/cve/CVE-2022-50367"
},
{
"category": "external",
"summary": "SUSE Bug 1247374 for CVE-2022-50367",
"url": "https://bugzilla.suse.com/1247374"
},
{
"category": "external",
"summary": "SUSE Bug 1250277 for CVE-2022-50367",
"url": "https://bugzilla.suse.com/1250277"
},
{
"category": "external",
"summary": "SUSE Bug 1253291 for CVE-2022-50367",
"url": "https://bugzilla.suse.com/1253291"
},
{
"category": "external",
"summary": "SUSE Bug 1253292 for CVE-2022-50367",
"url": "https://bugzilla.suse.com/1253292"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-12-22T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2022-50367"
},
{
"cve": "CVE-2022-50403",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50403"
}
],
"notes": [
{
"category": "general",
"text": "This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50403",
"url": "https://www.suse.com/security/cve/CVE-2022-50403"
},
{
"category": "external",
"summary": "SUSE Bug 1250143 for CVE-2022-50403",
"url": "https://bugzilla.suse.com/1250143"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-12-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-50403"
},
{
"cve": "CVE-2022-50406",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50406"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\niomap: iomap: fix memory corruption when recording errors during writeback\n\nEvery now and then I see this crash on arm64:\n\nUnable to handle kernel NULL pointer dereference at virtual address 00000000000000f8\nBuffer I/O error on dev dm-0, logical block 8733687, async page read\nMem abort info:\n ESR = 0x0000000096000006\n EC = 0x25: DABT (current EL), IL = 32 bits\n SET = 0, FnV = 0\n EA = 0, S1PTW = 0\n FSC = 0x06: level 2 translation fault\nData abort info:\n ISV = 0, ISS = 0x00000006\n CM = 0, WnR = 0\nuser pgtable: 64k pages, 42-bit VAs, pgdp=0000000139750000\n[00000000000000f8] pgd=0000000000000000, p4d=0000000000000000, pud=0000000000000000, pmd=0000000000000000\nInternal error: Oops: 96000006 [#1] PREEMPT SMP\nBuffer I/O error on dev dm-0, logical block 8733688, async page read\nDumping ftrace buffer:\nBuffer I/O error on dev dm-0, logical block 8733689, async page read\n (ftrace buffer empty)\nXFS (dm-0): log I/O error -5\nModules linked in: dm_thin_pool dm_persistent_data\nXFS (dm-0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x1ec/0x590 [xfs] (fs/xfs/xfs_trans_buf.c:296).\n dm_bio_prison\nXFS (dm-0): Please unmount the filesystem and rectify the problem(s)\nXFS (dm-0): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -5, agno 0\n dm_bufio dm_log_writes xfs nft_chain_nat xt_REDIRECT nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip6t_REJECT\npotentially unexpected fatal signal 6.\n nf_reject_ipv6\npotentially unexpected fatal signal 6.\n ipt_REJECT nf_reject_ipv4\nCPU: 1 PID: 122166 Comm: fsstress Tainted: G W 6.0.0-rc5-djwa #rc5 3004c9f1de887ebae86015f2677638ce51ee7\n rpcsec_gss_krb5 auth_rpcgss xt_tcpudp ip_set_hash_ip ip_set_hash_net xt_set nft_compat ip_set_hash_mac ip_set nf_tables\nHardware name: QEMU KVM Virtual Machine, BIOS 1.5.1 06/16/2021\npstate: 60001000 (nZCv daif -PAN -UAO -TCO -DIT +SSBS BTYPE=--)\n ip_tables\npc : 000003fd6d7df200\n x_tables\nlr : 000003fd6d7df1ec\n overlay nfsv4\nCPU: 0 PID: 54031 Comm: u4:3 Tainted: G W 6.0.0-rc5-djwa #rc5 3004c9f1de887ebae86015f2677638ce51ee7405\nHardware name: QEMU KVM Virtual Machine, BIOS 1.5.1 06/16/2021\nWorkqueue: writeback wb_workfn\nsp : 000003ffd9522fd0\n (flush-253:0)\npstate: 60401005 (nZCv daif +PAN -UAO -TCO -DIT +SSBS BTYPE=--)\npc : errseq_set+0x1c/0x100\nx29: 000003ffd9522fd0 x28: 0000000000000023 x27: 000002acefeb6780\nx26: 0000000000000005 x25: 0000000000000001 x24: 0000000000000000\nx23: 00000000ffffffff x22: 0000000000000005\nlr : __filemap_set_wb_err+0x24/0xe0\n x21: 0000000000000006\nsp : fffffe000f80f760\nx29: fffffe000f80f760 x28: 0000000000000003 x27: fffffe000f80f9f8\nx26: 0000000002523000 x25: 00000000fffffffb x24: fffffe000f80f868\nx23: fffffe000f80fbb0 x22: fffffc0180c26a78 x21: 0000000002530000\nx20: 0000000000000000 x19: 0000000000000000 x18: 0000000000000000\n\nx17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000\nx14: 0000000000000001 x13: 0000000000470af3 x12: fffffc0058f70000\nx11: 0000000000000040 x10: 0000000000001b20 x9 : fffffe000836b288\nx8 : fffffc00eb9fd480 x7 : 0000000000f83659 x6 : 0000000000000000\nx5 : 0000000000000869 x4 : 0000000000000005 x3 : 00000000000000f8\nx20: 000003fd6d740020 x19: 000000000001dd36 x18: 0000000000000001\nx17: 000003fd6d78704c x16: 0000000000000001 x15: 000002acfac87668\nx2 : 0000000000000ffa x1 : 00000000fffffffb x0 : 00000000000000f8\nCall trace:\n errseq_set+0x1c/0x100\n __filemap_set_wb_err+0x24/0xe0\n iomap_do_writepage+0x5e4/0xd5c\n write_cache_pages+0x208/0x674\n iomap_writepages+0x34/0x60\n xfs_vm_writepages+0x8c/0xcc [xfs 7a861f39c43631f15d3a5884246ba5035d4ca78b]\nx14: 0000000000000000 x13: 2064656e72757465 x12: 0000000000002180\nx11: 000003fd6d8a82d0 x10: 0000000000000000 x9 : 000003fd6d8ae288\nx8 : 0000000000000083 x7 : 00000000ffffffff x6 : 00000000ffffffee\nx5 : 00000000fbad2887 x4 : 000003fd6d9abb58 x3 : 000003fd6d740020\nx2 : 0000000000000006 x1 : 000000000001dd36 x0 : 0000000000000000\nCPU: \n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50406",
"url": "https://www.suse.com/security/cve/CVE-2022-50406"
},
{
"category": "external",
"summary": "SUSE Bug 1250165 for CVE-2022-50406",
"url": "https://bugzilla.suse.com/1250165"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-12-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-50406"
},
{
"cve": "CVE-2022-50410",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50410"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Protect against send buffer overflow in NFSv2 READ\n\nSince before the git era, NFSD has conserved the number of pages\nheld by each nfsd thread by combining the RPC receive and send\nbuffers into a single array of pages. This works because there are\nno cases where an operation needs a large RPC Call message and a\nlarge RPC Reply at the same time.\n\nOnce an RPC Call has been received, svc_process() updates\nsvc_rqst::rq_res to describe the part of rq_pages that can be\nused for constructing the Reply. This means that the send buffer\n(rq_res) shrinks when the received RPC record containing the RPC\nCall is large.\n\nA client can force this shrinkage on TCP by sending a correctly-\nformed RPC Call header contained in an RPC record that is\nexcessively large. The full maximum payload size cannot be\nconstructed in that case.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50410",
"url": "https://www.suse.com/security/cve/CVE-2022-50410"
},
{
"category": "external",
"summary": "SUSE Bug 1250187 for CVE-2022-50410",
"url": "https://bugzilla.suse.com/1250187"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-12-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-50410"
},
{
"cve": "CVE-2023-53178",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-53178"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: fix zswap writeback race condition\n\nThe zswap writeback mechanism can cause a race condition resulting in\nmemory corruption, where a swapped out page gets swapped in with data that\nwas written to a different page.\n\nThe race unfolds like this:\n1. a page with data A and swap offset X is stored in zswap\n2. page A is removed off the LRU by zpool driver for writeback in\n zswap-shrink work, data for A is mapped by zpool driver\n3. user space program faults and invalidates page entry A, offset X is\n considered free\n4. kswapd stores page B at offset X in zswap (zswap could also be\n full, if so, page B would then be IOed to X, then skip step 5.)\n5. entry A is replaced by B in tree-\u003erbroot, this doesn\u0027t affect the\n local reference held by zswap-shrink work\n6. zswap-shrink work writes back A at X, and frees zswap entry A\n7. swapin of slot X brings A in memory instead of B\n\nThe fix:\nOnce the swap page cache has been allocated (case ZSWAP_SWAPCACHE_NEW),\nzswap-shrink work just checks that the local zswap_entry reference is\nstill the same as the one in the tree. If it\u0027s not the same it means that\nit\u0027s either been invalidated or replaced, in both cases the writeback is\naborted because the local entry contains stale data.\n\nReproducer:\nI originally found this by running `stress` overnight to validate my work\non the zswap writeback mechanism, it manifested after hours on my test\nmachine. The key to make it happen is having zswap writebacks, so\nwhatever setup pumps /sys/kernel/debug/zswap/written_back_pages should do\nthe trick.\n\nIn order to reproduce this faster on a vm, I setup a system with ~100M of\navailable memory and a 500M swap file, then running `stress --vm 1\n--vm-bytes 300000000 --vm-stride 4000` makes it happen in matter of tens\nof minutes. One can speed things up even more by swinging\n/sys/module/zswap/parameters/max_pool_percent up and down between, say, 20\nand 1; this makes it reproduce in tens of seconds. It\u0027s crucial to set\n`--vm-stride` to something other than 4096 otherwise `stress` won\u0027t\nrealize that memory has been corrupted because all pages would have the\nsame data.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-53178",
"url": "https://www.suse.com/security/cve/CVE-2023-53178"
},
{
"category": "external",
"summary": "SUSE Bug 1249827 for CVE-2023-53178",
"url": "https://bugzilla.suse.com/1249827"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-12-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-53178"
},
{
"cve": "CVE-2023-53297",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-53297"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: fix \"bad unlock balance\" in l2cap_disconnect_rsp\n\nconn-\u003echan_lock isn\u0027t acquired before l2cap_get_chan_by_scid,\nif l2cap_get_chan_by_scid returns NULL, then \u0027bad unlock balance\u0027\nis triggered.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-53297",
"url": "https://www.suse.com/security/cve/CVE-2023-53297"
},
{
"category": "external",
"summary": "SUSE Bug 1250322 for CVE-2023-53297",
"url": "https://bugzilla.suse.com/1250322"
},
{
"category": "external",
"summary": "SUSE Bug 1250728 for CVE-2023-53297",
"url": "https://bugzilla.suse.com/1250728"
},
{
"category": "external",
"summary": "SUSE Bug 1251916 for CVE-2023-53297",
"url": "https://bugzilla.suse.com/1251916"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-12-22T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2023-53297"
},
{
"cve": "CVE-2023-53322",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-53322"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Wait for io return on terminate rport\n\nSystem crash due to use after free.\nCurrent code allows terminate_rport_io to exit before making\nsure all IOs has returned. For FCP-2 device, IO\u0027s can hang\non in HW because driver has not tear down the session in FW at\nfirst sign of cable pull. When dev_loss_tmo timer pops,\nterminate_rport_io is called and upper layer is about to\nfree various resources. Terminate_rport_io trigger qla to do\nthe final cleanup, but the cleanup might not be fast enough where it\nleave qla still holding on to the same resource.\n\nWait for IO\u0027s to return to upper layer before resources are freed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-53322",
"url": "https://www.suse.com/security/cve/CVE-2023-53322"
},
{
"category": "external",
"summary": "SUSE Bug 1250323 for CVE-2023-53322",
"url": "https://bugzilla.suse.com/1250323"
},
{
"category": "external",
"summary": "SUSE Bug 1251916 for CVE-2023-53322",
"url": "https://bugzilla.suse.com/1251916"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-12-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2023-53322"
},
{
"cve": "CVE-2025-38729",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-38729"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Validate UAC3 power domain descriptors, too\n\nUAC3 power domain descriptors need to be verified with its variable\nbLength for avoiding the unexpected OOB accesses by malicious\nfirmware, too.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-38729",
"url": "https://www.suse.com/security/cve/CVE-2025-38729"
},
{
"category": "external",
"summary": "SUSE Bug 1249164 for CVE-2025-38729",
"url": "https://bugzilla.suse.com/1249164"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-12-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-38729"
},
{
"cve": "CVE-2025-39757",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-39757"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Validate UAC3 cluster segment descriptors\n\nUAC3 class segment descriptors need to be verified whether their sizes\nmatch with the declared lengths and whether they fit with the\nallocated buffer sizes, too. Otherwise malicious firmware may lead to\nthe unexpected OOB accesses.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-39757",
"url": "https://www.suse.com/security/cve/CVE-2025-39757"
},
{
"category": "external",
"summary": "SUSE Bug 1249515 for CVE-2025-39757",
"url": "https://bugzilla.suse.com/1249515"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-12-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-39757"
},
{
"cve": "CVE-2025-39955",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-39955"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: Clear tcp_sk(sk)-\u003efastopen_rsk in tcp_disconnect().\n\nsyzbot reported the splat below where a socket had tcp_sk(sk)-\u003efastopen_rsk\nin the TCP_ESTABLISHED state. [0]\n\nsyzbot reused the server-side TCP Fast Open socket as a new client before\nthe TFO socket completes 3WHS:\n\n 1. accept()\n 2. connect(AF_UNSPEC)\n 3. connect() to another destination\n\nAs of accept(), sk-\u003esk_state is TCP_SYN_RECV, and tcp_disconnect() changes\nit to TCP_CLOSE and makes connect() possible, which restarts timers.\n\nSince tcp_disconnect() forgot to clear tcp_sk(sk)-\u003efastopen_rsk, the\nretransmit timer triggered the warning and the intended packet was not\nretransmitted.\n\nLet\u0027s call reqsk_fastopen_remove() in tcp_disconnect().\n\n[0]:\nWARNING: CPU: 2 PID: 0 at net/ipv4/tcp_timer.c:542 tcp_retransmit_timer (net/ipv4/tcp_timer.c:542 (discriminator 7))\nModules linked in:\nCPU: 2 UID: 0 PID: 0 Comm: swapper/2 Not tainted 6.17.0-rc5-g201825fb4278 #62 PREEMPT(voluntary)\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\nRIP: 0010:tcp_retransmit_timer (net/ipv4/tcp_timer.c:542 (discriminator 7))\nCode: 41 55 41 54 55 53 48 8b af b8 08 00 00 48 89 fb 48 85 ed 0f 84 55 01 00 00 0f b6 47 12 3c 03 74 0c 0f b6 47 12 3c 04 74 04 90 \u003c0f\u003e 0b 90 48 8b 85 c0 00 00 00 48 89 ef 48 8b 40 30 e8 6a 4f 06 3e\nRSP: 0018:ffffc900002f8d40 EFLAGS: 00010293\nRAX: 0000000000000002 RBX: ffff888106911400 RCX: 0000000000000017\nRDX: 0000000002517619 RSI: ffffffff83764080 RDI: ffff888106911400\nRBP: ffff888106d5c000 R08: 0000000000000001 R09: ffffc900002f8de8\nR10: 00000000000000c2 R11: ffffc900002f8ff8 R12: ffff888106911540\nR13: ffff888106911480 R14: ffff888106911840 R15: ffffc900002f8de0\nFS: 0000000000000000(0000) GS:ffff88907b768000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f8044d69d90 CR3: 0000000002c30003 CR4: 0000000000370ef0\nCall Trace:\n \u003cIRQ\u003e\n tcp_write_timer (net/ipv4/tcp_timer.c:738)\n call_timer_fn (kernel/time/timer.c:1747)\n __run_timers (kernel/time/timer.c:1799 kernel/time/timer.c:2372)\n timer_expire_remote (kernel/time/timer.c:2385 kernel/time/timer.c:2376 kernel/time/timer.c:2135)\n tmigr_handle_remote_up (kernel/time/timer_migration.c:944 kernel/time/timer_migration.c:1035)\n __walk_groups.isra.0 (kernel/time/timer_migration.c:533 (discriminator 1))\n tmigr_handle_remote (kernel/time/timer_migration.c:1096)\n handle_softirqs (./arch/x86/include/asm/jump_label.h:36 ./include/trace/events/irq.h:142 kernel/softirq.c:580)\n irq_exit_rcu (kernel/softirq.c:614 kernel/softirq.c:453 kernel/softirq.c:680 kernel/softirq.c:696)\n sysvec_apic_timer_interrupt (arch/x86/kernel/apic/apic.c:1050 (discriminator 35) arch/x86/kernel/apic/apic.c:1050 (discriminator 35))\n \u003c/IRQ\u003e",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-39955",
"url": "https://www.suse.com/security/cve/CVE-2025-39955"
},
{
"category": "external",
"summary": "SUSE Bug 1251804 for CVE-2025-39955",
"url": "https://bugzilla.suse.com/1251804"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 7 LTSS:bpftool-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-abi-whitelists-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-debug-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-debug-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-doc-0:3.10.0-1160.144.1.el7.noarch",
"SUSE Liberty Linux 7 LTSS:kernel-headers-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:kernel-tools-libs-devel-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:perf-0:3.10.0-1160.144.1.el7.x86_64",
"SUSE Liberty Linux 7 LTSS:python-perf-0:3.10.0-1160.144.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-12-22T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-39955"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…