VDB
SUSE-SU-2025%3A4043-1
SUSE-SU-2025%3A4043-1
PUBLISHED
This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.83 fixes various security issues The following security issues were fixed: - CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249847). - CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1246019). - CVE-2025-38617: net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1249208). - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207). - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631). The following non security issue was fixed: - bsc#1249208: fix livepatching target module name (bsc#1252946)
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SUSE:Linux Enterprise Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_39 | 0, 0 |
| SUSE:Linux Enterprise Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_20 | 0, 0 |
Timeline
- Nov 11, 2025 CVE Published
- Feb 4, 2026 CVE Updated
References
- https://www.suse.com/support/update/announcement/2025/suse-su-20254043-1/ advisory
- https://bugzilla.suse.com/1246019 report
- https://bugzilla.suse.com/1248631 report
- https://bugzilla.suse.com/1249207 report
- https://bugzilla.suse.com/1249208 report
- https://bugzilla.suse.com/1249847 report
- https://bugzilla.suse.com/1252946 report
- https://www.suse.com/security/cve/CVE-2022-50252 url
- https://www.suse.com/security/cve/CVE-2024-53164 url
- https://www.suse.com/security/cve/CVE-2025-38617 url
- https://www.suse.com/security/cve/CVE-2025-38618 url
- https://www.suse.com/security/cve/CVE-2025-38664 url