RHSA-2025:12752
Vulnerability from csaf_opensuse - Published: 2025-08-04 00:00 - Updated: 2026-09-20 11:47Summary
security update for kernel
Severity
Important
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2025:12752.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2025:12752.
Patchnames: RHSA-2025:12752
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
6 (Medium)
Affected products
Recommended
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 8:bpftool-0:4.18.0-553.66.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-0:4.18.0-553.66.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.66.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.66.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.66.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.66.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.66.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.66.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.66.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.66.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.66.1.el8_10.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.66.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.66.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.66.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.66.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.66.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:perf-0:4.18.0-553.66.1.el8_10.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.66.1.el8_10.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-50020
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
20 products, the same list as for
CVE-2022-50020
Threats
Impact
important
Affected products
Recommended
20 products, the same list as for
CVE-2022-50020
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
20 products, the same list as for
CVE-2022-50020
Threats
Impact
moderate
Affected products
Recommended
20 products, the same list as for
CVE-2022-50020
Threats
Impact
important
References
28 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2025:12752.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2025:12752.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2025:12752",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2025_12752.json"
},
{
"category": "self",
"summary": "URL for RHSA-2025:12752",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-August/001879.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2025:12752",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-August/001879.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-50020 page",
"url": "https://www.suse.com/security/cve/CVE-2022-50020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-21928 page",
"url": "https://www.suse.com/security/cve/CVE-2025-21928/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-22020 page",
"url": "https://www.suse.com/security/cve/CVE-2025-22020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-37890 page",
"url": "https://www.suse.com/security/cve/CVE-2025-37890/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-38052 page",
"url": "https://www.suse.com/security/cve/CVE-2025-38052/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-38079 page",
"url": "https://www.suse.com/security/cve/CVE-2025-38079/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-20T11:47:29Z",
"generator": {
"date": "2025-08-04T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2025:12752",
"initial_release_date": "2025-08-04T00:00:00Z",
"revision_history": [
{
"date": "2025-08-04T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-20T11:47:29Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-0:4.18.0-553.66.1.el8_10.noarch",
"product": {
"name": "kernel-abi-stablelists-0:4.18.0-553.66.1.el8_10.noarch",
"product_id": "kernel-abi-stablelists-0:4.18.0-553.66.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@4.18.0-553.66.1.el8_10?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:4.18.0-553.66.1.el8_10.noarch",
"product": {
"name": "kernel-doc-0:4.18.0-553.66.1.el8_10.noarch",
"product_id": "kernel-doc-0:4.18.0-553.66.1.el8_10.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@4.18.0-553.66.1.el8_10?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:4.18.0-553.66.1.el8_10.x86_64",
"product": {
"name": "bpftool-0:4.18.0-553.66.1.el8_10.x86_64",
"product_id": "bpftool-0:4.18.0-553.66.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/bpftool@4.18.0-553.66.1.el8_10?arch=x86_64\u0026upstream=bpftool-0:4.18.0-553.66.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-0:4.18.0-553.66.1.el8_10.x86_64",
"product": {
"name": "kernel-0:4.18.0-553.66.1.el8_10.x86_64",
"product_id": "kernel-0:4.18.0-553.66.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@4.18.0-553.66.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-0:4.18.0-553.66.1.el8_10.x86_64",
"product": {
"name": "kernel-core-0:4.18.0-553.66.1.el8_10.x86_64",
"product_id": "kernel-core-0:4.18.0-553.66.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@4.18.0-553.66.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"product": {
"name": "kernel-cross-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"product_id": "kernel-cross-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@4.18.0-553.66.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:4.18.0-553.66.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-0:4.18.0-553.66.1.el8_10.x86_64",
"product_id": "kernel-debug-0:4.18.0-553.66.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@4.18.0-553.66.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-553.66.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-0:4.18.0-553.66.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-core-0:4.18.0-553.66.1.el8_10.x86_64",
"product_id": "kernel-debug-core-0:4.18.0-553.66.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@4.18.0-553.66.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"product_id": "kernel-debug-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@4.18.0-553.66.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-553.66.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@4.18.0-553.66.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"product": {
"name": "kernel-debug-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"product_id": "kernel-debug-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@4.18.0-553.66.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"product": {
"name": "kernel-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"product_id": "kernel-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@4.18.0-553.66.1.el8_10?arch=x86_64\u0026upstream=kernel-source-0:4.18.0-553.66.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"product": {
"name": "kernel-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"product_id": "kernel-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@4.18.0-553.66.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"product_id": "kernel-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@4.18.0-553.66.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"product": {
"name": "kernel-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"product_id": "kernel-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@4.18.0-553.66.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:4.18.0-553.66.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-0:4.18.0-553.66.1.el8_10.x86_64",
"product_id": "kernel-tools-0:4.18.0-553.66.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@4.18.0-553.66.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:4.18.0-553.66.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-0:4.18.0-553.66.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-0:4.18.0-553.66.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@4.18.0-553.66.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"product_id": "kernel-tools-libs-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@4.18.0-553.66.1.el8_10?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:4.18.0-553.66.1.el8_10.x86_64",
"product": {
"name": "perf-0:4.18.0-553.66.1.el8_10.x86_64",
"product_id": "perf-0:4.18.0-553.66.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@4.18.0-553.66.1.el8_10?arch=x86_64\u0026upstream=perf-0:4.18.0-553.66.1.el8_10.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-0:4.18.0-553.66.1.el8_10.x86_64",
"product": {
"name": "python3-perf-0:4.18.0-553.66.1.el8_10.x86_64",
"product_id": "python3-perf-0:4.18.0-553.66.1.el8_10.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@4.18.0-553.66.1.el8_10?arch=x86_64\u0026upstream=perf-0:4.18.0-553.66.1.el8_10.src.rpm"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 8",
"product": {
"name": "SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:8"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:4.18.0-553.66.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:bpftool-0:4.18.0-553.66.1.el8_10.x86_64"
},
"product_reference": "bpftool-0:4.18.0-553.66.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:4.18.0-553.66.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-0:4.18.0-553.66.1.el8_10.x86_64"
},
"product_reference": "kernel-0:4.18.0-553.66.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-0:4.18.0-553.66.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.66.1.el8_10.noarch"
},
"product_reference": "kernel-abi-stablelists-0:4.18.0-553.66.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-0:4.18.0-553.66.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.66.1.el8_10.x86_64"
},
"product_reference": "kernel-core-0:4.18.0-553.66.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-0:4.18.0-553.66.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.66.1.el8_10.x86_64"
},
"product_reference": "kernel-cross-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:4.18.0-553.66.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.66.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-0:4.18.0-553.66.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-0:4.18.0-553.66.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.66.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-core-0:4.18.0-553.66.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:4.18.0-553.66.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.66.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-0:4.18.0-553.66.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.66.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64"
},
"product_reference": "kernel-debug-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:4.18.0-553.66.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.66.1.el8_10.x86_64"
},
"product_reference": "kernel-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:4.18.0-553.66.1.el8_10.noarch as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.66.1.el8_10.noarch"
},
"product_reference": "kernel-doc-0:4.18.0-553.66.1.el8_10.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-0:4.18.0-553.66.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.66.1.el8_10.x86_64"
},
"product_reference": "kernel-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-0:4.18.0-553.66.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.66.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64"
},
"product_reference": "kernel-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:4.18.0-553.66.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.66.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-0:4.18.0-553.66.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:4.18.0-553.66.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.66.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-0:4.18.0-553.66.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:4.18.0-553.66.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.66.1.el8_10.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:4.18.0-553.66.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:perf-0:4.18.0-553.66.1.el8_10.x86_64"
},
"product_reference": "perf-0:4.18.0-553.66.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-0:4.18.0-553.66.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
"product_id": "SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.66.1.el8_10.x86_64"
},
"product_reference": "python3-perf-0:4.18.0-553.66.1.el8_10.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-50020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-50020"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: avoid resizing to a partial cluster size\n\nThis patch avoids an attempt to resize the filesystem to an\nunaligned cluster boundary. An online resize to a size that is not\nintegral to cluster size results in the last iteration attempting to\ngrow the fs by a negative amount, which trips a BUG_ON and leaves the fs\nwith a corrupted in-memory superblock.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.66.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-50020",
"url": "https://www.suse.com/security/cve/CVE-2022-50020"
},
{
"category": "external",
"summary": "SUSE Bug 1245129 for CVE-2022-50020",
"url": "https://bugzilla.suse.com/1245129"
},
{
"category": "external",
"summary": "SUSE Bug 1245130 for CVE-2022-50020",
"url": "https://bugzilla.suse.com/1245130"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.66.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.66.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-04T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2022-50020"
},
{
"cve": "CVE-2025-21928",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-21928"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()\n\nThe system can experience a random crash a few minutes after the driver is\nremoved. This issue occurs due to improper handling of memory freeing in\nthe ishtp_hid_remove() function.\n\nThe function currently frees the `driver_data` directly within the loop\nthat destroys the HID devices, which can lead to accessing freed memory.\nSpecifically, `hid_destroy_device()` uses `driver_data` when it calls\n`hid_ishtp_set_feature()` to power off the sensor, so freeing\n`driver_data` beforehand can result in accessing invalid memory.\n\nThis patch resolves the issue by storing the `driver_data` in a temporary\nvariable before calling `hid_destroy_device()`, and then freeing the\n`driver_data` after the device is destroyed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.66.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-21928",
"url": "https://www.suse.com/security/cve/CVE-2025-21928"
},
{
"category": "external",
"summary": "SUSE Bug 1240722 for CVE-2025-21928",
"url": "https://bugzilla.suse.com/1240722"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.66.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.66.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-04T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-21928"
},
{
"cve": "CVE-2025-22020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-22020"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmemstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove\n\nThis fixes the following crash:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in rtsx_usb_ms_poll_card+0x159/0x200 [rtsx_usb_ms]\nRead of size 8 at addr ffff888136335380 by task kworker/6:0/140241\n\nCPU: 6 UID: 0 PID: 140241 Comm: kworker/6:0 Kdump: loaded Tainted: G E 6.14.0-rc6+ #1\nTainted: [E]=UNSIGNED_MODULE\nHardware name: LENOVO 30FNA1V7CW/1057, BIOS S0EKT54A 07/01/2024\nWorkqueue: events rtsx_usb_ms_poll_card [rtsx_usb_ms]\nCall Trace:\n \u003cTASK\u003e\n dump_stack_lvl+0x51/0x70\n print_address_description.constprop.0+0x27/0x320\n ? rtsx_usb_ms_poll_card+0x159/0x200 [rtsx_usb_ms]\n print_report+0x3e/0x70\n kasan_report+0xab/0xe0\n ? rtsx_usb_ms_poll_card+0x159/0x200 [rtsx_usb_ms]\n rtsx_usb_ms_poll_card+0x159/0x200 [rtsx_usb_ms]\n ? __pfx_rtsx_usb_ms_poll_card+0x10/0x10 [rtsx_usb_ms]\n ? __pfx___schedule+0x10/0x10\n ? kick_pool+0x3b/0x270\n process_one_work+0x357/0x660\n worker_thread+0x390/0x4c0\n ? __pfx_worker_thread+0x10/0x10\n kthread+0x190/0x1d0\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x2d/0x50\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1a/0x30\n \u003c/TASK\u003e\n\nAllocated by task 161446:\n kasan_save_stack+0x20/0x40\n kasan_save_track+0x10/0x30\n __kasan_kmalloc+0x7b/0x90\n __kmalloc_noprof+0x1a7/0x470\n memstick_alloc_host+0x1f/0xe0 [memstick]\n rtsx_usb_ms_drv_probe+0x47/0x320 [rtsx_usb_ms]\n platform_probe+0x60/0xe0\n call_driver_probe+0x35/0x120\n really_probe+0x123/0x410\n __driver_probe_device+0xc7/0x1e0\n driver_probe_device+0x49/0xf0\n __device_attach_driver+0xc6/0x160\n bus_for_each_drv+0xe4/0x160\n __device_attach+0x13a/0x2b0\n bus_probe_device+0xbd/0xd0\n device_add+0x4a5/0x760\n platform_device_add+0x189/0x370\n mfd_add_device+0x587/0x5e0\n mfd_add_devices+0xb1/0x130\n rtsx_usb_probe+0x28e/0x2e0 [rtsx_usb]\n usb_probe_interface+0x15c/0x460\n call_driver_probe+0x35/0x120\n really_probe+0x123/0x410\n __driver_probe_device+0xc7/0x1e0\n driver_probe_device+0x49/0xf0\n __device_attach_driver+0xc6/0x160\n bus_for_each_drv+0xe4/0x160\n __device_attach+0x13a/0x2b0\n rebind_marked_interfaces.isra.0+0xcc/0x110\n usb_reset_device+0x352/0x410\n usbdev_do_ioctl+0xe5c/0x1860\n usbdev_ioctl+0xa/0x20\n __x64_sys_ioctl+0xc5/0xf0\n do_syscall_64+0x59/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nFreed by task 161506:\n kasan_save_stack+0x20/0x40\n kasan_save_track+0x10/0x30\n kasan_save_free_info+0x36/0x60\n __kasan_slab_free+0x34/0x50\n kfree+0x1fd/0x3b0\n device_release+0x56/0xf0\n kobject_cleanup+0x73/0x1c0\n rtsx_usb_ms_drv_remove+0x13d/0x220 [rtsx_usb_ms]\n platform_remove+0x2f/0x50\n device_release_driver_internal+0x24b/0x2e0\n bus_remove_device+0x124/0x1d0\n device_del+0x239/0x530\n platform_device_del.part.0+0x19/0xe0\n platform_device_unregister+0x1c/0x40\n mfd_remove_devices_fn+0x167/0x170\n device_for_each_child_reverse+0xc9/0x130\n mfd_remove_devices+0x6e/0xa0\n rtsx_usb_disconnect+0x2e/0xd0 [rtsx_usb]\n usb_unbind_interface+0xf3/0x3f0\n device_release_driver_internal+0x24b/0x2e0\n proc_disconnect_claim+0x13d/0x220\n usbdev_do_ioctl+0xb5e/0x1860\n usbdev_ioctl+0xa/0x20\n __x64_sys_ioctl+0xc5/0xf0\n do_syscall_64+0x59/0x170\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nLast potentially related work creation:\n kasan_save_stack+0x20/0x40\n kasan_record_aux_stack+0x85/0x90\n insert_work+0x29/0x100\n __queue_work+0x34a/0x540\n call_timer_fn+0x2a/0x160\n expire_timers+0x5f/0x1f0\n __run_timer_base.part.0+0x1b6/0x1e0\n run_timer_softirq+0x8b/0xe0\n handle_softirqs+0xf9/0x360\n __irq_exit_rcu+0x114/0x130\n sysvec_apic_timer_interrupt+0x72/0x90\n asm_sysvec_apic_timer_interrupt+0x16/0x20\n\nSecond to last potentially related work creation:\n kasan_save_stack+0x20/0x40\n kasan_record_aux_stack+0x85/0x90\n insert_work+0x29/0x100\n __queue_work+0x34a/0x540\n call_timer_fn+0x2a/0x160\n expire_timers+0x5f/0x1f0\n __run_timer_base.part.0+0x1b6/0x1e0\n run_timer_softirq+0x8b/0xe0\n handle_softirqs+0xf9/0x\n---truncated---",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.66.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-22020",
"url": "https://www.suse.com/security/cve/CVE-2025-22020"
},
{
"category": "external",
"summary": "SUSE Bug 1241280 for CVE-2025-22020",
"url": "https://bugzilla.suse.com/1241280"
},
{
"category": "external",
"summary": "SUSE Bug 1241281 for CVE-2025-22020",
"url": "https://bugzilla.suse.com/1241281"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.66.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.66.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-04T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2025-22020"
},
{
"cve": "CVE-2025-37890",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-37890"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc\n\nAs described in Gerrard\u0027s report [1], we have a UAF case when an hfsc class\nhas a netem child qdisc. The crux of the issue is that hfsc is assuming\nthat checking for cl-\u003eqdisc-\u003eq.qlen == 0 guarantees that it hasn\u0027t inserted\nthe class in the vttree or eltree (which is not true for the netem\nduplicate case).\n\nThis patch checks the n_active class variable to make sure that the code\nwon\u0027t insert the class in the vttree or eltree twice, catering for the\nreentrant case.\n\n[1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.66.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-37890",
"url": "https://www.suse.com/security/cve/CVE-2025-37890"
},
{
"category": "external",
"summary": "SUSE Bug 1243330 for CVE-2025-37890",
"url": "https://bugzilla.suse.com/1243330"
},
{
"category": "external",
"summary": "SUSE Bug 1245791 for CVE-2025-37890",
"url": "https://bugzilla.suse.com/1245791"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.66.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.66.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-04T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2025-37890"
},
{
"cve": "CVE-2025-38052",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-38052"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done\n\nSyzbot reported a slab-use-after-free with the following call trace:\n\n ==================================================================\n BUG: KASAN: slab-use-after-free in tipc_aead_encrypt_done+0x4bd/0x510 net/tipc/crypto.c:840\n Read of size 8 at addr ffff88807a733000 by task kworker/1:0/25\n\n Call Trace:\n kasan_report+0xd9/0x110 mm/kasan/report.c:601\n tipc_aead_encrypt_done+0x4bd/0x510 net/tipc/crypto.c:840\n crypto_request_complete include/crypto/algapi.h:266\n aead_request_complete include/crypto/internal/aead.h:85\n cryptd_aead_crypt+0x3b8/0x750 crypto/cryptd.c:772\n crypto_request_complete include/crypto/algapi.h:266\n cryptd_queue_worker+0x131/0x200 crypto/cryptd.c:181\n process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231\n\n Allocated by task 8355:\n kzalloc_noprof include/linux/slab.h:778\n tipc_crypto_start+0xcc/0x9e0 net/tipc/crypto.c:1466\n tipc_init_net+0x2dd/0x430 net/tipc/core.c:72\n ops_init+0xb9/0x650 net/core/net_namespace.c:139\n setup_net+0x435/0xb40 net/core/net_namespace.c:343\n copy_net_ns+0x2f0/0x670 net/core/net_namespace.c:508\n create_new_namespaces+0x3ea/0xb10 kernel/nsproxy.c:110\n unshare_nsproxy_namespaces+0xc0/0x1f0 kernel/nsproxy.c:228\n ksys_unshare+0x419/0x970 kernel/fork.c:3323\n __do_sys_unshare kernel/fork.c:3394\n\n Freed by task 63:\n kfree+0x12a/0x3b0 mm/slub.c:4557\n tipc_crypto_stop+0x23c/0x500 net/tipc/crypto.c:1539\n tipc_exit_net+0x8c/0x110 net/tipc/core.c:119\n ops_exit_list+0xb0/0x180 net/core/net_namespace.c:173\n cleanup_net+0x5b7/0xbf0 net/core/net_namespace.c:640\n process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231\n\nAfter freed the tipc_crypto tx by delete namespace, tipc_aead_encrypt_done\nmay still visit it in cryptd_queue_worker workqueue.\n\nI reproduce this issue by:\n ip netns add ns1\n ip link add veth1 type veth peer name veth2\n ip link set veth1 netns ns1\n ip netns exec ns1 tipc bearer enable media eth dev veth1\n ip netns exec ns1 tipc node set key this_is_a_master_key master\n ip netns exec ns1 tipc bearer disable media eth dev veth1\n ip netns del ns1\n\nThe key of reproduction is that, simd_aead_encrypt is interrupted, leading\nto crypto_simd_usable() return false. Thus, the cryptd_queue_worker is\ntriggered, and the tipc_crypto tx will be visited.\n\n tipc_disc_timeout\n tipc_bearer_xmit_skb\n tipc_crypto_xmit\n tipc_aead_encrypt\n crypto_aead_encrypt\n // encrypt()\n simd_aead_encrypt\n // crypto_simd_usable() is false\n child = \u0026ctx-\u003ecryptd_tfm-\u003ebase;\n\n simd_aead_encrypt\n crypto_aead_encrypt\n // encrypt()\n cryptd_aead_encrypt_enqueue\n cryptd_aead_enqueue\n cryptd_enqueue_request\n // trigger cryptd_queue_worker\n queue_work_on(smp_processor_id(), cryptd_wq, \u0026cpu_queue-\u003ework)\n\nFix this by holding net reference count before encrypt.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.66.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-38052",
"url": "https://www.suse.com/security/cve/CVE-2025-38052"
},
{
"category": "external",
"summary": "SUSE Bug 1244749 for CVE-2025-38052",
"url": "https://bugzilla.suse.com/1244749"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.66.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.66.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-04T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-38052"
},
{
"cve": "CVE-2025-38079",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-38079"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: algif_hash - fix double free in hash_accept\n\nIf accept(2) is called on socket type algif_hash with\nMSG_MORE flag set and crypto_ahash_import fails,\nsk2 is freed. However, it is also freed in af_alg_release,\nleading to slab-use-after-free error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.66.1.el8_10.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-38079",
"url": "https://www.suse.com/security/cve/CVE-2025-38079"
},
{
"category": "external",
"summary": "SUSE Bug 1245217 for CVE-2025-38079",
"url": "https://bugzilla.suse.com/1245217"
},
{
"category": "external",
"summary": "SUSE Bug 1245218 for CVE-2025-38079",
"url": "https://bugzilla.suse.com/1245218"
},
{
"category": "external",
"summary": "SUSE Bug 1253291 for CVE-2025-38079",
"url": "https://bugzilla.suse.com/1253291"
},
{
"category": "external",
"summary": "SUSE Bug 1253292 for CVE-2025-38079",
"url": "https://bugzilla.suse.com/1253292"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.66.1.el8_10.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 8:bpftool-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.66.1.el8_10.noarch",
"SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:perf-0:4.18.0-553.66.1.el8_10.x86_64",
"SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.66.1.el8_10.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2025-08-04T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2025-38079"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…