RHSA-2025:19931

Vulnerability from csaf_opensuse - Published: 2025-11-10 00:00 - Updated: 2026-09-20 11:50
Summary
security update for kernel
Severity
Moderate
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2025:19931. The original Red Hat(R) advisory is available from the Red Hat web site at https://access.redhat.com/errata/RHSA-2025:19931.
Patchnames: RHSA-2025:19931
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Liberty Linux 8:bpftool-0:4.18.0-553.83.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-0:4.18.0-553.83.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.83.1.el8_10.noarch —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.83.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.83.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.83.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.83.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.83.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.83.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.83.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.83.1.el8_10.noarch —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.83.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.83.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.83.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.83.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.83.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:perf-0:4.18.0-553.83.1.el8_10.x86_64 —
Vendor Fix
Unresolved product id: SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.83.1.el8_10.x86_64 —
Vendor Fix
Threats
Impact important
Affected products
Recommended 20 products, the same list as for CVE-2022-50367
Threats
Impact moderate
Affected products
Recommended 20 products, the same list as for CVE-2022-50367
Threats
Impact moderate

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "security update for kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This security update provides a functional equivalent of RHSA-2025:19931.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2025:19931.\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "RHSA-2025:19931",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2025_19931.json"
      },
      {
        "category": "self",
        "summary": "URL for RHSA-2025:19931",
        "url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-November/002216.html"
      },
      {
        "category": "self",
        "summary": "E-Mail link for RHSA-2025:19931",
        "url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-November/002216.html"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-50367 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-50367/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-53178 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-53178/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-40300 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-40300/"
      }
    ],
    "title": "security update for kernel",
    "tracking": {
      "current_release_date": "2026-09-20T11:50:18Z",
      "generator": {
        "date": "2025-11-10T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "RHSA-2025:19931",
      "initial_release_date": "2025-11-10T00:00:00Z",
      "revision_history": [
        {
          "date": "2025-11-10T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T11:50:18Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-abi-stablelists-0:4.18.0-553.83.1.el8_10.noarch",
                "product": {
                  "name": "kernel-abi-stablelists-0:4.18.0-553.83.1.el8_10.noarch",
                  "product_id": "kernel-abi-stablelists-0:4.18.0-553.83.1.el8_10.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-abi-stablelists@4.18.0-553.83.1.el8_10?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-doc-0:4.18.0-553.83.1.el8_10.noarch",
                "product": {
                  "name": "kernel-doc-0:4.18.0-553.83.1.el8_10.noarch",
                  "product_id": "kernel-doc-0:4.18.0-553.83.1.el8_10.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-doc@4.18.0-553.83.1.el8_10?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bpftool-0:4.18.0-553.83.1.el8_10.x86_64",
                "product": {
                  "name": "bpftool-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_id": "bpftool-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/bpftool@4.18.0-553.83.1.el8_10?arch=x86_64\u0026upstream=bpftool-0:4.18.0-553.83.1.el8_10.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-0:4.18.0-553.83.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_id": "kernel-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel@4.18.0-553.83.1.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-core-0:4.18.0-553.83.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-core-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_id": "kernel-core-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-core@4.18.0-553.83.1.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-cross-headers-0:4.18.0-553.83.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-cross-headers-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_id": "kernel-cross-headers-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-cross-headers@4.18.0-553.83.1.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-0:4.18.0-553.83.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-debug-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_id": "kernel-debug-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-debug@4.18.0-553.83.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-553.83.1.el8_10.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-core-0:4.18.0-553.83.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-debug-core-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_id": "kernel-debug-core-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-debug-core@4.18.0-553.83.1.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-devel-0:4.18.0-553.83.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-debug-devel-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_id": "kernel-debug-devel-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-debug-devel@4.18.0-553.83.1.el8_10?arch=x86_64\u0026upstream=kernel-debug-0:4.18.0-553.83.1.el8_10.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-modules-0:4.18.0-553.83.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-debug-modules-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_id": "kernel-debug-modules-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-debug-modules@4.18.0-553.83.1.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-debug-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-debug-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_id": "kernel-debug-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-debug-modules-extra@4.18.0-553.83.1.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-devel-0:4.18.0-553.83.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-devel-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_id": "kernel-devel-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:linux:linux_kernel:4.18.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/kernel-devel@4.18.0-553.83.1.el8_10?arch=x86_64\u0026upstream=kernel-source-0:4.18.0-553.83.1.el8_10.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-headers-0:4.18.0-553.83.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-headers-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_id": "kernel-headers-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-headers@4.18.0-553.83.1.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-modules-0:4.18.0-553.83.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-modules-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_id": "kernel-modules-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-modules@4.18.0-553.83.1.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_id": "kernel-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-modules-extra@4.18.0-553.83.1.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-0:4.18.0-553.83.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-tools-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_id": "kernel-tools-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools@4.18.0-553.83.1.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-0:4.18.0-553.83.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-tools-libs-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_id": "kernel-tools-libs-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools-libs@4.18.0-553.83.1.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "kernel-tools-libs-devel-0:4.18.0-553.83.1.el8_10.x86_64",
                "product": {
                  "name": "kernel-tools-libs-devel-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_id": "kernel-tools-libs-devel-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/kernel-tools-libs-devel@4.18.0-553.83.1.el8_10?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perf-0:4.18.0-553.83.1.el8_10.x86_64",
                "product": {
                  "name": "perf-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_id": "perf-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/perf@4.18.0-553.83.1.el8_10?arch=x86_64\u0026upstream=perf-0:4.18.0-553.83.1.el8_10.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-perf-0:4.18.0-553.83.1.el8_10.x86_64",
                "product": {
                  "name": "python3-perf-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_id": "python3-perf-0:4.18.0-553.83.1.el8_10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/python3-perf@4.18.0-553.83.1.el8_10?arch=x86_64\u0026upstream=perf-0:4.18.0-553.83.1.el8_10.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Liberty Linux 8",
                "product": {
                  "name": "SUSE Liberty Linux 8",
                  "product_id": "SUSE Liberty Linux 8",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sll:8"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bpftool-0:4.18.0-553.83.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:bpftool-0:4.18.0-553.83.1.el8_10.x86_64"
        },
        "product_reference": "bpftool-0:4.18.0-553.83.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-0:4.18.0-553.83.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-0:4.18.0-553.83.1.el8_10.x86_64"
        },
        "product_reference": "kernel-0:4.18.0-553.83.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-abi-stablelists-0:4.18.0-553.83.1.el8_10.noarch as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.83.1.el8_10.noarch"
        },
        "product_reference": "kernel-abi-stablelists-0:4.18.0-553.83.1.el8_10.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-core-0:4.18.0-553.83.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.83.1.el8_10.x86_64"
        },
        "product_reference": "kernel-core-0:4.18.0-553.83.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-cross-headers-0:4.18.0-553.83.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.83.1.el8_10.x86_64"
        },
        "product_reference": "kernel-cross-headers-0:4.18.0-553.83.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-0:4.18.0-553.83.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.83.1.el8_10.x86_64"
        },
        "product_reference": "kernel-debug-0:4.18.0-553.83.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-core-0:4.18.0-553.83.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.83.1.el8_10.x86_64"
        },
        "product_reference": "kernel-debug-core-0:4.18.0-553.83.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-devel-0:4.18.0-553.83.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.83.1.el8_10.x86_64"
        },
        "product_reference": "kernel-debug-devel-0:4.18.0-553.83.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-modules-0:4.18.0-553.83.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.83.1.el8_10.x86_64"
        },
        "product_reference": "kernel-debug-modules-0:4.18.0-553.83.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-debug-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64"
        },
        "product_reference": "kernel-debug-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-0:4.18.0-553.83.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.83.1.el8_10.x86_64"
        },
        "product_reference": "kernel-devel-0:4.18.0-553.83.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-doc-0:4.18.0-553.83.1.el8_10.noarch as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.83.1.el8_10.noarch"
        },
        "product_reference": "kernel-doc-0:4.18.0-553.83.1.el8_10.noarch",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-headers-0:4.18.0-553.83.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.83.1.el8_10.x86_64"
        },
        "product_reference": "kernel-headers-0:4.18.0-553.83.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-modules-0:4.18.0-553.83.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.83.1.el8_10.x86_64"
        },
        "product_reference": "kernel-modules-0:4.18.0-553.83.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64"
        },
        "product_reference": "kernel-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-0:4.18.0-553.83.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.83.1.el8_10.x86_64"
        },
        "product_reference": "kernel-tools-0:4.18.0-553.83.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-0:4.18.0-553.83.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.83.1.el8_10.x86_64"
        },
        "product_reference": "kernel-tools-libs-0:4.18.0-553.83.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-tools-libs-devel-0:4.18.0-553.83.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.83.1.el8_10.x86_64"
        },
        "product_reference": "kernel-tools-libs-devel-0:4.18.0-553.83.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perf-0:4.18.0-553.83.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:perf-0:4.18.0-553.83.1.el8_10.x86_64"
        },
        "product_reference": "perf-0:4.18.0-553.83.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-perf-0:4.18.0-553.83.1.el8_10.x86_64 as component of SUSE Liberty Linux 8",
          "product_id": "SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.83.1.el8_10.x86_64"
        },
        "product_reference": "python3-perf-0:4.18.0-553.83.1.el8_10.x86_64",
        "relates_to_product_reference": "SUSE Liberty Linux 8"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-50367",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-50367"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs: fix UAF/GPF bug in nilfs_mdt_destroy\n\nIn alloc_inode, inode_init_always() could return -ENOMEM if\nsecurity_inode_alloc() fails, which causes inode-\u003ei_private\nuninitialized. Then nilfs_is_metadata_file_inode() returns\ntrue and nilfs_free_inode() wrongly calls nilfs_mdt_destroy(),\nwhich frees the uninitialized inode-\u003ei_private\nand leads to crashes(e.g., UAF/GPF).\n\nFix this by moving security_inode_alloc just prior to\nthis_cpu_inc(nr_inodes)",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.83.1.el8_10.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.83.1.el8_10.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.83.1.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-50367",
          "url": "https://www.suse.com/security/cve/CVE-2022-50367"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1247374 for CVE-2022-50367",
          "url": "https://bugzilla.suse.com/1247374"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1250277 for CVE-2022-50367",
          "url": "https://bugzilla.suse.com/1250277"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1253291 for CVE-2022-50367",
          "url": "https://bugzilla.suse.com/1253291"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1253292 for CVE-2022-50367",
          "url": "https://bugzilla.suse.com/1253292"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.83.1.el8_10.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.83.1.el8_10.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.83.1.el8_10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.83.1.el8_10.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.83.1.el8_10.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.83.1.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-10T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-50367"
    },
    {
      "cve": "CVE-2023-53178",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-53178"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: fix zswap writeback race condition\n\nThe zswap writeback mechanism can cause a race condition resulting in\nmemory corruption, where a swapped out page gets swapped in with data that\nwas written to a different page.\n\nThe race unfolds like this:\n1. a page with data A and swap offset X is stored in zswap\n2. page A is removed off the LRU by zpool driver for writeback in\n   zswap-shrink work, data for A is mapped by zpool driver\n3. user space program faults and invalidates page entry A, offset X is\n   considered free\n4. kswapd stores page B at offset X in zswap (zswap could also be\n   full, if so, page B would then be IOed to X, then skip step 5.)\n5. entry A is replaced by B in tree-\u003erbroot, this doesn\u0027t affect the\n   local reference held by zswap-shrink work\n6. zswap-shrink work writes back A at X, and frees zswap entry A\n7. swapin of slot X brings A in memory instead of B\n\nThe fix:\nOnce the swap page cache has been allocated (case ZSWAP_SWAPCACHE_NEW),\nzswap-shrink work just checks that the local zswap_entry reference is\nstill the same as the one in the tree.  If it\u0027s not the same it means that\nit\u0027s either been invalidated or replaced, in both cases the writeback is\naborted because the local entry contains stale data.\n\nReproducer:\nI originally found this by running `stress` overnight to validate my work\non the zswap writeback mechanism, it manifested after hours on my test\nmachine.  The key to make it happen is having zswap writebacks, so\nwhatever setup pumps /sys/kernel/debug/zswap/written_back_pages should do\nthe trick.\n\nIn order to reproduce this faster on a vm, I setup a system with ~100M of\navailable memory and a 500M swap file, then running `stress --vm 1\n--vm-bytes 300000000 --vm-stride 4000` makes it happen in matter of tens\nof minutes.  One can speed things up even more by swinging\n/sys/module/zswap/parameters/max_pool_percent up and down between, say, 20\nand 1; this makes it reproduce in tens of seconds.  It\u0027s crucial to set\n`--vm-stride` to something other than 4096 otherwise `stress` won\u0027t\nrealize that memory has been corrupted because all pages would have the\nsame data.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.83.1.el8_10.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.83.1.el8_10.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.83.1.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-53178",
          "url": "https://www.suse.com/security/cve/CVE-2023-53178"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1249827 for CVE-2023-53178",
          "url": "https://bugzilla.suse.com/1249827"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.83.1.el8_10.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.83.1.el8_10.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.83.1.el8_10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.83.1.el8_10.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.83.1.el8_10.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.83.1.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-10T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2023-53178"
    },
    {
      "cve": "CVE-2025-40300",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-40300"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/vmscape: Add conditional IBPB mitigation\n\nVMSCAPE is a vulnerability that exploits insufficient branch predictor\nisolation between a guest and a userspace hypervisor (like QEMU). Existing\nmitigations already protect kernel/KVM from a malicious guest. Userspace\ncan additionally be protected by flushing the branch predictors after a\nVMexit.\n\nSince it is the userspace that consumes the poisoned branch predictors,\nconditionally issue an IBPB after a VMexit and before returning to\nuserspace. Workloads that frequently switch between hypervisor and\nuserspace will incur the most overhead from the new IBPB.\n\nThis new IBPB is not integrated with the existing IBPB sites. For\ninstance, a task can use the existing speculation control prctl() to\nget an IBPB at context switch time. With this implementation, the\nIBPB is doubled up: one at context switch and another before running\nuserspace.\n\nThe intent is to integrate and optimize these cases post-embargo.\n\n[ dhansen: elaborate on suboptimal IBPB solution ]",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Liberty Linux 8:bpftool-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.83.1.el8_10.noarch",
          "SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.83.1.el8_10.noarch",
          "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:perf-0:4.18.0-553.83.1.el8_10.x86_64",
          "SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.83.1.el8_10.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-40300",
          "url": "https://www.suse.com/security/cve/CVE-2025-40300"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1249561 for CVE-2025-40300",
          "url": "https://bugzilla.suse.com/1249561"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.83.1.el8_10.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.83.1.el8_10.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.83.1.el8_10.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Liberty Linux 8:bpftool-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-abi-stablelists-0:4.18.0-553.83.1.el8_10.noarch",
            "SUSE Liberty Linux 8:kernel-core-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-cross-headers-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-core-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-devel-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-debug-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-devel-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-doc-0:4.18.0-553.83.1.el8_10.noarch",
            "SUSE Liberty Linux 8:kernel-headers-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-modules-extra-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:kernel-tools-libs-devel-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:perf-0:4.18.0-553.83.1.el8_10.x86_64",
            "SUSE Liberty Linux 8:python3-perf-0:4.18.0-553.83.1.el8_10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-11-10T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-40300"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…