RHSA-2026:2759
Vulnerability from csaf_opensuse - Published: 2026-02-16 00:00 - Updated: 2026-09-16 18:31Summary
security update for kernel
Severity
Moderate
Notes
Title of the patch: security update for kernel
Description of the patch: This security update provides a functional equivalent of RHSA-2026:2759.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:2759.
Patchnames: RHSA-2026:2759
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2025-37882
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2025-37882
Threats
Impact
moderate
5.1 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2025-37882
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2025-37882
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2025-37882
Threats
Impact
moderate
5.2 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2025-37882
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
29 products, the same list as for
CVE-2025-37882
Threats
Impact
moderate
References
28 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "security update for kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This security update provides a functional equivalent of RHSA-2026:2759.\nThe original Red Hat(R) advisory is available from the Red Hat web site at\nhttps://access.redhat.com/errata/RHSA-2026:2759.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "RHSA-2026:2759",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/rhsa-2026_2759.json"
},
{
"category": "self",
"summary": "URL for RHSA-2026:2759",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-March/002619.html"
},
{
"category": "self",
"summary": "E-Mail link for RHSA-2026:2759",
"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-March/002619.html"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-37882 page",
"url": "https://www.suse.com/security/cve/CVE-2025-37882/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-38349 page",
"url": "https://www.suse.com/security/cve/CVE-2025-38349/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-38730 page",
"url": "https://www.suse.com/security/cve/CVE-2025-38730/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-39760 page",
"url": "https://www.suse.com/security/cve/CVE-2025-39760/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-39933 page",
"url": "https://www.suse.com/security/cve/CVE-2025-39933/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-40269 page",
"url": "https://www.suse.com/security/cve/CVE-2025-40269/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-40271 page",
"url": "https://www.suse.com/security/cve/CVE-2025-40271/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-40304 page",
"url": "https://www.suse.com/security/cve/CVE-2025-40304/"
}
],
"title": "security update for kernel",
"tracking": {
"current_release_date": "2026-09-16T18:31:08Z",
"generator": {
"date": "2026-02-16T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "RHSA-2026:2759",
"initial_release_date": "2026-02-16T00:00:00Z",
"revision_history": [
{
"date": "2026-02-16T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T17:50:39Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T18:31:08Z",
"number": "3",
"summary": "unknown changes"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"product": {
"name": "kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"product_id": "kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-abi-stablelists@5.14.0-570.89.1.el9_6?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"product": {
"name": "kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"product_id": "kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-doc@5.14.0-570.89.1.el9_6?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "kernel-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "kernel-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel@5.14.0-570.89.1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-core@5.14.0-570.89.1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-cross-headers@5.14.0-570.89.1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug@5.14.0-570.89.1.el9_6?arch=x86_64\u0026upstream=kernel-debug-5.14.0-570.89.1.el9_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-core@5.14.0-570.89.1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-debug-devel@5.14.0-570.89.1.el9_6?arch=x86_64\u0026upstream=kernel-debug-5.14.0-570.89.1.el9_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-devel-matched@5.14.0-570.89.1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules@5.14.0-570.89.1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-core@5.14.0-570.89.1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-modules-extra@5.14.0-570.89.1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-debug-uki-virt@5.14.0-570.89.1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:o:linux:linux_kernel:5.14.0:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/kernel-devel@5.14.0-570.89.1.el9_6?arch=x86_64\u0026upstream=kernel-source-5.14.0-570.89.1.el9_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-devel-matched@5.14.0-570.89.1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-headers@5.14.0-570.89.1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules@5.14.0-570.89.1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-core@5.14.0-570.89.1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-modules-extra@5.14.0-570.89.1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools@5.14.0-570.89.1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs@5.14.0-570.89.1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-tools-libs-devel@5.14.0-570.89.1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-uki-virt@5.14.0-570.89.1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/kernel-uki-virt-addons@5.14.0-570.89.1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libperf-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "libperf-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "libperf-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libperf@5.14.0-570.89.1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "perf-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "perf-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/perf@5.14.0-570.89.1.el9_6?arch=x86_64\u0026upstream=perf-5.14.0-570.89.1.el9_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/python3-perf@5.14.0-570.89.1.el9_6?arch=x86_64\u0026upstream=perf-5.14.0-570.89.1.el9_6.src.rpm"
}
}
},
{
"category": "product_version",
"name": "rtla-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "rtla-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "rtla-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rtla@5.14.0-570.89.1.el9_6?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "rv-5.14.0-570.89.1.el9_6.x86_64",
"product": {
"name": "rv-5.14.0-570.89.1.el9_6.x86_64",
"product_id": "rv-5.14.0-570.89.1.el9_6.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/rv@5.14.0-570.89.1.el9_6?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Liberty Linux 9",
"product": {
"name": "SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sll:9"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "kernel-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch"
},
"product_reference": "kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-core-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-5.14.0-570.89.1.el9_6.noarch as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch"
},
"product_reference": "kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-headers-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libperf-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "libperf-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "perf-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-perf-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rtla-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "rtla-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rv-5.14.0-570.89.1.el9_6.x86_64 as component of SUSE Liberty Linux 9",
"product_id": "SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64"
},
"product_reference": "rv-5.14.0-570.89.1.el9_6.x86_64",
"relates_to_product_reference": "SUSE Liberty Linux 9"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-37882",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-37882"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: xhci: Fix isochronous Ring Underrun/Overrun event handling\n\nThe TRB pointer of these events points at enqueue at the time of error\noccurrence on xHCI 1.1+ HCs or it\u0027s NULL on older ones. By the time we\nare handling the event, a new TD may be queued at this ring position.\n\nI can trigger this race by rising interrupt moderation to increase IRQ\nhandling delay. Similar delay may occur naturally due to system load.\n\nIf this ever happens after a Missed Service Error, missed TDs will be\nskipped and the new TD processed as if it matched the event. It could\nbe given back prematurely, risking data loss or buffer UAF by the xHC.\n\nDon\u0027t complete TDs on xrun events and don\u0027t warn if queued TDs don\u0027t\nmatch the event\u0027s TRB pointer, which can be NULL or a link/no-op TRB.\nDon\u0027t warn if there are no queued TDs at all.\n\nNow that it\u0027s safe, also handle xrun events if the skip flag is clear.\nThis ensures completion of any TD stuck in \u0027error mid TD\u0027 state right\nbefore the xrun event, which could happen if a driver submits a finite\nnumber of URBs to a buggy HC and then an error occurs on the last TD.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-37882",
"url": "https://www.suse.com/security/cve/CVE-2025-37882"
},
{
"category": "external",
"summary": "SUSE Bug 1243234 for CVE-2025-37882",
"url": "https://bugzilla.suse.com/1243234"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.6,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-37882"
},
{
"cve": "CVE-2025-38349",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-38349"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\neventpoll: don\u0027t decrement ep refcount while still holding the ep mutex\n\nJann Horn points out that epoll is decrementing the ep refcount and then\ndoing a\n\n mutex_unlock(\u0026ep-\u003emtx);\n\nafterwards. That\u0027s very wrong, because it can lead to a use-after-free.\n\nThat pattern is actually fine for the very last reference, because the\ncode in question will delay the actual call to \"ep_free(ep)\" until after\nit has unlocked the mutex.\n\nBut it\u0027s wrong for the much subtler \"next to last\" case when somebody\n*else* may also be dropping their reference and free the ep while we\u0027re\nstill using the mutex.\n\nNote that this is true even if that other user is also using the same ep\nmutex: mutexes, unlike spinlocks, can not be used for object ownership,\neven if they guarantee mutual exclusion.\n\nA mutex \"unlock\" operation is not atomic, and as one user is still\naccessing the mutex as part of unlocking it, another user can come in\nand get the now released mutex and free the data structure while the\nfirst user is still cleaning up.\n\nSee our mutex documentation in Documentation/locking/mutex-design.rst,\nin particular the section [1] about semantics:\n\n\t\"mutex_unlock() may access the mutex structure even after it has\n\t internally released the lock already - so it\u0027s not safe for\n\t another context to acquire the mutex and assume that the\n\t mutex_unlock() context is not using the structure anymore\"\n\nSo if we drop our ep ref before the mutex unlock, but we weren\u0027t the\nlast one, we may then unlock the mutex, another user comes in, drops\n_their_ reference and releases the \u0027ep\u0027 as it now has no users - all\nwhile the mutex_unlock() is still accessing it.\n\nFix this by simply moving the ep refcount dropping to outside the mutex:\nthe refcount itself is atomic, and doesn\u0027t need mutex protection (that\u0027s\nthe whole _point_ of refcounts: unlike mutexes, they are inherently\nabout object lifetimes).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-38349",
"url": "https://www.suse.com/security/cve/CVE-2025-38349"
},
{
"category": "external",
"summary": "SUSE Bug 1246777 for CVE-2025-38349",
"url": "https://bugzilla.suse.com/1246777"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-38349"
},
{
"cve": "CVE-2025-38730",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-38730"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/net: commit partial buffers on retry\n\nRing provided buffers are potentially only valid within the single\nexecution context in which they were acquired. io_uring deals with this\nand invalidates them on retry. But on the networking side, if\nMSG_WAITALL is set, or if the socket is of the streaming type and too\nlittle was processed, then it will hang on to the buffer rather than\nrecycle or commit it. This is problematic for two reasons:\n\n1) If someone unregisters the provided buffer ring before a later retry,\n then the req-\u003ebuf_list will no longer be valid.\n\n2) If multiple sockers are using the same buffer group, then multiple\n receives can consume the same memory. This can cause data corruption\n in the application, as either receive could land in the same\n userspace buffer.\n\nFix this by disallowing partial retries from pinning a provided buffer\nacross multiple executions, if ring provided buffers are used.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-38730",
"url": "https://www.suse.com/security/cve/CVE-2025-38730"
},
{
"category": "external",
"summary": "SUSE Bug 1249172 for CVE-2025-38730",
"url": "https://bugzilla.suse.com/1249172"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-38730"
},
{
"cve": "CVE-2025-39760",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-39760"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: core: config: Prevent OOB read in SS endpoint companion parsing\n\nusb_parse_ss_endpoint_companion() checks descriptor type before length,\nenabling a potentially odd read outside of the buffer size.\n\nFix this up by checking the size first before looking at any of the\nfields in the descriptor.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-39760",
"url": "https://www.suse.com/security/cve/CVE-2025-39760"
},
{
"category": "external",
"summary": "SUSE Bug 1249598 for CVE-2025-39760",
"url": "https://bugzilla.suse.com/1249598"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-39760"
},
{
"cve": "CVE-2025-39933",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-39933"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: let recv_done verify data_offset, data_length and remaining_data_length\n\nThis is inspired by the related server fixes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-39933",
"url": "https://www.suse.com/security/cve/CVE-2025-39933"
},
{
"category": "external",
"summary": "SUSE Bug 1251172 for CVE-2025-39933",
"url": "https://bugzilla.suse.com/1251172"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-39933"
},
{
"cve": "CVE-2025-40269",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-40269"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Fix potential overflow of PCM transfer buffer\n\nThe PCM stream data in USB-audio driver is transferred over USB URB\npacket buffers, and each packet size is determined dynamically. The\npacket sizes are limited by some factors such as wMaxPacketSize USB\ndescriptor. OTOH, in the current code, the actually used packet sizes\nare determined only by the rate and the PPS, which may be bigger than\nthe size limit above. This results in a buffer overflow, as reported\nby syzbot.\n\nBasically when the limit is smaller than the calculated packet size,\nit implies that something is wrong, most likely a weird USB\ndescriptor. So the best option would be just to return an error at\nthe parameter setup time before doing any further operations.\n\nThis patch introduces such a sanity check, and returns -EINVAL when\nthe packet size is greater than maxpacksize. The comparison with\nep-\u003epacksize[1] alone should suffice since it\u0027s always equal or\ngreater than ep-\u003epacksize[0].",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-40269",
"url": "https://www.suse.com/security/cve/CVE-2025-40269"
},
{
"category": "external",
"summary": "SUSE Bug 1255035 for CVE-2025-40269",
"url": "https://bugzilla.suse.com/1255035"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-40269"
},
{
"cve": "CVE-2025-40271",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-40271"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs/proc: fix uaf in proc_readdir_de()\n\nPde is erased from subdir rbtree through rb_erase(), but not set the node\nto EMPTY, which may result in uaf access. We should use RB_CLEAR_NODE()\nset the erased node to EMPTY, then pde_subdir_next() will return NULL to\navoid uaf access.\n\nWe found an uaf issue while using stress-ng testing, need to run testcase\ngetdent and tun in the same time. The steps of the issue is as follows:\n\n1) use getdent to traverse dir /proc/pid/net/dev_snmp6/, and current\n pde is tun3;\n\n2) in the [time windows] unregister netdevice tun3 and tun2, and erase\n them from rbtree. erase tun3 first, and then erase tun2. the\n pde(tun2) will be released to slab;\n\n3) continue to getdent process, then pde_subdir_next() will return\n pde(tun2) which is released, it will case uaf access.\n\nCPU 0 | CPU 1\n-------------------------------------------------------------------------\ntraverse dir /proc/pid/net/dev_snmp6/ | unregister_netdevice(tun-\u003edev) //tun3 tun2\nsys_getdents64() |\n iterate_dir() |\n proc_readdir() |\n proc_readdir_de() | snmp6_unregister_dev()\n pde_get(de); | proc_remove()\n read_unlock(\u0026proc_subdir_lock); | remove_proc_subtree()\n | write_lock(\u0026proc_subdir_lock);\n [time window] | rb_erase(\u0026root-\u003esubdir_node, \u0026parent-\u003esubdir);\n | write_unlock(\u0026proc_subdir_lock);\n read_lock(\u0026proc_subdir_lock); |\n next = pde_subdir_next(de); |\n pde_put(de); |\n de = next; //UAF |\n\nrbtree of dev_snmp6\n |\n pde(tun3)\n / \\\n NULL pde(tun2)",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-40271",
"url": "https://www.suse.com/security/cve/CVE-2025-40271"
},
{
"category": "external",
"summary": "SUSE Bug 1255297 for CVE-2025-40271",
"url": "https://bugzilla.suse.com/1255297"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-40271"
},
{
"cve": "CVE-2025-40304",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-40304"
}
],
"notes": [
{
"category": "general",
"text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds\n\nAdd bounds checking to prevent writes past framebuffer boundaries when\nrendering text near screen edges. Return early if the Y position is off-screen\nand clip image height to screen boundary. Break from the rendering loop if the\nX position is off-screen. When clipping image width to fit the screen, update\nthe character count to match the clipped width to prevent buffer size\nmismatches.\n\nWithout the character count update, bit_putcs_aligned and bit_putcs_unaligned\nreceive mismatched parameters where the buffer is allocated for the clipped\nwidth but cnt reflects the original larger count, causing out-of-bounds writes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-40304",
"url": "https://www.suse.com/security/cve/CVE-2025-40304"
},
{
"category": "external",
"summary": "SUSE Bug 1255034 for CVE-2025-40304",
"url": "https://bugzilla.suse.com/1255034"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Liberty Linux 9:kernel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-doc-5.14.0-570.89.1.el9_6.noarch",
"SUSE Liberty Linux 9:kernel-headers-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-core-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:kernel-uki-virt-addons-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:libperf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:python3-perf-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rtla-5.14.0-570.89.1.el9_6.x86_64",
"SUSE Liberty Linux 9:rv-5.14.0-570.89.1.el9_6.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-02-16T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2025-40304"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…