1242353 – (CVE-2022-49788) VUL-0: CVE-2022-49788: kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()

Bug 1242353 (CVE-2022-49788) - VUL-0: CVE-2022-49788: kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()

Summary: VUL-0: CVE-2022-49788: kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do...

Status:	NEW

Alias:	CVE-2022-49788

Product:	SUSE Security Incidents
Classification:	Novell Products
Component:	Incidents (show other bugs)
Version:	unspecified
Hardware:	Other Other

Priority:	P3 - Medium Severity: Normal
Target Milestone:	---
Assignee:	Security Team bot
QA Contact:	Security Team bot

URL:	https://smash.suse.de/issue/452965/
Whiteboard:	CVSSv3.1:SUSE:CVE-2022-49788:3.3:(AV:...
Keywords:

Depends on:
Blocks:

Clone This Bug

Reported:	2025-05-05 14:39 UTC by SMASH SMASH
Modified:	2026-05-12 09:53 UTC (History)
CC List:	2 users (show)

See Also:
Found By:	Security Response Team
Services Priority:
Business Priority:
Blocker:	---
Marketing QA Status:	---
IT Deployment:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description SMASH SMASH 2025-05-05 14:39:01 UTC

In the Linux kernel, the following vulnerability has been resolved:

misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()

`struct vmci_event_qp` allocated by qp_notify_peer() contains padding,
which may carry uninitialized data to the userspace, as observed by
KMSAN:

  BUG: KMSAN: kernel-infoleak in instrument_copy_to_user ./include/linux/instrumented.h:121
   instrument_copy_to_user ./include/linux/instrumented.h:121
   _copy_to_user+0x5f/0xb0 lib/usercopy.c:33
   copy_to_user ./include/linux/uaccess.h:169
   vmci_host_do_receive_datagram drivers/misc/vmw_vmci/vmci_host.c:431
   vmci_host_unlocked_ioctl+0x33d/0x43d0 drivers/misc/vmw_vmci/vmci_host.c:925
   vfs_ioctl fs/ioctl.c:51
  ...

  Uninit was stored to memory at:
   kmemdup+0x74/0xb0 mm/util.c:131
   dg_dispatch_as_host drivers/misc/vmw_vmci/vmci_datagram.c:271
   vmci_datagram_dispatch+0x4f8/0xfc0 drivers/misc/vmw_vmci/vmci_datagram.c:339
   qp_notify_peer+0x19a/0x290 drivers/misc/vmw_vmci/vmci_queue_pair.c:1479
   qp_broker_attach drivers/misc/vmw_vmci/vmci_queue_pair.c:1662
   qp_broker_alloc+0x2977/0x2f30 drivers/misc/vmw_vmci/vmci_queue_pair.c:1750
   vmci_qp_broker_alloc+0x96/0xd0 drivers/misc/vmw_vmci/vmci_queue_pair.c:1940
   vmci_host_do_alloc_queuepair drivers/misc/vmw_vmci/vmci_host.c:488
   vmci_host_unlocked_ioctl+0x24fd/0x43d0 drivers/misc/vmw_vmci/vmci_host.c:927
  ...

  Local variable ev created at:
   qp_notify_peer+0x54/0x290 drivers/misc/vmw_vmci/vmci_queue_pair.c:1456
   qp_broker_attach drivers/misc/vmw_vmci/vmci_queue_pair.c:1662
   qp_broker_alloc+0x2977/0x2f30 drivers/misc/vmw_vmci/vmci_queue_pair.c:1750

  Bytes 28-31 of 48 are uninitialized
  Memory access of size 48 starts at ffff888035155e00
  Data copied to user address 0000000020000100

Use memset() to prevent the infoleaks.

Also speculatively fix qp_notify_peer_local(), which may suffer from the
same problem.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-49788
https://www.cve.org/CVERecord?id=CVE-2022-49788
https://git.kernel.org/stable/c/5a275528025ae4bc7e2232866856dfebf84b2fad
https://git.kernel.org/stable/c/62634b43d3c4e1bf62fd540196f7081bf0885c0a
https://git.kernel.org/stable/c/76c50d77b928a33e5290aaa9fdc10e88254ff8c7
https://git.kernel.org/stable/c/7ccf7229b96fadc3a185d1391f814a604c7ef609
https://git.kernel.org/stable/c/8e2f33c598370bcf828bab4d667d1d38bcd3c57d
https://git.kernel.org/stable/c/e5b0d06d9b10f5f43101bd6598b076c347f9295f
https://git.kernel.org/stable/c/e7061dd1fef2dfb6458cd521aef27aa66f510d31
https://git.kernel.org/stable/c/f04586c2315cfd03d72ad0395705435e7ed07b1a
https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2022/CVE-2022-49788.mbox
https://bugzilla.redhat.com/show_bug.cgi?id=2363378

Comment 11 Maintenance Automation 2025-06-12 08:38:48 UTC

SUSE-SU-2025:01918-1: An update that solves 157 vulnerabilities and has 26 security fixes can now be installed.

URL: https://www.suse.com/support/update/announcement/2025/suse-su-202501918-1
Category: security (important)
Bug References: 1184350, 1193629, 1204569, 1204619, 1204705, 1205282, 1206051, 1206073, 1206649, 1206886, 1206887, 1208542, 1209292, 1209556, 1209684, 1210337, 1210763, 1210767, 1211465, 1213012, 1213013, 1213094, 1213096, 1213946, 1214991, 1218470, 1232649, 1234887, 1235100, 1237981, 1238032, 1240177, 1240802, 1241525, 1241526, 1241640, 1241648, 1242147, 1242150, 1242151, 1242154, 1242157, 1242158, 1242164, 1242165, 1242169, 1242215, 1242218, 1242219, 1242222, 1242226, 1242227, 1242228, 1242229, 1242230, 1242231, 1242232, 1242237, 1242239, 1242241, 1242244, 1242245, 1242248, 1242261, 1242264, 1242265, 1242270, 1242276, 1242279, 1242280, 1242281, 1242282, 1242284, 1242285, 1242289, 1242294, 1242305, 1242312, 1242320, 1242338, 1242352, 1242353, 1242355, 1242357, 1242358, 1242361, 1242365, 1242366, 1242369, 1242370, 1242371, 1242372, 1242377, 1242378, 1242380, 1242382, 1242385, 1242387, 1242389, 1242391, 1242392, 1242394, 1242398, 1242399, 1242402, 1242403, 1242409, 1242411, 1242415, 1242416, 1242421, 1242422, 1242426, 1242428, 1242440, 1242443, 1242449, 1242452, 1242453, 1242454, 1242455, 1242456, 1242458, 1242464, 1242467, 1242469, 1242473, 1242478, 1242481, 1242484, 1242489, 1242493, 1242497, 1242527, 1242542, 1242544, 1242545, 1242547, 1242548, 1242549, 1242550, 1242551, 1242558, 1242570, 1242580, 1242586, 1242589, 1242596, 1242597, 1242685, 1242686, 1242688, 1242689, 1242695, 1242716, 1242733, 1242734, 1242735, 1242736, 1242739, 1242743, 1242744, 1242745, 1242746, 1242747, 1242749, 1242752, 1242753, 1242756, 1242759, 1242762, 1242765, 1242767, 1242778, 1242779, 1242790, 1242791, 1243047, 1243133, 1243649, 1243660, 1243737, 1243919
CVE References: CVE-2022-3564, CVE-2022-3619, CVE-2022-3640, CVE-2022-49110, CVE-2022-49139, CVE-2022-49767, CVE-2022-49769, CVE-2022-49770, CVE-2022-49771, CVE-2022-49772, CVE-2022-49775, CVE-2022-49776, CVE-2022-49777, CVE-2022-49779, CVE-2022-49783, CVE-2022-49787, CVE-2022-49788, CVE-2022-49789, CVE-2022-49790, CVE-2022-49792, CVE-2022-49793, CVE-2022-49794, CVE-2022-49796, CVE-2022-49797, CVE-2022-49799, CVE-2022-49800, CVE-2022-49801, CVE-2022-49802, CVE-2022-49807, CVE-2022-49809, CVE-2022-49810, CVE-2022-49812, CVE-2022-49813, CVE-2022-49818, CVE-2022-49821, CVE-2022-49822, CVE-2022-49823, CVE-2022-49824, CVE-2022-49825, CVE-2022-49826, CVE-2022-49827, CVE-2022-49830, CVE-2022-49832, CVE-2022-49834, CVE-2022-49835, CVE-2022-49836, CVE-2022-49839, CVE-2022-49841, CVE-2022-49842, CVE-2022-49845, CVE-2022-49846, CVE-2022-49850, CVE-2022-49853, CVE-2022-49858, CVE-2022-49860, CVE-2022-49861, CVE-2022-49863, CVE-2022-49864, CVE-2022-49865, CVE-2022-49868, CVE-2022-49869, CVE-2022-49870, CVE-2022-49871, CVE-2022-49874, CVE-2022-49879, CVE-2022-49880, CVE-2022-49881, CVE-2022-49885, CVE-2022-49887, CVE-2022-49888, CVE-2022-49889, CVE-2022-49890, CVE-2022-49891, CVE-2022-49892, CVE-2022-49900, CVE-2022-49905, CVE-2022-49906, CVE-2022-49908, CVE-2022-49909, CVE-2022-49910, CVE-2022-49915, CVE-2022-49916, CVE-2022-49922, CVE-2022-49923, CVE-2022-49924, CVE-2022-49925, CVE-2022-49927, CVE-2022-49928, CVE-2022-49931, CVE-2023-1990, CVE-2023-53035, CVE-2023-53038, CVE-2023-53039, CVE-2023-53040, CVE-2023-53041, CVE-2023-53044, CVE-2023-53045, CVE-2023-53049, CVE-2023-53051, CVE-2023-53052, CVE-2023-53054, CVE-2023-53056, CVE-2023-53058, CVE-2023-53059, CVE-2023-53060, CVE-2023-53062, CVE-2023-53064, CVE-2023-53065, CVE-2023-53066, CVE-2023-53068, CVE-2023-53075, CVE-2023-53077, CVE-2023-53078, CVE-2023-53079, CVE-2023-53081, CVE-2023-53084, CVE-2023-53087, CVE-2023-53089, CVE-2023-53090, CVE-2023-53091, CVE-2023-53092, CVE-2023-53093, CVE-2023-53096, CVE-2023-53098, CVE-2023-53099, CVE-2023-53100, CVE-2023-53101, CVE-2023-53106, CVE-2023-53108, CVE-2023-53111, CVE-2023-53114, CVE-2023-53116, CVE-2023-53118, CVE-2023-53119, CVE-2023-53123, CVE-2023-53124, CVE-2023-53125, CVE-2023-53131, CVE-2023-53134, CVE-2023-53137, CVE-2023-53139, CVE-2023-53140, CVE-2023-53142, CVE-2023-53143, CVE-2023-53145, CVE-2024-53168, CVE-2024-56558, CVE-2025-21888, CVE-2025-21999, CVE-2025-22056, CVE-2025-22060, CVE-2025-23138, CVE-2025-23145, CVE-2025-37785, CVE-2025-37789, CVE-2025-37948, CVE-2025-37963
Maintenance Incident: [SUSE:Maintenance:39146](https://smelt.suse.de/incident/39146/)
Sources used:
SUSE Linux Enterprise Micro for Rancher 5.3 (src):
 kernel-source-rt-5.14.21-150400.15.121.1
SUSE Linux Enterprise Micro 5.3 (src):
 kernel-source-rt-5.14.21-150400.15.121.1
SUSE Linux Enterprise Micro for Rancher 5.4 (src):
 kernel-source-rt-5.14.21-150400.15.121.1
SUSE Linux Enterprise Micro 5.4 (src):
 kernel-source-rt-5.14.21-150400.15.121.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.

Comment 12 Maintenance Automation 2025-06-16 17:02:00 UTC

SUSE-SU-2025:01966-1: An update that solves 178 vulnerabilities and has 36 security fixes can now be installed.

URL: https://www.suse.com/support/update/announcement/2025/suse-su-202501966-1
Category: security (important)
Bug References: 1184350, 1193629, 1204562, 1204569, 1204619, 1204705, 1205282, 1206051, 1206073, 1206649, 1206843, 1206886, 1206887, 1207361, 1208105, 1208542, 1209292, 1209556, 1209684, 1209780, 1209980, 1210337, 1210763, 1210767, 1211465, 1213012, 1213013, 1213094, 1213096, 1213233, 1213946, 1214991, 1218470, 1222629, 1223096, 1225903, 1232649, 1234395, 1234887, 1235100, 1235870, 1240802, 1241525, 1242146, 1242147, 1242150, 1242151, 1242154, 1242157, 1242158, 1242160, 1242164, 1242165, 1242169, 1242215, 1242217, 1242218, 1242219, 1242222, 1242224, 1242226, 1242227, 1242228, 1242229, 1242230, 1242231, 1242232, 1242237, 1242239, 1242240, 1242241, 1242244, 1242245, 1242248, 1242249, 1242261, 1242264, 1242265, 1242270, 1242276, 1242278, 1242279, 1242280, 1242281, 1242282, 1242285, 1242286, 1242289, 1242294, 1242295, 1242298, 1242302, 1242305, 1242311, 1242312, 1242320, 1242338, 1242349, 1242351, 1242352, 1242353, 1242355, 1242357, 1242358, 1242359, 1242360, 1242361, 1242365, 1242366, 1242369, 1242370, 1242371, 1242372, 1242377, 1242378, 1242380, 1242381, 1242382, 1242385, 1242387, 1242389, 1242391, 1242392, 1242393, 1242394, 1242398, 1242399, 1242400, 1242402, 1242403, 1242405, 1242406, 1242409, 1242410, 1242411, 1242415, 1242416, 1242421, 1242422, 1242425, 1242426, 1242428, 1242440, 1242443, 1242448, 1242449, 1242452, 1242453, 1242454, 1242455, 1242456, 1242458, 1242464, 1242465, 1242467, 1242469, 1242473, 1242474, 1242478, 1242481, 1242484, 1242489, 1242497, 1242527, 1242542, 1242544, 1242545, 1242547, 1242548, 1242549, 1242550, 1242551, 1242558, 1242570, 1242580, 1242586, 1242589, 1242596, 1242597, 1242685, 1242686, 1242688, 1242689, 1242695, 1242716, 1242733, 1242734, 1242735, 1242736, 1242739, 1242740, 1242743, 1242744, 1242745, 1242746, 1242747, 1242748, 1242749, 1242751, 1242752, 1242753, 1242756, 1242759, 1242762, 1242765, 1242767, 1242778, 1242779, 1242790, 1242791, 1243047, 1243133, 1243737, 1243919
CVE References: CVE-2022-3564, CVE-2022-3619, CVE-2022-3640, CVE-2022-49762, CVE-2022-49763, CVE-2022-49769, CVE-2022-49770, CVE-2022-49771, CVE-2022-49772, CVE-2022-49773, CVE-2022-49775, CVE-2022-49776, CVE-2022-49777, CVE-2022-49779, CVE-2022-49781, CVE-2022-49783, CVE-2022-49784, CVE-2022-49786, CVE-2022-49787, CVE-2022-49788, CVE-2022-49789, CVE-2022-49790, CVE-2022-49792, CVE-2022-49793, CVE-2022-49794, CVE-2022-49795, CVE-2022-49796, CVE-2022-49797, CVE-2022-49799, CVE-2022-49800, CVE-2022-49801, CVE-2022-49802, CVE-2022-49807, CVE-2022-49809, CVE-2022-49810, CVE-2022-49812, CVE-2022-49813, CVE-2022-49818, CVE-2022-49821, CVE-2022-49822, CVE-2022-49823, CVE-2022-49824, CVE-2022-49825, CVE-2022-49826, CVE-2022-49827, CVE-2022-49830, CVE-2022-49832, CVE-2022-49834, CVE-2022-49835, CVE-2022-49836, CVE-2022-49837, CVE-2022-49839, CVE-2022-49841, CVE-2022-49842, CVE-2022-49845, CVE-2022-49846, CVE-2022-49850, CVE-2022-49853, CVE-2022-49858, CVE-2022-49860, CVE-2022-49861, CVE-2022-49863, CVE-2022-49864, CVE-2022-49865, CVE-2022-49868, CVE-2022-49869, CVE-2022-49870, CVE-2022-49871, CVE-2022-49874, CVE-2022-49879, CVE-2022-49880, CVE-2022-49881, CVE-2022-49885, CVE-2022-49886, CVE-2022-49887, CVE-2022-49888, CVE-2022-49889, CVE-2022-49890, CVE-2022-49891, CVE-2022-49892, CVE-2022-49900, CVE-2022-49901, CVE-2022-49902, CVE-2022-49905, CVE-2022-49906, CVE-2022-49908, CVE-2022-49909, CVE-2022-49910, CVE-2022-49915, CVE-2022-49916, CVE-2022-49917, CVE-2022-49918, CVE-2022-49921, CVE-2022-49922, CVE-2022-49923, CVE-2022-49924, CVE-2022-49925, CVE-2022-49927, CVE-2022-49928, CVE-2022-49929, CVE-2022-49931, CVE-2023-1990, CVE-2023-28866, CVE-2023-53035, CVE-2023-53036, CVE-2023-53038, CVE-2023-53039, CVE-2023-53040, CVE-2023-53041, CVE-2023-53042, CVE-2023-53044, CVE-2023-53045, CVE-2023-53049, CVE-2023-53052, CVE-2023-53054, CVE-2023-53056, CVE-2023-53057, CVE-2023-53058, CVE-2023-53059, CVE-2023-53060, CVE-2023-53062, CVE-2023-53064, CVE-2023-53065, CVE-2023-53066, CVE-2023-53068, CVE-2023-53070, CVE-2023-53071, CVE-2023-53073, CVE-2023-53074, CVE-2023-53075, CVE-2023-53077, CVE-2023-53078, CVE-2023-53079, CVE-2023-53081, CVE-2023-53082, CVE-2023-53084, CVE-2023-53087, CVE-2023-53089, CVE-2023-53090, CVE-2023-53091, CVE-2023-53092, CVE-2023-53093, CVE-2023-53095, CVE-2023-53096, CVE-2023-53098, CVE-2023-53099, CVE-2023-53100, CVE-2023-53101, CVE-2023-53102, CVE-2023-53105, CVE-2023-53106, CVE-2023-53108, CVE-2023-53109, CVE-2023-53111, CVE-2023-53112, CVE-2023-53114, CVE-2023-53116, CVE-2023-53118, CVE-2023-53119, CVE-2023-53123, CVE-2023-53124, CVE-2023-53125, CVE-2023-53128, CVE-2023-53131, CVE-2023-53134, CVE-2023-53137, CVE-2023-53139, CVE-2023-53140, CVE-2023-53142, CVE-2023-53143, CVE-2023-53145, CVE-2024-26804, CVE-2024-53168, CVE-2024-56558, CVE-2025-21999, CVE-2025-22056, CVE-2025-23145, CVE-2025-37789
Maintenance Incident: [SUSE:Maintenance:39147](https://smelt.suse.de/incident/39147/)
Sources used:
openSUSE Leap 15.5 (src):
 kernel-source-rt-5.14.21-150500.13.97.1, kernel-syms-rt-5.14.21-150500.13.97.1
SUSE Linux Enterprise Micro 5.5 (src):
 kernel-source-rt-5.14.21-150500.13.97.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.

Comment 13 Maintenance Automation 2025-06-17 16:31:32 UTC

SUSE-SU-2025:01983-1: An update that solves 169 vulnerabilities and has 15 security fixes can now be installed.

URL: https://www.suse.com/support/update/announcement/2025/suse-su-202501983-1
Category: security (important)
Bug References: 1184350, 1190317, 1190601, 1194227, 1206073, 1206649, 1206677, 1206887, 1209292, 1209556, 1209684, 1210336, 1210337, 1211466, 1213012, 1213013, 1218752, 1222004, 1222563, 1222629, 1223720, 1225044, 1229516, 1230434, 1230786, 1230794, 1232504, 1232649, 1232882, 1234887, 1235485, 1235632, 1236142, 1237312, 1237571, 1238019, 1238032, 1238071, 1238109, 1238130, 1238162, 1238263, 1238284, 1238289, 1238306, 1238311, 1238331, 1238333, 1238338, 1238394, 1238411, 1238420, 1238473, 1238539, 1238546, 1238646, 1238774, 1238806, 1238815, 1238818, 1238868, 1238871, 1238887, 1238892, 1239060, 1239111, 1240254, 1240261, 1240266, 1240293, 1240297, 1240322, 1240784, 1241282, 1241332, 1241351, 1241357, 1241361, 1241369, 1241407, 1241441, 1241526, 1241550, 1241657, 1242147, 1242154, 1242165, 1242215, 1242218, 1242219, 1242225, 1242227, 1242228, 1242231, 1242239, 1242241, 1242245, 1242248, 1242284, 1242285, 1242287, 1242288, 1242352, 1242353, 1242361, 1242362, 1242366, 1242370, 1242371, 1242372, 1242377, 1242378, 1242382, 1242385, 1242394, 1242398, 1242405, 1242408, 1242409, 1242414, 1242416, 1242417, 1242422, 1242426, 1242427, 1242440, 1242447, 1242449, 1242450, 1242452, 1242453, 1242455, 1242464, 1242470, 1242472, 1242478, 1242483, 1242484, 1242497, 1242504, 1242513, 1242527, 1242542, 1242544, 1242549, 1242558, 1242566, 1242570, 1242580, 1242594, 1242686, 1242688, 1242691, 1242716, 1242727, 1242734, 1242745, 1242747, 1242755, 1242756, 1242759, 1242762, 1242765, 1242770, 1242778, 1242786, 1242790, 1242791, 1242792, 1242835, 1242859, 1242868, 1242924, 1242949, 1243047, 1243074, 1243077, 1243511, 1243541, 1243543, 1243627, 1243649, 1243660, 1243919
CVE References: CVE-2020-36791, CVE-2021-20320, CVE-2021-4159, CVE-2021-47170, CVE-2021-47670, CVE-2022-3564, CVE-2022-48875, CVE-2022-49139, CVE-2022-49145, CVE-2022-49168, CVE-2022-49190, CVE-2022-49212, CVE-2022-49216, CVE-2022-49235, CVE-2022-49248, CVE-2022-49253, CVE-2022-49320, CVE-2022-49326, CVE-2022-49371, CVE-2022-49382, CVE-2022-49396, CVE-2022-49420, CVE-2022-49441, CVE-2022-49445, CVE-2022-49460, CVE-2022-49467, CVE-2022-49474, CVE-2022-49491, CVE-2022-49503, CVE-2022-49592, CVE-2022-49625, CVE-2022-49635, CVE-2022-49652, CVE-2022-49715, CVE-2022-49728, CVE-2022-49729, CVE-2022-49751, CVE-2022-49761, CVE-2022-49769, CVE-2022-49771, CVE-2022-49772, CVE-2022-49775, CVE-2022-49776, CVE-2022-49787, CVE-2022-49788, CVE-2022-49789, CVE-2022-49813, CVE-2022-49818, CVE-2022-49821, CVE-2022-49822, CVE-2022-49826, CVE-2022-49829, CVE-2022-49832, CVE-2022-49835, CVE-2022-49840, CVE-2022-49842, CVE-2022-49846, CVE-2022-49853, CVE-2022-49861, CVE-2022-49862, CVE-2022-49865, CVE-2022-49871, CVE-2022-49872, CVE-2022-49874, CVE-2022-49877, CVE-2022-49880, CVE-2022-49889, CVE-2022-49892, CVE-2022-49898, CVE-2022-49906, CVE-2022-49907, CVE-2022-49909, CVE-2022-49910, CVE-2022-49913, CVE-2022-49914, CVE-2022-49915, CVE-2022-49922, CVE-2022-49923, CVE-2022-49924, CVE-2022-49925, CVE-2022-49927, CVE-2022-49931, CVE-2023-1074, CVE-2023-1989, CVE-2023-1990, CVE-2023-52868, CVE-2023-52975, CVE-2023-52988, CVE-2023-52989, CVE-2023-52993, CVE-2023-53039, CVE-2023-53041, CVE-2023-53044, CVE-2023-53045, CVE-2023-53051, CVE-2023-53056, CVE-2023-53060, CVE-2023-53062, CVE-2023-53066, CVE-2023-53068, CVE-2023-53075, CVE-2023-53078, CVE-2023-53079, CVE-2023-53080, CVE-2023-53094, CVE-2023-53100, CVE-2023-53101, CVE-2023-53103, CVE-2023-53106, CVE-2023-53108, CVE-2023-53109, CVE-2023-53114, CVE-2023-53119, CVE-2023-53121, CVE-2023-53124, CVE-2023-53125, CVE-2023-53131, CVE-2023-53139, CVE-2023-53140, CVE-2023-53141, CVE-2023-53145, CVE-2024-26740, CVE-2024-26804, CVE-2024-27010, CVE-2024-45021, CVE-2024-46751, CVE-2024-46752, CVE-2024-50106, CVE-2024-53168, CVE-2024-56633, CVE-2024-56779, CVE-2025-21648, CVE-2025-21702, CVE-2025-21704, CVE-2025-21787, CVE-2025-21814, CVE-2025-21969, CVE-2025-22021, CVE-2025-22025, CVE-2025-22027, CVE-2025-22050, CVE-2025-22058, CVE-2025-22060, CVE-2025-22063, CVE-2025-22104, CVE-2025-23136, CVE-2025-23150, CVE-2025-23161, CVE-2025-37749, CVE-2025-37752, CVE-2025-37780, CVE-2025-37782, CVE-2025-37789, CVE-2025-37794, CVE-2025-37796, CVE-2025-37797, CVE-2025-37798, CVE-2025-37823, CVE-2025-37833, CVE-2025-37852, CVE-2025-37871, CVE-2025-37879, CVE-2025-37932, CVE-2025-37948, CVE-2025-37949, CVE-2025-37953, CVE-2025-37963, CVE-2025-37989, CVE-2025-38637
Maintenance Incident: [SUSE:Maintenance:38992](https://smelt.suse.de/incident/38992/)
Sources used:
SUSE Linux Enterprise Server 12 SP5 LTSS (src):
 kernel-syms-4.12.14-122.261.1, kernel-source-4.12.14-122.261.1
SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (src):
 kernel-syms-4.12.14-122.261.1, kernel-source-4.12.14-122.261.1
SUSE Linux Enterprise Live Patching 12-SP5 (src):
 kgraft-patch-SLE12-SP5_Update_69-1-8.3.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.

Comment 14 Maintenance Automation 2025-06-17 16:33:13 UTC

SUSE-SU-2025:01982-1: An update that solves 65 vulnerabilities and has 19 security fixes can now be installed.

URL: https://www.suse.com/support/update/announcement/2025/suse-su-202501982-1
Category: security (important)
Bug References: 1154353, 1170891, 1173139, 1184350, 1184611, 1185010, 1190358, 1190428, 1201644, 1201664, 1201672, 1201673, 1201676, 1206073, 1206649, 1206886, 1206887, 1207198, 1210337, 1213476, 1232649, 1234887, 1235100, 1235568, 1237981, 1238032, 1238394, 1238471, 1240802, 1241362, 1241593, 1241637, 1242145, 1242147, 1242150, 1242154, 1242215, 1242232, 1242245, 1242264, 1242270, 1242352, 1242353, 1242355, 1242366, 1242378, 1242385, 1242387, 1242391, 1242392, 1242402, 1242409, 1242416, 1242440, 1242443, 1242449, 1242452, 1242455, 1242464, 1242473, 1242481, 1242484, 1242493, 1242527, 1242542, 1242545, 1242547, 1242548, 1242549, 1242551, 1242580, 1242597, 1242686, 1242689, 1242716, 1242733, 1242734, 1242736, 1242745, 1242749, 1242762, 1242835, 1242963, 1243919
CVE References: CVE-2020-36790, CVE-2020-36791, CVE-2021-32399, CVE-2022-3564, CVE-2022-49110, CVE-2022-49139, CVE-2022-49320, CVE-2022-49767, CVE-2022-49769, CVE-2022-49770, CVE-2022-49771, CVE-2022-49772, CVE-2022-49775, CVE-2022-49777, CVE-2022-49787, CVE-2022-49788, CVE-2022-49789, CVE-2022-49790, CVE-2022-49793, CVE-2022-49794, CVE-2022-49799, CVE-2022-49802, CVE-2022-49809, CVE-2022-49818, CVE-2022-49821, CVE-2022-49823, CVE-2022-49824, CVE-2022-49825, CVE-2022-49826, CVE-2022-49827, CVE-2022-49830, CVE-2022-49832, CVE-2022-49835, CVE-2022-49836, CVE-2022-49839, CVE-2022-49841, CVE-2022-49842, CVE-2022-49846, CVE-2022-49861, CVE-2022-49870, CVE-2022-49879, CVE-2022-49880, CVE-2022-49881, CVE-2022-49887, CVE-2022-49889, CVE-2022-49892, CVE-2022-49906, CVE-2022-49910, CVE-2022-49915, CVE-2022-49922, CVE-2022-49927, CVE-2023-1990, CVE-2023-53039, CVE-2023-53052, CVE-2023-53106, CVE-2024-53168, CVE-2024-56558, CVE-2024-56705, CVE-2025-21812, CVE-2025-21999, CVE-2025-22028, CVE-2025-22121, CVE-2025-37789, CVE-2025-37846, CVE-2025-40364
Maintenance Incident: [SUSE:Maintenance:39045](https://smelt.suse.de/incident/39045/)
Sources used:
openSUSE Leap 15.3 (src):
 kernel-syms-5.3.18-150300.59.207.1, kernel-default-base-5.3.18-150300.59.207.1.150300.18.124.1, kernel-obs-build-5.3.18-150300.59.207.1, kernel-livepatch-SLE15-SP3_Update_58-1-150300.7.3.1, kernel-source-5.3.18-150300.59.207.1, kernel-obs-qa-5.3.18-150300.59.207.1
SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (src):
 kernel-syms-5.3.18-150300.59.207.1, kernel-source-5.3.18-150300.59.207.1, kernel-default-base-5.3.18-150300.59.207.1.150300.18.124.1, kernel-obs-build-5.3.18-150300.59.207.1
SUSE Linux Enterprise Server 15 SP3 LTSS (src):
 kernel-syms-5.3.18-150300.59.207.1, kernel-source-5.3.18-150300.59.207.1, kernel-default-base-5.3.18-150300.59.207.1.150300.18.124.1, kernel-obs-build-5.3.18-150300.59.207.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3 (src):
 kernel-syms-5.3.18-150300.59.207.1, kernel-source-5.3.18-150300.59.207.1, kernel-default-base-5.3.18-150300.59.207.1.150300.18.124.1, kernel-obs-build-5.3.18-150300.59.207.1
SUSE Enterprise Storage 7.1 (src):
 kernel-syms-5.3.18-150300.59.207.1, kernel-source-5.3.18-150300.59.207.1, kernel-default-base-5.3.18-150300.59.207.1.150300.18.124.1, kernel-obs-build-5.3.18-150300.59.207.1
SUSE Linux Enterprise Micro 5.1 (src):
 kernel-default-base-5.3.18-150300.59.207.1.150300.18.124.1
SUSE Linux Enterprise Micro 5.2 (src):
 kernel-default-base-5.3.18-150300.59.207.1.150300.18.124.1
SUSE Linux Enterprise Micro for Rancher 5.2 (src):
 kernel-default-base-5.3.18-150300.59.207.1.150300.18.124.1
SUSE Linux Enterprise Live Patching 15-SP3 (src):
 kernel-livepatch-SLE15-SP3_Update_58-1-150300.7.3.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.

Comment 15 Maintenance Automation 2025-06-18 12:34:15 UTC

SUSE-SU-2025:01995-1: An update that solves 89 vulnerabilities and has 22 security fixes can now be installed.

URL: https://www.suse.com/support/update/announcement/2025/suse-su-202501995-1
Category: security (important)
Bug References: 1154353, 1156395, 1170891, 1173139, 1184350, 1184611, 1185010, 1188772, 1189883, 1190358, 1190428, 1201644, 1201664, 1201672, 1201673, 1201676, 1206073, 1206649, 1206886, 1206887, 1207198, 1209657, 1210337, 1213476, 1214842, 1216702, 1220754, 1220985, 1221015, 1221044, 1223932, 1224099, 1224482, 1224511, 1224592, 1224831, 1224832, 1224834, 1224841, 1224843, 1224846, 1224849, 1224854, 1224859, 1224882, 1224889, 1224891, 1224892, 1224893, 1224904, 1225360, 1225411, 1231193, 1232649, 1234887, 1235100, 1237981, 1238032, 1238471, 1240802, 1242145, 1242147, 1242150, 1242154, 1242215, 1242232, 1242245, 1242264, 1242270, 1242352, 1242353, 1242355, 1242366, 1242378, 1242385, 1242387, 1242391, 1242392, 1242402, 1242409, 1242416, 1242440, 1242443, 1242449, 1242452, 1242455, 1242464, 1242473, 1242481, 1242484, 1242493, 1242527, 1242542, 1242545, 1242547, 1242548, 1242549, 1242551, 1242580, 1242597, 1242686, 1242689, 1242716, 1242733, 1242734, 1242736, 1242745, 1242749, 1242762, 1242835, 1243919
CVE References: CVE-2020-36790, CVE-2020-36791, CVE-2021-32399, CVE-2021-3743, CVE-2021-47100, CVE-2021-47220, CVE-2021-47229, CVE-2021-47231, CVE-2021-47236, CVE-2021-47239, CVE-2021-47240, CVE-2021-47246, CVE-2021-47252, CVE-2021-47255, CVE-2021-47260, CVE-2021-47288, CVE-2021-47296, CVE-2021-47314, CVE-2021-47315, CVE-2021-47485, CVE-2021-47500, CVE-2021-47511, CVE-2022-3564, CVE-2022-48704, CVE-2022-49110, CVE-2022-49139, CVE-2022-49767, CVE-2022-49769, CVE-2022-49770, CVE-2022-49771, CVE-2022-49772, CVE-2022-49775, CVE-2022-49777, CVE-2022-49787, CVE-2022-49788, CVE-2022-49789, CVE-2022-49790, CVE-2022-49793, CVE-2022-49794, CVE-2022-49799, CVE-2022-49802, CVE-2022-49809, CVE-2022-49818, CVE-2022-49821, CVE-2022-49823, CVE-2022-49824, CVE-2022-49825, CVE-2022-49826, CVE-2022-49827, CVE-2022-49830, CVE-2022-49832, CVE-2022-49835, CVE-2022-49836, CVE-2022-49839, CVE-2022-49841, CVE-2022-49842, CVE-2022-49846, CVE-2022-49861, CVE-2022-49870, CVE-2022-49879, CVE-2022-49880, CVE-2022-49881, CVE-2022-49887, CVE-2022-49889, CVE-2022-49892, CVE-2022-49906, CVE-2022-49910, CVE-2022-49915, CVE-2022-49922, CVE-2022-49927, CVE-2023-0160, CVE-2023-1990, CVE-2023-47233, CVE-2023-52508, CVE-2023-52591, CVE-2023-52654, CVE-2023-53039, CVE-2023-53052, CVE-2023-53106, CVE-2023-6531, CVE-2024-35811, CVE-2024-35895, CVE-2024-35914, CVE-2024-46814, CVE-2024-53168, CVE-2024-56558, CVE-2025-21812, CVE-2025-21999, CVE-2025-37789
Maintenance Incident: [SUSE:Maintenance:39148](https://smelt.suse.de/incident/39148/)
Sources used:
SUSE Linux Enterprise Micro 5.1 (src):
 kernel-source-rt-5.3.18-150300.211.1
SUSE Linux Enterprise Micro 5.2 (src):
 kernel-source-rt-5.3.18-150300.211.1
SUSE Linux Enterprise Micro for Rancher 5.2 (src):
 kernel-source-rt-5.3.18-150300.211.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.

Comment 18 Maintenance Automation 2025-06-30 16:31:55 UTC

SUSE-SU-2025:02173-1: An update that solves 180 vulnerabilities and has 44 security fixes can now be installed.

URL: https://www.suse.com/support/update/announcement/2025/suse-su-202502173-1
Category: security (important)
Bug References: 1184350, 1193629, 1204562, 1204569, 1204619, 1204705, 1205282, 1206051, 1206073, 1206649, 1206843, 1206886, 1206887, 1207361, 1208105, 1208542, 1209292, 1209556, 1209684, 1209780, 1209980, 1210337, 1210763, 1210767, 1211465, 1213012, 1213013, 1213094, 1213096, 1213233, 1213946, 1214991, 1218470, 1222629, 1223096, 1225903, 1228659, 1231293, 1232649, 1234395, 1234454, 1234887, 1235100, 1235870, 1238303, 1238570, 1239986, 1240785, 1240802, 1241038, 1241525, 1241640, 1242006, 1242146, 1242147, 1242150, 1242151, 1242154, 1242157, 1242158, 1242160, 1242164, 1242165, 1242169, 1242215, 1242217, 1242218, 1242219, 1242222, 1242224, 1242226, 1242227, 1242228, 1242229, 1242230, 1242231, 1242232, 1242237, 1242239, 1242240, 1242241, 1242244, 1242245, 1242248, 1242249, 1242261, 1242264, 1242265, 1242270, 1242276, 1242278, 1242279, 1242280, 1242281, 1242282, 1242285, 1242286, 1242289, 1242294, 1242295, 1242298, 1242302, 1242305, 1242311, 1242312, 1242320, 1242338, 1242349, 1242351, 1242352, 1242353, 1242355, 1242357, 1242358, 1242359, 1242360, 1242361, 1242365, 1242366, 1242369, 1242370, 1242371, 1242372, 1242377, 1242378, 1242380, 1242381, 1242382, 1242385, 1242387, 1242389, 1242391, 1242392, 1242393, 1242394, 1242398, 1242399, 1242400, 1242402, 1242403, 1242405, 1242406, 1242409, 1242410, 1242411, 1242415, 1242416, 1242421, 1242422, 1242425, 1242426, 1242428, 1242440, 1242443, 1242448, 1242449, 1242452, 1242453, 1242454, 1242455, 1242456, 1242458, 1242464, 1242465, 1242467, 1242469, 1242473, 1242474, 1242478, 1242481, 1242484, 1242489, 1242497, 1242527, 1242542, 1242544, 1242545, 1242547, 1242548, 1242549, 1242550, 1242551, 1242558, 1242570, 1242580, 1242586, 1242589, 1242596, 1242597, 1242685, 1242686, 1242688, 1242689, 1242695, 1242716, 1242733, 1242734, 1242735, 1242736, 1242739, 1242740, 1242743, 1242744, 1242745, 1242746, 1242747, 1242748, 1242749, 1242751, 1242752, 1242753, 1242756, 1242759, 1242762, 1242765, 1242767, 1242778, 1242779, 1242790, 1242791, 1243047, 1243133, 1243737, 1243919
CVE References: CVE-2022-3564, CVE-2022-3619, CVE-2022-3640, CVE-2022-49762, CVE-2022-49763, CVE-2022-49769, CVE-2022-49770, CVE-2022-49771, CVE-2022-49772, CVE-2022-49773, CVE-2022-49775, CVE-2022-49776, CVE-2022-49777, CVE-2022-49779, CVE-2022-49781, CVE-2022-49783, CVE-2022-49784, CVE-2022-49786, CVE-2022-49787, CVE-2022-49788, CVE-2022-49789, CVE-2022-49790, CVE-2022-49792, CVE-2022-49793, CVE-2022-49794, CVE-2022-49795, CVE-2022-49796, CVE-2022-49797, CVE-2022-49799, CVE-2022-49800, CVE-2022-49801, CVE-2022-49802, CVE-2022-49807, CVE-2022-49809, CVE-2022-49810, CVE-2022-49812, CVE-2022-49813, CVE-2022-49818, CVE-2022-49821, CVE-2022-49822, CVE-2022-49823, CVE-2022-49824, CVE-2022-49825, CVE-2022-49826, CVE-2022-49827, CVE-2022-49830, CVE-2022-49832, CVE-2022-49834, CVE-2022-49835, CVE-2022-49836, CVE-2022-49837, CVE-2022-49839, CVE-2022-49841, CVE-2022-49842, CVE-2022-49845, CVE-2022-49846, CVE-2022-49850, CVE-2022-49853, CVE-2022-49858, CVE-2022-49860, CVE-2022-49861, CVE-2022-49863, CVE-2022-49864, CVE-2022-49865, CVE-2022-49868, CVE-2022-49869, CVE-2022-49870, CVE-2022-49871, CVE-2022-49874, CVE-2022-49879, CVE-2022-49880, CVE-2022-49881, CVE-2022-49885, CVE-2022-49886, CVE-2022-49887, CVE-2022-49888, CVE-2022-49889, CVE-2022-49890, CVE-2022-49891, CVE-2022-49892, CVE-2022-49900, CVE-2022-49901, CVE-2022-49902, CVE-2022-49905, CVE-2022-49906, CVE-2022-49908, CVE-2022-49909, CVE-2022-49910, CVE-2022-49915, CVE-2022-49916, CVE-2022-49917, CVE-2022-49918, CVE-2022-49921, CVE-2022-49922, CVE-2022-49923, CVE-2022-49924, CVE-2022-49925, CVE-2022-49927, CVE-2022-49928, CVE-2022-49929, CVE-2022-49931, CVE-2023-1990, CVE-2023-28866, CVE-2023-53035, CVE-2023-53036, CVE-2023-53038, CVE-2023-53039, CVE-2023-53040, CVE-2023-53041, CVE-2023-53042, CVE-2023-53044, CVE-2023-53045, CVE-2023-53049, CVE-2023-53052, CVE-2023-53054, CVE-2023-53056, CVE-2023-53057, CVE-2023-53058, CVE-2023-53059, CVE-2023-53060, CVE-2023-53062, CVE-2023-53064, CVE-2023-53065, CVE-2023-53066, CVE-2023-53068, CVE-2023-53070, CVE-2023-53071, CVE-2023-53073, CVE-2023-53074, CVE-2023-53075, CVE-2023-53077, CVE-2023-53078, CVE-2023-53079, CVE-2023-53081, CVE-2023-53082, CVE-2023-53084, CVE-2023-53087, CVE-2023-53089, CVE-2023-53090, CVE-2023-53091, CVE-2023-53092, CVE-2023-53093, CVE-2023-53095, CVE-2023-53096, CVE-2023-53098, CVE-2023-53099, CVE-2023-53100, CVE-2023-53101, CVE-2023-53102, CVE-2023-53105, CVE-2023-53106, CVE-2023-53108, CVE-2023-53109, CVE-2023-53111, CVE-2023-53112, CVE-2023-53114, CVE-2023-53116, CVE-2023-53118, CVE-2023-53119, CVE-2023-53123, CVE-2023-53124, CVE-2023-53125, CVE-2023-53128, CVE-2023-53131, CVE-2023-53134, CVE-2023-53137, CVE-2023-53139, CVE-2023-53140, CVE-2023-53142, CVE-2023-53143, CVE-2023-53145, CVE-2024-26804, CVE-2024-28956, CVE-2024-53168, CVE-2024-56558, CVE-2025-21999, CVE-2025-22056, CVE-2025-23145, CVE-2025-37785, CVE-2025-37789
Maintenance Incident: [SUSE:Maintenance:39046](https://smelt.suse.de/incident/39046/)
Sources used:
openSUSE Leap 15.5 (src):
 kernel-livepatch-SLE15-SP5_Update_27-1-150500.11.7.1, kernel-obs-qa-5.14.21-150500.55.110.1, kernel-default-base-5.14.21-150500.55.110.1.150500.6.51.3, kernel-source-5.14.21-150500.55.110.1, kernel-obs-build-5.14.21-150500.55.110.1, kernel-syms-5.14.21-150500.55.110.1
SUSE Linux Enterprise Micro 5.5 (src):
 kernel-source-5.14.21-150500.55.110.1, kernel-default-base-5.14.21-150500.55.110.1.150500.6.51.3
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (src):
 kernel-source-5.14.21-150500.55.110.1, kernel-syms-5.14.21-150500.55.110.1, kernel-obs-build-5.14.21-150500.55.110.1, kernel-default-base-5.14.21-150500.55.110.1.150500.6.51.3
SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (src):
 kernel-source-5.14.21-150500.55.110.1, kernel-syms-5.14.21-150500.55.110.1, kernel-obs-build-5.14.21-150500.55.110.1, kernel-default-base-5.14.21-150500.55.110.1.150500.6.51.3
SUSE Linux Enterprise Server 15 SP5 LTSS (src):
 kernel-source-5.14.21-150500.55.110.1, kernel-syms-5.14.21-150500.55.110.1, kernel-obs-build-5.14.21-150500.55.110.1, kernel-default-base-5.14.21-150500.55.110.1.150500.6.51.3
SUSE Linux Enterprise Server for SAP Applications 15 SP5 (src):
 kernel-source-5.14.21-150500.55.110.1, kernel-syms-5.14.21-150500.55.110.1, kernel-obs-build-5.14.21-150500.55.110.1, kernel-default-base-5.14.21-150500.55.110.1.150500.6.51.3
SUSE Linux Enterprise Live Patching 15-SP5 (src):
 kernel-livepatch-SLE15-SP5_Update_27-1-150500.11.7.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.

Comment 19 Maintenance Automation 2025-07-10 08:31:21 UTC

SUSE-SU-2025:02262-1: An update that solves 157 vulnerabilities, contains one feature and has 26 security fixes can now be installed.

URL: https://www.suse.com/support/update/announcement/2025/suse-su-202502262-1
Category: security (important)
Bug References: 1184350, 1193629, 1204569, 1204619, 1204705, 1205282, 1206051, 1206073, 1206649, 1206886, 1206887, 1208542, 1209292, 1209556, 1209684, 1210337, 1210763, 1210767, 1211465, 1213012, 1213013, 1213094, 1213096, 1213946, 1214991, 1218470, 1232649, 1234887, 1235100, 1237981, 1238032, 1240177, 1240802, 1241525, 1241526, 1241640, 1241648, 1242147, 1242150, 1242151, 1242154, 1242157, 1242158, 1242164, 1242165, 1242169, 1242215, 1242218, 1242219, 1242222, 1242226, 1242227, 1242228, 1242229, 1242230, 1242231, 1242232, 1242237, 1242239, 1242241, 1242244, 1242245, 1242248, 1242261, 1242264, 1242265, 1242270, 1242276, 1242279, 1242280, 1242281, 1242282, 1242284, 1242285, 1242289, 1242294, 1242305, 1242312, 1242320, 1242338, 1242352, 1242353, 1242355, 1242357, 1242358, 1242361, 1242365, 1242366, 1242369, 1242370, 1242371, 1242372, 1242377, 1242378, 1242380, 1242382, 1242385, 1242387, 1242389, 1242391, 1242392, 1242394, 1242398, 1242399, 1242402, 1242403, 1242409, 1242411, 1242415, 1242416, 1242421, 1242422, 1242426, 1242428, 1242440, 1242443, 1242449, 1242452, 1242453, 1242454, 1242455, 1242456, 1242458, 1242464, 1242467, 1242469, 1242473, 1242478, 1242481, 1242484, 1242489, 1242493, 1242497, 1242527, 1242542, 1242544, 1242545, 1242547, 1242548, 1242549, 1242550, 1242551, 1242558, 1242570, 1242580, 1242586, 1242589, 1242596, 1242597, 1242685, 1242686, 1242688, 1242689, 1242695, 1242716, 1242733, 1242734, 1242735, 1242736, 1242739, 1242743, 1242744, 1242745, 1242746, 1242747, 1242749, 1242752, 1242753, 1242756, 1242759, 1242762, 1242765, 1242767, 1242778, 1242779, 1242790, 1242791, 1243047, 1243133, 1243649, 1243660, 1243737, 1243919
CVE References: CVE-2022-3564, CVE-2022-3619, CVE-2022-3640, CVE-2022-49110, CVE-2022-49139, CVE-2022-49767, CVE-2022-49769, CVE-2022-49770, CVE-2022-49771, CVE-2022-49772, CVE-2022-49775, CVE-2022-49776, CVE-2022-49777, CVE-2022-49779, CVE-2022-49783, CVE-2022-49787, CVE-2022-49788, CVE-2022-49789, CVE-2022-49790, CVE-2022-49792, CVE-2022-49793, CVE-2022-49794, CVE-2022-49796, CVE-2022-49797, CVE-2022-49799, CVE-2022-49800, CVE-2022-49801, CVE-2022-49802, CVE-2022-49807, CVE-2022-49809, CVE-2022-49810, CVE-2022-49812, CVE-2022-49813, CVE-2022-49818, CVE-2022-49821, CVE-2022-49822, CVE-2022-49823, CVE-2022-49824, CVE-2022-49825, CVE-2022-49826, CVE-2022-49827, CVE-2022-49830, CVE-2022-49832, CVE-2022-49834, CVE-2022-49835, CVE-2022-49836, CVE-2022-49839, CVE-2022-49841, CVE-2022-49842, CVE-2022-49845, CVE-2022-49846, CVE-2022-49850, CVE-2022-49853, CVE-2022-49858, CVE-2022-49860, CVE-2022-49861, CVE-2022-49863, CVE-2022-49864, CVE-2022-49865, CVE-2022-49868, CVE-2022-49869, CVE-2022-49870, CVE-2022-49871, CVE-2022-49874, CVE-2022-49879, CVE-2022-49880, CVE-2022-49881, CVE-2022-49885, CVE-2022-49887, CVE-2022-49888, CVE-2022-49889, CVE-2022-49890, CVE-2022-49891, CVE-2022-49892, CVE-2022-49900, CVE-2022-49905, CVE-2022-49906, CVE-2022-49908, CVE-2022-49909, CVE-2022-49910, CVE-2022-49915, CVE-2022-49916, CVE-2022-49922, CVE-2022-49923, CVE-2022-49924, CVE-2022-49925, CVE-2022-49927, CVE-2022-49928, CVE-2022-49931, CVE-2023-1990, CVE-2023-53035, CVE-2023-53038, CVE-2023-53039, CVE-2023-53040, CVE-2023-53041, CVE-2023-53044, CVE-2023-53045, CVE-2023-53049, CVE-2023-53051, CVE-2023-53052, CVE-2023-53054, CVE-2023-53056, CVE-2023-53058, CVE-2023-53059, CVE-2023-53060, CVE-2023-53062, CVE-2023-53064, CVE-2023-53065, CVE-2023-53066, CVE-2023-53068, CVE-2023-53075, CVE-2023-53077, CVE-2023-53078, CVE-2023-53079, CVE-2023-53081, CVE-2023-53084, CVE-2023-53087, CVE-2023-53089, CVE-2023-53090, CVE-2023-53091, CVE-2023-53092, CVE-2023-53093, CVE-2023-53096, CVE-2023-53098, CVE-2023-53099, CVE-2023-53100, CVE-2023-53101, CVE-2023-53106, CVE-2023-53108, CVE-2023-53111, CVE-2023-53114, CVE-2023-53116, CVE-2023-53118, CVE-2023-53119, CVE-2023-53123, CVE-2023-53124, CVE-2023-53125, CVE-2023-53131, CVE-2023-53134, CVE-2023-53137, CVE-2023-53139, CVE-2023-53140, CVE-2023-53142, CVE-2023-53143, CVE-2023-53145, CVE-2024-53168, CVE-2024-56558, CVE-2025-21888, CVE-2025-21999, CVE-2025-22056, CVE-2025-22060, CVE-2025-23138, CVE-2025-23145, CVE-2025-37785, CVE-2025-37789, CVE-2025-37948, CVE-2025-37963
Jira References: SLE-24682
Maintenance Incident: [SUSE:Maintenance:39050](https://smelt.suse.de/incident/39050/)
Sources used:
openSUSE Leap 15.4 (src):
 kernel-source-5.14.21-150400.24.167.1, kernel-livepatch-SLE15-SP4_Update_41-1-150400.9.3.1, kernel-syms-5.14.21-150400.24.167.1, kernel-obs-qa-5.14.21-150400.24.167.1, kernel-obs-build-5.14.21-150400.24.167.1, kernel-default-base-5.14.21-150400.24.167.1.150400.24.84.1
SUSE Linux Enterprise Micro for Rancher 5.3 (src):
 kernel-default-base-5.14.21-150400.24.167.1.150400.24.84.1
SUSE Linux Enterprise Micro 5.3 (src):
 kernel-default-base-5.14.21-150400.24.167.1.150400.24.84.1
SUSE Linux Enterprise Micro for Rancher 5.4 (src):
 kernel-default-base-5.14.21-150400.24.167.1.150400.24.84.1
SUSE Linux Enterprise Micro 5.4 (src):
 kernel-default-base-5.14.21-150400.24.167.1.150400.24.84.1
SUSE Linux Enterprise Live Patching 15-SP4 (src):
 kernel-livepatch-SLE15-SP4_Update_41-1-150400.9.3.1
SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (src):
 kernel-default-base-5.14.21-150400.24.167.1.150400.24.84.1, kernel-obs-build-5.14.21-150400.24.167.1, kernel-source-5.14.21-150400.24.167.1, kernel-syms-5.14.21-150400.24.167.1
SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (src):
 kernel-default-base-5.14.21-150400.24.167.1.150400.24.84.1, kernel-obs-build-5.14.21-150400.24.167.1, kernel-source-5.14.21-150400.24.167.1, kernel-syms-5.14.21-150400.24.167.1
SUSE Linux Enterprise Server 15 SP4 LTSS (src):
 kernel-default-base-5.14.21-150400.24.167.1.150400.24.84.1, kernel-obs-build-5.14.21-150400.24.167.1, kernel-source-5.14.21-150400.24.167.1, kernel-syms-5.14.21-150400.24.167.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4 (src):
 kernel-default-base-5.14.21-150400.24.167.1.150400.24.84.1, kernel-obs-build-5.14.21-150400.24.167.1, kernel-source-5.14.21-150400.24.167.1, kernel-syms-5.14.21-150400.24.167.1
SUSE Manager Proxy 4.3 (src):
 kernel-default-base-5.14.21-150400.24.167.1.150400.24.84.1, kernel-source-5.14.21-150400.24.167.1, kernel-syms-5.14.21-150400.24.167.1
SUSE Manager Retail Branch Server 4.3 (src):
 kernel-default-base-5.14.21-150400.24.167.1.150400.24.84.1, kernel-source-5.14.21-150400.24.167.1
SUSE Manager Server 4.3 (src):
 kernel-default-base-5.14.21-150400.24.167.1.150400.24.84.1, kernel-source-5.14.21-150400.24.167.1, kernel-syms-5.14.21-150400.24.167.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.

Comment 23 Maintenance Automation 2025-11-11 20:38:05 UTC

SUSE-SU-2025:2173-1: An update that solves 180 vulnerabilities and has 44 security fixes can now be installed.

URL: https://www.suse.com/support/update/announcement/2025/suse-su-20252173-1
Category: security (important)
Bug References: 1184350, 1193629, 1204562, 1204569, 1204619, 1204705, 1205282, 1206051, 1206073, 1206649, 1206843, 1206886, 1206887, 1207361, 1208105, 1208542, 1209292, 1209556, 1209684, 1209780, 1209980, 1210337, 1210763, 1210767, 1211465, 1213012, 1213013, 1213094, 1213096, 1213233, 1213946, 1214991, 1218470, 1222629, 1223096, 1225903, 1228659, 1231293, 1232649, 1234395, 1234454, 1234887, 1235100, 1235870, 1238303, 1238570, 1239986, 1240785, 1240802, 1241038, 1241525, 1241640, 1242006, 1242146, 1242147, 1242150, 1242151, 1242154, 1242157, 1242158, 1242160, 1242164, 1242165, 1242169, 1242215, 1242217, 1242218, 1242219, 1242222, 1242224, 1242226, 1242227, 1242228, 1242229, 1242230, 1242231, 1242232, 1242237, 1242239, 1242240, 1242241, 1242244, 1242245, 1242248, 1242249, 1242261, 1242264, 1242265, 1242270, 1242276, 1242278, 1242279, 1242280, 1242281, 1242282, 1242285, 1242286, 1242289, 1242294, 1242295, 1242298, 1242302, 1242305, 1242311, 1242312, 1242320, 1242338, 1242349, 1242351, 1242352, 1242353, 1242355, 1242357, 1242358, 1242359, 1242360, 1242361, 1242365, 1242366, 1242369, 1242370, 1242371, 1242372, 1242377, 1242378, 1242380, 1242381, 1242382, 1242385, 1242387, 1242389, 1242391, 1242392, 1242393, 1242394, 1242398, 1242399, 1242400, 1242402, 1242403, 1242405, 1242406, 1242409, 1242410, 1242411, 1242415, 1242416, 1242421, 1242422, 1242425, 1242426, 1242428, 1242440, 1242443, 1242448, 1242449, 1242452, 1242453, 1242454, 1242455, 1242456, 1242458, 1242464, 1242465, 1242467, 1242469, 1242473, 1242474, 1242478, 1242481, 1242484, 1242489, 1242497, 1242527, 1242542, 1242544, 1242545, 1242547, 1242548, 1242549, 1242550, 1242551, 1242558, 1242570, 1242580, 1242586, 1242589, 1242596, 1242597, 1242685, 1242686, 1242688, 1242689, 1242695, 1242716, 1242733, 1242734, 1242735, 1242736, 1242739, 1242740, 1242743, 1242744, 1242745, 1242746, 1242747, 1242748, 1242749, 1242751, 1242752, 1242753, 1242756, 1242759, 1242762, 1242765, 1242767, 1242778, 1242779, 1242790, 1242791, 1243047, 1243133, 1243737, 1243919
CVE References: CVE-2022-3564, CVE-2022-3619, CVE-2022-3640, CVE-2022-49762, CVE-2022-49763, CVE-2022-49769, CVE-2022-49770, CVE-2022-49771, CVE-2022-49772, CVE-2022-49773, CVE-2022-49775, CVE-2022-49776, CVE-2022-49777, CVE-2022-49779, CVE-2022-49781, CVE-2022-49783, CVE-2022-49784, CVE-2022-49786, CVE-2022-49787, CVE-2022-49788, CVE-2022-49789, CVE-2022-49790, CVE-2022-49792, CVE-2022-49793, CVE-2022-49794, CVE-2022-49795, CVE-2022-49796, CVE-2022-49797, CVE-2022-49799, CVE-2022-49800, CVE-2022-49801, CVE-2022-49802, CVE-2022-49807, CVE-2022-49809, CVE-2022-49810, CVE-2022-49812, CVE-2022-49813, CVE-2022-49818, CVE-2022-49821, CVE-2022-49822, CVE-2022-49823, CVE-2022-49824, CVE-2022-49825, CVE-2022-49826, CVE-2022-49827, CVE-2022-49830, CVE-2022-49832, CVE-2022-49834, CVE-2022-49835, CVE-2022-49836, CVE-2022-49837, CVE-2022-49839, CVE-2022-49841, CVE-2022-49842, CVE-2022-49845, CVE-2022-49846, CVE-2022-49850, CVE-2022-49853, CVE-2022-49858, CVE-2022-49860, CVE-2022-49861, CVE-2022-49863, CVE-2022-49864, CVE-2022-49865, CVE-2022-49868, CVE-2022-49869, CVE-2022-49870, CVE-2022-49871, CVE-2022-49874, CVE-2022-49879, CVE-2022-49880, CVE-2022-49881, CVE-2022-49885, CVE-2022-49886, CVE-2022-49887, CVE-2022-49888, CVE-2022-49889, CVE-2022-49890, CVE-2022-49891, CVE-2022-49892, CVE-2022-49900, CVE-2022-49901, CVE-2022-49902, CVE-2022-49905, CVE-2022-49906, CVE-2022-49908, CVE-2022-49909, CVE-2022-49910, CVE-2022-49915, CVE-2022-49916, CVE-2022-49917, CVE-2022-49918, CVE-2022-49921, CVE-2022-49922, CVE-2022-49923, CVE-2022-49924, CVE-2022-49925, CVE-2022-49927, CVE-2022-49928, CVE-2022-49929, CVE-2022-49931, CVE-2023-1990, CVE-2023-28866, CVE-2023-53035, CVE-2023-53036, CVE-2023-53038, CVE-2023-53039, CVE-2023-53040, CVE-2023-53041, CVE-2023-53042, CVE-2023-53044, CVE-2023-53045, CVE-2023-53049, CVE-2023-53052, CVE-2023-53054, CVE-2023-53056, CVE-2023-53057, CVE-2023-53058, CVE-2023-53059, CVE-2023-53060, CVE-2023-53062, CVE-2023-53064, CVE-2023-53065, CVE-2023-53066, CVE-2023-53068, CVE-2023-53070, CVE-2023-53071, CVE-2023-53073, CVE-2023-53074, CVE-2023-53075, CVE-2023-53077, CVE-2023-53078, CVE-2023-53079, CVE-2023-53081, CVE-2023-53082, CVE-2023-53084, CVE-2023-53087, CVE-2023-53089, CVE-2023-53090, CVE-2023-53091, CVE-2023-53092, CVE-2023-53093, CVE-2023-53095, CVE-2023-53096, CVE-2023-53098, CVE-2023-53099, CVE-2023-53100, CVE-2023-53101, CVE-2023-53102, CVE-2023-53105, CVE-2023-53106, CVE-2023-53108, CVE-2023-53109, CVE-2023-53111, CVE-2023-53112, CVE-2023-53114, CVE-2023-53116, CVE-2023-53118, CVE-2023-53119, CVE-2023-53123, CVE-2023-53124, CVE-2023-53125, CVE-2023-53128, CVE-2023-53131, CVE-2023-53134, CVE-2023-53137, CVE-2023-53139, CVE-2023-53140, CVE-2023-53142, CVE-2023-53143, CVE-2023-53145, CVE-2024-26804, CVE-2024-28956, CVE-2024-53168, CVE-2024-56558, CVE-2025-21999, CVE-2025-22056, CVE-2025-23145, CVE-2025-37785, CVE-2025-37789
Maintenance Incident: [SUSE:Maintenance:39046](https://smelt.suse.de/incident/39046/)
Sources used:
SUSE Linux Enterprise Live Patching 15-SP5 (src):
 kernel-livepatch-SLE15-SP5_Update_27-1-150500.11.7.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.

Comment 24 Maintenance Automation 2026-01-16 20:31:04 UTC

SUSE-SU-2026:0140-1: An update that solves 157 vulnerabilities, contains one feature and has 26 security fixes can now be installed.

URL: https://www.suse.com/support/update/announcement/2026/suse-su-20260140-1
Category: security (important)
Bug References: 1184350, 1193629, 1204569, 1204619, 1204705, 1205282, 1206051, 1206073, 1206649, 1206886, 1206887, 1208542, 1209292, 1209556, 1209684, 1210337, 1210763, 1210767, 1211465, 1213012, 1213013, 1213094, 1213096, 1213946, 1214991, 1218470, 1232649, 1234887, 1235100, 1237981, 1238032, 1240177, 1240802, 1241525, 1241526, 1241640, 1241648, 1242147, 1242150, 1242151, 1242154, 1242157, 1242158, 1242164, 1242165, 1242169, 1242215, 1242218, 1242219, 1242222, 1242226, 1242227, 1242228, 1242229, 1242230, 1242231, 1242232, 1242237, 1242239, 1242241, 1242244, 1242245, 1242248, 1242261, 1242264, 1242265, 1242270, 1242276, 1242279, 1242280, 1242281, 1242282, 1242284, 1242285, 1242289, 1242294, 1242305, 1242312, 1242320, 1242338, 1242352, 1242353, 1242355, 1242357, 1242358, 1242361, 1242365, 1242366, 1242369, 1242370, 1242371, 1242372, 1242377, 1242378, 1242380, 1242382, 1242385, 1242387, 1242389, 1242391, 1242392, 1242394, 1242398, 1242399, 1242402, 1242403, 1242409, 1242411, 1242415, 1242416, 1242421, 1242422, 1242426, 1242428, 1242440, 1242443, 1242449, 1242452, 1242453, 1242454, 1242455, 1242456, 1242458, 1242464, 1242467, 1242469, 1242473, 1242478, 1242481, 1242484, 1242489, 1242493, 1242497, 1242527, 1242542, 1242544, 1242545, 1242547, 1242548, 1242549, 1242550, 1242551, 1242558, 1242570, 1242580, 1242586, 1242589, 1242596, 1242597, 1242685, 1242686, 1242688, 1242689, 1242695, 1242716, 1242733, 1242734, 1242735, 1242736, 1242739, 1242743, 1242744, 1242745, 1242746, 1242747, 1242749, 1242752, 1242753, 1242756, 1242759, 1242762, 1242765, 1242767, 1242778, 1242779, 1242790, 1242791, 1243047, 1243133, 1243649, 1243660, 1243737, 1243919
CVE References: CVE-2022-3564, CVE-2022-3619, CVE-2022-3640, CVE-2022-49110, CVE-2022-49139, CVE-2022-49767, CVE-2022-49769, CVE-2022-49770, CVE-2022-49771, CVE-2022-49772, CVE-2022-49775, CVE-2022-49776, CVE-2022-49777, CVE-2022-49779, CVE-2022-49783, CVE-2022-49787, CVE-2022-49788, CVE-2022-49789, CVE-2022-49790, CVE-2022-49792, CVE-2022-49793, CVE-2022-49794, CVE-2022-49796, CVE-2022-49797, CVE-2022-49799, CVE-2022-49800, CVE-2022-49801, CVE-2022-49802, CVE-2022-49807, CVE-2022-49809, CVE-2022-49810, CVE-2022-49812, CVE-2022-49813, CVE-2022-49818, CVE-2022-49821, CVE-2022-49822, CVE-2022-49823, CVE-2022-49824, CVE-2022-49825, CVE-2022-49826, CVE-2022-49827, CVE-2022-49830, CVE-2022-49832, CVE-2022-49834, CVE-2022-49835, CVE-2022-49836, CVE-2022-49839, CVE-2022-49841, CVE-2022-49842, CVE-2022-49845, CVE-2022-49846, CVE-2022-49850, CVE-2022-49853, CVE-2022-49858, CVE-2022-49860, CVE-2022-49861, CVE-2022-49863, CVE-2022-49864, CVE-2022-49865, CVE-2022-49868, CVE-2022-49869, CVE-2022-49870, CVE-2022-49871, CVE-2022-49874, CVE-2022-49879, CVE-2022-49880, CVE-2022-49881, CVE-2022-49885, CVE-2022-49887, CVE-2022-49888, CVE-2022-49889, CVE-2022-49890, CVE-2022-49891, CVE-2022-49892, CVE-2022-49900, CVE-2022-49905, CVE-2022-49906, CVE-2022-49908, CVE-2022-49909, CVE-2022-49910, CVE-2022-49915, CVE-2022-49916, CVE-2022-49922, CVE-2022-49923, CVE-2022-49924, CVE-2022-49925, CVE-2022-49927, CVE-2022-49928, CVE-2022-49931, CVE-2023-1990, CVE-2023-53035, CVE-2023-53038, CVE-2023-53039, CVE-2023-53040, CVE-2023-53041, CVE-2023-53044, CVE-2023-53045, CVE-2023-53049, CVE-2023-53051, CVE-2023-53052, CVE-2023-53054, CVE-2023-53056, CVE-2023-53058, CVE-2023-53059, CVE-2023-53060, CVE-2023-53062, CVE-2023-53064, CVE-2023-53065, CVE-2023-53066, CVE-2023-53068, CVE-2023-53075, CVE-2023-53077, CVE-2023-53078, CVE-2023-53079, CVE-2023-53081, CVE-2023-53084, CVE-2023-53087, CVE-2023-53089, CVE-2023-53090, CVE-2023-53091, CVE-2023-53092, CVE-2023-53093, CVE-2023-53096, CVE-2023-53098, CVE-2023-53099, CVE-2023-53100, CVE-2023-53101, CVE-2023-53106, CVE-2023-53108, CVE-2023-53111, CVE-2023-53114, CVE-2023-53116, CVE-2023-53118, CVE-2023-53119, CVE-2023-53123, CVE-2023-53124, CVE-2023-53125, CVE-2023-53131, CVE-2023-53134, CVE-2023-53137, CVE-2023-53139, CVE-2023-53140, CVE-2023-53142, CVE-2023-53143, CVE-2023-53145, CVE-2024-53168, CVE-2024-56558, CVE-2025-21888, CVE-2025-21999, CVE-2025-22056, CVE-2025-22060, CVE-2025-23138, CVE-2025-23145, CVE-2025-37785, CVE-2025-37789, CVE-2025-37948, CVE-2025-37963
Jira References: SLE-24682
Maintenance Incident: [SUSE:Maintenance:39050](https://smelt.suse.de/incident/39050/)
Sources used:
SUSE Linux Enterprise Live Patching 15-SP4 (src):
 kernel-livepatch-SLE15-SP4_Update_41-1-150400.9.3.1

NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.