SUSE update for the Linux Kernel

1) Information disclosure

EUVDB-ID: #VU9884

Risk: Low

CVSSv4.0: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:A/U:Clear]

CVE-ID: CVE-2017-5753

CWE-ID: CWE-200 - Exposure of sensitive information to an unauthorized actor

Exploit availability: Yes

Description

The vulnerability allows a local attacker to obtain potentially sensitive information.

The vulnerability exists in Intel CPU hardware due to improper implementation of the speculative execution of instructions. A local attacker can perform a bounds check bypass, execute arbitrary code, conduct a side-channel attack and read sensitive memory information.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4: LTSS

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: All versions

dtb-allwinner: All versions

dlm-kmp-64kb-debuginfo: All versions

gfs2-kmp-64kb: All versions

dtb-marvell: All versions

dtb-rockchip: All versions

dtb-amlogic: All versions

dtb-sprd: All versions

ocfs2-kmp-64kb-debuginfo: All versions

dtb-renesas: All versions

kernel-64kb-optional: All versions

ocfs2-kmp-64kb: All versions

dtb-exynos: All versions

dtb-nvidia: All versions

dtb-broadcom: All versions

dtb-xilinx: All versions

reiserfs-kmp-64kb-debuginfo: All versions

dtb-socionext: All versions

dtb-lg: All versions

dtb-amd: All versions

dtb-hisilicon: All versions

dtb-qcom: All versions

dtb-apple: All versions

kernel-64kb-extra: All versions

dtb-apm: All versions

dtb-mediatek: All versions

gfs2-kmp-64kb-debuginfo: All versions

dlm-kmp-64kb: All versions

cluster-md-kmp-64kb-debuginfo: All versions

kernel-64kb-optional-debuginfo: All versions

kernel-64kb-debuginfo: All versions

cluster-md-kmp-64kb: All versions

dtb-amazon: All versions

kselftests-kmp-64kb-debuginfo: All versions

dtb-arm: All versions

kernel-64kb-devel-debuginfo: All versions

dtb-freescale: All versions

kernel-64kb-extra-debuginfo: All versions

dtb-altera: All versions

kernel-64kb-devel: All versions

kselftests-kmp-64kb: All versions

reiserfs-kmp-64kb: All versions

kernel-64kb-debugsource: All versions

dtb-cavium: All versions

dtb-aarch64: All versions

kernel-zfcpdump-debugsource: All versions

kernel-zfcpdump-debuginfo: All versions

kernel-zfcpdump: All versions

kernel-kvmsmall: All versions

kernel-livepatch-SLE15-SP4_Update_39-debugsource: All versions

kernel-livepatch-5_14_21-150400_24_161-default: All versions

kernel-default-livepatch-devel: All versions

kernel-livepatch-5_14_21-150400_24_161-default-debuginfo: All versions

kernel-default: All versions

gfs2-kmp-default: All versions

ocfs2-kmp-default: All versions

dlm-kmp-default: All versions

dlm-kmp-default-debuginfo: All versions

gfs2-kmp-default-debuginfo: All versions

kernel-default-optional-debuginfo: All versions

cluster-md-kmp-default-debuginfo: All versions

reiserfs-kmp-default-debuginfo: All versions

kernel-default-livepatch: All versions

kernel-default-extra: All versions

kernel-default-devel-debuginfo: All versions

kernel-obs-qa: All versions

kernel-obs-build: All versions

kernel-syms: All versions

kselftests-kmp-default-debuginfo: All versions

kernel-obs-build-debugsource: All versions

ocfs2-kmp-default-debuginfo: All versions

kernel-default-devel: All versions

kernel-default-optional: All versions

kernel-default-debugsource: All versions

cluster-md-kmp-default: All versions

kselftests-kmp-default: All versions

reiserfs-kmp-default: All versions

kernel-default-debuginfo: All versions

kernel-default-extra-debuginfo: All versions

kernel-kvmsmall-devel-debuginfo: All versions

kernel-default-base-rebuild: All versions

kernel-default-base: All versions

kernel-kvmsmall-debugsource: All versions

kernel-kvmsmall-devel: All versions

kernel-kvmsmall-debuginfo: All versions

kernel-debug-devel-debuginfo: All versions

kernel-debug-devel: All versions

kernel-debug-debuginfo: All versions

kernel-debug-debugsource: All versions

kernel-debug: All versions

kernel-docs-html: All versions

kernel-source-vanilla: All versions

kernel-source: All versions

kernel-devel: All versions

kernel-macros: All versions

kernel-docs: All versions

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4:LTSS:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-lg:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apple:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-arm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-altera:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-sle15-sp4_update_39-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2025/suse-su-20251195-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

Yes. This vulnerability is being exploited in the wild.

2) Resource management error

EUVDB-ID: #VU106217

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-4454

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the j1939_session_deactivate() function in net/can/j1939/transport.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4: LTSS

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: All versions

dtb-allwinner: All versions

dlm-kmp-64kb-debuginfo: All versions

gfs2-kmp-64kb: All versions

dtb-marvell: All versions

dtb-rockchip: All versions

dtb-amlogic: All versions

dtb-sprd: All versions

ocfs2-kmp-64kb-debuginfo: All versions

dtb-renesas: All versions

kernel-64kb-optional: All versions

ocfs2-kmp-64kb: All versions

dtb-exynos: All versions

dtb-nvidia: All versions

dtb-broadcom: All versions

dtb-xilinx: All versions

reiserfs-kmp-64kb-debuginfo: All versions

dtb-socionext: All versions

dtb-lg: All versions

dtb-amd: All versions

dtb-hisilicon: All versions

dtb-qcom: All versions

dtb-apple: All versions

kernel-64kb-extra: All versions

dtb-apm: All versions

dtb-mediatek: All versions

gfs2-kmp-64kb-debuginfo: All versions

dlm-kmp-64kb: All versions

cluster-md-kmp-64kb-debuginfo: All versions

kernel-64kb-optional-debuginfo: All versions

kernel-64kb-debuginfo: All versions

cluster-md-kmp-64kb: All versions

dtb-amazon: All versions

kselftests-kmp-64kb-debuginfo: All versions

dtb-arm: All versions

kernel-64kb-devel-debuginfo: All versions

dtb-freescale: All versions

kernel-64kb-extra-debuginfo: All versions

dtb-altera: All versions

kernel-64kb-devel: All versions

kselftests-kmp-64kb: All versions

reiserfs-kmp-64kb: All versions

kernel-64kb-debugsource: All versions

dtb-cavium: All versions

dtb-aarch64: All versions

kernel-zfcpdump-debugsource: All versions

kernel-zfcpdump-debuginfo: All versions

kernel-zfcpdump: All versions

kernel-kvmsmall: All versions

kernel-livepatch-SLE15-SP4_Update_39-debugsource: All versions

kernel-livepatch-5_14_21-150400_24_161-default: All versions

kernel-default-livepatch-devel: All versions

kernel-livepatch-5_14_21-150400_24_161-default-debuginfo: All versions

kernel-default: All versions

gfs2-kmp-default: All versions

ocfs2-kmp-default: All versions

dlm-kmp-default: All versions

dlm-kmp-default-debuginfo: All versions

gfs2-kmp-default-debuginfo: All versions

kernel-default-optional-debuginfo: All versions

cluster-md-kmp-default-debuginfo: All versions

reiserfs-kmp-default-debuginfo: All versions

kernel-default-livepatch: All versions

kernel-default-extra: All versions

kernel-default-devel-debuginfo: All versions

kernel-obs-qa: All versions

kernel-obs-build: All versions

kernel-syms: All versions

kselftests-kmp-default-debuginfo: All versions

kernel-obs-build-debugsource: All versions

ocfs2-kmp-default-debuginfo: All versions

kernel-default-devel: All versions

kernel-default-optional: All versions

kernel-default-debugsource: All versions

cluster-md-kmp-default: All versions

kselftests-kmp-default: All versions

reiserfs-kmp-default: All versions

kernel-default-debuginfo: All versions

kernel-default-extra-debuginfo: All versions

kernel-kvmsmall-devel-debuginfo: All versions

kernel-default-base-rebuild: All versions

kernel-default-base: All versions

kernel-kvmsmall-debugsource: All versions

kernel-kvmsmall-devel: All versions

kernel-kvmsmall-debuginfo: All versions

kernel-debug-devel-debuginfo: All versions

kernel-debug-devel: All versions

kernel-debug-debuginfo: All versions

kernel-debug-debugsource: All versions

kernel-debug: All versions

kernel-docs-html: All versions

kernel-source-vanilla: All versions

kernel-source: All versions

kernel-devel: All versions

kernel-macros: All versions

kernel-docs: All versions

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4:LTSS:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-lg:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apple:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-arm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-altera:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-sle15-sp4_update_39-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2025/suse-su-20251195-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Use-after-free

EUVDB-ID: #VU62028

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-1016

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to a use-after-free error in net/netfilter/nf_tables_core.c:nft_do_chain in Linux kernel.. A local user can trigger a use-after-free error and gain access to sensitive information.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4: LTSS

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: All versions

dtb-allwinner: All versions

dlm-kmp-64kb-debuginfo: All versions

gfs2-kmp-64kb: All versions

dtb-marvell: All versions

dtb-rockchip: All versions

dtb-amlogic: All versions

dtb-sprd: All versions

ocfs2-kmp-64kb-debuginfo: All versions

dtb-renesas: All versions

kernel-64kb-optional: All versions

ocfs2-kmp-64kb: All versions

dtb-exynos: All versions

dtb-nvidia: All versions

dtb-broadcom: All versions

dtb-xilinx: All versions

reiserfs-kmp-64kb-debuginfo: All versions

dtb-socionext: All versions

dtb-lg: All versions

dtb-amd: All versions

dtb-hisilicon: All versions

dtb-qcom: All versions

dtb-apple: All versions

kernel-64kb-extra: All versions

dtb-apm: All versions

dtb-mediatek: All versions

gfs2-kmp-64kb-debuginfo: All versions

dlm-kmp-64kb: All versions

cluster-md-kmp-64kb-debuginfo: All versions

kernel-64kb-optional-debuginfo: All versions

kernel-64kb-debuginfo: All versions

cluster-md-kmp-64kb: All versions

dtb-amazon: All versions

kselftests-kmp-64kb-debuginfo: All versions

dtb-arm: All versions

kernel-64kb-devel-debuginfo: All versions

dtb-freescale: All versions

kernel-64kb-extra-debuginfo: All versions

dtb-altera: All versions

kernel-64kb-devel: All versions

kselftests-kmp-64kb: All versions

reiserfs-kmp-64kb: All versions

kernel-64kb-debugsource: All versions

dtb-cavium: All versions

dtb-aarch64: All versions

kernel-zfcpdump-debugsource: All versions

kernel-zfcpdump-debuginfo: All versions

kernel-zfcpdump: All versions

kernel-kvmsmall: All versions

kernel-livepatch-SLE15-SP4_Update_39-debugsource: All versions

kernel-livepatch-5_14_21-150400_24_161-default: All versions

kernel-default-livepatch-devel: All versions

kernel-livepatch-5_14_21-150400_24_161-default-debuginfo: All versions

kernel-default: All versions

gfs2-kmp-default: All versions

ocfs2-kmp-default: All versions

dlm-kmp-default: All versions

dlm-kmp-default-debuginfo: All versions

gfs2-kmp-default-debuginfo: All versions

kernel-default-optional-debuginfo: All versions

cluster-md-kmp-default-debuginfo: All versions

reiserfs-kmp-default-debuginfo: All versions

kernel-default-livepatch: All versions

kernel-default-extra: All versions

kernel-default-devel-debuginfo: All versions

kernel-obs-qa: All versions

kernel-obs-build: All versions

kernel-syms: All versions

kselftests-kmp-default-debuginfo: All versions

kernel-obs-build-debugsource: All versions

ocfs2-kmp-default-debuginfo: All versions

kernel-default-devel: All versions

kernel-default-optional: All versions

kernel-default-debugsource: All versions

cluster-md-kmp-default: All versions

kselftests-kmp-default: All versions

reiserfs-kmp-default: All versions

kernel-default-debuginfo: All versions

kernel-default-extra-debuginfo: All versions

kernel-kvmsmall-devel-debuginfo: All versions

kernel-default-base-rebuild: All versions

kernel-default-base: All versions

kernel-kvmsmall-debugsource: All versions

kernel-kvmsmall-devel: All versions

kernel-kvmsmall-debuginfo: All versions

kernel-debug-devel-debuginfo: All versions

kernel-debug-devel: All versions

kernel-debug-debuginfo: All versions

kernel-debug-debugsource: All versions

kernel-debug: All versions

kernel-docs-html: All versions

kernel-source-vanilla: All versions

kernel-source: All versions

kernel-devel: All versions

kernel-macros: All versions

kernel-docs: All versions

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4:LTSS:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-lg:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apple:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-arm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-altera:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-sle15-sp4_update_39-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2025/suse-su-20251195-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Use-after-free

EUVDB-ID: #VU104481

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49053

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the tcmu_try_get_data_page() and tcmu_vma_fault() functions in drivers/target/target_core_user.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4: LTSS

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: All versions

dtb-allwinner: All versions

dlm-kmp-64kb-debuginfo: All versions

gfs2-kmp-64kb: All versions

dtb-marvell: All versions

dtb-rockchip: All versions

dtb-amlogic: All versions

dtb-sprd: All versions

ocfs2-kmp-64kb-debuginfo: All versions

dtb-renesas: All versions

kernel-64kb-optional: All versions

ocfs2-kmp-64kb: All versions

dtb-exynos: All versions

dtb-nvidia: All versions

dtb-broadcom: All versions

dtb-xilinx: All versions

reiserfs-kmp-64kb-debuginfo: All versions

dtb-socionext: All versions

dtb-lg: All versions

dtb-amd: All versions

dtb-hisilicon: All versions

dtb-qcom: All versions

dtb-apple: All versions

kernel-64kb-extra: All versions

dtb-apm: All versions

dtb-mediatek: All versions

gfs2-kmp-64kb-debuginfo: All versions

dlm-kmp-64kb: All versions

cluster-md-kmp-64kb-debuginfo: All versions

kernel-64kb-optional-debuginfo: All versions

kernel-64kb-debuginfo: All versions

cluster-md-kmp-64kb: All versions

dtb-amazon: All versions

kselftests-kmp-64kb-debuginfo: All versions

dtb-arm: All versions

kernel-64kb-devel-debuginfo: All versions

dtb-freescale: All versions

kernel-64kb-extra-debuginfo: All versions

dtb-altera: All versions

kernel-64kb-devel: All versions

kselftests-kmp-64kb: All versions

reiserfs-kmp-64kb: All versions

kernel-64kb-debugsource: All versions

dtb-cavium: All versions

dtb-aarch64: All versions

kernel-zfcpdump-debugsource: All versions

kernel-zfcpdump-debuginfo: All versions

kernel-zfcpdump: All versions

kernel-kvmsmall: All versions

kernel-livepatch-SLE15-SP4_Update_39-debugsource: All versions

kernel-livepatch-5_14_21-150400_24_161-default: All versions

kernel-default-livepatch-devel: All versions

kernel-livepatch-5_14_21-150400_24_161-default-debuginfo: All versions

kernel-default: All versions

gfs2-kmp-default: All versions

ocfs2-kmp-default: All versions

dlm-kmp-default: All versions

dlm-kmp-default-debuginfo: All versions

gfs2-kmp-default-debuginfo: All versions

kernel-default-optional-debuginfo: All versions

cluster-md-kmp-default-debuginfo: All versions

reiserfs-kmp-default-debuginfo: All versions

kernel-default-livepatch: All versions

kernel-default-extra: All versions

kernel-default-devel-debuginfo: All versions

kernel-obs-qa: All versions

kernel-obs-build: All versions

kernel-syms: All versions

kselftests-kmp-default-debuginfo: All versions

kernel-obs-build-debugsource: All versions

ocfs2-kmp-default-debuginfo: All versions

kernel-default-devel: All versions

kernel-default-optional: All versions

kernel-default-debugsource: All versions

cluster-md-kmp-default: All versions

kselftests-kmp-default: All versions

reiserfs-kmp-default: All versions

kernel-default-debuginfo: All versions

kernel-default-extra-debuginfo: All versions

kernel-kvmsmall-devel-debuginfo: All versions

kernel-default-base-rebuild: All versions

kernel-default-base: All versions

kernel-kvmsmall-debugsource: All versions

kernel-kvmsmall-devel: All versions

kernel-kvmsmall-debuginfo: All versions

kernel-debug-devel-debuginfo: All versions

kernel-debug-devel: All versions

kernel-debug-debuginfo: All versions

kernel-debug-debugsource: All versions

kernel-debug: All versions

kernel-docs-html: All versions

kernel-source-vanilla: All versions

kernel-source: All versions

kernel-devel: All versions

kernel-macros: All versions

kernel-docs: All versions

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4:LTSS:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-lg:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apple:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-arm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-altera:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-sle15-sp4_update_39-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2025/suse-su-20251195-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Memory leak

EUVDB-ID: #VU104242

Risk: Low

CVSSv4.0: 1.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:U/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49293

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the nft_do_chain() function in net/netfilter/nf_tables_core.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4: LTSS

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: All versions

dtb-allwinner: All versions

dlm-kmp-64kb-debuginfo: All versions

gfs2-kmp-64kb: All versions

dtb-marvell: All versions

dtb-rockchip: All versions

dtb-amlogic: All versions

dtb-sprd: All versions

ocfs2-kmp-64kb-debuginfo: All versions

dtb-renesas: All versions

kernel-64kb-optional: All versions

ocfs2-kmp-64kb: All versions

dtb-exynos: All versions

dtb-nvidia: All versions

dtb-broadcom: All versions

dtb-xilinx: All versions

reiserfs-kmp-64kb-debuginfo: All versions

dtb-socionext: All versions

dtb-lg: All versions

dtb-amd: All versions

dtb-hisilicon: All versions

dtb-qcom: All versions

dtb-apple: All versions

kernel-64kb-extra: All versions

dtb-apm: All versions

dtb-mediatek: All versions

gfs2-kmp-64kb-debuginfo: All versions

dlm-kmp-64kb: All versions

cluster-md-kmp-64kb-debuginfo: All versions

kernel-64kb-optional-debuginfo: All versions

kernel-64kb-debuginfo: All versions

cluster-md-kmp-64kb: All versions

dtb-amazon: All versions

kselftests-kmp-64kb-debuginfo: All versions

dtb-arm: All versions

kernel-64kb-devel-debuginfo: All versions

dtb-freescale: All versions

kernel-64kb-extra-debuginfo: All versions

dtb-altera: All versions

kernel-64kb-devel: All versions

kselftests-kmp-64kb: All versions

reiserfs-kmp-64kb: All versions

kernel-64kb-debugsource: All versions

dtb-cavium: All versions

dtb-aarch64: All versions

kernel-zfcpdump-debugsource: All versions

kernel-zfcpdump-debuginfo: All versions

kernel-zfcpdump: All versions

kernel-kvmsmall: All versions

kernel-livepatch-SLE15-SP4_Update_39-debugsource: All versions

kernel-livepatch-5_14_21-150400_24_161-default: All versions

kernel-default-livepatch-devel: All versions

kernel-livepatch-5_14_21-150400_24_161-default-debuginfo: All versions

kernel-default: All versions

gfs2-kmp-default: All versions

ocfs2-kmp-default: All versions

dlm-kmp-default: All versions

dlm-kmp-default-debuginfo: All versions

gfs2-kmp-default-debuginfo: All versions

kernel-default-optional-debuginfo: All versions

cluster-md-kmp-default-debuginfo: All versions

reiserfs-kmp-default-debuginfo: All versions

kernel-default-livepatch: All versions

kernel-default-extra: All versions

kernel-default-devel-debuginfo: All versions

kernel-obs-qa: All versions

kernel-obs-build: All versions

kernel-syms: All versions

kselftests-kmp-default-debuginfo: All versions

kernel-obs-build-debugsource: All versions

ocfs2-kmp-default-debuginfo: All versions

kernel-default-devel: All versions

kernel-default-optional: All versions

kernel-default-debugsource: All versions

cluster-md-kmp-default: All versions

kselftests-kmp-default: All versions

reiserfs-kmp-default: All versions

kernel-default-debuginfo: All versions

kernel-default-extra-debuginfo: All versions

kernel-kvmsmall-devel-debuginfo: All versions

kernel-default-base-rebuild: All versions

kernel-default-base: All versions

kernel-kvmsmall-debugsource: All versions

kernel-kvmsmall-devel: All versions

kernel-kvmsmall-debuginfo: All versions

kernel-debug-devel-debuginfo: All versions

kernel-debug-devel: All versions

kernel-debug-debuginfo: All versions

kernel-debug-debugsource: All versions

kernel-debug: All versions

kernel-docs-html: All versions

kernel-source-vanilla: All versions

kernel-source: All versions

kernel-devel: All versions

kernel-macros: All versions

kernel-docs: All versions

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4:LTSS:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-lg:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apple:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-arm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-altera:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-sle15-sp4_update_39-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2025/suse-su-20251195-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Use-after-free

EUVDB-ID: #VU104419

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49465

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the block/blk-throttle.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4: LTSS

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: All versions

dtb-allwinner: All versions

dlm-kmp-64kb-debuginfo: All versions

gfs2-kmp-64kb: All versions

dtb-marvell: All versions

dtb-rockchip: All versions

dtb-amlogic: All versions

dtb-sprd: All versions

ocfs2-kmp-64kb-debuginfo: All versions

dtb-renesas: All versions

kernel-64kb-optional: All versions

ocfs2-kmp-64kb: All versions

dtb-exynos: All versions

dtb-nvidia: All versions

dtb-broadcom: All versions

dtb-xilinx: All versions

reiserfs-kmp-64kb-debuginfo: All versions

dtb-socionext: All versions

dtb-lg: All versions

dtb-amd: All versions

dtb-hisilicon: All versions

dtb-qcom: All versions

dtb-apple: All versions

kernel-64kb-extra: All versions

dtb-apm: All versions

dtb-mediatek: All versions

gfs2-kmp-64kb-debuginfo: All versions

dlm-kmp-64kb: All versions

cluster-md-kmp-64kb-debuginfo: All versions

kernel-64kb-optional-debuginfo: All versions

kernel-64kb-debuginfo: All versions

cluster-md-kmp-64kb: All versions

dtb-amazon: All versions

kselftests-kmp-64kb-debuginfo: All versions

dtb-arm: All versions

kernel-64kb-devel-debuginfo: All versions

dtb-freescale: All versions

kernel-64kb-extra-debuginfo: All versions

dtb-altera: All versions

kernel-64kb-devel: All versions

kselftests-kmp-64kb: All versions

reiserfs-kmp-64kb: All versions

kernel-64kb-debugsource: All versions

dtb-cavium: All versions

dtb-aarch64: All versions

kernel-zfcpdump-debugsource: All versions

kernel-zfcpdump-debuginfo: All versions

kernel-zfcpdump: All versions

kernel-kvmsmall: All versions

kernel-livepatch-SLE15-SP4_Update_39-debugsource: All versions

kernel-livepatch-5_14_21-150400_24_161-default: All versions

kernel-default-livepatch-devel: All versions

kernel-livepatch-5_14_21-150400_24_161-default-debuginfo: All versions

kernel-default: All versions

gfs2-kmp-default: All versions

ocfs2-kmp-default: All versions

dlm-kmp-default: All versions

dlm-kmp-default-debuginfo: All versions

gfs2-kmp-default-debuginfo: All versions

kernel-default-optional-debuginfo: All versions

cluster-md-kmp-default-debuginfo: All versions

reiserfs-kmp-default-debuginfo: All versions

kernel-default-livepatch: All versions

kernel-default-extra: All versions

kernel-default-devel-debuginfo: All versions

kernel-obs-qa: All versions

kernel-obs-build: All versions

kernel-syms: All versions

kselftests-kmp-default-debuginfo: All versions

kernel-obs-build-debugsource: All versions

ocfs2-kmp-default-debuginfo: All versions

kernel-default-devel: All versions

kernel-default-optional: All versions

kernel-default-debugsource: All versions

cluster-md-kmp-default: All versions

kselftests-kmp-default: All versions

reiserfs-kmp-default: All versions

kernel-default-debuginfo: All versions

kernel-default-extra-debuginfo: All versions

kernel-kvmsmall-devel-debuginfo: All versions

kernel-default-base-rebuild: All versions

kernel-default-base: All versions

kernel-kvmsmall-debugsource: All versions

kernel-kvmsmall-devel: All versions

kernel-kvmsmall-debuginfo: All versions

kernel-debug-devel-debuginfo: All versions

kernel-debug-devel: All versions

kernel-debug-debuginfo: All versions

kernel-debug-debugsource: All versions

kernel-debug: All versions

kernel-docs-html: All versions

kernel-source-vanilla: All versions

kernel-source: All versions

kernel-devel: All versions

kernel-macros: All versions

kernel-docs: All versions

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4:LTSS:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-lg:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apple:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-arm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-altera:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-sle15-sp4_update_39-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2025/suse-su-20251195-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Integer underflow

EUVDB-ID: #VU104794

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49650

CWE-ID: CWE-191 - Integer underflow

Exploit availability: No

Description

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to integer underflow within the bam_alloc_chan(), bam_free_chan(), bam_pause(), bam_resume(), bam_dma_irq(), bam_start_dma(), bam_dma_probe(), bam_dma_suspend() and bam_dma_resume() functions in drivers/dma/qcom/bam_dma.c. A local user can execute arbitrary code.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4: LTSS

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: All versions

dtb-allwinner: All versions

dlm-kmp-64kb-debuginfo: All versions

gfs2-kmp-64kb: All versions

dtb-marvell: All versions

dtb-rockchip: All versions

dtb-amlogic: All versions

dtb-sprd: All versions

ocfs2-kmp-64kb-debuginfo: All versions

dtb-renesas: All versions

kernel-64kb-optional: All versions

ocfs2-kmp-64kb: All versions

dtb-exynos: All versions

dtb-nvidia: All versions

dtb-broadcom: All versions

dtb-xilinx: All versions

reiserfs-kmp-64kb-debuginfo: All versions

dtb-socionext: All versions

dtb-lg: All versions

dtb-amd: All versions

dtb-hisilicon: All versions

dtb-qcom: All versions

dtb-apple: All versions

kernel-64kb-extra: All versions

dtb-apm: All versions

dtb-mediatek: All versions

gfs2-kmp-64kb-debuginfo: All versions

dlm-kmp-64kb: All versions

cluster-md-kmp-64kb-debuginfo: All versions

kernel-64kb-optional-debuginfo: All versions

kernel-64kb-debuginfo: All versions

cluster-md-kmp-64kb: All versions

dtb-amazon: All versions

kselftests-kmp-64kb-debuginfo: All versions

dtb-arm: All versions

kernel-64kb-devel-debuginfo: All versions

dtb-freescale: All versions

kernel-64kb-extra-debuginfo: All versions

dtb-altera: All versions

kernel-64kb-devel: All versions

kselftests-kmp-64kb: All versions

reiserfs-kmp-64kb: All versions

kernel-64kb-debugsource: All versions

dtb-cavium: All versions

dtb-aarch64: All versions

kernel-zfcpdump-debugsource: All versions

kernel-zfcpdump-debuginfo: All versions

kernel-zfcpdump: All versions

kernel-kvmsmall: All versions

kernel-livepatch-SLE15-SP4_Update_39-debugsource: All versions

kernel-livepatch-5_14_21-150400_24_161-default: All versions

kernel-default-livepatch-devel: All versions

kernel-livepatch-5_14_21-150400_24_161-default-debuginfo: All versions

kernel-default: All versions

gfs2-kmp-default: All versions

ocfs2-kmp-default: All versions

dlm-kmp-default: All versions

dlm-kmp-default-debuginfo: All versions

gfs2-kmp-default-debuginfo: All versions

kernel-default-optional-debuginfo: All versions

cluster-md-kmp-default-debuginfo: All versions

reiserfs-kmp-default-debuginfo: All versions

kernel-default-livepatch: All versions

kernel-default-extra: All versions

kernel-default-devel-debuginfo: All versions

kernel-obs-qa: All versions

kernel-obs-build: All versions

kernel-syms: All versions

kselftests-kmp-default-debuginfo: All versions

kernel-obs-build-debugsource: All versions

ocfs2-kmp-default-debuginfo: All versions

kernel-default-devel: All versions

kernel-default-optional: All versions

kernel-default-debugsource: All versions

cluster-md-kmp-default: All versions

kselftests-kmp-default: All versions

reiserfs-kmp-default: All versions

kernel-default-debuginfo: All versions

kernel-default-extra-debuginfo: All versions

kernel-kvmsmall-devel-debuginfo: All versions

kernel-default-base-rebuild: All versions

kernel-default-base: All versions

kernel-kvmsmall-debugsource: All versions

kernel-kvmsmall-devel: All versions

kernel-kvmsmall-debuginfo: All versions

kernel-debug-devel-debuginfo: All versions

kernel-debug-devel: All versions

kernel-debug-debuginfo: All versions

kernel-debug-debugsource: All versions

kernel-debug: All versions

kernel-docs-html: All versions

kernel-source-vanilla: All versions

kernel-source: All versions

kernel-devel: All versions

kernel-macros: All versions

kernel-docs: All versions

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4:LTSS:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-lg:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apple:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-arm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-altera:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-sle15-sp4_update_39-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2025/suse-su-20251195-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Input validation error

EUVDB-ID: #VU106234

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49739

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the gfs2_dinode_in() function in fs/gfs2/glops.c, within the gfs2_unstuffer_page() function in fs/gfs2/bmap.c, within the stuffed_readpage() function in fs/gfs2/aops.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4: LTSS

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: All versions

dtb-allwinner: All versions

dlm-kmp-64kb-debuginfo: All versions

gfs2-kmp-64kb: All versions

dtb-marvell: All versions

dtb-rockchip: All versions

dtb-amlogic: All versions

dtb-sprd: All versions

ocfs2-kmp-64kb-debuginfo: All versions

dtb-renesas: All versions

kernel-64kb-optional: All versions

ocfs2-kmp-64kb: All versions

dtb-exynos: All versions

dtb-nvidia: All versions

dtb-broadcom: All versions

dtb-xilinx: All versions

reiserfs-kmp-64kb-debuginfo: All versions

dtb-socionext: All versions

dtb-lg: All versions

dtb-amd: All versions

dtb-hisilicon: All versions

dtb-qcom: All versions

dtb-apple: All versions

kernel-64kb-extra: All versions

dtb-apm: All versions

dtb-mediatek: All versions

gfs2-kmp-64kb-debuginfo: All versions

dlm-kmp-64kb: All versions

cluster-md-kmp-64kb-debuginfo: All versions

kernel-64kb-optional-debuginfo: All versions

kernel-64kb-debuginfo: All versions

cluster-md-kmp-64kb: All versions

dtb-amazon: All versions

kselftests-kmp-64kb-debuginfo: All versions

dtb-arm: All versions

kernel-64kb-devel-debuginfo: All versions

dtb-freescale: All versions

kernel-64kb-extra-debuginfo: All versions

dtb-altera: All versions

kernel-64kb-devel: All versions

kselftests-kmp-64kb: All versions

reiserfs-kmp-64kb: All versions

kernel-64kb-debugsource: All versions

dtb-cavium: All versions

dtb-aarch64: All versions

kernel-zfcpdump-debugsource: All versions

kernel-zfcpdump-debuginfo: All versions

kernel-zfcpdump: All versions

kernel-kvmsmall: All versions

kernel-livepatch-SLE15-SP4_Update_39-debugsource: All versions

kernel-livepatch-5_14_21-150400_24_161-default: All versions

kernel-default-livepatch-devel: All versions

kernel-livepatch-5_14_21-150400_24_161-default-debuginfo: All versions

kernel-default: All versions

gfs2-kmp-default: All versions

ocfs2-kmp-default: All versions

dlm-kmp-default: All versions

dlm-kmp-default-debuginfo: All versions

gfs2-kmp-default-debuginfo: All versions

kernel-default-optional-debuginfo: All versions

cluster-md-kmp-default-debuginfo: All versions

reiserfs-kmp-default-debuginfo: All versions

kernel-default-livepatch: All versions

kernel-default-extra: All versions

kernel-default-devel-debuginfo: All versions

kernel-obs-qa: All versions

kernel-obs-build: All versions

kernel-syms: All versions

kselftests-kmp-default-debuginfo: All versions

kernel-obs-build-debugsource: All versions

ocfs2-kmp-default-debuginfo: All versions

kernel-default-devel: All versions

kernel-default-optional: All versions

kernel-default-debugsource: All versions

cluster-md-kmp-default: All versions

kselftests-kmp-default: All versions

reiserfs-kmp-default: All versions

kernel-default-debuginfo: All versions

kernel-default-extra-debuginfo: All versions

kernel-kvmsmall-devel-debuginfo: All versions

kernel-default-base-rebuild: All versions

kernel-default-base: All versions

kernel-kvmsmall-debugsource: All versions

kernel-kvmsmall-devel: All versions

kernel-kvmsmall-debuginfo: All versions

kernel-debug-devel-debuginfo: All versions

kernel-debug-devel: All versions

kernel-debug-debuginfo: All versions

kernel-debug-debugsource: All versions

kernel-debug: All versions

kernel-docs-html: All versions

kernel-source-vanilla: All versions

kernel-source: All versions

kernel-devel: All versions

kernel-macros: All versions

kernel-docs: All versions

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4:LTSS:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-lg:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apple:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-arm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-altera:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-sle15-sp4_update_39-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2025/suse-su-20251195-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Memory leak

EUVDB-ID: #VU106157

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49746

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the sdma_transfer_init() function in drivers/dma/imx-sdma.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4: LTSS

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: All versions

dtb-allwinner: All versions

dlm-kmp-64kb-debuginfo: All versions

gfs2-kmp-64kb: All versions

dtb-marvell: All versions

dtb-rockchip: All versions

dtb-amlogic: All versions

dtb-sprd: All versions

ocfs2-kmp-64kb-debuginfo: All versions

dtb-renesas: All versions

kernel-64kb-optional: All versions

ocfs2-kmp-64kb: All versions

dtb-exynos: All versions

dtb-nvidia: All versions

dtb-broadcom: All versions

dtb-xilinx: All versions

reiserfs-kmp-64kb-debuginfo: All versions

dtb-socionext: All versions

dtb-lg: All versions

dtb-amd: All versions

dtb-hisilicon: All versions

dtb-qcom: All versions

dtb-apple: All versions

kernel-64kb-extra: All versions

dtb-apm: All versions

dtb-mediatek: All versions

gfs2-kmp-64kb-debuginfo: All versions

dlm-kmp-64kb: All versions

cluster-md-kmp-64kb-debuginfo: All versions

kernel-64kb-optional-debuginfo: All versions

kernel-64kb-debuginfo: All versions

cluster-md-kmp-64kb: All versions

dtb-amazon: All versions

kselftests-kmp-64kb-debuginfo: All versions

dtb-arm: All versions

kernel-64kb-devel-debuginfo: All versions

dtb-freescale: All versions

kernel-64kb-extra-debuginfo: All versions

dtb-altera: All versions

kernel-64kb-devel: All versions

kselftests-kmp-64kb: All versions

reiserfs-kmp-64kb: All versions

kernel-64kb-debugsource: All versions

dtb-cavium: All versions

dtb-aarch64: All versions

kernel-zfcpdump-debugsource: All versions

kernel-zfcpdump-debuginfo: All versions

kernel-zfcpdump: All versions

kernel-kvmsmall: All versions

kernel-livepatch-SLE15-SP4_Update_39-debugsource: All versions

kernel-livepatch-5_14_21-150400_24_161-default: All versions

kernel-default-livepatch-devel: All versions

kernel-livepatch-5_14_21-150400_24_161-default-debuginfo: All versions

kernel-default: All versions

gfs2-kmp-default: All versions

ocfs2-kmp-default: All versions

dlm-kmp-default: All versions

dlm-kmp-default-debuginfo: All versions

gfs2-kmp-default-debuginfo: All versions

kernel-default-optional-debuginfo: All versions

cluster-md-kmp-default-debuginfo: All versions

reiserfs-kmp-default-debuginfo: All versions

kernel-default-livepatch: All versions

kernel-default-extra: All versions

kernel-default-devel-debuginfo: All versions

kernel-obs-qa: All versions

kernel-obs-build: All versions

kernel-syms: All versions

kselftests-kmp-default-debuginfo: All versions

kernel-obs-build-debugsource: All versions

ocfs2-kmp-default-debuginfo: All versions

kernel-default-devel: All versions

kernel-default-optional: All versions

kernel-default-debugsource: All versions

cluster-md-kmp-default: All versions

kselftests-kmp-default: All versions

reiserfs-kmp-default: All versions

kernel-default-debuginfo: All versions

kernel-default-extra-debuginfo: All versions

kernel-kvmsmall-devel-debuginfo: All versions

kernel-default-base-rebuild: All versions

kernel-default-base: All versions

kernel-kvmsmall-debugsource: All versions

kernel-kvmsmall-devel: All versions

kernel-kvmsmall-debuginfo: All versions

kernel-debug-devel-debuginfo: All versions

kernel-debug-devel: All versions

kernel-debug-debuginfo: All versions

kernel-debug-debugsource: All versions

kernel-debug: All versions

kernel-docs-html: All versions

kernel-source-vanilla: All versions

kernel-source: All versions

kernel-devel: All versions

kernel-macros: All versions

kernel-docs: All versions

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4:LTSS:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-lg:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apple:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-arm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-altera:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-sle15-sp4_update_39-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2025/suse-su-20251195-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Integer overflow

EUVDB-ID: #VU106208

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49748

CWE-ID: CWE-190 - Integer overflow

Exploit availability: No

Description

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to integer overflow within the amd_core_pmu_init() function in arch/x86/events/amd/core.c. A local user can execute arbitrary code.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4: LTSS

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: All versions

dtb-allwinner: All versions

dlm-kmp-64kb-debuginfo: All versions

gfs2-kmp-64kb: All versions

dtb-marvell: All versions

dtb-rockchip: All versions

dtb-amlogic: All versions

dtb-sprd: All versions

ocfs2-kmp-64kb-debuginfo: All versions

dtb-renesas: All versions

kernel-64kb-optional: All versions

ocfs2-kmp-64kb: All versions

dtb-exynos: All versions

dtb-nvidia: All versions

dtb-broadcom: All versions

dtb-xilinx: All versions

reiserfs-kmp-64kb-debuginfo: All versions

dtb-socionext: All versions

dtb-lg: All versions

dtb-amd: All versions

dtb-hisilicon: All versions

dtb-qcom: All versions

dtb-apple: All versions

kernel-64kb-extra: All versions

dtb-apm: All versions

dtb-mediatek: All versions

gfs2-kmp-64kb-debuginfo: All versions

dlm-kmp-64kb: All versions

cluster-md-kmp-64kb-debuginfo: All versions

kernel-64kb-optional-debuginfo: All versions

kernel-64kb-debuginfo: All versions

cluster-md-kmp-64kb: All versions

dtb-amazon: All versions

kselftests-kmp-64kb-debuginfo: All versions

dtb-arm: All versions

kernel-64kb-devel-debuginfo: All versions

dtb-freescale: All versions

kernel-64kb-extra-debuginfo: All versions

dtb-altera: All versions

kernel-64kb-devel: All versions

kselftests-kmp-64kb: All versions

reiserfs-kmp-64kb: All versions

kernel-64kb-debugsource: All versions

dtb-cavium: All versions

dtb-aarch64: All versions

kernel-zfcpdump-debugsource: All versions

kernel-zfcpdump-debuginfo: All versions

kernel-zfcpdump: All versions

kernel-kvmsmall: All versions

kernel-livepatch-SLE15-SP4_Update_39-debugsource: All versions

kernel-livepatch-5_14_21-150400_24_161-default: All versions

kernel-default-livepatch-devel: All versions

kernel-livepatch-5_14_21-150400_24_161-default-debuginfo: All versions

kernel-default: All versions

gfs2-kmp-default: All versions

ocfs2-kmp-default: All versions

dlm-kmp-default: All versions

dlm-kmp-default-debuginfo: All versions

gfs2-kmp-default-debuginfo: All versions

kernel-default-optional-debuginfo: All versions

cluster-md-kmp-default-debuginfo: All versions

reiserfs-kmp-default-debuginfo: All versions

kernel-default-livepatch: All versions

kernel-default-extra: All versions

kernel-default-devel-debuginfo: All versions

kernel-obs-qa: All versions

kernel-obs-build: All versions

kernel-syms: All versions

kselftests-kmp-default-debuginfo: All versions

kernel-obs-build-debugsource: All versions

ocfs2-kmp-default-debuginfo: All versions

kernel-default-devel: All versions

kernel-default-optional: All versions

kernel-default-debugsource: All versions

cluster-md-kmp-default: All versions

kselftests-kmp-default: All versions

reiserfs-kmp-default: All versions

kernel-default-debuginfo: All versions

kernel-default-extra-debuginfo: All versions

kernel-kvmsmall-devel-debuginfo: All versions

kernel-default-base-rebuild: All versions

kernel-default-base: All versions

kernel-kvmsmall-debugsource: All versions

kernel-kvmsmall-devel: All versions

kernel-kvmsmall-debuginfo: All versions

kernel-debug-devel-debuginfo: All versions

kernel-debug-devel: All versions

kernel-debug-debuginfo: All versions

kernel-debug-debugsource: All versions

kernel-debug: All versions

kernel-docs-html: All versions

kernel-source-vanilla: All versions

kernel-source: All versions

kernel-devel: All versions

kernel-macros: All versions

kernel-docs: All versions

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4:LTSS:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-lg:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apple:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-arm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-altera:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-sle15-sp4_update_39-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2025/suse-su-20251195-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Improper locking

EUVDB-ID: #VU106198

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49751

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the w1_process() function in drivers/w1/w1.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4: LTSS

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: All versions

dtb-allwinner: All versions

dlm-kmp-64kb-debuginfo: All versions

gfs2-kmp-64kb: All versions

dtb-marvell: All versions

dtb-rockchip: All versions

dtb-amlogic: All versions

dtb-sprd: All versions

ocfs2-kmp-64kb-debuginfo: All versions

dtb-renesas: All versions

kernel-64kb-optional: All versions

ocfs2-kmp-64kb: All versions

dtb-exynos: All versions

dtb-nvidia: All versions

dtb-broadcom: All versions

dtb-xilinx: All versions

reiserfs-kmp-64kb-debuginfo: All versions

dtb-socionext: All versions

dtb-lg: All versions

dtb-amd: All versions

dtb-hisilicon: All versions

dtb-qcom: All versions

dtb-apple: All versions

kernel-64kb-extra: All versions

dtb-apm: All versions

dtb-mediatek: All versions

gfs2-kmp-64kb-debuginfo: All versions

dlm-kmp-64kb: All versions

cluster-md-kmp-64kb-debuginfo: All versions

kernel-64kb-optional-debuginfo: All versions

kernel-64kb-debuginfo: All versions

cluster-md-kmp-64kb: All versions

dtb-amazon: All versions

kselftests-kmp-64kb-debuginfo: All versions

dtb-arm: All versions

kernel-64kb-devel-debuginfo: All versions

dtb-freescale: All versions

kernel-64kb-extra-debuginfo: All versions

dtb-altera: All versions

kernel-64kb-devel: All versions

kselftests-kmp-64kb: All versions

reiserfs-kmp-64kb: All versions

kernel-64kb-debugsource: All versions

dtb-cavium: All versions

dtb-aarch64: All versions

kernel-zfcpdump-debugsource: All versions

kernel-zfcpdump-debuginfo: All versions

kernel-zfcpdump: All versions

kernel-kvmsmall: All versions

kernel-livepatch-SLE15-SP4_Update_39-debugsource: All versions

kernel-livepatch-5_14_21-150400_24_161-default: All versions

kernel-default-livepatch-devel: All versions

kernel-livepatch-5_14_21-150400_24_161-default-debuginfo: All versions

kernel-default: All versions

gfs2-kmp-default: All versions

ocfs2-kmp-default: All versions

dlm-kmp-default: All versions

dlm-kmp-default-debuginfo: All versions

gfs2-kmp-default-debuginfo: All versions

kernel-default-optional-debuginfo: All versions

cluster-md-kmp-default-debuginfo: All versions

reiserfs-kmp-default-debuginfo: All versions

kernel-default-livepatch: All versions

kernel-default-extra: All versions

kernel-default-devel-debuginfo: All versions

kernel-obs-qa: All versions

kernel-obs-build: All versions

kernel-syms: All versions

kselftests-kmp-default-debuginfo: All versions

kernel-obs-build-debugsource: All versions

ocfs2-kmp-default-debuginfo: All versions

kernel-default-devel: All versions

kernel-default-optional: All versions

kernel-default-debugsource: All versions

cluster-md-kmp-default: All versions

kselftests-kmp-default: All versions

reiserfs-kmp-default: All versions

kernel-default-debuginfo: All versions

kernel-default-extra-debuginfo: All versions

kernel-kvmsmall-devel-debuginfo: All versions

kernel-default-base-rebuild: All versions

kernel-default-base: All versions

kernel-kvmsmall-debugsource: All versions

kernel-kvmsmall-devel: All versions

kernel-kvmsmall-debuginfo: All versions

kernel-debug-devel-debuginfo: All versions

kernel-debug-devel: All versions

kernel-debug-debuginfo: All versions

kernel-debug-debugsource: All versions

kernel-debug: All versions

kernel-docs-html: All versions

kernel-source-vanilla: All versions

kernel-source: All versions

kernel-devel: All versions

kernel-macros: All versions

kernel-docs: All versions

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4:LTSS:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-lg:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apple:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-arm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-altera:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-sle15-sp4_update_39-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2025/suse-su-20251195-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Use-after-free

EUVDB-ID: #VU106178

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49753

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the dma_chan_get() function in drivers/dma/dmaengine.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4: LTSS

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: All versions

dtb-allwinner: All versions

dlm-kmp-64kb-debuginfo: All versions

gfs2-kmp-64kb: All versions

dtb-marvell: All versions

dtb-rockchip: All versions

dtb-amlogic: All versions

dtb-sprd: All versions

ocfs2-kmp-64kb-debuginfo: All versions

dtb-renesas: All versions

kernel-64kb-optional: All versions

ocfs2-kmp-64kb: All versions

dtb-exynos: All versions

dtb-nvidia: All versions

dtb-broadcom: All versions

dtb-xilinx: All versions

reiserfs-kmp-64kb-debuginfo: All versions

dtb-socionext: All versions

dtb-lg: All versions

dtb-amd: All versions

dtb-hisilicon: All versions

dtb-qcom: All versions

dtb-apple: All versions

kernel-64kb-extra: All versions

dtb-apm: All versions

dtb-mediatek: All versions

gfs2-kmp-64kb-debuginfo: All versions

dlm-kmp-64kb: All versions

cluster-md-kmp-64kb-debuginfo: All versions

kernel-64kb-optional-debuginfo: All versions

kernel-64kb-debuginfo: All versions

cluster-md-kmp-64kb: All versions

dtb-amazon: All versions

kselftests-kmp-64kb-debuginfo: All versions

dtb-arm: All versions

kernel-64kb-devel-debuginfo: All versions

dtb-freescale: All versions

kernel-64kb-extra-debuginfo: All versions

dtb-altera: All versions

kernel-64kb-devel: All versions

kselftests-kmp-64kb: All versions

reiserfs-kmp-64kb: All versions

kernel-64kb-debugsource: All versions

dtb-cavium: All versions

dtb-aarch64: All versions

kernel-zfcpdump-debugsource: All versions

kernel-zfcpdump-debuginfo: All versions

kernel-zfcpdump: All versions

kernel-kvmsmall: All versions

kernel-livepatch-SLE15-SP4_Update_39-debugsource: All versions

kernel-livepatch-5_14_21-150400_24_161-default: All versions

kernel-default-livepatch-devel: All versions

kernel-livepatch-5_14_21-150400_24_161-default-debuginfo: All versions

kernel-default: All versions

gfs2-kmp-default: All versions

ocfs2-kmp-default: All versions

dlm-kmp-default: All versions

dlm-kmp-default-debuginfo: All versions

gfs2-kmp-default-debuginfo: All versions

kernel-default-optional-debuginfo: All versions

cluster-md-kmp-default-debuginfo: All versions

reiserfs-kmp-default-debuginfo: All versions

kernel-default-livepatch: All versions

kernel-default-extra: All versions

kernel-default-devel-debuginfo: All versions

kernel-obs-qa: All versions

kernel-obs-build: All versions

kernel-syms: All versions

kselftests-kmp-default-debuginfo: All versions

kernel-obs-build-debugsource: All versions

ocfs2-kmp-default-debuginfo: All versions

kernel-default-devel: All versions

kernel-default-optional: All versions

kernel-default-debugsource: All versions

cluster-md-kmp-default: All versions

kselftests-kmp-default: All versions

reiserfs-kmp-default: All versions

kernel-default-debuginfo: All versions

kernel-default-extra-debuginfo: All versions

kernel-kvmsmall-devel-debuginfo: All versions

kernel-default-base-rebuild: All versions

kernel-default-base: All versions

kernel-kvmsmall-debugsource: All versions

kernel-kvmsmall-devel: All versions

kernel-kvmsmall-debuginfo: All versions

kernel-debug-devel-debuginfo: All versions

kernel-debug-devel: All versions

kernel-debug-debuginfo: All versions

kernel-debug-debugsource: All versions

kernel-debug: All versions

kernel-docs-html: All versions

kernel-source-vanilla: All versions

kernel-source: All versions

kernel-devel: All versions

kernel-macros: All versions

kernel-docs: All versions

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4:LTSS:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-lg:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apple:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-arm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-altera:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-sle15-sp4_update_39-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2025/suse-su-20251195-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Use-after-free

EUVDB-ID: #VU106177

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49755

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the __ffs_ep0_queue_wait() and functionfs_unbind() functions in drivers/usb/gadget/function/f_fs.c. A local user can escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4: LTSS

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: All versions

dtb-allwinner: All versions

dlm-kmp-64kb-debuginfo: All versions

gfs2-kmp-64kb: All versions

dtb-marvell: All versions

dtb-rockchip: All versions

dtb-amlogic: All versions

dtb-sprd: All versions

ocfs2-kmp-64kb-debuginfo: All versions

dtb-renesas: All versions

kernel-64kb-optional: All versions

ocfs2-kmp-64kb: All versions

dtb-exynos: All versions

dtb-nvidia: All versions

dtb-broadcom: All versions

dtb-xilinx: All versions

reiserfs-kmp-64kb-debuginfo: All versions

dtb-socionext: All versions

dtb-lg: All versions

dtb-amd: All versions

dtb-hisilicon: All versions

dtb-qcom: All versions

dtb-apple: All versions

kernel-64kb-extra: All versions

dtb-apm: All versions

dtb-mediatek: All versions

gfs2-kmp-64kb-debuginfo: All versions

dlm-kmp-64kb: All versions

cluster-md-kmp-64kb-debuginfo: All versions

kernel-64kb-optional-debuginfo: All versions

kernel-64kb-debuginfo: All versions

cluster-md-kmp-64kb: All versions

dtb-amazon: All versions

kselftests-kmp-64kb-debuginfo: All versions

dtb-arm: All versions

kernel-64kb-devel-debuginfo: All versions

dtb-freescale: All versions

kernel-64kb-extra-debuginfo: All versions

dtb-altera: All versions

kernel-64kb-devel: All versions

kselftests-kmp-64kb: All versions

reiserfs-kmp-64kb: All versions

kernel-64kb-debugsource: All versions

dtb-cavium: All versions

dtb-aarch64: All versions

kernel-zfcpdump-debugsource: All versions

kernel-zfcpdump-debuginfo: All versions

kernel-zfcpdump: All versions

kernel-kvmsmall: All versions

kernel-livepatch-SLE15-SP4_Update_39-debugsource: All versions

kernel-livepatch-5_14_21-150400_24_161-default: All versions

kernel-default-livepatch-devel: All versions

kernel-livepatch-5_14_21-150400_24_161-default-debuginfo: All versions

kernel-default: All versions

gfs2-kmp-default: All versions

ocfs2-kmp-default: All versions

dlm-kmp-default: All versions

dlm-kmp-default-debuginfo: All versions

gfs2-kmp-default-debuginfo: All versions

kernel-default-optional-debuginfo: All versions

cluster-md-kmp-default-debuginfo: All versions

reiserfs-kmp-default-debuginfo: All versions

kernel-default-livepatch: All versions

kernel-default-extra: All versions

kernel-default-devel-debuginfo: All versions

kernel-obs-qa: All versions

kernel-obs-build: All versions

kernel-syms: All versions

kselftests-kmp-default-debuginfo: All versions

kernel-obs-build-debugsource: All versions

ocfs2-kmp-default-debuginfo: All versions

kernel-default-devel: All versions

kernel-default-optional: All versions

kernel-default-debugsource: All versions

cluster-md-kmp-default: All versions

kselftests-kmp-default: All versions

reiserfs-kmp-default: All versions

kernel-default-debuginfo: All versions

kernel-default-extra-debuginfo: All versions

kernel-kvmsmall-devel-debuginfo: All versions

kernel-default-base-rebuild: All versions

kernel-default-base: All versions

kernel-kvmsmall-debugsource: All versions

kernel-kvmsmall-devel: All versions

kernel-kvmsmall-debuginfo: All versions

kernel-debug-devel-debuginfo: All versions

kernel-debug-devel: All versions

kernel-debug-debuginfo: All versions

kernel-debug-debugsource: All versions

kernel-debug: All versions

kernel-docs-html: All versions

kernel-source-vanilla: All versions

kernel-source: All versions

kernel-devel: All versions

kernel-macros: All versions

kernel-docs: All versions

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4:LTSS:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-lg:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apple:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-arm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-altera:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-sle15-sp4_update_39-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2025/suse-su-20251195-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

14) Improper locking

EUVDB-ID: #VU106199

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49759

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the vmci_check_host_caps(), vmci_dispatch_dgs(), vmci_interrupt(), vmci_interrupt_bm(), vmci_guest_probe_device(), free_irq() and vmci_guest_remove_device() functions in drivers/misc/vmw_vmci/vmci_guest.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4: LTSS

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: All versions

dtb-allwinner: All versions

dlm-kmp-64kb-debuginfo: All versions

gfs2-kmp-64kb: All versions

dtb-marvell: All versions

dtb-rockchip: All versions

dtb-amlogic: All versions

dtb-sprd: All versions

ocfs2-kmp-64kb-debuginfo: All versions

dtb-renesas: All versions

kernel-64kb-optional: All versions

ocfs2-kmp-64kb: All versions

dtb-exynos: All versions

dtb-nvidia: All versions

dtb-broadcom: All versions

dtb-xilinx: All versions

reiserfs-kmp-64kb-debuginfo: All versions

dtb-socionext: All versions

dtb-lg: All versions

dtb-amd: All versions

dtb-hisilicon: All versions

dtb-qcom: All versions

dtb-apple: All versions

kernel-64kb-extra: All versions

dtb-apm: All versions

dtb-mediatek: All versions

gfs2-kmp-64kb-debuginfo: All versions

dlm-kmp-64kb: All versions

cluster-md-kmp-64kb-debuginfo: All versions

kernel-64kb-optional-debuginfo: All versions

kernel-64kb-debuginfo: All versions

cluster-md-kmp-64kb: All versions

dtb-amazon: All versions

kselftests-kmp-64kb-debuginfo: All versions

dtb-arm: All versions

kernel-64kb-devel-debuginfo: All versions

dtb-freescale: All versions

kernel-64kb-extra-debuginfo: All versions

dtb-altera: All versions

kernel-64kb-devel: All versions

kselftests-kmp-64kb: All versions

reiserfs-kmp-64kb: All versions

kernel-64kb-debugsource: All versions

dtb-cavium: All versions

dtb-aarch64: All versions

kernel-zfcpdump-debugsource: All versions

kernel-zfcpdump-debuginfo: All versions

kernel-zfcpdump: All versions

kernel-kvmsmall: All versions

kernel-livepatch-SLE15-SP4_Update_39-debugsource: All versions

kernel-livepatch-5_14_21-150400_24_161-default: All versions

kernel-default-livepatch-devel: All versions

kernel-livepatch-5_14_21-150400_24_161-default-debuginfo: All versions

kernel-default: All versions

gfs2-kmp-default: All versions

ocfs2-kmp-default: All versions

dlm-kmp-default: All versions

dlm-kmp-default-debuginfo: All versions

gfs2-kmp-default-debuginfo: All versions

kernel-default-optional-debuginfo: All versions

cluster-md-kmp-default-debuginfo: All versions

reiserfs-kmp-default-debuginfo: All versions

kernel-default-livepatch: All versions

kernel-default-extra: All versions

kernel-default-devel-debuginfo: All versions

kernel-obs-qa: All versions

kernel-obs-build: All versions

kernel-syms: All versions

kselftests-kmp-default-debuginfo: All versions

kernel-obs-build-debugsource: All versions

ocfs2-kmp-default-debuginfo: All versions

kernel-default-devel: All versions

kernel-default-optional: All versions

kernel-default-debugsource: All versions

cluster-md-kmp-default: All versions

kselftests-kmp-default: All versions

reiserfs-kmp-default: All versions

kernel-default-debuginfo: All versions

kernel-default-extra-debuginfo: All versions

kernel-kvmsmall-devel-debuginfo: All versions

kernel-default-base-rebuild: All versions

kernel-default-base: All versions

kernel-kvmsmall-debugsource: All versions

kernel-kvmsmall-devel: All versions

kernel-kvmsmall-debuginfo: All versions

kernel-debug-devel-debuginfo: All versions

kernel-debug-devel: All versions

kernel-debug-debuginfo: All versions

kernel-debug-debugsource: All versions

kernel-debug: All versions

kernel-docs-html: All versions

kernel-source-vanilla: All versions

kernel-source: All versions

kernel-devel: All versions

kernel-macros: All versions

kernel-docs: All versions

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4:LTSS:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-lg:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apple:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-arm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-altera:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-sle15-sp4_update_39-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2025/suse-su-20251195-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

15) Integer overflow

EUVDB-ID: #VU71173

Risk: Low

CVSSv4.0: 7.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Clear]

CVE-ID: CVE-2023-0179

CWE-ID: CWE-190 - Integer overflow

Exploit availability: Yes

Description

The vulnerability allows a local  user to escalate privileges on the system.

The vulnerability exists due to an integer overflow within the nft_payload_copy_vlan() function in Linux kernel Netfilter. A local user can trigger an integer overflow and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4: LTSS

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: All versions

dtb-allwinner: All versions

dlm-kmp-64kb-debuginfo: All versions

gfs2-kmp-64kb: All versions

dtb-marvell: All versions

dtb-rockchip: All versions

dtb-amlogic: All versions

dtb-sprd: All versions

ocfs2-kmp-64kb-debuginfo: All versions

dtb-renesas: All versions

kernel-64kb-optional: All versions

ocfs2-kmp-64kb: All versions

dtb-exynos: All versions

dtb-nvidia: All versions

dtb-broadcom: All versions

dtb-xilinx: All versions

reiserfs-kmp-64kb-debuginfo: All versions

dtb-socionext: All versions

dtb-lg: All versions

dtb-amd: All versions

dtb-hisilicon: All versions

dtb-qcom: All versions

dtb-apple: All versions

kernel-64kb-extra: All versions

dtb-apm: All versions

dtb-mediatek: All versions

gfs2-kmp-64kb-debuginfo: All versions

dlm-kmp-64kb: All versions

cluster-md-kmp-64kb-debuginfo: All versions

kernel-64kb-optional-debuginfo: All versions

kernel-64kb-debuginfo: All versions

cluster-md-kmp-64kb: All versions

dtb-amazon: All versions

kselftests-kmp-64kb-debuginfo: All versions

dtb-arm: All versions

kernel-64kb-devel-debuginfo: All versions

dtb-freescale: All versions

kernel-64kb-extra-debuginfo: All versions

dtb-altera: All versions

kernel-64kb-devel: All versions

kselftests-kmp-64kb: All versions

reiserfs-kmp-64kb: All versions

kernel-64kb-debugsource: All versions

dtb-cavium: All versions

dtb-aarch64: All versions

kernel-zfcpdump-debugsource: All versions

kernel-zfcpdump-debuginfo: All versions

kernel-zfcpdump: All versions

kernel-kvmsmall: All versions

kernel-livepatch-SLE15-SP4_Update_39-debugsource: All versions

kernel-livepatch-5_14_21-150400_24_161-default: All versions

kernel-default-livepatch-devel: All versions

kernel-livepatch-5_14_21-150400_24_161-default-debuginfo: All versions

kernel-default: All versions

gfs2-kmp-default: All versions

ocfs2-kmp-default: All versions

dlm-kmp-default: All versions

dlm-kmp-default-debuginfo: All versions

gfs2-kmp-default-debuginfo: All versions

kernel-default-optional-debuginfo: All versions

cluster-md-kmp-default-debuginfo: All versions

reiserfs-kmp-default-debuginfo: All versions

kernel-default-livepatch: All versions

kernel-default-extra: All versions

kernel-default-devel-debuginfo: All versions

kernel-obs-qa: All versions

kernel-obs-build: All versions

kernel-syms: All versions

kselftests-kmp-default-debuginfo: All versions

kernel-obs-build-debugsource: All versions

ocfs2-kmp-default-debuginfo: All versions

kernel-default-devel: All versions

kernel-default-optional: All versions

kernel-default-debugsource: All versions

cluster-md-kmp-default: All versions

kselftests-kmp-default: All versions

reiserfs-kmp-default: All versions

kernel-default-debuginfo: All versions

kernel-default-extra-debuginfo: All versions

kernel-kvmsmall-devel-debuginfo: All versions

kernel-default-base-rebuild: All versions

kernel-default-base: All versions

kernel-kvmsmall-debugsource: All versions

kernel-kvmsmall-devel: All versions

kernel-kvmsmall-debuginfo: All versions

kernel-debug-devel-debuginfo: All versions

kernel-debug-devel: All versions

kernel-debug-debuginfo: All versions

kernel-debug-debugsource: All versions

kernel-debug: All versions

kernel-docs-html: All versions

kernel-source-vanilla: All versions

kernel-source: All versions

kernel-devel: All versions

kernel-macros: All versions

kernel-docs: All versions

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4:LTSS:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-lg:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apple:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-arm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-altera:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-sle15-sp4_update_39-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2025/suse-su-20251195-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.

16) Use-after-free

EUVDB-ID: #VU74770

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-1652

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the nfsd4_ssc_setup_dul() function in fs/nfsd/nfs4proc.c. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4: LTSS

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: All versions

dtb-allwinner: All versions

dlm-kmp-64kb-debuginfo: All versions

gfs2-kmp-64kb: All versions

dtb-marvell: All versions

dtb-rockchip: All versions

dtb-amlogic: All versions

dtb-sprd: All versions

ocfs2-kmp-64kb-debuginfo: All versions

dtb-renesas: All versions

kernel-64kb-optional: All versions

ocfs2-kmp-64kb: All versions

dtb-exynos: All versions

dtb-nvidia: All versions

dtb-broadcom: All versions

dtb-xilinx: All versions

reiserfs-kmp-64kb-debuginfo: All versions

dtb-socionext: All versions

dtb-lg: All versions

dtb-amd: All versions

dtb-hisilicon: All versions

dtb-qcom: All versions

dtb-apple: All versions

kernel-64kb-extra: All versions

dtb-apm: All versions

dtb-mediatek: All versions

gfs2-kmp-64kb-debuginfo: All versions

dlm-kmp-64kb: All versions

cluster-md-kmp-64kb-debuginfo: All versions

kernel-64kb-optional-debuginfo: All versions

kernel-64kb-debuginfo: All versions

cluster-md-kmp-64kb: All versions

dtb-amazon: All versions

kselftests-kmp-64kb-debuginfo: All versions

dtb-arm: All versions

kernel-64kb-devel-debuginfo: All versions

dtb-freescale: All versions

kernel-64kb-extra-debuginfo: All versions

dtb-altera: All versions

kernel-64kb-devel: All versions

kselftests-kmp-64kb: All versions

reiserfs-kmp-64kb: All versions

kernel-64kb-debugsource: All versions

dtb-cavium: All versions

dtb-aarch64: All versions

kernel-zfcpdump-debugsource: All versions

kernel-zfcpdump-debuginfo: All versions

kernel-zfcpdump: All versions

kernel-kvmsmall: All versions

kernel-livepatch-SLE15-SP4_Update_39-debugsource: All versions

kernel-livepatch-5_14_21-150400_24_161-default: All versions

kernel-default-livepatch-devel: All versions

kernel-livepatch-5_14_21-150400_24_161-default-debuginfo: All versions

kernel-default: All versions

gfs2-kmp-default: All versions

ocfs2-kmp-default: All versions

dlm-kmp-default: All versions

dlm-kmp-default-debuginfo: All versions

gfs2-kmp-default-debuginfo: All versions

kernel-default-optional-debuginfo: All versions

cluster-md-kmp-default-debuginfo: All versions

reiserfs-kmp-default-debuginfo: All versions

kernel-default-livepatch: All versions

kernel-default-extra: All versions

kernel-default-devel-debuginfo: All versions

kernel-obs-qa: All versions

kernel-obs-build: All versions

kernel-syms: All versions

kselftests-kmp-default-debuginfo: All versions

kernel-obs-build-debugsource: All versions

ocfs2-kmp-default-debuginfo: All versions

kernel-default-devel: All versions

kernel-default-optional: All versions

kernel-default-debugsource: All versions

cluster-md-kmp-default: All versions

kselftests-kmp-default: All versions

reiserfs-kmp-default: All versions

kernel-default-debuginfo: All versions

kernel-default-extra-debuginfo: All versions

kernel-kvmsmall-devel-debuginfo: All versions

kernel-default-base-rebuild: All versions

kernel-default-base: All versions

kernel-kvmsmall-debugsource: All versions

kernel-kvmsmall-devel: All versions

kernel-kvmsmall-debuginfo: All versions

kernel-debug-devel-debuginfo: All versions

kernel-debug-devel: All versions

kernel-debug-debuginfo: All versions

kernel-debug-debugsource: All versions

kernel-debug: All versions

kernel-docs-html: All versions

kernel-source-vanilla: All versions

kernel-source: All versions

kernel-devel: All versions

kernel-macros: All versions

kernel-docs: All versions

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4:LTSS:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-lg:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apple:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-arm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-altera:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-sle15-sp4_update_39-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2025/suse-su-20251195-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

17) Use-after-free

EUVDB-ID: #VU75994

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-2162

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to a use-after-free error within the scsi_sw_tcp_session_create() function in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kernel. A local user can trigger a use-after-free error and gain access to sensitive information.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4: LTSS

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: All versions

dtb-allwinner: All versions

dlm-kmp-64kb-debuginfo: All versions

gfs2-kmp-64kb: All versions

dtb-marvell: All versions

dtb-rockchip: All versions

dtb-amlogic: All versions

dtb-sprd: All versions

ocfs2-kmp-64kb-debuginfo: All versions

dtb-renesas: All versions

kernel-64kb-optional: All versions

ocfs2-kmp-64kb: All versions

dtb-exynos: All versions

dtb-nvidia: All versions

dtb-broadcom: All versions

dtb-xilinx: All versions

reiserfs-kmp-64kb-debuginfo: All versions

dtb-socionext: All versions

dtb-lg: All versions

dtb-amd: All versions

dtb-hisilicon: All versions

dtb-qcom: All versions

dtb-apple: All versions

kernel-64kb-extra: All versions

dtb-apm: All versions

dtb-mediatek: All versions

gfs2-kmp-64kb-debuginfo: All versions

dlm-kmp-64kb: All versions

cluster-md-kmp-64kb-debuginfo: All versions

kernel-64kb-optional-debuginfo: All versions

kernel-64kb-debuginfo: All versions

cluster-md-kmp-64kb: All versions

dtb-amazon: All versions

kselftests-kmp-64kb-debuginfo: All versions

dtb-arm: All versions

kernel-64kb-devel-debuginfo: All versions

dtb-freescale: All versions

kernel-64kb-extra-debuginfo: All versions

dtb-altera: All versions

kernel-64kb-devel: All versions

kselftests-kmp-64kb: All versions

reiserfs-kmp-64kb: All versions

kernel-64kb-debugsource: All versions

dtb-cavium: All versions

dtb-aarch64: All versions

kernel-zfcpdump-debugsource: All versions

kernel-zfcpdump-debuginfo: All versions

kernel-zfcpdump: All versions

kernel-kvmsmall: All versions

kernel-livepatch-SLE15-SP4_Update_39-debugsource: All versions

kernel-livepatch-5_14_21-150400_24_161-default: All versions

kernel-default-livepatch-devel: All versions

kernel-livepatch-5_14_21-150400_24_161-default-debuginfo: All versions

kernel-default: All versions

gfs2-kmp-default: All versions

ocfs2-kmp-default: All versions

dlm-kmp-default: All versions

dlm-kmp-default-debuginfo: All versions

gfs2-kmp-default-debuginfo: All versions

kernel-default-optional-debuginfo: All versions

cluster-md-kmp-default-debuginfo: All versions

reiserfs-kmp-default-debuginfo: All versions

kernel-default-livepatch: All versions

kernel-default-extra: All versions

kernel-default-devel-debuginfo: All versions

kernel-obs-qa: All versions

kernel-obs-build: All versions

kernel-syms: All versions

kselftests-kmp-default-debuginfo: All versions

kernel-obs-build-debugsource: All versions

ocfs2-kmp-default-debuginfo: All versions

kernel-default-devel: All versions

kernel-default-optional: All versions

kernel-default-debugsource: All versions

cluster-md-kmp-default: All versions

kselftests-kmp-default: All versions

reiserfs-kmp-default: All versions

kernel-default-debuginfo: All versions

kernel-default-extra-debuginfo: All versions

kernel-kvmsmall-devel-debuginfo: All versions

kernel-default-base-rebuild: All versions

kernel-default-base: All versions

kernel-kvmsmall-debugsource: All versions

kernel-kvmsmall-devel: All versions

kernel-kvmsmall-debuginfo: All versions

kernel-debug-devel-debuginfo: All versions

kernel-debug-devel: All versions

kernel-debug-debuginfo: All versions

kernel-debug-debugsource: All versions

kernel-debug: All versions

kernel-docs-html: All versions

kernel-source-vanilla: All versions

kernel-source: All versions

kernel-devel: All versions

kernel-macros: All versions

kernel-docs: All versions

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4:LTSS:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-lg:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apple:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-arm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-altera:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-sle15-sp4_update_39-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2025/suse-su-20251195-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

18) Use-after-free

EUVDB-ID: #VU79491

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-3567

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the vc_screen() function in vcs_read in drivers/tty/vt/vc_screen.c. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4: LTSS

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: All versions

dtb-allwinner: All versions

dlm-kmp-64kb-debuginfo: All versions

gfs2-kmp-64kb: All versions

dtb-marvell: All versions

dtb-rockchip: All versions

dtb-amlogic: All versions

dtb-sprd: All versions

ocfs2-kmp-64kb-debuginfo: All versions

dtb-renesas: All versions

kernel-64kb-optional: All versions

ocfs2-kmp-64kb: All versions

dtb-exynos: All versions

dtb-nvidia: All versions

dtb-broadcom: All versions

dtb-xilinx: All versions

reiserfs-kmp-64kb-debuginfo: All versions

dtb-socionext: All versions

dtb-lg: All versions

dtb-amd: All versions

dtb-hisilicon: All versions

dtb-qcom: All versions

dtb-apple: All versions

kernel-64kb-extra: All versions

dtb-apm: All versions

dtb-mediatek: All versions

gfs2-kmp-64kb-debuginfo: All versions

dlm-kmp-64kb: All versions

cluster-md-kmp-64kb-debuginfo: All versions

kernel-64kb-optional-debuginfo: All versions

kernel-64kb-debuginfo: All versions

cluster-md-kmp-64kb: All versions

dtb-amazon: All versions

kselftests-kmp-64kb-debuginfo: All versions

dtb-arm: All versions

kernel-64kb-devel-debuginfo: All versions

dtb-freescale: All versions

kernel-64kb-extra-debuginfo: All versions

dtb-altera: All versions

kernel-64kb-devel: All versions

kselftests-kmp-64kb: All versions

reiserfs-kmp-64kb: All versions

kernel-64kb-debugsource: All versions

dtb-cavium: All versions

dtb-aarch64: All versions

kernel-zfcpdump-debugsource: All versions

kernel-zfcpdump-debuginfo: All versions

kernel-zfcpdump: All versions

kernel-kvmsmall: All versions

kernel-livepatch-SLE15-SP4_Update_39-debugsource: All versions

kernel-livepatch-5_14_21-150400_24_161-default: All versions

kernel-default-livepatch-devel: All versions

kernel-livepatch-5_14_21-150400_24_161-default-debuginfo: All versions

kernel-default: All versions

gfs2-kmp-default: All versions

ocfs2-kmp-default: All versions

dlm-kmp-default: All versions

dlm-kmp-default-debuginfo: All versions

gfs2-kmp-default-debuginfo: All versions

kernel-default-optional-debuginfo: All versions

cluster-md-kmp-default-debuginfo: All versions

reiserfs-kmp-default-debuginfo: All versions

kernel-default-livepatch: All versions

kernel-default-extra: All versions

kernel-default-devel-debuginfo: All versions

kernel-obs-qa: All versions

kernel-obs-build: All versions

kernel-syms: All versions

kselftests-kmp-default-debuginfo: All versions

kernel-obs-build-debugsource: All versions

ocfs2-kmp-default-debuginfo: All versions

kernel-default-devel: All versions

kernel-default-optional: All versions

kernel-default-debugsource: All versions

cluster-md-kmp-default: All versions

kselftests-kmp-default: All versions

reiserfs-kmp-default: All versions

kernel-default-debuginfo: All versions

kernel-default-extra-debuginfo: All versions

kernel-kvmsmall-devel-debuginfo: All versions

kernel-default-base-rebuild: All versions

kernel-default-base: All versions

kernel-kvmsmall-debugsource: All versions

kernel-kvmsmall-devel: All versions

kernel-kvmsmall-debuginfo: All versions

kernel-debug-devel-debuginfo: All versions

kernel-debug-devel: All versions

kernel-debug-debuginfo: All versions

kernel-debug-debugsource: All versions

kernel-debug: All versions

kernel-docs-html: All versions

kernel-source-vanilla: All versions

kernel-source: All versions

kernel-devel: All versions

kernel-macros: All versions

kernel-docs: All versions

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4:LTSS:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-lg:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apple:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-arm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-altera:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-sle15-sp4_update_39-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2025/suse-su-20251195-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

19) Memory leak

EUVDB-ID: #VU106153

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52930

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the i915_gem_object_set_tiling() function in drivers/gpu/drm/i915/gem/i915_gem_tiling.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server 15 SP4: LTSS

SUSE Linux Enterprise High Performance Computing LTSS 15: SP4

SUSE Linux Enterprise High Performance Computing ESPOS 15: SP4

SUSE Linux Enterprise Micro for Rancher: 5.3 - 5.4

SUSE Linux Enterprise High Availability Extension 15: SP4

SUSE Linux Enterprise Micro: 5.3 - 5.4

SUSE Linux Enterprise Live Patching: 15-SP4

SUSE Linux Enterprise Server for SAP Applications 15: SP4

SUSE Linux Enterprise Server 15: SP4

SUSE Linux Enterprise Real Time 15: SP4

SUSE Linux Enterprise High Performance Computing 15: SP4

SUSE Manager Retail Branch Server: 4.3

SUSE Manager Server: 4.3

SUSE Manager Proxy: 4.3

openSUSE Leap: 15.4

kernel-64kb: All versions

dtb-allwinner: All versions

dlm-kmp-64kb-debuginfo: All versions

gfs2-kmp-64kb: All versions

dtb-marvell: All versions

dtb-rockchip: All versions

dtb-amlogic: All versions

dtb-sprd: All versions

ocfs2-kmp-64kb-debuginfo: All versions

dtb-renesas: All versions

kernel-64kb-optional: All versions

ocfs2-kmp-64kb: All versions

dtb-exynos: All versions

dtb-nvidia: All versions

dtb-broadcom: All versions

dtb-xilinx: All versions

reiserfs-kmp-64kb-debuginfo: All versions

dtb-socionext: All versions

dtb-lg: All versions

dtb-amd: All versions

dtb-hisilicon: All versions

dtb-qcom: All versions

dtb-apple: All versions

kernel-64kb-extra: All versions

dtb-apm: All versions

dtb-mediatek: All versions

gfs2-kmp-64kb-debuginfo: All versions

dlm-kmp-64kb: All versions

cluster-md-kmp-64kb-debuginfo: All versions

kernel-64kb-optional-debuginfo: All versions

kernel-64kb-debuginfo: All versions

cluster-md-kmp-64kb: All versions

dtb-amazon: All versions

kselftests-kmp-64kb-debuginfo: All versions

dtb-arm: All versions

kernel-64kb-devel-debuginfo: All versions

dtb-freescale: All versions

kernel-64kb-extra-debuginfo: All versions

dtb-altera: All versions

kernel-64kb-devel: All versions

kselftests-kmp-64kb: All versions

reiserfs-kmp-64kb: All versions

kernel-64kb-debugsource: All versions

dtb-cavium: All versions

dtb-aarch64: All versions

kernel-zfcpdump-debugsource: All versions

kernel-zfcpdump-debuginfo: All versions

kernel-zfcpdump: All versions

kernel-kvmsmall: All versions

kernel-livepatch-SLE15-SP4_Update_39-debugsource: All versions

kernel-livepatch-5_14_21-150400_24_161-default: All versions

kernel-default-livepatch-devel: All versions

kernel-livepatch-5_14_21-150400_24_161-default-debuginfo: All versions

kernel-default: All versions

gfs2-kmp-default: All versions

ocfs2-kmp-default: All versions

dlm-kmp-default: All versions

dlm-kmp-default-debuginfo: All versions

gfs2-kmp-default-debuginfo: All versions

kernel-default-optional-debuginfo: All versions

cluster-md-kmp-default-debuginfo: All versions

reiserfs-kmp-default-debuginfo: All versions

kernel-default-livepatch: All versions

kernel-default-extra: All versions

kernel-default-devel-debuginfo: All versions

kernel-obs-qa: All versions

kernel-obs-build: All versions

kernel-syms: All versions

kselftests-kmp-default-debuginfo: All versions

kernel-obs-build-debugsource: All versions

ocfs2-kmp-default-debuginfo: All versions

kernel-default-devel: All versions

kernel-default-optional: All versions

kernel-default-debugsource: All versions

cluster-md-kmp-default: All versions

kselftests-kmp-default: All versions

reiserfs-kmp-default: All versions

kernel-default-debuginfo: All versions

kernel-default-extra-debuginfo: All versions

kernel-kvmsmall-devel-debuginfo: All versions

kernel-default-base-rebuild: All versions

kernel-default-base: All versions

kernel-kvmsmall-debugsource: All versions

kernel-kvmsmall-devel: All versions

kernel-kvmsmall-debuginfo: All versions

kernel-debug-devel-debuginfo: All versions

kernel-debug-devel: All versions

kernel-debug-debuginfo: All versions

kernel-debug-debugsource: All versions

kernel-debug: All versions

kernel-docs-html: All versions

kernel-source-vanilla: All versions

kernel-source: All versions

kernel-devel: All versions

kernel-macros: All versions

kernel-docs: All versions

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp4:LTSS:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_ltss_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_espos_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro_for_rancher:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability_extension_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_retail_branch_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_server:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_manager_proxy:4.3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.4:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-allwinner:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-marvell:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-rockchip:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amlogic:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-sprd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-renesas:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-exynos:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-nvidia:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-broadcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-xilinx:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-socionext:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-lg:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-hisilicon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-qcom:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apple:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-apm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-mediatek:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-amazon:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-arm:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-freescale:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-altera:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-64kb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-64kb-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-cavium:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dtb-aarch64:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-zfcpdump:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-sle15-sp4_update_39-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-livepatch-5_14_21-150400_24_161-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:dlm-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-qa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-obs-build-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ocfs2-kmp-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:cluster-md-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kselftests-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-default:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base-rebuild:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-default-base:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-kvmsmall-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs-html:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source-vanilla:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-source:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-macros:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-docs:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2025/suse-su-20251195-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.