SUSE-SU-2025:1574-1

CVE-2025-21726: padata: avoid UAF for reorder_work (bsc#1238865).
CVE-2025-21785: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (bsc#1238747).
CVE-2025-21791: vrf: use RCU protection in l3mdevl3out() (bsc#1238512).
CVE-2025-22004: net: atm: fix use after free in lec_send() (bsc#1240835).
CVE-2025-22020: memstick: rtsxusbms: Fix slab-use-after-free in rtsxusbmsdrvremove (bsc#1241280).
CVE-2025-22055: net: fix geneve_opt length integer overflow (bsc#1241371).

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.3.18-150300.208.1

{
    "binaries": [
        {
            "kernel-source-rt": "5.3.18-150300.208.1",
            "kernel-rt": "5.3.18-150300.208.1"
        }
    ]
}

Name: kernel-source-rt
Purl: pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.1

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.3.18-150300.208.1

{
    "binaries": [
        {
            "kernel-source-rt": "5.3.18-150300.208.1",
            "kernel-rt": "5.3.18-150300.208.1"
        }
    ]
}

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.3.18-150300.208.1

{
    "binaries": [
        {
            "kernel-source-rt": "5.3.18-150300.208.1",
            "kernel-rt": "5.3.18-150300.208.1"
        }
    ]
}

Name: kernel-source-rt
Purl: pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.2

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.3.18-150300.208.1

{
    "binaries": [
        {
            "kernel-source-rt": "5.3.18-150300.208.1",
            "kernel-rt": "5.3.18-150300.208.1"
        }
    ]
}