SUSE-SU-2025:4200-1
- Source
- https://www.suse.com/support/update/announcement/2025/suse-su-20254200-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:4200-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2025:4200-1
- Upstream
- Related
- Published
- 2025-11-24T14:04:08Z
- Modified
- 2025-11-25T15:32:43.976363Z
- Summary
- Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 15 SP6)
- Details
-
This update for the SUSE Linux Enterprise kernel 6.4.0-150600.10.34 fixes various security issues
The following security issues were fixed:
- CVE-2025-23145: mptcp: fix NULL pointer in canacceptnew_subflow (bsc#1242882).
- CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672).
- CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1249537).
- References
-
- https://www.suse.com/support/update/announcement/2025/suse-su-20254200-1/
- https://bugzilla.suse.com/1242882
- https://bugzilla.suse.com/1248672
- https://bugzilla.suse.com/1249537
- https://www.suse.com/security/cve/CVE-2025-23145
- https://www.suse.com/security/cve/CVE-2025-38500
- https://www.suse.com/security/cve/CVE-2025-38616
Affected packages
SUSE:Linux Enterprise Live Patching 15 SP6 / kernel-livepatch-SLE15-SP6-RT_Update_10
Package
- Name
- kernel-livepatch-SLE15-SP6-RT_Update_10
- Purl
- pkg:rpm/suse/kernel-livepatch-SLE15-SP6-RT_Update_10&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP6