SUSE-SU-2025:02926-1: important: Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP6)
SUSE-SU-2025:02930-1: important: Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3)
openSUSE-SU-2025:15466-1: moderate: pluto-5.22.5-1.1 on GA media
openSUSE-SU-2025:15467-1: moderate: polaris-10.1.1-1.1 on GA media
openSUSE-SU-2025:15464-1: moderate: docker-machine-driver-kvm2-1.36.0-2.1 on GA media
openSUSE-SU-2025:15462-1: moderate: aws-efs-utils-2.3.3-1.1 on GA media
openSUSE-SU-2025:15465-1: moderate: nova-3.11.8-1.1 on GA media
SUSE-SU-2025:02932-1: important: Security update for the Linux Kernel (Live Patch 55 for SLE 15 SP3)
SUSE-SU-2025:02926-1: important: Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP6)
# Security update for the Linux Kernel (Live Patch 11 for SLE 15 SP6)
Announcement ID: SUSE-SU-2025:02926-1
Release Date: 2025-08-20T10:36:25Z
Rating: important
References:
* bsc#1245218
* bsc#1245350
* bsc#1247350
* bsc#1247351
Cross-References:
* CVE-2025-38079
* CVE-2025-38083
* CVE-2025-38494
* CVE-2025-38495
CVSS scores:
* CVE-2025-38079 ( SUSE ): 7.3
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2025-38079 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2025-38083 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2025-38494 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2025-38494 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2025-38495 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2025-38495 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products:
* openSUSE Leap 15.6
* SUSE Linux Enterprise Live Patching 15-SP6
* SUSE Linux Enterprise Real Time 15 SP6
* SUSE Linux Enterprise Server 15 SP6
* SUSE Linux Enterprise Server for SAP Applications 15 SP6
An update that solves four vulnerabilities can now be installed.
## Description:
This update for the Linux Kernel 6.4.0-150600_23_50 fixes several issues.
The following security issues were fixed:
* CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350).
* CVE-2025-38495: HID: core: ensure the allocated report buffer can contain
the reserved report ID (bsc#1247351).
* CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept
(bsc#1245218).
* CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245350).
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* SUSE Linux Enterprise Live Patching 15-SP6
zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2025-2929=1 SUSE-SLE-
Module-Live-Patching-15-SP6-2025-2926=1 SUSE-SLE-Module-Live-
Patching-15-SP6-2025-2928=1
* openSUSE Leap 15.6
zypper in -t patch SUSE-2025-2929=1 SUSE-2025-2928=1
## Package List:
* SUSE Linux Enterprise Live Patching 15-SP6 (x86_64)
* kernel-livepatch-6_4_0-150600_10_26-rt-5-150600.2.1
* kernel-livepatch-SLE15-SP6-RT_Update_8-debugsource-5-150600.2.1
* kernel-livepatch-6_4_0-150600_10_26-rt-debuginfo-5-150600.2.1
* SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64)
* kernel-livepatch-6_4_0-150600_23_50-default-3-150600.2.1
* kernel-livepatch-SLE15-SP6_Update_11-debugsource-3-150600.2.1
* kernel-livepatch-SLE15-SP6_Update_9-debugsource-5-150600.2.1
* kernel-livepatch-6_4_0-150600_23_42-default-5-150600.2.1
* kernel-livepatch-6_4_0-150600_23_42-default-debuginfo-5-150600.2.1
* kernel-livepatch-6_4_0-150600_23_50-default-debuginfo-3-150600.2.1
* openSUSE Leap 15.6 (ppc64le s390x x86_64)
* kernel-livepatch-6_4_0-150600_23_50-default-3-150600.2.1
* kernel-livepatch-SLE15-SP6_Update_11-debugsource-3-150600.2.1
* kernel-livepatch-SLE15-SP6_Update_9-debugsource-5-150600.2.1
* kernel-livepatch-6_4_0-150600_23_42-default-5-150600.2.1
* kernel-livepatch-6_4_0-150600_23_42-default-debuginfo-5-150600.2.1
* kernel-livepatch-6_4_0-150600_23_50-default-debuginfo-3-150600.2.1
## References:
* https://www.suse.com/security/cve/CVE-2025-38079.html
* https://www.suse.com/security/cve/CVE-2025-38083.html
* https://www.suse.com/security/cve/CVE-2025-38494.html
* https://www.suse.com/security/cve/CVE-2025-38495.html
* https://bugzilla.suse.com/show_bug.cgi?id=1245218
* https://bugzilla.suse.com/show_bug.cgi?id=1245350
* https://bugzilla.suse.com/show_bug.cgi?id=1247350
* https://bugzilla.suse.com/show_bug.cgi?id=1247351
SUSE-SU-2025:02930-1: important: Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3)
# Security update for the Linux Kernel (Live Patch 49 for SLE 15 SP3)
Announcement ID: SUSE-SU-2025:02930-1
Release Date: 2025-08-20T12:03:43Z
Rating: important
References:
* bsc#1244631
* bsc#1245218
* bsc#1245350
* bsc#1247350
* bsc#1247351
Cross-References:
* CVE-2024-36978
* CVE-2025-38079
* CVE-2025-38083
* CVE-2025-38494
* CVE-2025-38495
CVSS scores:
* CVE-2024-36978 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2024-36978 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2025-38079 ( SUSE ): 7.3
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2025-38079 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2025-38083 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2025-38494 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2025-38494 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2025-38495 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2025-38495 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products:
* openSUSE Leap 15.3
* SUSE Linux Enterprise High Performance Computing 15 SP3
* SUSE Linux Enterprise Live Patching 15-SP3
* SUSE Linux Enterprise Micro 5.1
* SUSE Linux Enterprise Micro 5.2
* SUSE Linux Enterprise Server 15 SP3
* SUSE Linux Enterprise Server for SAP Applications 15 SP3
An update that solves five vulnerabilities can now be installed.
## Description:
This update for the Linux Kernel 5.3.18-150300_59_179 fixes several issues.
The following security issues were fixed:
* CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350).
* CVE-2025-38495: HID: core: ensure the allocated report buffer can contain
the reserved report ID (bsc#1247351).
* CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept
(bsc#1245218).
* CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245350).
* CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in
multiq_tune() (bsc#1244631).
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* SUSE Linux Enterprise Live Patching 15-SP3
zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2025-2930=1
* openSUSE Leap 15.3
zypper in -t patch SUSE-2025-2930=1
## Package List:
* SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64)
* kernel-livepatch-5_3_18-150300_59_179-default-debuginfo-14-150300.2.1
* kernel-livepatch-SLE15-SP3_Update_49-debugsource-14-150300.2.1
* kernel-livepatch-5_3_18-150300_59_179-default-14-150300.2.1
* openSUSE Leap 15.3 (ppc64le s390x x86_64)
* kernel-livepatch-5_3_18-150300_59_179-default-debuginfo-14-150300.2.1
* kernel-livepatch-SLE15-SP3_Update_49-debugsource-14-150300.2.1
* kernel-livepatch-5_3_18-150300_59_179-default-14-150300.2.1
* openSUSE Leap 15.3 (x86_64)
* kernel-livepatch-5_3_18-150300_59_179-preempt-14-150300.2.1
* kernel-livepatch-5_3_18-150300_59_179-preempt-debuginfo-14-150300.2.1
## References:
* https://www.suse.com/security/cve/CVE-2024-36978.html
* https://www.suse.com/security/cve/CVE-2025-38079.html
* https://www.suse.com/security/cve/CVE-2025-38083.html
* https://www.suse.com/security/cve/CVE-2025-38494.html
* https://www.suse.com/security/cve/CVE-2025-38495.html
* https://bugzilla.suse.com/show_bug.cgi?id=1244631
* https://bugzilla.suse.com/show_bug.cgi?id=1245218
* https://bugzilla.suse.com/show_bug.cgi?id=1245350
* https://bugzilla.suse.com/show_bug.cgi?id=1247350
* https://bugzilla.suse.com/show_bug.cgi?id=1247351
openSUSE-SU-2025:15466-1: moderate: pluto-5.22.5-1.1 on GA media
# pluto-5.22.5-1.1 on GA media
Announcement ID: openSUSE-SU-2025:15466-1
Rating: moderate
Cross-References:
* CVE-2025-47907
CVSS scores:
* CVE-2025-47907 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
* CVE-2025-47907 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Affected Products:
* openSUSE Tumbleweed
An update that solves one vulnerability can now be installed.
## Description:
These are all security issues fixed in the pluto-5.22.5-1.1 package on the GA media of openSUSE Tumbleweed.
## Package List:
* openSUSE Tumbleweed:
* pluto 5.22.5-1.1
* pluto-bash-completion 5.22.5-1.1
* pluto-fish-completion 5.22.5-1.1
* pluto-zsh-completion 5.22.5-1.1
## References:
* https://www.suse.com/security/cve/CVE-2025-47907.html
openSUSE-SU-2025:15467-1: moderate: polaris-10.1.1-1.1 on GA media
# polaris-10.1.1-1.1 on GA media
Announcement ID: openSUSE-SU-2025:15467-1
Rating: moderate
Cross-References:
* CVE-2025-47907
CVSS scores:
* CVE-2025-47907 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
* CVE-2025-47907 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Affected Products:
* openSUSE Tumbleweed
An update that solves one vulnerability can now be installed.
## Description:
These are all security issues fixed in the polaris-10.1.1-1.1 package on the GA media of openSUSE Tumbleweed.
## Package List:
* openSUSE Tumbleweed:
* polaris 10.1.1-1.1
* polaris-bash-completion 10.1.1-1.1
* polaris-fish-completion 10.1.1-1.1
* polaris-zsh-completion 10.1.1-1.1
## References:
* https://www.suse.com/security/cve/CVE-2025-47907.html
openSUSE-SU-2025:15464-1: moderate: docker-machine-driver-kvm2-1.36.0-2.1 on GA media
# docker-machine-driver-kvm2-1.36.0-2.1 on GA media
Announcement ID: openSUSE-SU-2025:15464-1
Rating: moderate
Cross-References:
* CVE-2024-45337
CVSS scores:
* CVE-2024-45337 ( SUSE ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products:
* openSUSE Tumbleweed
An update that solves one vulnerability can now be installed.
## Description:
These are all security issues fixed in the docker-machine-driver-kvm2-1.36.0-2.1 package on the GA media of openSUSE Tumbleweed.
## Package List:
* openSUSE Tumbleweed:
* docker-machine-driver-kvm2 1.36.0-2.1
* minikube 1.36.0-2.1
* minikube-bash-completion 1.36.0-2.1
* minikube-fish-completion 1.36.0-2.1
* minikube-zsh-completion 1.36.0-2.1
## References:
* https://www.suse.com/security/cve/CVE-2024-45337.html
openSUSE-SU-2025:15462-1: moderate: aws-efs-utils-2.3.3-1.1 on GA media
# aws-efs-utils-2.3.3-1.1 on GA media
Announcement ID: openSUSE-SU-2025:15462-1
Rating: moderate
Cross-References:
* CVE-2025-55159
CVSS scores:
* CVE-2025-55159 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H
* CVE-2025-55159 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
Affected Products:
* openSUSE Tumbleweed
An update that solves one vulnerability can now be installed.
## Description:
These are all security issues fixed in the aws-efs-utils-2.3.3-1.1 package on the GA media of openSUSE Tumbleweed.
## Package List:
* openSUSE Tumbleweed:
* aws-efs-utils 2.3.3-1.1
## References:
* https://www.suse.com/security/cve/CVE-2025-55159.html
openSUSE-SU-2025:15465-1: moderate: nova-3.11.8-1.1 on GA media
# nova-3.11.8-1.1 on GA media
Announcement ID: openSUSE-SU-2025:15465-1
Rating: moderate
Cross-References:
* CVE-2025-47907
CVSS scores:
* CVE-2025-47907 ( SUSE ): 5.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
* CVE-2025-47907 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Affected Products:
* openSUSE Tumbleweed
An update that solves one vulnerability can now be installed.
## Description:
These are all security issues fixed in the nova-3.11.8-1.1 package on the GA media of openSUSE Tumbleweed.
## Package List:
* openSUSE Tumbleweed:
* nova 3.11.8-1.1
* nova-bash-completion 3.11.8-1.1
* nova-fish-completion 3.11.8-1.1
* nova-zsh-completion 3.11.8-1.1
## References:
* https://www.suse.com/security/cve/CVE-2025-47907.html
SUSE-SU-2025:02932-1: important: Security update for the Linux Kernel (Live Patch 55 for SLE 15 SP3)
# Security update for the Linux Kernel (Live Patch 55 for SLE 15 SP3)
Announcement ID: SUSE-SU-2025:02932-1
Release Date: 2025-08-20T18:03:36Z
Rating: important
References:
* bsc#1244631
* bsc#1245218
* bsc#1245350
* bsc#1247350
* bsc#1247351
Cross-References:
* CVE-2024-36978
* CVE-2025-38079
* CVE-2025-38083
* CVE-2025-38494
* CVE-2025-38495
CVSS scores:
* CVE-2024-36978 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2024-36978 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2025-38079 ( SUSE ): 7.3
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2025-38079 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2025-38083 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2025-38494 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2025-38494 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
* CVE-2025-38495 ( SUSE ): 8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
* CVE-2025-38495 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products:
* openSUSE Leap 15.3
* SUSE Linux Enterprise High Performance Computing 15 SP3
* SUSE Linux Enterprise Live Patching 15-SP3
* SUSE Linux Enterprise Micro 5.1
* SUSE Linux Enterprise Micro 5.2
* SUSE Linux Enterprise Server 15 SP3
* SUSE Linux Enterprise Server for SAP Applications 15 SP3
An update that solves five vulnerabilities can now be installed.
## Description:
This update for the Linux Kernel 5.3.18-150300_59_198 fixes several issues.
The following security issues were fixed:
* CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350).
* CVE-2025-38495: HID: core: ensure the allocated report buffer can contain
the reserved report ID (bsc#1247351).
* CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept
(bsc#1245218).
* CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245350).
* CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in
multiq_tune() (bsc#1244631).
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* openSUSE Leap 15.3
zypper in -t patch SUSE-2025-2932=1
* SUSE Linux Enterprise Live Patching 15-SP3
zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP3-2025-2932=1
## Package List:
* openSUSE Leap 15.3 (ppc64le s390x x86_64)
* kernel-livepatch-SLE15-SP3_Update_55-debugsource-6-150300.2.1
* kernel-livepatch-5_3_18-150300_59_198-default-debuginfo-6-150300.2.1
* kernel-livepatch-5_3_18-150300_59_198-default-6-150300.2.1
* openSUSE Leap 15.3 (x86_64)
* kernel-livepatch-5_3_18-150300_59_198-preempt-6-150300.2.1
* kernel-livepatch-5_3_18-150300_59_198-preempt-debuginfo-6-150300.2.1
* SUSE Linux Enterprise Live Patching 15-SP3 (ppc64le s390x x86_64)
* kernel-livepatch-5_3_18-150300_59_198-default-6-150300.2.1
## References:
* https://www.suse.com/security/cve/CVE-2024-36978.html
* https://www.suse.com/security/cve/CVE-2025-38079.html
* https://www.suse.com/security/cve/CVE-2025-38083.html
* https://www.suse.com/security/cve/CVE-2025-38494.html
* https://www.suse.com/security/cve/CVE-2025-38495.html
* https://bugzilla.suse.com/show_bug.cgi?id=1244631
* https://bugzilla.suse.com/show_bug.cgi?id=1245218
* https://bugzilla.suse.com/show_bug.cgi?id=1245350
* https://bugzilla.suse.com/show_bug.cgi?id=1247350
* https://bugzilla.suse.com/show_bug.cgi?id=1247351
