Back Linuxsecurity

openSUSE: kernel Important 196 Vulnerability Fixes 2025:4149

Linuxsecurity •LinuxSecurity Advisories • November 20, 2025

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues The following security issues were fixed: * CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859). * CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (bsc#1249857). * CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251164). * CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741). * CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (bsc#1249988). * CVE-2023-53500: xfrm: fix slab-use-after-free in decode_session6 (bsc#1250816). * CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6 (bsc#1251052). * CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251222). * CVE-2023-53619: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (bsc#1251743). *

## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2025-4149=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-4149=1

* openSUSE Leap 15.5 (noarch) * kernel-devel-rt-5.14.21-150500.13.112.1 * kernel-source-rt-5.14.21-150500.13.112.1 * openSUSE Leap 15.5 (x86_64) * kernel-rt_debug-debugsource-5.14.21-150500.13.112.1 * cluster-md-kmp-rt-debuginfo-5.14.21-150500.13.112.1 * kernel-rt-devel-debuginfo-5.14.21-150500.13.112.1 * kernel-rt-debugsource-5.14.21-150500.13.112.1 * gfs2-kmp-rt-5.14.21-150500.13.112.1 * kernel-rt-extra-5.14.21-150500.13.112.1 * kernel-rt_debug-vdso-5.14.21-150500.13.112.1 * kernel-syms-rt-5.14.21-150500.13.112.1 * kernel-rt-devel-5.14.21-150500.13.112.1 * kselftests-kmp-rt-5.14.21-150500.13.112.1 * kernel-rt-livepatch-devel-5.14.21-150500.13.112.1 * kernel-rt-optional-5.14.21-150500.13.112.1 * kernel-rt-debuginfo-5.14.21-150500.13.112.1 * kernel-rt-livepatch-5.14.21-150500.13.112.1 * kernel-rt_debug-vdso-debuginfo-5.14.21-150500.13.112.1 * ocfs2-kmp-rt-debuginfo-5.14.21-150500.13.112.1 * ocfs2-kmp-rt-5.14.21-150500.13.112.1 * kernel-rt_debug-debuginfo-5.14.21-150500.13.112.1 * kernel-rt_debug-devel-5.14.21-150500.13.112.1 * reiserfs-kmp-rt-debuginfo-5.14.21-150500.13.112.1 * kernel-rt-vdso-debuginfo-5.14.21-150500.13.112.1 * gfs2-kmp-rt-debuginfo-5.14.21-150500.13.112.1 * cluster-md-kmp-rt-5.14.21-150500.13.112.1 * reiserfs-kmp-rt-5.14.21-150500.13.112.1 * dlm-kmp-rt-5.14.21-150500.13.112.1 * dlm-kmp-rt-debuginfo-5.14.21-150500.13.112.1 * kernel-rt-extra-debuginfo-5.14.21-150500.13.112.1 * kernel-rt-vdso-5.14.21-150500.13.112.1 * kernel-rt-optional-debuginfo-5.14.21-150500.13.112.1 * kernel-rt_debug-devel-debuginfo-5.14.21-150500.13.112.1 * kselftests-kmp-rt-debuginfo-5.14.21-150500.13.112.1 * openSUSE Leap 15.5 (nosrc x86_64) * kernel-rt_debug-5.14.21-150500.13.112.1 * kernel-rt-5.14.21-150500.13.112.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * kernel-devel-rt-5.14.21-150500.13.112.1 * kernel-source-rt-5.14.21-150500.13.112.1 * SUSE Linux Enterprise Micro 5.5 (nosrc x86_64) * kernel-rt-5.14.21-150500.13.112.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * kernel-rt-debugsource-5.14.21-150500.13.112.1 * kernel-rt-debuginfo-5.14.21-150500.13.112.1

* bsc#1065729 * bsc#1205128 * bsc#1206843 * bsc#1206893 * bsc#1207612 * bsc#1207619 * bsc#1210763 * bsc#1211162 * bsc#1211692 * bsc#1213098 * bsc#1213114 * bsc#1213747 * bsc#1214754 * bsc#1214954 * bsc#1214992 * bsc#1215148 * bsc#1217366 * bsc#1236104 * bsc#1242960 * bsc#1245498 * bsc#1245499 * bsc#1246211 * bsc#1247317 * bsc#1248754 * bsc#1249479 * bsc#1249608 * bsc#1249857 * bsc#1249859 * bsc#1249988 * bsc#1250237 * bsc#1250742 * bsc#1250816 * bsc#1250946 * bsc#1251027 * bsc#1251032 * bsc#1251034 * bsc#1251035 * bsc#1251037 * bsc#1251040 * bsc#1251043 * bsc#1251045 * bsc#1251046 * bsc#1251047 * bsc#1251052 * bsc#1251054 * bsc#1251057 * bsc#1251059 * bsc#1251060 * bsc#1251061 * bsc#1251063 * bsc#1251065 * bsc#1251066 * bsc#1251068 * bsc#1251072 * bsc#1251079 * bsc#1251080 * bsc#1251082 * bsc#1251086 * bsc#1251087 * bsc#1251088 * bsc#1251091 * bsc#1251092 * bsc#1251093 * bsc#1251097 * bsc#1251099 * bsc#1251101 * bsc#1251104 * bsc#1251105 * bsc#1251106 * bsc#1251110 * bsc#1251113 * bsc#1251115 * bsc#1251123 * bsc#1251128 * bsc#1251129 * bsc#1251133 * bsc#1251136 * bsc#1251147 * bsc#1251149 * bsc#1251153 * bsc#1251154 * bsc#1251159 * bsc#1251162 * bsc#1251164 * bsc#1251166 * bsc#1251167 * bsc#1251169 * bsc#1251170 * bsc#1251173 * bsc#1251174 * bsc#1251178 * bsc#1251180 * bsc#1251182 * bsc#1251197 * bsc#1251200 * bsc#1251201 * bsc#1251202 * bsc#1251208 * bsc#1251210 * bsc#1251215 * bsc#1251218 * bsc#1251221 * bsc#1251222 * bsc#1251223 * bsc#1251230 * bsc#1251247 * bsc#1251268 * bsc#1251281 * bsc#1251282 * bsc#1251283 * bsc#1251284 * bsc#1251285 * bsc#1251286 * bsc#1251292 * bsc#1251294 * bsc#1251295 * bsc#1251296 * bsc#1251298 * bsc#1251299 * bsc#1251300 * bsc#1251301 * bsc#1251302 * bsc#1251303 * bsc#1251306 * bsc#1251307 * bsc#1251310 * bsc#1251312 * bsc#1251315 * bsc#1251322 * bsc#1251324 * bsc#1251325 * bsc#1251326 * bsc#1251327 * bsc#1251329 * bsc#1251330 * bsc#1251331 * bsc#1251519 * bsc#1251521 * bsc#1251522 * bsc#1251527 * bsc#1251529 * bsc#1251550 * bsc#1251723 * bsc#1251725 * bsc#1251728 * bsc#1251730 * bsc#1251736 * bsc#1251737 * bsc#1251738 * bsc#1251741 * bsc#1251743 * bsc#1251750 * bsc#1251753 * bsc#1251759 * bsc#1251761 * bsc#1251762 * bsc#1251763 * bsc#1251764 * bsc#1251767 * bsc#1251769 * bsc#1251772 * bsc#1251775 * bsc#1251777 * bsc#1251785 * bsc#1251823 * bsc#1251930 * bsc#1251967 * bsc#1252033 * bsc#1252035 * bsc#1252047 * bsc#1252060 * bsc#1252069 * bsc#1252265 * bsc#1252473 * bsc#1252474 * bsc#1252475 * bsc#1252476 * bsc#1252480 * bsc#1252484 * bsc#1252486 * bsc#1252489 * bsc#1252490 * bsc#1252492 * bsc#1252494 * bsc#1252495 * bsc#1252497 * bsc#1252499 * bsc#1252501 * bsc#1252508 * bsc#1252509 * bsc#1252513 * bsc#1252515 * bsc#1252516 * bsc#1252519 * bsc#1252521 * bsc#1252522 * bsc#1252523 * bsc#1252526 * bsc#1252528 * bsc#1252529 * bsc#1252532 * bsc#1252534 * bsc#1252535 * bsc#1252536 * bsc#1252537 * bsc#1252538 * bsc#1252539 * bsc#1252542 * bsc#1252545 * bsc#1252549 * bsc#1252554 * bsc#1252560 * bsc#1252564 * bsc#1252565 * bsc#1252568 * bsc#1252632 * bsc#1252634 * bsc#1252688 * bsc#1252785 * bsc#1252893 * jsc#PED-1166 * jsc#PED-1168 * jsc#PED-1170 * jsc#PED-1218 * jsc#PED-1220 * jsc#PED-1222 * jsc#PED-1223 * jsc#PED-1225 * jsc#PED-1549 * jsc#PED-2849 * jsc#PED-4593 * jsc#PED-568 ## References: * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE OpenSSL Update Addresses Out-of-Bounds Vulnerability CVE-2025-9230 SUSE has released updates for OpenSSL addressing an important out-of-bounds read and write vulnerability identified as CVE-2025-9230. This affects both openssl-1_0_0 and openssl-3-livepatches, with specific patch instructions provided for users of openSUSE Leap 15.6 and SUSE Linux Enterprise Live Patching 15-SP7. 25 sources 27

Extracted Entities

CVEs (9)

CVE-2022-50327 CVE-2022-50334 CVE-2022-50490 CVE-2022-50516 CVE-2023-53365 CVE-2023-53500 CVE-2023-53559 CVE-2023-53574 CVE-2023-53619

Platforms (3)

Linux OpenSUSE Leap 15.5 SUSE Linux Enterprise Micro 5.5