Back Linuxsecurity

openSUSE: Kernel Important Patch Addressing Threats for 2025:3927

Linuxsecurity •LinuxSecurity Advisories • November 4, 2025

This update for the Linux Kernel 6.4.0-150600_23_38 fixes several issues. The following security issues were fixed: * CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631). * CVE-2025-38617: net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1249208). * CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207).

## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-3927=1 * SUSE Linux Enterprise Live Patching 15-SP6 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP6-2025-3927=1

* openSUSE Leap 15.6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_38-default-10-150600.4.1 * kernel-livepatch-SLE15-SP6_Update_8-debugsource-10-150600.4.1 * kernel-livepatch-6_4_0-150600_23_38-default-debuginfo-10-150600.4.1 * SUSE Linux Enterprise Live Patching 15-SP6 (ppc64le s390x x86_64) * kernel-livepatch-6_4_0-150600_23_38-default-10-150600.4.1 * kernel-livepatch-SLE15-SP6_Update_8-debugsource-10-150600.4.1 * kernel-livepatch-6_4_0-150600_23_38-default-debuginfo-10-150600.4.1

* bsc#1248631 * bsc#1249207 * bsc#1249208 ## References: * * * * * *

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE Releases Important Kernel Security Updates for Linux Kernel 6.4 and 4.12 SUSE has issued important updates for the Linux Kernel versions 6.4.0-150600_23_38 and 4.12.14-122_272, addressing multiple security vulnerabilities. The updates fix issues including a null pointer dereference, a race condition, and improper binding to VMADDR_PORT_ANY, with specific CVEs being CVE-2025-38664, CVE-2025-38617, CVE-2025-38618, and CVE-2022-50252. 3 sources 32

Extracted Entities

CVEs (3)

CVE-2025-38617 CVE-2025-38618 CVE-2025-38664

Platforms (1)

Linux