Back Linuxsecurity

openSUSE: Kernel Important Update for CVEs 2025-20091

Linuxsecurity •LinuxSecurity Advisories • November 27, 2025

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-21816: hrtimers: Force migrate away hrtimers queued after (bsc#1238472). - CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630). - CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161). - CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302). - CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317). - CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512). - CVE-2025-39779: btrfs: subpage: keep TOWRITE tag until folio is cleaned (bsc#1249495). - CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202). - CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455). - CVE-2025-39876: net: fec: Fix possible NPD in

- openSUSE Leap 16.0: cluster-md-kmp-64kb-6.12.0-160000.7.1 cluster-md-kmp-default-6.12.0-160000.7.1 cluster-md-kmp-rt-6.12.0-160000.7.1 dlm-kmp-64kb-6.12.0-160000.7.1 dlm-kmp-default-6.12.0-160000.7.1 dlm-kmp-rt-6.12.0-160000.7.1 dtb-allwinner-6.12.0-160000.7.1 dtb-altera-6.12.0-160000.7.1 dtb-amazon-6.12.0-160000.7.1 dtb-amd-6.12.0-160000.7.1 dtb-amlogic-6.12.0-160000.7.1 dtb-apm-6.12.0-160000.7.1 dtb-apple-6.12.0-160000.7.1 dtb-arm-6.12.0-160000.7.1 dtb-broadcom-6.12.0-160000.7.1 dtb-cavium-6.12.0-160000.7.1 dtb-exynos-6.12.0-160000.7.1 dtb-freescale-6.12.0-160000.7.1 dtb-hisilicon-6.12.0-160000.7.1 dtb-lg-6.12.0-160000.7.1 dtb-marvell-6.12.0-160000.7.1 dtb-mediatek-6.12.0-160000.7.1 dtb-nvidia-6.12.0-160000.7.1 dtb-qcom-6.12.0-160000.7.1 dtb-renesas-6.12.0-160000.7.1 dtb-rockchip-6.12.0-160000.7.1 dtb-socionext-6.12.0-160000.7.1 dtb-sprd-6.12.0-160000.7.1 dtb-xilinx-6.12.0-160000.7.1 gfs2-kmp-64kb-6.12.0-160000.7.1 gfs2-kmp-default-6.12.0-160000.7.1 gfs2-kmp-rt-6.12.0-160000.7.1 kernel-64kb-6.12.0-160000.7.1 kernel-64kb-devel-6.12.0-160000.7.1 kernel-64kb-extra-6.12.0-160000.7.1 kernel-64kb-optional-6.12.0-160000.7.1 kernel-default-6.12.0-160000.7.1 kernel-default-base-6.12.0-160000.6.1.160000.2.4 kernel-default-devel-6.12.0-160000.7.1 kernel-default-extra-6.12.0-160000.7.1 kernel-default-optional-6.12.0-160000.7.1 kernel-default-vdso-6.12.0-160000.7.1 kernel-devel-6.12.0-160000.7.1 kernel-docs-6.12.0-160000.7.1 kernel-docs-html-6.12.0-160000.7.1 kernel-kvmsmall-6.12.0-160000.7.1 kernel-kvmsmall-devel-6.12.0-160000.7.1 kernel-kvmsmall-vdso-6.12.0-160000.7.1 kernel-macros-6.12.0-160000.7.1 kernel-obs-build-6.12.0-160000.7.1 kernel-obs-qa-6.12.0-160000.7.1 kernel-rt-6.12.0-160000.7.1 kernel-rt-devel-6.12.0-160000.7.1 kernel-rt-extra-6.12.0-160000.7.1 kernel-rt-optional-6.12.0-160000.7.1 kernel-rt-vdso-6.12.0-160000.7.1 kernel-source-6.12.0-160000.7.1 kernel-source-vanilla-6.12.0-160000.7.1 kernel-syms-6.12.0-160000.7.1 kernel-zfcpdump-6.12.0-160000.7.1 kselftests-kmp-64kb-6.12.0-160000.7.1 kselftests-kmp-default-6.12.0-160000.7.1 kselftests-kmp-rt-6.12.0-160000.7.1 ocfs2-kmp-64kb-6.12.0-160000.7.1 ocfs2-kmp-default-6.12.0-160000.7.1 ocfs2-kmp-rt-6.12.0-160000.7.1

* bsc#1218644 * bsc#1238472 * bsc#1239206 * bsc#1241166 * bsc#1241637 * bsc#1247222 * bsc#1248630 * bsc#1249161 * bsc#1249226 * bsc#1249302 * bsc#1249317 * bsc#1249397 * bsc#1249398 * bsc#1249495 * bsc#1249512 * bsc#1249608 * bsc#1249735 * bsc#1250202 * bsc#1250379 * bsc#1250400 * bsc#1250455 * bsc#1250491 * bsc#1250704 * bsc#1250721 * bsc#1250749 * bsc#1250946 * bsc#1251176 * bsc#1251177 * bsc#1251232 * bsc#1251233 * bsc#1251804 * bsc#1251809 * bsc#1251819 * bsc#1251930 * bsc#1251967 * bsc#1252033 * bsc#1252035 * bsc#1252039 * bsc#1252044 * bsc#1252047 * bsc#1252051 * bsc#1252052 * bsc#1252056 * bsc#1252060 * bsc#1252062 * bsc#1252064 * bsc#1252065 * bsc#1252067 * bsc#1252069 * bsc#1252070 * bsc#1252072 * bsc#1252074 * bsc#1252075 * bsc#1252076 * bsc#1252078 * bsc#1252079 * bsc#1252081 * bsc#1252082 * bsc#1252083 * bsc#1252253 * bsc#1252265 * bsc#1252267 * bsc#1252270 * bsc#1252330 * bsc#1252333 * bsc#1252336 * bsc#1252346 * bsc#1252348 * bsc#1252349 * bsc#1252678 * bsc#1252679 * bsc#1252688 * bsc#1252725 * bsc#1252734 * bsc#1252772 * bsc#1252774 * bsc#1252780 * bsc#1252785 * bsc#1252787 * bsc#1252789 * bsc#1252797 * bsc#1252819 * bsc#1252822 * bsc#1252826 * bsc#1252841 * bsc#1252848 * bsc#1252849 * bsc#1252850 * bsc#1252851 * bsc#1252854 * bsc#1252858 * bsc#1252862 * bsc#1252865 * bsc#1252866 * bsc#1252873 * bsc#1252902 * bsc#1252909 * bsc#1252915 * bsc#1252918 * bsc#1252921 * bsc#1252939References: * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE and openSUSE Address Moderate grub2 Vulnerabilities SUSE and openSUSE have released updates for grub2 to address multiple vulnerabilities, including use-after-free and out-of-bounds write issues. The updates fix specific CVEs, including CVE-2025-54771 and CVE-2025-61661, which could potentially affect system stability and security. 46 sources 44

Extracted Entities

CVEs (10)

CVE-2025-21816 CVE-2025-38653 CVE-2025-38718 CVE-2025-39676 CVE-2025-39702 CVE-2025-39756 CVE-2025-39779 CVE-2025-39812 CVE-2025-39866 CVE-2025-39876

Domains (1)

et.al