Back Linuxsecurity SUSE: Important Update for Kernel Security Patch 2025:4132
## The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues The following security issues were fixed: * CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939). * CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211). * CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230). * CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630). * CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224). * CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182). * CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161). Read the Full Advisory
## The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues The following security issues were fixed: * CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939). * CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211). * CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230). * CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630). * CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224). * CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182). * CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161). Read the Full Advisory
* bsc#1012628 * bsc#1194869 * bsc#1213061 * bsc#1213666 * bsc#1214073 * bsc#1214928 * bsc#1214953 * bsc#1214954 * bsc#1215143 * bsc#1215150 * bsc#1215199 * bsc#1215696 * bsc#1216396 * bsc#1216436 * bsc#1216976 * bsc#1220186 * bsc#1220419 * bsc#1229165 * bsc#1239206 * bsc#1243100 * bsc#1243112 * bsc#1244939 * bsc#1245193 * bsc#1245260 * bsc#1246125 * bsc#1247118 * bsc#1247222 * bsc#1247500 * bsc#1247683 * bsc#1248111 * bsc#1248211 * bsc#1248230 * bsc#1248517 * bsc#1248630 * bsc#1248735 * bsc#1248754 * bsc#1248847 * bsc#1248886 * bsc#1249123 * bsc#1249159 * bsc#1249161 * bsc#1249164 * bsc#1249166 * bsc#1249169 * bsc#1249170 * bsc#1249177 * bsc#1249182 * bsc#1249190 * bsc#1249194 * bsc#1249195 * bsc#1249196 * bsc#1249200 * bsc#1249203 * bsc#1249204 * bsc#1249215 * bsc#1249220 * bsc#1249221 * bsc#1249224 Read the Full Advisory
Read the Full Advisory
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
