Back Linuxsecurity

SUSE: Kernel RT Important TLS Issue CVE-2025-38616 Advisory 2025:4169

Linuxsecurity •LinuxSecurity Advisories • November 24, 2025

## This update for the SUSE Linux Enterprise kernel 6.4.0-150700.7.16 fixes one security issue The following security issue was fixed: * CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1249537). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP7 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP7-2025-4169=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP7 (x86_64) * kernel-livepatch-SLE15-SP7-RT_Update_4-debugsource-4-150700.2.1 * kernel-livepatch-6_4_0-150700_7_16-rt-4-150700.2.1 * kernel-livepatch-6_4_0-150700_7_16-rt-debuginfo-4-150700.2.1

* bsc#1249537 Cross- * CVE-2025-38616 CVSS scores: * CVE-2025-38616 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H Affected Products: * SUSE Linux Enterprise Live Patching 15-SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## * *

* CVE-2025-38616 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

* SUSE Linux Enterprise Live Patching 15-SP7

* SUSE Linux Enterprise Real Time 15 SP7

* SUSE Linux Enterprise Server 15 SP7

* SUSE Linux Enterprise Server for SAP Applications 15 SP7

An update that solves one vulnerability can now be installed.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE and openSUSE Address Moderate grub2 Vulnerabilities SUSE and openSUSE have released updates for grub2 to address multiple vulnerabilities, including use-after-free and out-of-bounds write issues. The updates fix specific CVEs, including CVE-2025-54771 and CVE-2025-61661, which could potentially affect system stability and security. 46 sources 44

Extracted Entities

CVEs (1)

CVE-2025-38616

Platforms (3)

Linux SUSE Linux Enterprise Live Patching SUSE Linux Enterprise Server