🛡️ SUSE-SU-2025:03600-1 — dtb-aarch64 (CVE-2023-53261 +345 more)

⚪ Unknown ✅ No Known Exploit OSV
N/A
CVSS Score
0 Low4 Medium7 High9 Critical10

Description

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
  • CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
  • CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
  • CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
  • CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
  • CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
  • CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
  • CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
  • CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
  • CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
  • CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
  • CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
  • CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
  • CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
  • CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
  • CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
  • CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
  • CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
  • CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
  • CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
  • CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
  • CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
  • CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
  • CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
  • CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
  • CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
  • CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
  • CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
  • CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
  • CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
  • CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
  • CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
  • CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
  • CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
  • CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
  • CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
  • CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
  • CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
  • CVE-2025-38701: ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (bsc#1249258).
  • CVE-2025-38705: drm/amd/pm: fix null pointer access (bsc#1249334).
  • CVE-2025-38709: loop: Avoid updating block size under exclusive owner (bsc#1249199).
  • CVE-2025-38721: netfilter: ctnetlink: fix refcount leak on table dump (bsc#1249176).
  • CVE-2025-38722: habanalabs: fix UAF in export_dmabuf() (bsc#1249163).
  • CVE-2025-38730: io_uring/net: commit partial buffers on retry (bsc#1249172).
  • CVE-2025-38732: netfilter: nf_reject: do not leak dst refcount for loopback packets (bsc#1249262).
  • CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
  • CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
  • CVE-2025-39677: net/sched: Fix backlog accounting in qdisc_dequeue_internal (bsc#1249300).
  • CVE-2025-39678: platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL (bsc#1249290).
  • CVE-2025-39681: x86/cpu/hygon: Add missing resctrl_cpu_detect() i

Affected software

SUSE-SU-2025:03600-1 is recorded against 13 packages.

  • dtb-aarch64 (fixed in 6.4.0-150600.23.73.1)
  • kernel-64kb (fixed in 6.4.0-150600.23.73.1)
  • kernel-debug (fixed in 6.4.0-150600.23.73.1)
  • kernel-default (fixed in 6.4.0-150600.23.73.1)
  • kernel-default-base (fixed in 6.4.0-150600.23.73.1.150600.12.32.1)
  • kernel-docs (fixed in 6.4.0-150600.23.73.1)
  • kernel-kvmsmall (fixed in 6.4.0-150600.23.73.1)
  • kernel-livepatch-sle15-sp6-update-16 (fixed in 1-150600.13.3.1)
  • kernel-obs-build (fixed in 6.4.0-150600.23.73.1)
  • kernel-obs-qa (fixed in 6.4.0-150600.23.73.1)
  • kernel-source (fixed in 6.4.0-150600.23.73.1)
  • kernel-syms (fixed in 6.4.0-150600.23.73.1)
  • kernel-zfcpdump (fixed in 6.4.0-150600.23.73.1)

Timeline and source

Published on 15 October 2025 and last revised on 23 March 2026. No public exploit is currently recorded for this entry. Record sourced from OSV.

References

www.suse.com (Advisory)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)
bugzilla.suse.com (Report)

Details

Severity Unknown
CVSS Score N/A
CVSS Vector N/A
CWE N/A
Public Exploit ✅ No
Source OSV
Published 2025-10-15
Updated 2026-08-20
Modified 2026-03-23
Fix URL N/A

Affected Packages

Software From version Fixed in
dtb-aarch64 — 6.4.0-150600.23.73.1
kernel-64kb — 6.4.0-150600.23.73.1
kernel-debug — 6.4.0-150600.23.73.1
kernel-default — 6.4.0-150600.23.73.1
kernel-default-base — 6.4.0-150600.23.73.1.150600.12.32.1
kernel-docs — 6.4.0-150600.23.73.1
kernel-kvmsmall — 6.4.0-150600.23.73.1
kernel-livepatch-sle15-sp6-update-16 — 1-150600.13.3.1
kernel-obs-build — 6.4.0-150600.23.73.1
kernel-obs-qa — 6.4.0-150600.23.73.1
kernel-source — 6.4.0-150600.23.73.1
kernel-syms — 6.4.0-150600.23.73.1
kernel-zfcpdump — 6.4.0-150600.23.73.1

References

Free Vulnerability Check

Is your site affected by SUSE-SU-2025:03600-1?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against SUSE-SU-2025:03600-1 and other known CVE records.

Scan My Site Free →

No credit card required  ·  Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.