SUSE-SU-2025:02942-1

CVE-2025-38494: HID: core: do not bypass hid_hw_raw_request (bsc#1247350).
CVE-2025-38495: HID: core: ensure the allocated report buffer can contain the reserved report ID (bsc#1247351).
CVE-2025-38079: crypto: algif_hash - fix double free in hash_accept (bsc#1245218).
CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245350).
CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1245793).
CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1245776).
CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1245797).

References

Affected packages

Name: kernel-livepatch-SLE15-SP7_Update_0
Purl: pkg:rpm/suse/kernel-livepatch-SLE15-SP7_Update_0&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP7

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2-150700.3.3.2

{
    "binaries": [
        {
            "kernel-livepatch-6_4_0-150700_51-default": "2-150700.3.3.2"
        }
    ]
}

source

"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:02942-1.json"