SUSE-SU-2025:21085-1
- Source
- https://www.suse.com/support/update/announcement/2025/suse-su-202521085-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:21085-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2025:21085-1
- Upstream
- Related
- Published
- 2025-11-28T08:14:04Z
- Modified
- 2026-03-23T04:49:14.665255Z
- Summary
- Security update for kernel-livepatch-MICRO-6-0-RT_Update_3
- Details
-
This update for kernel-livepatch-MICRO-6-0-RTUpdate3 fixes the following issues:
- CVE-2025-23145: mptcp: fix NULL pointer in canacceptnew_subflow (bsc#1242882)
- CVE-2024-53141: netfilter: ipset: add missing range check in bitmapipuadt (bsc#1245778)
- CVE-2025-38500: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (bsc#1248672)
- CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1249537)
- References
-
- https://www.suse.com/support/update/announcement/2025/suse-su-202521085-1/
- https://bugzilla.suse.com/1242882
- https://bugzilla.suse.com/1245778
- https://bugzilla.suse.com/1248672
- https://bugzilla.suse.com/1249537
- https://www.suse.com/security/cve/CVE-2024-53141
- https://www.suse.com/security/cve/CVE-2025-23145
- https://www.suse.com/security/cve/CVE-2025-38500
- https://www.suse.com/security/cve/CVE-2025-38616