SUSE-SU-2026:0166-1

This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.147 fixes various security issues

The following security issues were fixed:

• CVE-2022-50233: bluetooth: device name can cause reading kernel memory by not supplying terminal \0 (bsc#1249242).
• CVE-2022-50327: ACPI: processor: idle: Check acpifetchacpi_dev() return value (bsc#1254451).
• CVE-2022-50409: net: If sock is dead don't access sock's skwq in skstreamwaitmemory (bsc#1250665).
• CVE-2022-50490: bpf: Propagate error from htablockbucket() to userspace (bsc#1251165).
• CVE-2023-53676: scsi: target: iscsi: Fix buffer overflow in liotargetnaclinfoshow() (bsc#1251787).
• CVE-2024-57849: s390/cpum_sf: handle CPU hotplug remove during sampling (bsc#1235815).
• CVE-2024-58239: tls: stop recv() if initial processrxlist gave us non-DATA (bsc#1248615).
• CVE-2025-38476: rpl: Fix use-after-free in rpldosrh_inline() (bsc#1251203).
• CVE-2025-38572: ipv6: reject malicious packets in ipv6gsosegment() (bsc#1248400).
• CVE-2025-38608: bpf, ktls: Fix data corruption when using bpfmsgpop_data() in ktls (bsc#1248670).
• CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437).