# SUSE-SU-2025:21195-1: Security update for 2 packages SUSE-SU-2025:21195-1, released December 12, 2025, fixes 27 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/suse-su-2025-21195-1 - Platform: Linux - Released: Dec 12, 2025 - Priority: High (Closes CVE-2025-0840, high severity) - CVEs: 27, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2025:21195-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [binutils](https://patchblox.com/security/data/product/linux/binutils.md) | sles 16.0 | 2.45-160000.1.1 | | [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | sles 16.0 | 7.5.0-160000.2.3 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-0840](https://patchblox.com/security/data/cve/CVE-2025-0840.md) | High | binutils: bsc#1236632 aka aka PR32650 | 7.5 | 0.0076 | | | [CVE-2025-1179](https://patchblox.com/security/data/cve/CVE-2025-1179.md) | High | binutils: bsc#1237021 aka aka PR32640 | 7.5 | 0.0057 | | | [CVE-2025-7545](https://patchblox.com/security/data/cve/CVE-2025-7545.md) | High | GNU Binutils objcopy.c copy_section heap-based overflow | 7.8 | 0.0030 | | | [CVE-2025-5245](https://patchblox.com/security/data/cve/CVE-2025-5245.md) | High | GNU Binutils objdump debug.c debug_type_samep memory corruption | 7.8 | 0.0030 | | | [CVE-2025-5244](https://patchblox.com/security/data/cve/CVE-2025-5244.md) | High | GNU Binutils ld elflink.c elf_gc_sweep memory corruption | 7.8 | 0.0030 | | | [CVE-2025-11083](https://patchblox.com/security/data/cve/CVE-2025-11083.md) | High | binutils: bsc#1250632 aka aka PR33457 | 7.8 | 0.0026 | | | [CVE-2025-7546](https://patchblox.com/security/data/cve/CVE-2025-7546.md) | High | GNU Binutils elf.c bfd_elf_set_group_contents out-of-bounds write | 7.8 | 0.0021 | | | [CVE-2025-1153](https://patchblox.com/security/data/cve/CVE-2025-1153.md) | Routine | binutils: bsc#1237000 aka aka PR32603 | 5.9 | 0.0136 | | | [CVE-2025-1178](https://patchblox.com/security/data/cve/CVE-2025-1178.md) | Routine | binutils: bsc#1237018 aka aka PR32638 | n/a | 0.0080 | | | [CVE-2025-1181](https://patchblox.com/security/data/cve/CVE-2025-1181.md) | Routine | binutils: bsc#1237019 aka aka PR32643 | n/a | 0.0071 | | | [CVE-2025-1180](https://patchblox.com/security/data/cve/CVE-2025-1180.md) | Routine | GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption | 3.1 | 0.0070 | | | [CVE-2025-1176](https://patchblox.com/security/data/cve/CVE-2025-1176.md) | Routine | binutils: bsc#1236999 aka aka PR32636 | 5.0 | 0.0067 | | | [CVE-2025-1147](https://patchblox.com/security/data/cve/CVE-2025-1147.md) | Routine | binutils: bsc#1236976 aka aka PR32556 | 5.3 | 0.0067 | | | [CVE-2025-1148](https://patchblox.com/security/data/cve/CVE-2025-1148.md) | Routine | binutils: bsc#1236978 aka aka PR32576 | 3.1 | 0.0064 | | | [CVE-2025-1152](https://patchblox.com/security/data/cve/CVE-2025-1152.md) | Routine | binutils: bsc#1237001 aka aka PR32576 | 3.7 | 0.0061 | | | [CVE-2025-1150](https://patchblox.com/security/data/cve/CVE-2025-1150.md) | Routine | GNU Binutils ld libbfd.c bfd_malloc memory leak | 3.1 | 0.0061 | | | [CVE-2025-1151](https://patchblox.com/security/data/cve/CVE-2025-1151.md) | Routine | binutils: bsc#1237003 aka aka PR32576 | n/a | 0.0061 | | | [CVE-2025-1182](https://patchblox.com/security/data/cve/CVE-2025-1182.md) | Routine | binutils: bsc#1237042 aka aka PR32644 | n/a | 0.0059 | | | [CVE-2025-1149](https://patchblox.com/security/data/cve/CVE-2025-1149.md) | Routine | binutils: bsc#1236977 aka aka PR32576 | 3.1 | 0.0058 | | | [CVE-2025-3198](https://patchblox.com/security/data/cve/CVE-2025-3198.md) | Routine | binutils: bsc#1240870 aka aka PR32716 | 5.5 | 0.0029 | | | [CVE-2025-8224](https://patchblox.com/security/data/cve/CVE-2025-8224.md) | Routine | GNU Binutils BFD Library elf.c bfd_elf_get_str_section null pointer dereference | 5.5 | 0.0028 | | | [CVE-2025-8225](https://patchblox.com/security/data/cve/CVE-2025-8225.md) | Routine | GNU Binutils DWARF Section dwarf.c process_debug_info memory leak | 4.4 | 0.0027 | | | [CVE-2025-11495](https://patchblox.com/security/data/cve/CVE-2025-11495.md) | Routine | GNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow | 5.5 | 0.0024 | | | [CVE-2025-11413](https://patchblox.com/security/data/cve/CVE-2025-11413.md) | Routine | binutils: bsc#1251276 aka aka PR33456 | 5.5 | 0.0022 | | | [CVE-2025-11494](https://patchblox.com/security/data/cve/CVE-2025-11494.md) | Routine | GNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds | 5.5 | 0.0022 | | | [CVE-2025-11412](https://patchblox.com/security/data/cve/CVE-2025-11412.md) | Routine | GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds | 5.5 | 0.0021 | | | [CVE-2025-11414](https://patchblox.com/security/data/cve/CVE-2025-11414.md) | Routine | GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds | 5.5 | 0.0021 | | --- Data as of 2026-11-11T07:45:43Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.