# SUSE-SU-2025:4516-1: kernel-livepatch-SLE15-SP7-RT_Update_7 security update

SUSE-SU-2025:4516-1, released December 23, 2025, fixes 69 CVEs in kernel-livepatch-SLE15-SP7-RT_Update_7 (version 1-150700.1.3.1). None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2025-4516-1
- Platform: Linux
- Released: Dec 23, 2025
- Priority: Urgent (Closes CVE-2025-40172, rated Critical)
- CVEs: 69, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2025:4516-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-livepatch-SLE15-SP7-RT_Update_7](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp7-rt-update-7.md) | sles 15.7 | 1-150700.1.3.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-40172](https://patchblox.com/security/data/cve/CVE-2025-40172.md) | Urgent | accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages() | 9.8 | 0.0015 |  |
| [CVE-2025-40048](https://patchblox.com/security/data/cve/CVE-2025-40048.md) | High | uio_hv_generic: Let userspace take care of interrupt mask | 8.4 | 0.0064 |  |
| [CVE-2025-40183](https://patchblox.com/security/data/cve/CVE-2025-40183.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix metadata_dst leak __bpf_redirect_neigh_... | 7.5 | 0.0063 |  |
| [CVE-2025-40186](https://patchblox.com/security/data/cve/CVE-2025-40186.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  tcp: Don't call reqsk_fastopen_remove() in tcp_c... | 8.1 | 0.0059 |  |
| [CVE-2025-40129](https://patchblox.com/security/data/cve/CVE-2025-40129.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  sunrpc: fix null pointer dereference on zero-len... | 7.5 | 0.0057 |  |
| [CVE-2025-40075](https://patchblox.com/security/data/cve/CVE-2025-40075.md) | High | tcp_metrics: use dst_dev_net_rcu() | 8.1 | 0.0049 |  |
| [CVE-2025-40176](https://patchblox.com/security/data/cve/CVE-2025-40176.md) | High | tls: wait for pending async decryptions if tls_strp_msg_hold fails | 9.8 | 0.0049 |  |
| [CVE-2025-40171](https://patchblox.com/security/data/cve/CVE-2025-40171.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  nvmet-fc: move lsop put work to nvmet_fc_ls_req_... | 7.5 | 0.0048 |  |
| [CVE-2025-40204](https://patchblox.com/security/data/cve/CVE-2025-40204.md) | High | sctp: Fix MAC comparison to be constant-time | 8.1 | 0.0047 |  |
| [CVE-2025-40074](https://patchblox.com/security/data/cve/CVE-2025-40074.md) | High | ipv4: start using dst_dev_rcu() | 9.8 | 0.0046 |  |
| [CVE-2025-40168](https://patchblox.com/security/data/cve/CVE-2025-40168.md) | High | smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). | 8.1 | 0.0042 |  |
| [CVE-2023-53676](https://patchblox.com/security/data/cve/CVE-2023-53676.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | 7.8 | 0.0033 |  |
| [CVE-2025-40141](https://patchblox.com/security/data/cve/CVE-2025-40141.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: ISO: Fix possible UAF on iso_conn_fre... | 8.0 | 0.0032 |  |
| [CVE-2025-40140](https://patchblox.com/security/data/cve/CVE-2025-40140.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: usb: Remove disruptive netif_wake_queue in... | 8.8 | 0.0032 |  |
| [CVE-2025-40001](https://patchblox.com/security/data/cve/CVE-2025-40001.md) | High | scsi: mvsas: Fix use-after-free bugs in mvs_work_queue | 7.8 | 0.0026 |  |
| [CVE-2025-39980](https://patchblox.com/security/data/cve/CVE-2025-39980.md) | High | nexthop: Forbid FDB status change while nexthop is in a group | 7.1 | 0.0023 |  |
| [CVE-2025-37916](https://patchblox.com/security/data/cve/CVE-2025-37916.md) | High | pds_core: remove write-after-free of client_id | 7.8 | 0.0023 |  |
| [CVE-2025-40121](https://patchblox.com/security/data/cve/CVE-2025-40121.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ASoC: Intel: bytcr_rt5651: Fix invalid quirk inp... | 7.0 | 0.0023 |  |
| [CVE-2025-40055](https://patchblox.com/security/data/cve/CVE-2025-40055.md) | High | ocfs2: fix double free in user_cluster_connect() | 7.8 | 0.0023 |  |
| [CVE-2025-40185](https://patchblox.com/security/data/cve/CVE-2025-40185.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: n... | 7.8 | 0.0021 |  |
| [CVE-2025-40154](https://patchblox.com/security/data/cve/CVE-2025-40154.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: n... | 7.8 | 0.0021 |  |
| [CVE-2025-39859](https://patchblox.com/security/data/cve/CVE-2025-39859.md) | High | ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog | 7.8 | 0.0020 |  |
| [CVE-2025-40038](https://patchblox.com/security/data/cve/CVE-2025-40038.md) | High | KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid | 7.1 | 0.0018 |  |
| [CVE-2025-40149](https://patchblox.com/security/data/cve/CVE-2025-40149.md) | High | tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). | 8.8 | 0.0017 |  |
| [CVE-2025-39788](https://patchblox.com/security/data/cve/CVE-2025-39788.md) | High | scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE | 7.8 | 0.0017 |  |
| [CVE-2025-40105](https://patchblox.com/security/data/cve/CVE-2025-40105.md) | High | vfs: Don't leak disconnected dentries on umount | 7.8 | 0.0017 |  |
| [CVE-2025-40118](https://patchblox.com/security/data/cve/CVE-2025-40118.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: pm80xx: Fix array-index-out-of-of-bounds o... | 7.8 | 0.0017 |  |
| [CVE-2025-40139](https://patchblox.com/security/data/cve/CVE-2025-40139.md) | High | smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set(). | 8.4 | 0.0017 |  |
| [CVE-2025-40198](https://patchblox.com/security/data/cve/CVE-2025-40198.md) | High | ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() | 7.8 | 0.0017 |  |
| [CVE-2025-40047](https://patchblox.com/security/data/cve/CVE-2025-40047.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/waitid: always prune wait queue entry i... | 7.8 | 0.0016 |  |
| [CVE-2025-40027](https://patchblox.com/security/data/cve/CVE-2025-40027.md) | High | net/9p: fix double req put in p9_fd_cancelled | 7.8 | 0.0016 |  |
| [CVE-2025-40169](https://patchblox.com/security/data/cve/CVE-2025-40169.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Reject negative offsets for ALU ops  When v... | 7.8 | 0.0015 |  |
| [CVE-2025-40173](https://patchblox.com/security/data/cve/CVE-2025-40173.md) | High | net/ip6_tunnel: Prevent perpetual tunnel growth | 7.8 | 0.0015 |  |
| [CVE-2025-40205](https://patchblox.com/security/data/cve/CVE-2025-40205.md) | High | btrfs: avoid potential out-of-bounds in btrfs_encode_fh() | 7.8 | 0.0015 |  |
| [CVE-2025-40206](https://patchblox.com/security/data/cve/CVE-2025-40206.md) | High | netfilter: nft_objref: validate objref and objrefmap expressions | 7.8 | 0.0015 |  |
| [CVE-2025-39944](https://patchblox.com/security/data/cve/CVE-2025-39944.md) | High | octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() | 7.8 | 0.0015 |  |
| [CVE-2025-40159](https://patchblox.com/security/data/cve/CVE-2025-40159.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  xsk: Harden userspace-supplied xdp_desc validati... | 7.8 | 0.0015 |  |
| [CVE-2025-40064](https://patchblox.com/security/data/cve/CVE-2025-40064.md) | High | smc: Fix use-after-free in __pnet_find_base_ndev(). | 8.8 | 0.0015 |  |
| [CVE-2025-40111](https://patchblox.com/security/data/cve/CVE-2025-40111.md) | High | drm/vmwgfx: Fix Use-after-free in validation | 7.8 | 0.0015 |  |
| [CVE-2025-39819](https://patchblox.com/security/data/cve/CVE-2025-39819.md) | High | fs/smb: Fix inconsistent refcnt update | 7.6 | 0.0015 |  |
| [CVE-2025-40040](https://patchblox.com/security/data/cve/CVE-2025-40040.md) | Routine | mm/ksm: fix flag-dropping behavior in ksm_madvise | 5.8 | 0.0038 |  |
| [CVE-2025-21710](https://patchblox.com/security/data/cve/CVE-2025-21710.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues  The following security issues wer... | 5.5 | 0.0027 |  |
| [CVE-2025-40180](https://patchblox.com/security/data/cve/CVE-2025-40180.md) | Routine | mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop | 5.5 | 0.0025 |  |
| [CVE-2025-40157](https://patchblox.com/security/data/cve/CVE-2025-40157.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  EDAC/i10nm: Skip DIMM enumeration on a disabled... | 4.4 | 0.0025 |  |
| [CVE-2025-40070](https://patchblox.com/security/data/cve/CVE-2025-40070.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  pps: fix warning in pps_register_cdev when regis... | 5.5 | 0.0024 |  |
| [CVE-2025-40115](https://patchblox.com/security/data/cve/CVE-2025-40115.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: mpt3sas: Fix crash in transport port remov... | 5.5 | 0.0023 |  |
| [CVE-2025-40030](https://patchblox.com/security/data/cve/CVE-2025-40030.md) | Routine | pinctrl: check the return value of pinmux_ops::get_function_name() | 5.5 | 0.0023 |  |
| [CVE-2025-40188](https://patchblox.com/security/data/cve/CVE-2025-40188.md) | Routine | pwm: berlin: Fix wrong register in suspend/resume | 5.5 | 0.0023 |  |
| [CVE-2025-40086](https://patchblox.com/security/data/cve/CVE-2025-40086.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/xe: Don't allow evicting of BOs in same VM i... | n/a | 0.0023 |  |
| [CVE-2025-40116](https://patchblox.com/security/data/cve/CVE-2025-40116.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  usb: host: max3421-hcd: Fix error pointer derefe... | n/a | 0.0023 |  |
| [CVE-2025-40109](https://patchblox.com/security/data/cve/CVE-2025-40109.md) | Routine | crypto: rng - Ensure set_ent is always present | 5.5 | 0.0023 |  |
| [CVE-2025-40120](https://patchblox.com/security/data/cve/CVE-2025-40120.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net: usb: asix: hold PM usage ref to avoid PM/MD... | 4.7 | 0.0022 |  |
| [CVE-2025-40127](https://patchblox.com/security/data/cve/CVE-2025-40127.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  hwrng: ks-sa - fix division by zero in ks_sa_rng... | n/a | 0.0022 |  |
| [CVE-2025-40059](https://patchblox.com/security/data/cve/CVE-2025-40059.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  coresight: Fix incorrect handling for return val... | n/a | 0.0021 |  |
| [CVE-2025-40194](https://patchblox.com/security/data/cve/CVE-2025-40194.md) | Routine | cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() | 5.8 | 0.0021 |  |
| [CVE-2025-40200](https://patchblox.com/security/data/cve/CVE-2025-40200.md) | Routine | Squashfs: reject negative file sizes in squashfs_read_inode() | 5.5 | 0.0021 |  |
| [CVE-2025-40080](https://patchblox.com/security/data/cve/CVE-2025-40080.md) | Routine | nbd: restrict sockets to TCP and UDP | 6.1 | 0.0021 |  |
| [CVE-2025-40083](https://patchblox.com/security/data/cve/CVE-2025-40083.md) | Routine | net/sched: sch_qfq: Fix null-deref in agg_dequeue | 5.9 | 0.0021 |  |
| [CVE-2025-40021](https://patchblox.com/security/data/cve/CVE-2025-40021.md) | Routine | tracing: dynevent: Add a missing lockdown check on dynevent | 5.5 | 0.0021 |  |
| [CVE-2025-40110](https://patchblox.com/security/data/cve/CVE-2025-40110.md) | Routine | drm/vmwgfx: Fix a null-ptr access in the cursor snooper | 4.7 | 0.0021 |  |
| [CVE-2025-40107](https://patchblox.com/security/data/cve/CVE-2025-40107.md) | Routine | can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled | 5.5 | 0.0020 |  |
| [CVE-2025-40207](https://patchblox.com/security/data/cve/CVE-2025-40207.md) | Routine | media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try() | 5.5 | 0.0020 |  |
| [CVE-2025-40156](https://patchblox.com/security/data/cve/CVE-2025-40156.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  PM / devfreq: mtk-cci: Fix potential error point... | n/a | 0.0020 |  |
| [CVE-2025-40098](https://patchblox.com/security/data/cve/CVE-2025-40098.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: hda: cs35l41: Fix NULL pointer dereference... | n/a | 0.0020 |  |
| [CVE-2025-40164](https://patchblox.com/security/data/cve/CVE-2025-40164.md) | Routine | usbnet: Fix using smp_processor_id() in preemptible code warnings | 5.5 | 0.0019 |  |
| [CVE-2025-38359](https://patchblox.com/security/data/cve/CVE-2025-38359.md) | Routine | s390/mm: Fix in_atomic() handling in do_secure_storage_access() | 5.5 | 0.0017 |  |
| [CVE-2022-50253](https://patchblox.com/security/data/cve/CVE-2022-50253.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | 5.5 | 0.0016 |  |
| [CVE-2025-39805](https://patchblox.com/security/data/cve/CVE-2025-39805.md) | Routine | net: macb: fix unregister_netdev call order in macb_remove() | 5.5 | 0.0016 |  |
| [CVE-2025-39822](https://patchblox.com/security/data/cve/CVE-2025-39822.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/kbuf: fix signedness in this_len calcul... | 5.5 | 0.0013 |  |

---

Data as of 2026-11-10T20:03:11Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.