# SUSE-SU-2025:4517-1: Security update for 3 packages

SUSE-SU-2025:4517-1, released December 23, 2025, fixes 70 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2025-4517-1
- Platform: Linux
- Released: Dec 23, 2025
- Priority: Urgent (Closes CVE-2025-40172, rated Critical)
- CVEs: 70, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2025:4517-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | sles 15.7 | 6.4.0-150700.20.21.1 |
| [kernel-source-azure](https://patchblox.com/security/data/product/linux/kernel-source-azure.md) | sles 15.7 | 6.4.0-150700.20.21.1 |
| [kernel-syms-azure](https://patchblox.com/security/data/product/linux/kernel-syms-azure.md) | sles 15.7 | 6.4.0-150700.20.21.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-40172](https://patchblox.com/security/data/cve/CVE-2025-40172.md) | Urgent | accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages() | 9.8 | 0.0015 |  |
| [CVE-2025-40048](https://patchblox.com/security/data/cve/CVE-2025-40048.md) | High | uio_hv_generic: Let userspace take care of interrupt mask | 8.4 | 0.0064 |  |
| [CVE-2025-40183](https://patchblox.com/security/data/cve/CVE-2025-40183.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix metadata_dst leak __bpf_redirect_neigh_... | 7.5 | 0.0063 |  |
| [CVE-2025-40186](https://patchblox.com/security/data/cve/CVE-2025-40186.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  tcp: Don't call reqsk_fastopen_remove() in tcp_c... | 8.1 | 0.0059 |  |
| [CVE-2025-40129](https://patchblox.com/security/data/cve/CVE-2025-40129.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  sunrpc: fix null pointer dereference on zero-len... | 7.5 | 0.0057 |  |
| [CVE-2025-40075](https://patchblox.com/security/data/cve/CVE-2025-40075.md) | High | tcp_metrics: use dst_dev_net_rcu() | 8.1 | 0.0049 |  |
| [CVE-2025-40176](https://patchblox.com/security/data/cve/CVE-2025-40176.md) | High | tls: wait for pending async decryptions if tls_strp_msg_hold fails | 9.8 | 0.0049 |  |
| [CVE-2025-40171](https://patchblox.com/security/data/cve/CVE-2025-40171.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  nvmet-fc: move lsop put work to nvmet_fc_ls_req_... | 7.5 | 0.0048 |  |
| [CVE-2025-40204](https://patchblox.com/security/data/cve/CVE-2025-40204.md) | High | sctp: Fix MAC comparison to be constant-time | 8.1 | 0.0047 |  |
| [CVE-2025-40074](https://patchblox.com/security/data/cve/CVE-2025-40074.md) | High | ipv4: start using dst_dev_rcu() | 9.8 | 0.0046 |  |
| [CVE-2025-40168](https://patchblox.com/security/data/cve/CVE-2025-40168.md) | High | smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). | 8.1 | 0.0042 |  |
| [CVE-2023-53676](https://patchblox.com/security/data/cve/CVE-2023-53676.md) | High | kernel-livepatch-SLE15-SP6_Update_7: scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (bsc#1251787). | 7.8 | 0.0033 |  |
| [CVE-2025-40141](https://patchblox.com/security/data/cve/CVE-2025-40141.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: ISO: Fix possible UAF on iso_conn_fre... | 8.0 | 0.0032 |  |
| [CVE-2025-40140](https://patchblox.com/security/data/cve/CVE-2025-40140.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: usb: Remove disruptive netif_wake_queue in... | 8.8 | 0.0032 |  |
| [CVE-2025-40001](https://patchblox.com/security/data/cve/CVE-2025-40001.md) | High | scsi: mvsas: Fix use-after-free bugs in mvs_work_queue | 7.8 | 0.0026 |  |
| [CVE-2025-38361](https://patchblox.com/security/data/cve/CVE-2025-38361.md) | High | drm/amd/display: Check dce_hwseq before dereferencing it | 7.8 | 0.0024 |  |
| [CVE-2025-39980](https://patchblox.com/security/data/cve/CVE-2025-39980.md) | High | nexthop: Forbid FDB status change while nexthop is in a group | 7.1 | 0.0023 |  |
| [CVE-2025-37916](https://patchblox.com/security/data/cve/CVE-2025-37916.md) | High | pds_core: remove write-after-free of client_id | 7.8 | 0.0023 |  |
| [CVE-2025-40121](https://patchblox.com/security/data/cve/CVE-2025-40121.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0023 |  |
| [CVE-2025-40055](https://patchblox.com/security/data/cve/CVE-2025-40055.md) | High | ocfs2: fix double free in user_cluster_connect() | 7.8 | 0.0023 |  |
| [CVE-2025-40185](https://patchblox.com/security/data/cve/CVE-2025-40185.md) | High | kernel-64kb: ice: ice_adapter: release xa entry on adapter allocation failure (bsc#1253394). | 7.8 | 0.0021 |  |
| [CVE-2025-40154](https://patchblox.com/security/data/cve/CVE-2025-40154.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-39859](https://patchblox.com/security/data/cve/CVE-2025-39859.md) | High | ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog | 7.8 | 0.0020 |  |
| [CVE-2025-40038](https://patchblox.com/security/data/cve/CVE-2025-40038.md) | High | KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid | 7.1 | 0.0018 |  |
| [CVE-2025-40149](https://patchblox.com/security/data/cve/CVE-2025-40149.md) | High | tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). | 8.8 | 0.0017 |  |
| [CVE-2025-39788](https://patchblox.com/security/data/cve/CVE-2025-39788.md) | High | scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE | 7.8 | 0.0017 |  |
| [CVE-2025-40105](https://patchblox.com/security/data/cve/CVE-2025-40105.md) | High | vfs: Don't leak disconnected dentries on umount | 7.8 | 0.0017 |  |
| [CVE-2025-40118](https://patchblox.com/security/data/cve/CVE-2025-40118.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: pm80xx: Fix array-index-out-of-of-bounds o... | 7.8 | 0.0017 |  |
| [CVE-2025-40139](https://patchblox.com/security/data/cve/CVE-2025-40139.md) | High | smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set(). | 8.4 | 0.0017 |  |
| [CVE-2025-40198](https://patchblox.com/security/data/cve/CVE-2025-40198.md) | High | ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() | 7.8 | 0.0017 |  |
| [CVE-2025-40047](https://patchblox.com/security/data/cve/CVE-2025-40047.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/waitid: always prune wait queue entry i... | 7.8 | 0.0016 |  |
| [CVE-2025-40027](https://patchblox.com/security/data/cve/CVE-2025-40027.md) | High | net/9p: fix double req put in p9_fd_cancelled | 7.8 | 0.0016 |  |
| [CVE-2025-40169](https://patchblox.com/security/data/cve/CVE-2025-40169.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Reject negative offsets for ALU ops  When v... | 7.8 | 0.0015 |  |
| [CVE-2025-40173](https://patchblox.com/security/data/cve/CVE-2025-40173.md) | High | net/ip6_tunnel: Prevent perpetual tunnel growth | 7.8 | 0.0015 |  |
| [CVE-2025-40205](https://patchblox.com/security/data/cve/CVE-2025-40205.md) | High | btrfs: avoid potential out-of-bounds in btrfs_encode_fh() | 7.8 | 0.0015 |  |
| [CVE-2025-40206](https://patchblox.com/security/data/cve/CVE-2025-40206.md) | High | netfilter: nft_objref: validate objref and objrefmap expressions | 7.8 | 0.0015 |  |
| [CVE-2025-39944](https://patchblox.com/security/data/cve/CVE-2025-39944.md) | High | octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() | 7.8 | 0.0015 |  |
| [CVE-2025-40159](https://patchblox.com/security/data/cve/CVE-2025-40159.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  xsk: Harden userspace-supplied xdp_desc validati... | 7.8 | 0.0015 |  |
| [CVE-2025-40064](https://patchblox.com/security/data/cve/CVE-2025-40064.md) | High | smc: Fix use-after-free in __pnet_find_base_ndev(). | 8.8 | 0.0015 |  |
| [CVE-2025-40111](https://patchblox.com/security/data/cve/CVE-2025-40111.md) | High | drm/vmwgfx: Fix Use-after-free in validation | 7.8 | 0.0015 |  |
| [CVE-2025-39819](https://patchblox.com/security/data/cve/CVE-2025-39819.md) | High | fs/smb: Fix inconsistent refcnt update | 7.6 | 0.0015 |  |
| [CVE-2025-40040](https://patchblox.com/security/data/cve/CVE-2025-40040.md) | Routine | mm/ksm: fix flag-dropping behavior in ksm_madvise | 5.8 | 0.0038 |  |
| [CVE-2025-21710](https://patchblox.com/security/data/cve/CVE-2025-21710.md) | Routine | kernel-64kb: tcp: correct handling of extreme memory squeeze (bsc#1237888). | 5.5 | 0.0027 |  |
| [CVE-2025-40180](https://patchblox.com/security/data/cve/CVE-2025-40180.md) | Routine | mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop | 5.5 | 0.0025 |  |
| [CVE-2025-40157](https://patchblox.com/security/data/cve/CVE-2025-40157.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.4 | 0.0025 |  |
| [CVE-2025-40070](https://patchblox.com/security/data/cve/CVE-2025-40070.md) | Routine | kernel-64kb: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836). | 5.5 | 0.0024 |  |
| [CVE-2025-40115](https://patchblox.com/security/data/cve/CVE-2025-40115.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-40030](https://patchblox.com/security/data/cve/CVE-2025-40030.md) | Routine | pinctrl: check the return value of pinmux_ops::get_function_name() | 5.5 | 0.0023 |  |
| [CVE-2025-40188](https://patchblox.com/security/data/cve/CVE-2025-40188.md) | Routine | pwm: berlin: Fix wrong register in suspend/resume | 5.5 | 0.0023 |  |
| [CVE-2025-40086](https://patchblox.com/security/data/cve/CVE-2025-40086.md) | Routine | kernel-64kb: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds (bsc#1252923). | n/a | 0.0023 |  |
| [CVE-2025-40116](https://patchblox.com/security/data/cve/CVE-2025-40116.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0023 |  |
| [CVE-2025-40109](https://patchblox.com/security/data/cve/CVE-2025-40109.md) | Routine | crypto: rng - Ensure set_ent is always present | 5.5 | 0.0023 |  |
| [CVE-2025-40120](https://patchblox.com/security/data/cve/CVE-2025-40120.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0022 |  |
| [CVE-2025-40127](https://patchblox.com/security/data/cve/CVE-2025-40127.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0022 |  |
| [CVE-2025-40059](https://patchblox.com/security/data/cve/CVE-2025-40059.md) | Routine | kernel-64kb: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809). | n/a | 0.0021 |  |
| [CVE-2025-40194](https://patchblox.com/security/data/cve/CVE-2025-40194.md) | Routine | cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() | 5.8 | 0.0021 |  |
| [CVE-2025-40200](https://patchblox.com/security/data/cve/CVE-2025-40200.md) | Routine | Squashfs: reject negative file sizes in squashfs_read_inode() | 5.5 | 0.0021 |  |
| [CVE-2025-40083](https://patchblox.com/security/data/cve/CVE-2025-40083.md) | Routine | net/sched: sch_qfq: Fix null-deref in agg_dequeue | 5.9 | 0.0021 |  |
| [CVE-2025-40021](https://patchblox.com/security/data/cve/CVE-2025-40021.md) | Routine | tracing: dynevent: Add a missing lockdown check on dynevent | 5.5 | 0.0021 |  |
| [CVE-2025-40110](https://patchblox.com/security/data/cve/CVE-2025-40110.md) | Routine | drm/vmwgfx: Fix a null-ptr access in the cursor snooper | 4.7 | 0.0021 |  |
| [CVE-2025-40107](https://patchblox.com/security/data/cve/CVE-2025-40107.md) | Routine | can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled | 5.5 | 0.0020 |  |
| [CVE-2025-40207](https://patchblox.com/security/data/cve/CVE-2025-40207.md) | Routine | media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try() | 5.5 | 0.0020 |  |
| [CVE-2025-40156](https://patchblox.com/security/data/cve/CVE-2025-40156.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 |  |
| [CVE-2025-40098](https://patchblox.com/security/data/cve/CVE-2025-40098.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: hda: cs35l41: Fix NULL pointer dereference... | n/a | 0.0020 |  |
| [CVE-2025-40164](https://patchblox.com/security/data/cve/CVE-2025-40164.md) | Routine | usbnet: Fix using smp_processor_id() in preemptible code warnings | 5.5 | 0.0019 |  |
| [CVE-2025-38360](https://patchblox.com/security/data/cve/CVE-2025-38360.md) | Routine | kernel-64kb: drm/amd/display: Add more checks for DSC / HUBP ONO guarantees (bsc#1247078). | 5.5 | 0.0019 |  |
| [CVE-2025-38359](https://patchblox.com/security/data/cve/CVE-2025-38359.md) | Routine | s390/mm: Fix in_atomic() handling in do_secure_storage_access() | 5.5 | 0.0017 |  |
| [CVE-2022-50253](https://patchblox.com/security/data/cve/CVE-2022-50253.md) | Routine | kernel-64kb: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). | 5.5 | 0.0016 |  |
| [CVE-2025-39805](https://patchblox.com/security/data/cve/CVE-2025-39805.md) | Routine | net: macb: fix unregister_netdev call order in macb_remove() | 5.5 | 0.0016 |  |
| [CVE-2025-39822](https://patchblox.com/security/data/cve/CVE-2025-39822.md) | Routine | kernel-64kb: io_uring/kbuf: fix signedness in this_len calculation (bsc#1250034). | 5.5 | 0.0013 |  |

---

Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.