OPENSUSE-SU-2025:20172-1: Security update for 12 packages

OPENSUSE-SU-2025:20172-1, released December 19, 2025, fixes 100 CVEs across 12 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent

CVEs closed

100

2 rated Critical

Exploited

None reported

Highest CVSS

9.8

Base score, 0 to 10

Highest EPSS

0.0071

53rd percentile

Priority of the 100 CVEs

Patch now 0
                                Urgent 2
                                High 57
                                Routine 41

Fixed package versions

Product	Release	Fixed in
dtb-aarch64	opensuse-leap 16.0	6.12.0-160000.8.1
kernel-64kb	opensuse-leap 16.0	6.12.0-160000.8.1
kernel-default	opensuse-leap 16.0	6.12.0-160000.8.1
kernel-default-base	opensuse-leap 16.0	6.12.0-160000.8.1.160000.2.5
kernel-docs	opensuse-leap 16.0	6.12.0-160000.8.1
kernel-kvmsmall	opensuse-leap 16.0	6.12.0-160000.8.1
kernel-obs-build	opensuse-leap 16.0	6.12.0-160000.8.1
kernel-obs-qa	opensuse-leap 16.0	6.12.0-160000.8.1
kernel-rt	opensuse-leap 16.0	6.12.0-160000.8.1
kernel-source	opensuse-leap 16.0	6.12.0-160000.8.1
kernel-syms	opensuse-leap 16.0	6.12.0-160000.8.1
kernel-zfcpdump	opensuse-leap 16.0	6.12.0-160000.8.1

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Urgent	CVE-2025-40172	accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()	9.8	0.0015	None reported
Urgent	CVE-2025-40165	media: nxp: imx8-isi: m2m: Fix streaming cleanup on release	9.8	0.0015	None reported
High	CVE-2025-40135	ipv6: use RCU in ip6_xmit()	8.4	0.0071	None reported
High	CVE-2025-40187	net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()	7.5	0.0064	None reported
High	CVE-2025-40053	net: dlink: handle copy_thresh allocation failure	7.5	0.0063	None reported
High	CVE-2025-40183	linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix metadata_dst leak __bpf_redirect_neigh_...	7.5	0.0063	None reported
High	CVE-2025-40186	linux: In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call reqsk_fastopen_remove() in tcp_c...	8.1	0.0059	None reported
High	CVE-2025-40129	linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix null pointer dereference on zero-len...	7.5	0.0057	None reported
High	CVE-2025-40158	ipv6: use RCU in ip6_output()	8.1	0.0056	None reported
High	CVE-2025-40133	linux: In the Linux kernel, the following vulnerability has been resolved: mptcp: Use __sk_dst_get() and dst_dev_rcu() in m...	8.1	0.0051	None reported
High	CVE-2025-40075	tcp_metrics: use dst_dev_net_rcu()	8.1	0.0049	None reported
High	CVE-2025-40176	tls: wait for pending async decryptions if tls_strp_msg_hold fails	9.8	0.0049	None reported
High	CVE-2025-40171	linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: move lsop put work to nvmet_fc_ls_req_...	7.5	0.0048	None reported
High	CVE-2025-40204	sctp: Fix MAC comparison to be constant-time	8.1	0.0047	None reported
High	CVE-2025-40074	ipv4: start using dst_dev_rcu()	9.8	0.0046	None reported
High	CVE-2025-40168	smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().	8.1	0.0042	None reported
High	CVE-2025-38728	smb3: fix for slab out of bounds on mount to ksmbd	7.1	0.0036	None reported
High	CVE-2025-40141	linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix possible UAF on iso_conn_fre...	8.0	0.0032	None reported
High	CVE-2025-40140	linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: Remove disruptive netif_wake_queue in...	8.8	0.0032	None reported
High	CVE-2025-40001	scsi: mvsas: Fix use-after-free bugs in mvs_work_queue	7.8	0.0026	None reported
High	CVE-2025-40003	net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work	7.8	0.0026	None reported
High	CVE-2025-39980	nexthop: Forbid FDB status change while nexthop is in a group	7.1	0.0023	None reported
High	CVE-2025-37916	pds_core: remove write-after-free of client_id	7.8	0.0023	None reported
High	CVE-2025-40121	linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: bytcr_rt5651: Fix invalid quirk inp...	7.0	0.0023	None reported
High	CVE-2025-40055	ocfs2: fix double free in user_cluster_connect()	7.8	0.0023	None reported

Also fixes CVE-2025-40172

SUSE-SU-2026:20015-1
kernel-64kb, kernel-default, kernel-default-base and 6 more on sles 16.0
SUSE-SU-2025:4517-1
kernel-azure, kernel-source-azure, kernel-syms-azure on sles 15.7
SUSE-SU-2025:4516-1
kernel-livepatch-SLE15-SP7-RT_Update_7 on sles 15.7
SUSE-SU-2025:4393-1
kernel-64kb, kernel-default, kernel-default-base and 6 more on sles 15.7
SUSE-SU-2025:4521-1
kernel-livepatch-SLE15-SP6-RT_Update_18, kernel-rt, kernel-rt_debug and 2 more on opensuse-leap 15.6, sles 15.6
SUSE-SU-2025:4505-1
kernel-azure, kernel-source-azure, kernel-syms-azure on opensuse-leap 15.6, sles 15.6
SUSE-SU-2025:4422-1
dtb-aarch64, kernel-64kb, kernel-debug and 10 more on opensuse-leap 15.6, sles 15.6
DEBIAN-CVE-2025-40172
linux on Debian 13.5 (trixie), Debian 14

Vendor advisory

https://osv.dev/vulnerability/openSUSE-SU-2025:20172-1

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/opensuse-su-2025-20172-1">OPENSUSE-SU-2025:20172-1 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.