Linux · SUSE Linux Enterprise · Security advisory · March 12, 2025

SUSE-SU-2025:0847-1: Security update for 3 packages

SUSE-SU-2025:0847-1, released March 12, 2025, fixes 83 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
83
1 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0076
55th percentile

Priority of the 83 CVEs

Patch now 0 Urgent 1 High 32 Routine 50

Fixed package versions

ProductReleaseFixed in
kernel-azureopensuse-leap 15.66.4.0-150600.8.31.1
kernel-azuresles 15.66.4.0-150600.8.31.1
kernel-source-azureopensuse-leap 15.66.4.0-150600.8.31.1
kernel-source-azuresles 15.66.4.0-150600.8.31.1
kernel-syms-azureopensuse-leap 15.66.4.0-150600.8.31.1
kernel-syms-azuresles 15.66.4.0-150600.8.31.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2024-53177 linux: In the Linux kernel, the following vulnerability has been resolved: smb: prevent use-after-free due to open_cached_d...9.8 0.0055 None reported
High CVE-2025-21795 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system7.8 0.0067 None reported
High CVE-2025-21692 linux: In the Linux kernel, the following vulnerability has been resolved: net: sched: fix ets qdisc OOB Indexing Haowei Y...7.8 0.0062 None reported
High CVE-2024-46858 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: m...7.0 0.0059 None reported
High CVE-2024-50029 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d...7.8 0.0037 None reported
High CVE-2024-49950 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d...7.8 0.0037 None reported
High CVE-2024-53239 linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Release resources at card release...7.8 0.0029 None reported
High CVE-2025-21647 kernel-rt-64k-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system7.8 0.0028 None reported
High CVE-2024-56633 linux: In the Linux kernel, the following vulnerability has been resolved: tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bp...7.8 0.0028 None reported
High CVE-2024-49884 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d...7.8 0.0028 None reported
High CVE-2024-44974 linux: In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: avoid possible UaF when selecting end...7.8 0.0027 None reported
High CVE-2024-57979 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: H...7.8 0.0027 None reported
High CVE-2024-53173 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d...7.8 0.0027 None reported
High CVE-2024-50073 tty: n_gsm: Fix use-after-free in gsm_cleanup_mux7.8 0.0026 None reported
High CVE-2024-41055 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system7.8 0.0026 None reported
High CVE-2024-53147 kernel: In the Linux kernel, the following vulnerability has been resolved: exfat: fix out-of-bounds access of directory entr...7.8 0.0025 None reported
High CVE-2024-47701 linux: In the Linux kernel, the following vulnerability has been resolved: ext4: avoid OOB when system.data xattr changes u...7.8 0.0025 None reported
High CVE-2024-56548 linux: In the Linux kernel, the following vulnerability has been resolved: hfsplus: don't query the device logical block si...7.8 0.0025 None reported
High CVE-2024-50036 linux: In the Linux kernel, the following vulnerability has been resolved: net: do not delay dst_entries_add() in dst_relea...7.0 0.0025 None reported
High CVE-2024-50115 kernel-64k-debug-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: B...7.1 0.0025 None reported
High CVE-2024-56605 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d...7.8 0.0024 None reported
High CVE-2025-21715 linux: In the Linux kernel, the following vulnerability has been resolved: net: davicom: fix UAF in dm9000_drv_remove dm i...7.8 0.0024 None reported
High CVE-2024-56658 linux: In the Linux kernel, the following vulnerability has been resolved: net: defer final 'struct net' free in netns dism...7.8 0.0024 None reported
High CVE-2025-21687 linux: In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of read/write sy...7.8 0.0024 None reported
High CVE-2025-21669 kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d...7.1 0.0023 None reported
Showing 1 to 25 of 83 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.