Linux · SUSE Linux Enterprise · Security advisory · April 8, 2025
SUSE-SU-2025:1178-1: Security update for 5 packages
SUSE-SU-2025:1178-1, released April 8, 2025, fixes 189 CVEs across 5 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
189
1 rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.3800
98th percentile
Priority of the 189 CVEs
Patch now 0
Urgent 1
High 90
Routine 98
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| kernel-livepatch-SLE15-SP6-RT_Update_10 | sles 15.6 | 1-150600.1.5.1 |
| kernel-rt | opensuse-leap 15.6 | 6.4.0-150600.10.34.1 |
| kernel-rt_debug | opensuse-leap 15.6 | 6.4.0-150600.10.34.1 |
| kernel-source-rt | opensuse-leap 15.6 | 6.4.0-150600.10.34.1 |
| kernel-syms-rt | opensuse-leap 15.6 | 6.4.0-150600.10.34.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2025-21858 | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0025 | None reported |
| High | CVE-2025-21760 | kernel-64kb: ndisc: extend RCU protection in ndisc_send_skb() (bsc#1238763). | 8.1 | 0.3800 | None reported |
| High | CVE-2025-21759 | kernel-64kb: ipv6: mcast: extend RCU protection in igmp6_send() (bsc#1238738). | 7.8 | 0.0780 | None reported |
| High | CVE-2025-21756 | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0089 | None reported |
| High | CVE-2025-21796 | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0067 | None reported |
| High | CVE-2025-21762 | kernel-64kb: arp: use RCU protection in arp_xmit() (bsc#1238780). | 8.1 | 0.0066 | None reported |
| High | CVE-2025-21844 | kernel-64kb: smb: client: Add check for next_buffer in receive_encrypted_standard() (bsc#1239512). | 7.8 | 0.0062 | None reported |
| High | CVE-2024-56640 | kernel-64kb: net/smc: fix LGR and link use-after-free issue (bsc#1235436). | 7.8 | 0.0062 | None reported |
| High | CVE-2025-21765 | kernel-64kb: ipv6: use RCU protection in ip6_default_advmss() (bsc#1237906). | 7.8 | 0.0061 | None reported |
| High | CVE-2024-46736 | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0061 | None reported |
| High | CVE-2024-46796 | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0044 | None reported |
| High | CVE-2024-57947 | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0044 | None reported |
| High | CVE-2025-21855 | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0044 | None reported |
| High | CVE-2025-21829 | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0041 | None reported |
| High | CVE-2025-21735 | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0038 | None reported |
| High | CVE-2025-21704 | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0037 | None reported |
| High | CVE-2023-52927 | kernel-64kb: netfilter: allow exp not to be removed in nf_ct_find_expectation (bsc#1239644). | 7.8 | 0.0032 | None reported |
| High | CVE-2024-57986 | kernel-rt-64k-debug: kernel: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections | 7.8 | 0.0032 | None reported |
| High | CVE-2024-58006 | PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() | 7.8 | 0.0031 | None reported |
| High | CVE-2025-21703 | kernel-64kb: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313). | 7.8 | 0.0030 | None reported |
| High | CVE-2024-53057 | kernel-64kb: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551). | 7.8 | 0.0029 | None reported |
| High | CVE-2025-21782 | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0029 | None reported |
| High | CVE-2025-21864 | kernel-64kb: kABI fix for tcp: drop secpath at the same time as we currently drop (bsc#1239482). | 7.8 | 0.0028 | None reported |
| High | CVE-2024-57980 | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0027 | None reported |
| High | CVE-2025-21785 | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0027 | None reported |
Showing 1 to 25 of 189
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.