SUSE SLES15 Security Update : kernel (SUSE-SU-2025:03628-1)

high Nessus Plugin ID 270857

Synopsis

The remote SUSE host is missing one or more security updates.

Description

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03628-1 advisory.

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

- CVE-2022-49138: Bluetooth: hci_event: Fix checking conn for le_conn_complete_evt (bsc#1238160).
- CVE-2022-49980: USB: gadget: fix use-after-free read in usb_udc_uevent() (bsc#1245110).
- CVE-2022-50233: Bluetooth: eir: Fix using strlen with hdev->{dev_name,short_name} (bsc#1246968).
- CVE-2022-50252: igb: Do not free q_vector unless new one was allocated (bsc#1249846).
- CVE-2022-50409: net: If sock is dead do not access sock's sk_wq in sk_stream_wait_memory (bsc#1250392).
- CVE-2023-53178: mm: fix zswap writeback race condition (bsc#1249827).
- CVE-2023-53321: wifi: mac80211_hwsim: drop short frames (bsc#1250313).
- CVE-2023-53438: x86/MCE: Always save CS register on AMD Zen IF Poison errors (bsc#1250180).
- CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
- CVE-2025-37738: ext4: ignore xattrs past end (bsc#1242846).
- CVE-2025-37885: KVM: x86: Reset IRTE to host control if *new* route isn't postable (bsc#1242960).
- CVE-2025-37958: mm/huge_memory: fix dereferencing invalid pmd migration entry (bsc#1243539).
- CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
- CVE-2025-38084: mm/hugetlb: unshare page tables during VMA split, not before (bsc#1245498).
- CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245499).
- CVE-2025-38111: net/mdiobus: Fix potential out-of-bounds read/write access (bsc#1245666).
- CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
- CVE-2025-38380: i2c/designware: Fix an initialization issue (bsc#1247028).
- CVE-2025-38470: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (bsc#1247288).
- CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1247317).
- CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
- CVE-2025-38553: net/sched: Restrict conditions for adding duplicating netems to qdisc tree (bsc#1248255).
- CVE-2025-38572: ipv6: reject malicious packets in ipv6_gso_segment() (bsc#1248399).
- CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
- CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
- CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
- CVE-2025-38685: fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1249220).
- CVE-2025-38706: ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (bsc#1249195).
- CVE-2025-38713: hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (bsc#1249200).
- CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
- CVE-2025-39691: fs/buffer: fix use-after-free when call bh_read() helper (bsc#1249374).
- CVE-2025-39703: net, hsr: reject HSR frame if skb can't hold tag (bsc#1249315).
- CVE-2025-39726: s390/ism: fix concurrency management in ism_cmd() (bsc#1249266).
- CVE-2025-39746: wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1249516).
- CVE-2025-39751: ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (bsc#1249538).
- CVE-2025-39790: bus: mhi: host: Detect events pointing to unexpected TREs (bsc#1249548).
- CVE-2025-39797: xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (bsc#1249608).
- CVE-2025-39823: KVM: x86: use array_index_nospec with indices that come from guest (bsc#1250002).
- CVE-2025-39824: HID: asus: fix UAF via HID_CLAIMED_INPUT validation (bsc#1250007).
- CVE-2025-39860: Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() (bsc#1250247).
- CVE-2025-39869: dmaengine: ti: edma: Fix memory allocation size for queue_priority_map (bsc#1250406).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Update the affected packages.

Plugin Details

Severity: High

ID: 270857

File Name: suse_SU-2025-03628-1.nasl

Version: 1.1

Type: local

Agent: unix

Family: SuSE Local Security Checks

Published: 10/21/2025

Updated: 10/21/2025

Supported Sensors: Continuous Assessment, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.4

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.1

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N

CVSS Score Source: CVE-2023-39197

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 7

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

CVSS Score Source: CVE-2023-42753

Vulnerability Information

CPE: p-cpe:/a:novell:suse_linux:kernel-default-base, p-cpe:/a:novell:suse_linux:reiserfs-kmp-default, p-cpe:/a:novell:suse_linux:kernel-macros, p-cpe:/a:novell:suse_linux:kernel-zfcpdump, p-cpe:/a:novell:suse_linux:kernel-64kb-devel, p-cpe:/a:novell:suse_linux:cluster-md-kmp-default, p-cpe:/a:novell:suse_linux:gfs2-kmp-default, p-cpe:/a:novell:suse_linux:kernel-default, p-cpe:/a:novell:suse_linux:kernel-default-devel, p-cpe:/a:novell:suse_linux:kernel-devel, p-cpe:/a:novell:suse_linux:kernel-obs-build, p-cpe:/a:novell:suse_linux:kernel-syms, p-cpe:/a:novell:suse_linux:ocfs2-kmp-default, p-cpe:/a:novell:suse_linux:dlm-kmp-default, p-cpe:/a:novell:suse_linux:kernel-source, p-cpe:/a:novell:suse_linux:kernel-64kb, cpe:/o:novell:suse_linux:15

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 10/17/2025

Vulnerability Publication Date: 7/21/2021

Reference Information

CVE: CVE-2022-2602, CVE-2022-2978, CVE-2022-36280, CVE-2022-43945, CVE-2022-49138, CVE-2022-49980, CVE-2022-50233, CVE-2022-50234, CVE-2022-50235, CVE-2022-50239, CVE-2022-50241, CVE-2022-50246, CVE-2022-50247, CVE-2022-50248, CVE-2022-50249, CVE-2022-50250, CVE-2022-50251, CVE-2022-50252, CVE-2022-50255, CVE-2022-50257, CVE-2022-50258, CVE-2022-50260, CVE-2022-50261, CVE-2022-50264, CVE-2022-50266, CVE-2022-50267, CVE-2022-50268, CVE-2022-50269, CVE-2022-50271, CVE-2022-50272, CVE-2022-50275, CVE-2022-50276, CVE-2022-50277, CVE-2022-50278, CVE-2022-50279, CVE-2022-50282, CVE-2022-50286, CVE-2022-50289, CVE-2022-50294, CVE-2022-50297, CVE-2022-50298, CVE-2022-50299, CVE-2022-50301, CVE-2022-50308, CVE-2022-50309, CVE-2022-50312, CVE-2022-50317, CVE-2022-50318, CVE-2022-50320, CVE-2022-50321, CVE-2022-50324, CVE-2022-50328, CVE-2022-50329, CVE-2022-50330, CVE-2022-50331, CVE-2022-50333, CVE-2022-50340, CVE-2022-50342, CVE-2022-50344, CVE-2022-50346, CVE-2022-50347, CVE-2022-50348, CVE-2022-50349, CVE-2022-50351, CVE-2022-50353, CVE-2022-50355, CVE-2022-50358, CVE-2022-50359, CVE-2022-50362, CVE-2022-50364, CVE-2022-50367, CVE-2022-50368, CVE-2022-50369, CVE-2022-50370, CVE-2022-50372, CVE-2022-50373, CVE-2022-50374, CVE-2022-50375, CVE-2022-50376, CVE-2022-50379, CVE-2022-50381, CVE-2022-50385, CVE-2022-50386, CVE-2022-50388, CVE-2022-50389, CVE-2022-50391, CVE-2022-50392, CVE-2022-50394, CVE-2022-50395, CVE-2022-50399, CVE-2022-50401, CVE-2022-50402, CVE-2022-50404, CVE-2022-50408, CVE-2022-50409, CVE-2022-50410, CVE-2022-50411, CVE-2022-50414, CVE-2022-50417, CVE-2022-50419, CVE-2022-50422, CVE-2022-50423, CVE-2022-50425, CVE-2022-50427, CVE-2022-50428, CVE-2022-50429, CVE-2022-50430, CVE-2022-50431, CVE-2022-50432, CVE-2022-50434, CVE-2022-50435, CVE-2022-50436, CVE-2022-50437, CVE-2022-50439, CVE-2022-50440, CVE-2022-50443, CVE-2022-50444, CVE-2022-50449, CVE-2022-50453, CVE-2022-50454, CVE-2022-50456, CVE-2022-50458, CVE-2022-50459, CVE-2022-50460, CVE-2022-50465, CVE-2022-50466, CVE-2022-50467, CVE-2022-50468, CVE-2022-50469, CVE-2023-1380, CVE-2023-28328, CVE-2023-31248, CVE-2023-3772, CVE-2023-39197, CVE-2023-42753, CVE-2023-52923, CVE-2023-53147, CVE-2023-53149, CVE-2023-53150, CVE-2023-53151, CVE-2023-53153, CVE-2023-53165, CVE-2023-53167, CVE-2023-53171, CVE-2023-53174, CVE-2023-53176, CVE-2023-53178, CVE-2023-53179, CVE-2023-53182, CVE-2023-53185, CVE-2023-53196, CVE-2023-53197, CVE-2023-53199, CVE-2023-53201, CVE-2023-53205, CVE-2023-53213, CVE-2023-53216, CVE-2023-53219, CVE-2023-53222, CVE-2023-53223, CVE-2023-53226, CVE-2023-53229, CVE-2023-53230, CVE-2023-53234, CVE-2023-53238, CVE-2023-53239, CVE-2023-53241, CVE-2023-53242, CVE-2023-53244, CVE-2023-53245, CVE-2023-53246, CVE-2023-53249, CVE-2023-53250, CVE-2023-53251, CVE-2023-53255, CVE-2023-53259, CVE-2023-53265, CVE-2023-53268, CVE-2023-53270, CVE-2023-53272, CVE-2023-53273, CVE-2023-53275, CVE-2023-53276, CVE-2023-53277, CVE-2023-53280, CVE-2023-53281, CVE-2023-53282, CVE-2023-53286, CVE-2023-53288, CVE-2023-53295, CVE-2023-53297, CVE-2023-53298, CVE-2023-53299, CVE-2023-53302, CVE-2023-53304, CVE-2023-53305, CVE-2023-53307, CVE-2023-53309, CVE-2023-53311, CVE-2023-53313, CVE-2023-53314, CVE-2023-53315, CVE-2023-53316, CVE-2023-53317, CVE-2023-53321, CVE-2023-53322, CVE-2023-53324, CVE-2023-53326, CVE-2023-53330, CVE-2023-53331, CVE-2023-53333, CVE-2023-53334, CVE-2023-53335, CVE-2023-53337, CVE-2023-53344, CVE-2023-53349, CVE-2023-53352, CVE-2023-53356, CVE-2023-53359, CVE-2023-53368, CVE-2023-53373, CVE-2023-53375, CVE-2023-53377, CVE-2023-53379, CVE-2023-53380, CVE-2023-53381, CVE-2023-53384, CVE-2023-53386, CVE-2023-53388, CVE-2023-53390, CVE-2023-53393, CVE-2023-53395, CVE-2023-53396, CVE-2023-53400, CVE-2023-53404, CVE-2023-53405, CVE-2023-53406, CVE-2023-53409, CVE-2023-53413, CVE-2023-53414, CVE-2023-53415, CVE-2023-53416, CVE-2023-53422, CVE-2023-53427, CVE-2023-53431, CVE-2023-53435, CVE-2023-53436, CVE-2023-53437, CVE-2023-53438, CVE-2023-53440, CVE-2023-53443, CVE-2023-53446, CVE-2023-53449, CVE-2023-53451, CVE-2023-53452, CVE-2023-53453, CVE-2023-53454, CVE-2023-53457, CVE-2023-53458, CVE-2023-53463, CVE-2023-53464, CVE-2023-53465, CVE-2023-53468, CVE-2023-53471, CVE-2023-53472, CVE-2023-53473, CVE-2023-53474, CVE-2023-53475, CVE-2023-53476, CVE-2023-53485, CVE-2023-53487, CVE-2023-53488, CVE-2023-53492, CVE-2023-53494, CVE-2023-53496, CVE-2023-53498, CVE-2023-53499, CVE-2023-53505, CVE-2023-53506, CVE-2023-53509, CVE-2023-53512, CVE-2023-53513, CVE-2023-53515, CVE-2023-53518, CVE-2023-53519, CVE-2023-53521, CVE-2023-53524, CVE-2023-53525, CVE-2023-53526, CVE-2023-53530, CVE-2024-26583, CVE-2024-26584, CVE-2024-58240, CVE-2025-23155, CVE-2025-37738, CVE-2025-37885, CVE-2025-37958, CVE-2025-38014, CVE-2025-38084, CVE-2025-38085, CVE-2025-38111, CVE-2025-38184, CVE-2025-38470, CVE-2025-38476, CVE-2025-38488, CVE-2025-38553, CVE-2025-38572, CVE-2025-38659, CVE-2025-38664, CVE-2025-38678, CVE-2025-38685, CVE-2025-38706, CVE-2025-38713, CVE-2025-38734, CVE-2025-39691, CVE-2025-39703, CVE-2025-39726, CVE-2025-39746, CVE-2025-39790, CVE-2025-39797, CVE-2025-39823, CVE-2025-39824, CVE-2025-39860, CVE-2025-39869

SuSE: SUSE-SU-2025:03628-1

Detections

Analytics

SUSE SLES15 Security Update : kernel (SUSE-SU-2025:03628-1)

high Nessus Plugin ID 270857

Synopsis

Description

Solution

See Also

Plugin Details

Risk Information

VPR

CVSS v2

CVSS v3

Vulnerability Information

Reference Information