CVE-2025-38352

mediumpriority · act · 90OT risk · criticalKEV · exploitedEPSS 0.014 · 72 %ileexploit · PoCDEEUNLRUUS

grimoire priorityP0 · Act now

Exploitable?

Yes · in the wild

CISA KEV · 6 exploits · PoC

Likely / severe?

1.36% (72nd) EPSS

CVSS 4.6 · medium

Is it mine?

83 products

Check your exposure

Who says so?

7 sources

cnnvd · enisa_euvd · fstec_bdu · osv

added 2025-09-04remediate by 2025-09-25

required action Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

EPSS · scored 2026-10-27

Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability

In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() If an exiting non-autoreaping task has already passed exit_notify() and calls handle_posix_cpu_timers() from IRQ, it can be reaped by its parent or debugger right after unlock_task_sighand(). If a concurrent posix_cpu_timer_del() runs at that moment, it won't be able to detect timer->it.cpu.firing != 0: cpu_timer_task_rcu() and/or lock_task_sighand() will fail. Add the tsk->exit_state check into run_posix_cpu_timers() to fix this. This fix is not needed if CONFIG_POSIX_CPU_TIMERS_TASK_WORK=y, because exit_task_work() is called before exit_notify(). But the check still makes sense, task_work_add(&tsk->posix_cputimers_work.work) will fail anyway in this case.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedkernel-livepatch-6_4_0-150700_7_3-rt-0:10-150700.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-150700_7_8-rt-0:10-150700.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkgraft-patch-4_12_14-122_247-default-0:13-2.1.ppc64le as component of SUSE Linux Enterprise Live Patching 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkgraft-patch-4_12_14-122_247-default-0:13-2.1.s390x as component of SUSE Linux Enterprise Live Patching 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkgraft-patch-4_12_14-122_247-default-0:13-2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkgraft-patch-4_12_14-122_244-default-0:15-2.1.ppc64le as component of SUSE Linux Enterprise Live Patching 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkgraft-patch-4_12_14-122_244-default-0:15-2.1.s390x as component of SUSE Linux Enterprise Live Patching 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkgraft-patch-4_12_14-122_244-default-0:15-2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkgraft-patch-4_12_14-122_261-default-0:9-2.1.ppc64le as component of SUSE Linux Enterprise Live Patching 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkgraft-patch-4_12_14-122_261-default-0:9-2.1.s390x as component of SUSE Linux Enterprise Live Patching 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkgraft-patch-4_12_14-122_261-default-0:9-2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 12 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-5_14_21-150400_24_147-default-0:19-150400.2.1.ppc64le as component of SUSE Linux Enterprise Live Patching 15 SP4suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-5_14_21-150400_24_147-default-0:19-150400.2.1.s390x as component of SUSE Linux Enterprise Live Patching 15 SP4suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-5_14_21-150400_24_147-default-0:19-150400.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP4suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-5_14_21-150400_24_164-default-0:13-150400.2.1.ppc64le as component of SUSE Linux Enterprise Live Patching 15 SP4suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-5_14_21-150400_24_164-default-0:13-150400.2.1.s390x as component of SUSE Linux Enterprise Live Patching 15 SP4suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-5_14_21-150400_24_164-default-0:13-150400.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP4suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-5_14_21-150500_55_97-default-0:14-150500.2.1.ppc64le as component of SUSE Linux Enterprise Live Patching 15 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-5_14_21-150500_55_97-default-0:14-150500.2.1.s390x as component of SUSE Linux Enterprise Live Patching 15 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-5_14_21-150500_55_97-default-0:14-150500.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-5_14_21-150500_55_113-default-0:11-150500.2.1.ppc64le as component of SUSE Linux Enterprise Live Patching 15 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-5_14_21-150500_55_113-default-0:11-150500.2.1.s390x as component of SUSE Linux Enterprise Live Patching 15 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-5_14_21-150500_55_113-default-0:11-150500.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-5_14_21-150500_55_103-default-0:13-150500.2.1.ppc64le as component of SUSE Linux Enterprise Live Patching 15 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-5_14_21-150500_55_103-default-0:13-150500.2.1.s390x as component of SUSE Linux Enterprise Live Patching 15 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-5_14_21-150500_55_103-default-0:13-150500.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP5suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-150600_23_33-default-0:18-150600.2.1.ppc64le as component of SUSE Linux Enterprise Live Patching 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-150600_23_33-default-0:18-150600.2.1.s390x as component of SUSE Linux Enterprise Live Patching 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-150600_23_33-default-0:18-150600.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-150600_23_60-default-0:10-150600.2.1.ppc64le as component of SUSE Linux Enterprise Live Patching 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-150600_23_60-default-0:10-150600.2.1.s390x as component of SUSE Linux Enterprise Live Patching 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-150600_23_60-default-0:10-150600.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-150600_23_47-default-0:12-150600.2.1.ppc64le as component of SUSE Linux Enterprise Live Patching 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-150600_23_47-default-0:12-150600.2.1.s390x as component of SUSE Linux Enterprise Live Patching 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-150600_23_47-default-0:12-150600.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-150600_23_38-default-0:13-150600.2.1.ppc64le as component of SUSE Linux Enterprise Live Patching 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-150600_23_38-default-0:13-150600.2.1.s390x as component of SUSE Linux Enterprise Live Patching 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-150600_23_38-default-0:13-150600.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP6suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-150700_51-default-0:10-150700.3.27.1.ppc64le as component of SUSE Linux Enterprise Live Patching 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-150700_51-default-0:10-150700.3.27.1.s390x as component of SUSE Linux Enterprise Live Patching 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-150700_51-default-0:10-150700.3.27.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-150700_53_6-default-0:10-150700.2.1.ppc64le as component of SUSE Linux Enterprise Live Patching 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-150700_53_6-default-0:10-150700.2.1.s390x as component of SUSE Linux Enterprise Live Patching 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-150700_53_6-default-0:10-150700.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-150700_53_3-default-0:10-150700.2.1.ppc64le as component of SUSE Linux Enterprise Live Patching 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-150700_53_3-default-0:10-150700.2.1.s390x as component of SUSE Linux Enterprise Live Patching 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-150700_53_3-default-0:10-150700.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP7suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-5_14_21-150400_24_150-default-0:14-150400.2.1.ppc64le as component of SUSE Linux Enterprise Live Patching 15 SP4suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-5_14_21-150400_24_150-default-0:14-150400.2.1.s390x as component of SUSE Linux Enterprise Live Patching 15 SP4suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-5_14_21-150400_24_150-default-0:14-150400.2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP4suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-25-rt-0:14-1.1.x86_64 as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-28-rt-0:12-3.1.x86_64 as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-30-rt-0:12-1.3.x86_64 as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-31-rt-0:11-1.2.x86_64 as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-33-rt-0:10-1.2.x86_64 as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-24-default-0:17-1.2.s390x as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-24-default-0:17-1.2.x86_64 as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-25-default-0:15-1.2.s390x as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-25-default-0:15-1.2.x86_64 as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-28-default-0:13-3.1.s390x as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-28-default-0:13-3.1.x86_64 as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-29-default-0:12-1.2.s390x as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-29-default-0:12-1.2.x86_64 as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-30-default-0:12-1.2.s390x as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-30-default-0:12-1.2.x86_64 as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-31-default-0:12-1.2.s390x as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-31-default-0:12-1.2.x86_64 as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-34-rt-0:10-1.1.x86_64 as component of SUSE Linux Micro 6.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-24-default-0:17-1.2.s390x as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-24-default-0:17-1.2.x86_64 as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-25-default-0:15-1.2.s390x as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-25-default-0:15-1.2.x86_64 as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-28-default-0:13-3.1.s390x as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-28-default-0:13-3.1.x86_64 as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-29-default-0:12-1.2.s390x as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-29-default-0:12-1.2.x86_64 as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-30-default-0:12-1.2.s390x as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-30-default-0:12-1.2.x86_64 as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-31-default-0:12-1.2.s390x as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-31-default-0:12-1.2.x86_64 as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-25-rt-0:14-1.1.x86_64 as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-28-rt-0:12-3.1.x86_64 as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-30-rt-0:12-1.3.x86_64 as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-31-rt-0:11-1.2.x86_64 as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-33-rt-0:10-1.2.x86_64 as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_4_0-34-rt-0:10-1.1.x86_64 as component of SUSE Linux Micro 6.1suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_12_0-160000_5-default-0:7-160000.4.3.ppc64le as component of SUSE Linux Enterprise Server 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_12_0-160000_5-default-0:7-160000.4.3.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_12_0-160000_5-default-0:7-160000.4.3.s390x as component of SUSE Linux Enterprise Server 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_12_0-160000_5-default-0:7-160000.4.3.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_12_0-160000_5-default-0:7-160000.4.3.x86_64 as component of SUSE Linux Enterprise Server 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_12_0-160000_5-default-0:7-160000.4.3.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_12_0-160000_5-default-0:7-160000.4.3.ppc64le as component of SUSE Linux Micro 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_12_0-160000_5-default-0:7-160000.4.3.s390x as component of SUSE Linux Micro 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_12_0-160000_5-default-0:7-160000.4.3.x86_64 as component of SUSE Linux Micro 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedkernel-livepatch-6_12_0-160000_5-rt-0:5-160000.3.4.x86_64 as component of SUSE Linux Micro 6.2suse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

cvss

Technical severity, 0–10. One row per scoring source.

7.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.6–7.8

v3.14.6mediumAV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:Lsecondary · FSTEC (BDU) RU

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.17.4highCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondaryexploitability 1.4 · impact 5.9

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondaryexploitability 1.8 · impact 5.9

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)

v3.17highCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · SUSE Product Security

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: active · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-367USCWE-367USCWE-371US

exploits (6)

Public proof-of-concept and weaponised exploit code.

affected products (83)

Products and version ranges known to be affected.

Amazon Linux 2all versionscert_bundDEcpe:/o:amazon:linux_2:-
Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
Dell Avamarall versionscert_bundDEcpe:/a:dell:avamar:-
Dell NetWorker Virtual Editionall versionscert_bundDEcpe:/a:dell:networker:virtual_edition
Dell NetWorker vProxy <19.14all versionscert_bundDE
IBM QRadar SIEM <7.5.0 UP14 IF01all versionscert_bundDE
IBM TXSeries Multiplatforms 11.1all versionscert_bundDEcpe:/a:ibm:txseries:multiplatforms_11.1
Open Source Linux Kernel <5.10.239all versionscert_bundDE
Open Source Linux Kernel <5.15.186all versionscert_bundDE
Open Source Linux Kernel <5.4.295all versionscert_bundDE
Open Source Linux Kernel <6.1.142all versionscert_bundDE
Open Source Linux Kernel <6.12.34all versionscert_bundDE
Open Source Linux Kernel <6.15.3all versionscert_bundDE
Open Source Linux Kernel <6.16-rc2all versionscert_bundDE
Open Source Linux Kernel <6.6.94all versionscert_bundDE
Oracle Linuxall versionscert_bundDEcpe:/o:oracle:linux:-
RESF Rocky Linuxall versionscert_bundDEcpe:/o:resf:rocky_linux:-
Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
SUSE Linuxall versionscert_bundDEcpe:/o:suse:suse_linux:-
SUSE openSUSEall versionscert_bundDEcpe:/o:suse:opensuse:-

showing 20 of 83

advisories (47)

Vendor and ecosystem advisories describing this.

NCSC-2025-0273Kwetsbaarheden verholpen in Google Android en Samsung MobileNL2025-09-04csaf · ncsc_nlNL
Google heeft kwetsbaarheden verholpen in Android. Samsung heeft de voor Samsung Mobile relevante kwetsbaarheden verholpen in Samsung Mobile.
SUSE-SU-2026:0487-1Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7)2026-02-13csaf · suse_csafDE
Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 15 SP7)
SUSE-SU-2026:0489-1Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 15 SP7)2026-02-13csaf · suse_csafDE
Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 15 SP7)
SUSE-SU-2026:0515-1Security update for the Linux Kernel (Live Patch 65 for SUSE Linux Enterprise 12 SP5)2026-02-13csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 65 for SUSE Linux Enterprise 12 SP5)
SUSE-SU-2026:0518-1Security update for the Linux Kernel (Live Patch 64 for SUSE Linux Enterprise 12 SP5)2026-02-14csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 64 for SUSE Linux Enterprise 12 SP5)
SUSE-SU-2026:0521-1Security update for the Linux Kernel (Live Patch 69 for SUSE Linux Enterprise 12 SP5)2026-02-14csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 69 for SUSE Linux Enterprise 12 SP5)
SUSE-SU-2026:0526-1Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP4)2026-02-14csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 35 for SUSE Linux Enterprise 15 SP4)
SUSE-SU-2026:0528-1Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP5)2026-02-15csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 24 for SUSE Linux Enterprise 15 SP5)
SUSE-SU-2026:0535-1Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP5)2026-02-15csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP5)
SUSE-SU-2026:0539-1Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP5)2026-02-15csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP5)
SUSE-SU-2026:0543-1Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP6)2026-02-15csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise 15 SP6)
SUSE-SU-2026:0546-1Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP6)2026-02-15csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 13 for SUSE Linux Enterprise 15 SP6)
SUSE-SU-2026:0548-1Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP6)2026-02-16csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 10 for SUSE Linux Enterprise 15 SP6)
SUSE-SU-2026:0554-1Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7)2026-02-16csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 15 SP7)
SUSE-SU-2026:0556-1Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 15 SP7)2026-02-16csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 2 for SUSE Linux Enterprise 15 SP7)
SUSE-SU-2026:0560-1Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7)2026-02-16csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 1 for SUSE Linux Enterprise 15 SP7)
SUSE-SU-2026:0565-1Security update for the Linux Kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP4)2026-02-16csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 36 for SUSE Linux Enterprise 15 SP4)
SUSE-SU-2026:20455-1Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)2026-02-19csaf · suse_csafDE
Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)
SUSE-SU-2026:20456-1Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)2026-02-19csaf · suse_csafDE
Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)
SUSE-SU-2026:20457-1Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)2026-02-19csaf · suse_csafDE
Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)
SUSE-SU-2026:20458-1Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)2026-02-19csaf · suse_csafDE
Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)
SUSE-SU-2026:20459-1Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)2026-02-19csaf · suse_csafDE
Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)
SUSE-SU-2026:20460-1Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise Micro 6.0)2026-02-19csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise Micro 6.0)
SUSE-SU-2026:20461-1Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)2026-02-19csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)
SUSE-SU-2026:20462-1Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)2026-02-19csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)
SUSE-SU-2026:20463-1Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)2026-02-19csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)
SUSE-SU-2026:20464-1Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)2026-02-19csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)
SUSE-SU-2026:20465-1Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)2026-02-19csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)
SUSE-SU-2026:20470-1Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)2026-02-19csaf · suse_csafDE
Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)
SUSE-SU-2026:20499-1Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise Micro 6.0)2026-02-19csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise Micro 6.0)
SUSE-SU-2026:20500-1Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)2026-02-19csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)
SUSE-SU-2026:20501-1Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)2026-02-19csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)
SUSE-SU-2026:20502-1Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)2026-02-19csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)
SUSE-SU-2026:20503-1Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)2026-02-19csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)
SUSE-SU-2026:20504-1Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)2026-02-19csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)
SUSE-SU-2026:20511-1Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)2026-02-19csaf · suse_csafDE
Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise Micro 6.0)
SUSE-SU-2026:20512-1Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)2026-02-19csaf · suse_csafDE
Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise Micro 6.0)
SUSE-SU-2026:20513-1Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)2026-02-19csaf · suse_csafDE
Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise Micro 6.0)
SUSE-SU-2026:20514-1Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)2026-02-19csaf · suse_csafDE
Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise Micro 6.0)
SUSE-SU-2026:20515-1Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)2026-02-19csaf · suse_csafDE
Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise Micro 6.0)
SUSE-SU-2026:20516-1Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)2026-02-19csaf · suse_csafDE
Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise Micro 6.0)
SUSE-SU-2026:20635-1Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)2026-03-04csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)
SUSE-SU-2026:20644-1Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)2026-03-04csaf · suse_csafDE
Security update for the Linux Kernel (Live Patch 0 for SUSE Linux Enterprise 16)
SUSE-SU-2026:20645-1Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16)2026-03-04csaf · suse_csafDE
Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16)
WID-SEC-W-2025-1620Linux Kernel: Schwachstelle ermöglicht Denial of ServiceDeutsch2025-07-21csaf · cert_bundDE
Ein lokaler Angreifer kann eine Schwachstelle im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen und um nicht näher spezifizierte Auswirkungen auf Vertraulichkeit, Integrität und Verfügbarkeit zu verursachen.
WID-SEC-W-2025-1944Android Patchday September 2025: Multiple VulnerabilitiesDeutsch2025-09-02csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen oder andere nicht näher spezifizierte Angriffe durchzuführen.
ASB-A-4252829602025-09-01vendor · osvUS
In run_posix_cpu_timers of posix-cpu-timers.c, there is a possible way to trigger a use-after-free on a sigqueue object due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu osv cert_bund ncsc_nl suse_csaf NVD CVE.org MITRE

published 2025-07-22modified 2026-09-08

references (31)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan