Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

SUSE-SU-2025:0983-1 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceSUSE-SU-2025:0983-1

SUSE-SU-2025:0983-1

HIGH7.8

Security update for the Linux Kernel

Published Mar 21, 2025

Modified 1 years ago

Fix available

Details

Description of the patch:

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47633: ath5k: fix OOB in ath5k_eeprom_read_pcal_info_5111 (bsc#1237768).
CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream (bsc#1238729).
CVE-2024-56658: net: defer final 'struct net' free in netns dismantle (bsc#1235441).
CVE-2024-57996: net_sched: sch_sfq: do not allow 1 packet limit (bsc#1239076).
CVE-2025-21718: net: rose: fix timer races against user threads (bsc#1239073).
CVE-2025-21772: partitions: mac: fix handling of bogus partition table (bsc#1238911).

Affected Packages(14 packages)

kernel-default

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

Fixed in:

3.0.101-108.180.1

kernel-default-base

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

Fixed in:

3.0.101-108.180.1

kernel-default-devel

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

Fixed in:

3.0.101-108.180.1

kernel-ec2

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

Fixed in:

3.0.101-108.180.1

kernel-ec2-base

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

Fixed in:

3.0.101-108.180.1

kernel-ec2-devel

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

Fixed in:

3.0.101-108.180.1

kernel-source

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

Fixed in:

3.0.101-108.180.1

kernel-syms

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

Fixed in:

3.0.101-108.180.1

kernel-trace

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

Fixed in:

3.0.101-108.180.1

kernel-trace-base

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

Fixed in:

3.0.101-108.180.1

References(27)

https://bugzilla.suse.com/1197331

https://bugzilla.suse.com/1203769

https://bugzilla.suse.com/1235441

https://bugzilla.suse.com/1237768

https://bugzilla.suse.com/1238271

https://bugzilla.suse.com/1238272

https://bugzilla.suse.com/1238454

https://bugzilla.suse.com/1238705

https://bugzilla.suse.com/1238729

https://bugzilla.suse.com/1238911

https://bugzilla.suse.com/1239073

https://bugzilla.suse.com/1239076

https://lists.suse.com/pipermail/sle-security-updates/2025-March/020579.html

https://www.suse.com/security/cve/CVE-2021-47633/

https://www.suse.com/security/cve/CVE-2022-1048/

https://www.suse.com/security/cve/CVE-2022-3303/

https://www.suse.com/security/cve/CVE-2022-49272/

https://www.suse.com/security/cve/CVE-2022-49288/

https://www.suse.com/security/cve/CVE-2022-49291/

https://www.suse.com/security/cve/CVE-2022-49545/

https://www.suse.com/security/cve/CVE-2022-49733/

https://www.suse.com/security/cve/CVE-2024-56658/

https://www.suse.com/security/cve/CVE-2024-57996/

https://www.suse.com/security/cve/CVE-2025-21718/

https://www.suse.com/security/cve/CVE-2025-21772/

CVSS Analysis

CVSS v3.1

7.8

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Upstream

CVE-2021-47633 CVE-2022-1048 CVE-2022-3303 CVE-2022-49272 CVE-2022-49288 CVE-2022-49291 CVE-2022-49545 CVE-2022-49733 CVE-2024-56658 CVE-2024-57996 CVE-2025-21718 CVE-2025-21772

Ecosystems

SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

Timeline

PublishedMar 21, 2025

ModifiedMar 21, 2025