gpp_maybe Security update for the linux kernel (live patch 0 for sle 15 sp7)

SUSE-SLE-Module-Live-Patching-15-SP7-2025-4056

This update for the Linux Kernel 6.4.0-150700_51 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248631). - CVE-2025-38511: drm/xe/pf: Clear all LMTT pages on alloc (bsc#1248176). - CVE-2025-38617: net/packet: fix a race in packet_set_ring() and packet_notifier() (bsc#1249208). - CVE-2025-38453: kABI: io_uring: msg_ring ensure io_kiocb freeing is deferred (bsc#1247737). - CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1249207).

• Release Date
  Nov 11 2025
• References
  Bugzilla: 1247737, 1248176, 1248631, 1249207, 1249208
  CVEs: CVE-2025-38453, CVE-2025-38511, CVE-2025-38617, CVE-2025-38618, CVE-2025-38664
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Live Patching 15.7 s390x

• Packages
  kernel-livepatch-6_4_0-150700_51-default
  Kernel live patch module

  7-150700.3.18.1 lock rpm

  kernel-livepatch-SLE15-SP7_Update_0
  Kernel live patch module

  7-150700.3.18.1 lock src

SUSE Linux Enterprise Live Patching 15.7 ppc64le

• Packages
  kernel-livepatch-6_4_0-150700_51-default
  Kernel live patch module

  7-150700.3.18.1 lock rpm

  kernel-livepatch-SLE15-SP7_Update_0
  Kernel live patch module

  7-150700.3.18.1 lock src

SUSE Linux Enterprise Live Patching 15.7 x86_64

• Packages
  kernel-livepatch-6_4_0-150700_51-default
  Kernel live patch module

  7-150700.3.18.1 lock rpm

  kernel-livepatch-SLE15-SP7_Update_0
  Kernel live patch module

  7-150700.3.18.1 lock src