# SUSE-SU-2025:0784-1: Security update for 4 packages SUSE-SU-2025:0784-1, released March 5, 2025, fixes 44 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/suse-su-2025-0784-1 - Platform: Linux - Released: Mar 5, 2025 - Priority: High (Closes CVE-2025-21692, high severity) - CVEs: 44, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2025:0784-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-coco](https://patchblox.com/security/data/product/linux/kernel-coco.md) | sles 15.6 | 6.4.0-15061.18.coco15sp6.1 | | [kernel-coco_debug](https://patchblox.com/security/data/product/linux/kernel-coco-debug.md) | sles 15.6 | 6.4.0-15061.18.coco15sp6.1 | | [kernel-source-coco](https://patchblox.com/security/data/product/linux/kernel-source-coco.md) | sles 15.6 | 6.4.0-15061.18.coco15sp6.1 | | [kernel-syms-coco](https://patchblox.com/security/data/product/linux/kernel-syms-coco.md) | sles 15.6 | 6.4.0-15061.18.coco15sp6.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-21692](https://patchblox.com/security/data/cve/CVE-2025-21692.md) | High | kernel-64kb: net: sched: fix ets qdisc OOB Indexing (bsc#1237028). | 7.8 | 0.0062 | | | [CVE-2024-49950](https://patchblox.com/security/data/cve/CVE-2024-49950.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0037 | | | [CVE-2024-53239](https://patchblox.com/security/data/cve/CVE-2024-53239.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0029 | | | [CVE-2025-21647](https://patchblox.com/security/data/cve/CVE-2025-21647.md) | High | kernel-64kb: sched: sch_cake: add bounds checks to host bulk flow fairness counts (bsc#1236133). | 7.8 | 0.0028 | | | [CVE-2024-49884](https://patchblox.com/security/data/cve/CVE-2024-49884.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0028 | | | [CVE-2024-44974](https://patchblox.com/security/data/cve/CVE-2024-44974.md) | High | dtb-aarch64: mptcp: pm: avoid possible UaF when selecting endp (bsc#1230235). | 7.8 | 0.0027 | | | [CVE-2024-53173](https://patchblox.com/security/data/cve/CVE-2024-53173.md) | High | kernel-azure: Security update for the Linux Kernel | 7.8 | 0.0027 | | | [CVE-2024-50073](https://patchblox.com/security/data/cve/CVE-2024-50073.md) | High | tty: n_gsm: Fix use-after-free in gsm_cleanup_mux | 7.8 | 0.0026 | | | [CVE-2024-41055](https://patchblox.com/security/data/cve/CVE-2024-41055.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0026 | | | [CVE-2024-53147](https://patchblox.com/security/data/cve/CVE-2024-53147.md) | High | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0025 | | | [CVE-2024-47701](https://patchblox.com/security/data/cve/CVE-2024-47701.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2024-56548](https://patchblox.com/security/data/cve/CVE-2024-56548.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 | | | [CVE-2024-50115](https://patchblox.com/security/data/cve/CVE-2024-50115.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0025 | | | [CVE-2024-56605](https://patchblox.com/security/data/cve/CVE-2024-56605.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2025-21687](https://patchblox.com/security/data/cve/CVE-2025-21687.md) | High | kernel-64kb: vfio/platform: check the bounds of read/write syscalls (bsc#1237045). | 7.8 | 0.0024 | | | [CVE-2025-21700](https://patchblox.com/security/data/cve/CVE-2025-21700.md) | High | kernel-64kb: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159). | 7.8 | 0.0023 | | | [CVE-2025-21680](https://patchblox.com/security/data/cve/CVE-2025-21680.md) | High | kernel-64kb: pktgen: Avoid out-of-bounds access in get_imix_entries (bsc#1236700). | 7.8 | 0.0023 | | | [CVE-2024-26810](https://patchblox.com/security/data/cve/CVE-2024-26810.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Lock external INTx masking ops Mask o... | 7.8 | 0.0020 | | | [CVE-2024-53226](https://patchblox.com/security/data/cve/CVE-2024-53226.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0073 | | | [CVE-2024-50185](https://patchblox.com/security/data/cve/CVE-2024-50185.md) | Routine | kernel-64kb: kABI fix for mptcp: handle consistently DSS corruption (bsc#1233109). | 5.5 | 0.0056 | | | [CVE-2024-45009](https://patchblox.com/security/data/cve/CVE-2024-45009.md) | Routine | dtb-aarch64: mptcp: pm: only decrement add_addr_accepted for MPJ req (bsc#1230438). | 5.5 | 0.0052 | | | [CVE-2024-50085](https://patchblox.com/security/data/cve/CVE-2024-50085.md) | Routine | kernel-64kb: mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (bsc#1232508). | 5.5 | 0.0048 | | | [CVE-2024-56539](https://patchblox.com/security/data/cve/CVE-2024-56539.md) | Routine | kernel-coco: Security update for the Linux Kernel | 5.5 | 0.0030 | | | [CVE-2025-21697](https://patchblox.com/security/data/cve/CVE-2025-21697.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0026 | | | [CVE-2025-21699](https://patchblox.com/security/data/cve/CVE-2025-21699.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 | | | [CVE-2024-56720](https://patchblox.com/security/data/cve/CVE-2024-56720.md) | Routine | kernel-64kb: bpf, sockmap: Several fixes to bpf_msg_pop_data (bsc#1235592). | 5.5 | 0.0024 | | | [CVE-2024-57948](https://patchblox.com/security/data/cve/CVE-2024-57948.md) | Routine | kernel-coco_debug: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2025-21638](https://patchblox.com/security/data/cve/CVE-2025-21638.md) | Routine | kernel-64kb: sctp: sysctl: auth_enable: avoid using current->nsproxy (bsc#1236115). | 5.5 | 0.0024 | | | [CVE-2025-21640](https://patchblox.com/security/data/cve/CVE-2025-21640.md) | Routine | kernel-64kb: sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (bsc#1236123). | 5.5 | 0.0024 | | | [CVE-2024-56579](https://patchblox.com/security/data/cve/CVE-2024-56579.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2025-21639](https://patchblox.com/security/data/cve/CVE-2025-21639.md) | Routine | kernel-64kb: sctp: sysctl: rto_min/max: avoid using current->nsproxy (bsc#1236122). | 5.5 | 0.0023 | | | [CVE-2025-21689](https://patchblox.com/security/data/cve/CVE-2025-21689.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2024-56647](https://patchblox.com/security/data/cve/CVE-2024-56647.md) | Routine | kernel-64kb: net: Fix icmp host relookup triggering ip_rt_bug (bsc#1235435). | 5.5 | 0.0022 | | | [CVE-2024-45010](https://patchblox.com/security/data/cve/CVE-2024-45010.md) | Routine | dtb-aarch64: mptcp: pm: only mark 'subflow' endp as available (bsc#1230439). | 5.5 | 0.0022 | | | [CVE-2025-21636](https://patchblox.com/security/data/cve/CVE-2025-21636.md) | Routine | kernel-64kb: sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (bsc#1236113). | 5.5 | 0.0022 | | | [CVE-2023-52924](https://patchblox.com/security/data/cve/CVE-2023-52924.md) | Routine | kernel-zfcpdump-core: RHSA-2024:2394: kernel security, bug fix, and enhancement update (Important) | 5.5 | 0.0022 | | | [CVE-2025-21690](https://patchblox.com/security/data/cve/CVE-2025-21690.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2025-21637](https://patchblox.com/security/data/cve/CVE-2025-21637.md) | Routine | kernel-64kb: sctp: sysctl: udp_port: avoid using current->nsproxy (bsc#1236114). | 5.5 | 0.0021 | | | [CVE-2023-52925](https://patchblox.com/security/data/cve/CVE-2023-52925.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-21684](https://patchblox.com/security/data/cve/CVE-2025-21684.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-21688](https://patchblox.com/security/data/cve/CVE-2025-21688.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0018 | | | [CVE-2024-26708](https://patchblox.com/security/data/cve/CVE-2024-26708.md) | Routine | dtb-aarch64: mptcp: fix inconsistent state on fastopen race (bsc#1222672). | 5.5 | 0.0017 | | | [CVE-2024-57889](https://patchblox.com/security/data/cve/CVE-2024-57889.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 | | | [CVE-2024-56568](https://patchblox.com/security/data/cve/CVE-2024-56568.md) | Routine | kernel-64kb: iommu/arm-smmu: Defer probe of clients after smmu device bound (bsc#1235032). | 5.5 | 0.0016 | | --- Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.