Security update for the Linux Kernel

This security update for the SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel addresses numerous security vulnerabilities. Notable fixes include CVE-2024-57982 (xfrm out-of-bounds read), CVE-2024-58053 (rxrpc connection abort handling), CVE-2025-21898 (division by zero in ftrace), CVE-2025-22035 (use-after-free in tracing), CVE-2025-37756 (net tls disconnect disallowed), CVE-2025-37927 (buffer overflow in iommu/amd), and others. The update also resolves many non-security bugs across ACPI, ALSA, ACPICA, and USB audio subsystems. The vendor advisory indicates these fixes are included in the updated kernel versions for SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernels.

The vulnerabilities fixed in this update could lead to out-of-bounds memory reads, memory leaks, kernel panics, use-after-free conditions, buffer overflows, and other kernel-level faults. These issues potentially affect system stability and security, possibly allowing attackers to cause denial of service or escalate privileges. The update mitigates these risks by patching the kernel code to prevent such faults.

A security update for SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernels has been released that addresses these vulnerabilities. Users should apply the official SUSE kernel updates to remediate these issues. Patch status is confirmed by the vendor advisory indicating these fixes are included in the updated kernel versions. No additional mitigation steps are indicated beyond applying the update.