CVE-2025-68799 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-68799 Interim 1 1 2026-03-05T00:21:12Z current 2026-03-05T00:21:12Z 2026-03-05T00:21:12Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-68799 In the Linux kernel, the following vulnerability has been resolved: caif: fix integer underflow in cffrml_receive() The cffrml_receive() function extracts a length field from the packet header and, when FCS is disabled, subtracts 2 from this length without validating that len >= 2. If an attacker sends a malicious packet with a length field of 0 or 1 to an interface with FCS disabled, the subtraction causes an integer underflow. This can lead to memory exhaustion and kernel instability, potential information disclosure if padding contains uninitialized kernel memory. Fix this by validating that len >= 2 before performing the subtraction. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings Container suse/sl-micro/6.0/baremetal-os-container:2.1.3-6.35 Container suse/sl-micro/6.0/base-os-container:2.1.3-7.4 Container suse/sl-micro/6.0/kvm-os-container:2.1.3-6.31 Container suse/sl-micro/6.0/rt-os-container:2.1.3-7.36 Container suse/sl-micro/6.0/toolbox:13.2-9.1 Image SL-Micro Image SLE-Micro Image SLE-Micro-Azure Image SLE-Micro-BYOS Image SLE-Micro-BYOS-Azure Image SLE-Micro-BYOS-EC2 Image SLE-Micro-BYOS-GCE Image SLE-Micro-EC2 Image SLE-Micro-GCE SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Workstation Extension 15 SP7 SUSE Linux Enterprise High Availability Extension 15 SP7 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Module for Legacy 15 SP7 SUSE Linux Enterprise Module for Public Cloud 15 SP7 SUSE Linux Enterprise Live Patching 12 SP5 SUSE Linux Enterprise Live Patching 15 SP7 SUSE Linux Enterprise Micro 5.0 SUSE Real Time Module 15 SP7 SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Module for Legacy 15 SP7 SUSE Linux Enterprise Module for Public Cloud 15 SP7 SUSE Linux Enterprise Workstation Extension 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Module for Legacy 15 SP7 SUSE Linux Enterprise Module for Public Cloud 15 SP7 SUSE Linux Enterprise Workstation Extension 15 SP7 openSUSE Leap 16.0 cluster-md-kmp-64kb-6.12.0-160000.26.1 cluster-md-kmp-azure-6.12.0-160000.26.1 cluster-md-kmp-default cluster-md-kmp-default-6.12.0-160000.26.1 cluster-md-kmp-rt-6.12.0-160000.26.1 dlm-kmp-64kb-6.12.0-160000.26.1 dlm-kmp-azure-6.12.0-160000.26.1 dlm-kmp-default dlm-kmp-default-6.12.0-160000.26.1 dlm-kmp-rt-6.12.0-160000.26.1 dtb-allwinner-6.12.0-160000.26.1 dtb-altera-6.12.0-160000.26.1 dtb-amazon-6.12.0-160000.26.1 dtb-amd-6.12.0-160000.26.1 dtb-amlogic-6.12.0-160000.26.1 dtb-apm-6.12.0-160000.26.1 dtb-apple-6.12.0-160000.26.1 dtb-arm-6.12.0-160000.26.1 dtb-broadcom-6.12.0-160000.26.1 dtb-cavium-6.12.0-160000.26.1 dtb-exynos-6.12.0-160000.26.1 dtb-freescale-6.12.0-160000.26.1 dtb-hisilicon-6.12.0-160000.26.1 dtb-lg-6.12.0-160000.26.1 dtb-marvell-6.12.0-160000.26.1 dtb-mediatek-6.12.0-160000.26.1 dtb-nvidia-6.12.0-160000.26.1 dtb-qcom-6.12.0-160000.26.1 dtb-renesas-6.12.0-160000.26.1 dtb-rockchip-6.12.0-160000.26.1 dtb-socionext-6.12.0-160000.26.1 dtb-sprd-6.12.0-160000.26.1 dtb-xilinx-6.12.0-160000.26.1 gfs2-kmp-64kb-6.12.0-160000.26.1 gfs2-kmp-azure-6.12.0-160000.26.1 gfs2-kmp-default gfs2-kmp-default-6.12.0-160000.26.1 gfs2-kmp-rt-6.12.0-160000.26.1 kernel-64kb-6.12.0-160000.26.1 kernel-64kb-devel-6.12.0-160000.26.1 kernel-64kb-extra-6.12.0-160000.26.1 kernel-64kb-optional-6.12.0-160000.26.1 kernel-azure-6.12.0-160000.26.1 kernel-azure-devel-6.12.0-160000.26.1 kernel-azure-extra-6.12.0-160000.26.1 kernel-azure-optional-6.12.0-160000.26.1 kernel-azure-vdso-6.12.0-160000.26.1 kernel-default kernel-default-6.12.0-160000.26.1 kernel-default-base kernel-default-base-6.12.0-160000.26.1.160000.2.7 kernel-default-devel kernel-default-devel-6.12.0-160000.26.1 kernel-default-extra kernel-default-extra-6.12.0-160000.26.1 kernel-default-kgraft kernel-default-kgraft-devel kernel-default-livepatch kernel-default-livepatch-6.12.0-160000.26.1 kernel-default-livepatch-devel kernel-default-man kernel-default-optional-6.12.0-160000.26.1 kernel-default-vdso-6.12.0-160000.26.1 kernel-devel kernel-devel-6.12.0-160000.26.1 kernel-devel-azure kernel-devel-rt kernel-docs-6.12.0-160000.26.1 kernel-docs-html-6.12.0-160000.26.1 kernel-kvmsmall-6.12.0-160000.26.1 kernel-kvmsmall-devel-6.12.0-160000.26.1 kernel-kvmsmall-vdso-6.12.0-160000.26.1 kernel-macros kernel-macros-6.12.0-160000.26.1 kernel-obs-build-6.12.0-160000.26.1 kernel-obs-qa-6.12.0-160000.26.1 kernel-rt-6.12.0-160000.26.1 kernel-rt-devel-6.12.0-160000.26.1 kernel-rt-extra-6.12.0-160000.26.1 kernel-rt-optional-6.12.0-160000.26.1 kernel-rt-vdso-6.12.0-160000.26.1 kernel-source kernel-source-6.12.0-160000.26.1 kernel-source-azure kernel-source-rt kernel-source-vanilla-6.12.0-160000.26.1 kernel-syms-6.12.0-160000.26.1 kernel-zfcpdump-6.12.0-160000.26.1 kselftests-kmp-64kb-6.12.0-160000.26.1 kselftests-kmp-azure-6.12.0-160000.26.1 kselftests-kmp-default-6.12.0-160000.26.1 kselftests-kmp-rt-6.12.0-160000.26.1 libsqlite3-0-3.49.1-1.1 ocfs2-kmp-64kb-6.12.0-160000.26.1 ocfs2-kmp-azure-6.12.0-160000.26.1 ocfs2-kmp-default ocfs2-kmp-default-6.12.0-160000.26.1 ocfs2-kmp-rt-6.12.0-160000.26.1 reiserfs-kmp-default libsqlite3-0-3.49.1-1.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:2.1.3-6.35 libsqlite3-0-3.49.1-1.1 as a component of Container suse/sl-micro/6.0/base-os-container:2.1.3-7.4 libsqlite3-0-3.49.1-1.1 as a component of Container suse/sl-micro/6.0/kvm-os-container:2.1.3-6.31 libsqlite3-0-3.49.1-1.1 as a component of Container suse/sl-micro/6.0/rt-os-container:2.1.3-7.36 libsqlite3-0-3.49.1-1.1 as a component of Container suse/sl-micro/6.0/toolbox:13.2-9.1 libsqlite3-0-3.49.1-1.1 as a component of Image SL-Micro libsqlite3-0-3.49.1-1.1 as a component of Image SLE-Micro libsqlite3-0-3.49.1-1.1 as a component of Image SLE-Micro-Azure libsqlite3-0-3.49.1-1.1 as a component of Image SLE-Micro-BYOS libsqlite3-0-3.49.1-1.1 as a component of Image SLE-Micro-BYOS-Azure libsqlite3-0-3.49.1-1.1 as a component of Image SLE-Micro-BYOS-EC2 libsqlite3-0-3.49.1-1.1 as a component of Image SLE-Micro-BYOS-GCE libsqlite3-0-3.49.1-1.1 as a component of Image SLE-Micro-EC2 libsqlite3-0-3.49.1-1.1 as a component of Image SLE-Micro-GCE cluster-md-kmp-64kb-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 cluster-md-kmp-azure-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 cluster-md-kmp-default-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 cluster-md-kmp-rt-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dlm-kmp-64kb-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dlm-kmp-azure-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dlm-kmp-default-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dlm-kmp-rt-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-allwinner-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-altera-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-amazon-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-amd-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-amlogic-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-apm-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-apple-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-arm-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-broadcom-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-cavium-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-exynos-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-freescale-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-hisilicon-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-lg-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-marvell-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-mediatek-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-nvidia-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-qcom-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-renesas-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-rockchip-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-socionext-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-sprd-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 dtb-xilinx-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 gfs2-kmp-64kb-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 gfs2-kmp-azure-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 gfs2-kmp-default-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 gfs2-kmp-rt-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-64kb-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-64kb-devel-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-64kb-extra-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-64kb-optional-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-azure-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-azure-devel-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-azure-extra-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-azure-optional-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-azure-vdso-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-default-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-default-base-6.12.0-160000.26.1.160000.2.7 as a component of openSUSE Leap 16.0 kernel-default-devel-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-default-extra-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-default-optional-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-default-vdso-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-devel-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-docs-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-docs-html-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-kvmsmall-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-kvmsmall-devel-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-kvmsmall-vdso-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-macros-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-obs-build-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-obs-qa-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-rt-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-rt-devel-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-rt-extra-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-rt-optional-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-rt-vdso-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-source-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-source-vanilla-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-syms-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-zfcpdump-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kselftests-kmp-64kb-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kselftests-kmp-azure-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kselftests-kmp-default-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kselftests-kmp-rt-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 ocfs2-kmp-64kb-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 ocfs2-kmp-azure-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 ocfs2-kmp-default-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 ocfs2-kmp-rt-6.12.0-160000.26.1 as a component of openSUSE Leap 16.0 kernel-64kb-6.12.0-160000.26.1 as a component of SUSE Linux Enterprise Server 16.0 kernel-64kb-devel-6.12.0-160000.26.1 as a component of SUSE Linux Enterprise Server 16.0 kernel-64kb-extra-6.12.0-160000.26.1 as a component of SUSE Linux Enterprise Server 16.0 kernel-azure-6.12.0-160000.26.1 as a component of SUSE Linux Enterprise Server 16.0 kernel-azure-devel-6.12.0-160000.26.1 as a component of SUSE Linux Enterprise Server 16.0 kernel-azure-extra-6.12.0-160000.26.1 as a component of SUSE Linux Enterprise Server 16.0 kernel-azure-vdso-6.12.0-160000.26.1 as a component of SUSE Linux Enterprise Server 16.0 kernel-default-6.12.0-160000.26.1 as a component of SUSE Linux Enterprise Server 16.0 kernel-default-base-6.12.0-160000.26.1.160000.2.7 as a component of SUSE Linux Enterprise Server 16.0 kernel-default-devel-6.12.0-160000.26.1 as a component of SUSE Linux Enterprise Server 16.0 kernel-default-extra-6.12.0-160000.26.1 as a component of SUSE Linux Enterprise Server 16.0 kernel-default-livepatch-6.12.0-160000.26.1 as a component of SUSE Linux Enterprise Server 16.0 kernel-default-vdso-6.12.0-160000.26.1 as a component of SUSE Linux Enterprise Server 16.0 kernel-devel-6.12.0-160000.26.1 as a component of SUSE Linux Enterprise Server 16.0 kernel-docs-6.12.0-160000.26.1 as a component of SUSE Linux Enterprise Server 16.0 kernel-docs-html-6.12.0-160000.26.1 as a component of SUSE Linux Enterprise Server 16.0 kernel-kvmsmall-6.12.0-160000.26.1 as a component of SUSE Linux Enterprise Server 16.0 kernel-kvmsmall-devel-6.12.0-160000.26.1 as a component of SUSE Linux Enterprise Server 16.0 kernel-kvmsmall-vdso-6.12.0-160000.26.1 as a component of SUSE Linux Enterprise Server 16.0 kernel-macros-6.12.0-160000.26.1 as a component of SUSE Linux Enterprise Server 16.0 kernel-obs-qa-6.12.0-160000.26.1 as a component of SUSE Linux Enterprise Server 16.0 kernel-source-6.12.0-160000.26.1 as a component of SUSE Linux Enterprise Server 16.0 kernel-source-vanilla-6.12.0-160000.26.1 as a component of SUSE Linux Enterprise Server 16.0 kernel-syms-6.12.0-160000.26.1 as a component of SUSE Linux Enterprise Server 16.0 kernel-zfcpdump-6.12.0-160000.26.1 as a component of SUSE Linux Enterprise Server 16.0 cluster-md-kmp-default as a component of SUSE Linux Enterprise High Availability Extension 15 SP7 dlm-kmp-default as a component of SUSE Linux Enterprise High Availability Extension 15 SP7 gfs2-kmp-default as a component of SUSE Linux Enterprise High Availability Extension 15 SP7 ocfs2-kmp-default as a component of SUSE Linux Enterprise High Availability Extension 15 SP7 kernel-default as a component of SUSE Linux Enterprise High Availability Extension 15 SP7 kernel-source as a component of SUSE Linux Enterprise High Availability Extension 15 SP7 kernel-default-kgraft as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-default-kgraft-devel as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-default as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-source as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-default-livepatch as a component of SUSE Linux Enterprise Live Patching 15 SP7 kernel-default-livepatch-devel as a component of SUSE Linux Enterprise Live Patching 15 SP7 kernel-default as a component of SUSE Linux Enterprise Live Patching 15 SP7 kernel-source as a component of SUSE Linux Enterprise Live Patching 15 SP7 kernel-default as a component of SUSE Linux Enterprise Micro 5.0 kernel-default as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-default-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-macros as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-source as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-default as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 kernel-source as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 reiserfs-kmp-default as a component of SUSE Linux Enterprise Module for Legacy 15 SP7 kernel-default as a component of SUSE Linux Enterprise Module for Legacy 15 SP7 kernel-source as a component of SUSE Linux Enterprise Module for Legacy 15 SP7 kernel-devel-azure as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP7 kernel-source-azure as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP7 kernel-default as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-base as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-man as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-source as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-base as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-man as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-source as a component of SUSE Linux Enterprise Server 12 SP4-LTSS cluster-md-kmp-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS dlm-kmp-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS gfs2-kmp-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default-base as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default-man as a component of SUSE Linux Enterprise Server 12 SP5-LTSS ocfs2-kmp-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-source as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security kernel-source as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security kernel-default as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default-base as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default-man as a component of SUSE Linux Enterprise Server 15 SP1-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-source as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kernel-source as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kernel-default as a component of SUSE Linux Enterprise Server Teradata 12 SP3 kernel-source as a component of SUSE Linux Enterprise Server Teradata 12 SP3 kernel-default-extra as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 kernel-default as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 kernel-source as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 kernel-devel-rt as a component of SUSE Real Time Module 15 SP7 kernel-source-rt as a component of SUSE Real Time Module 15 SP7 In the Linux kernel, the following vulnerability has been resolved: caif: fix integer underflow in cffrml_receive() The cffrml_receive() function extracts a length field from the packet header and, when FCS is disabled, subtracts 2 from this length without validating that len >= 2. If an attacker sends a malicious packet with a length field of 0 or 1 to an interface with FCS disabled, the subtraction causes an integer underflow. This can lead to memory exhaustion and kernel instability, potential information disclosure if padding contains uninitialized kernel memory. Fix this by validating that len >= 2 before performing the subtraction. CVE-2025-68799 Container suse/sl-micro/6.0/baremetal-os-container:2.1.3-6.35:libsqlite3-0-3.49.1-1.1 Container suse/sl-micro/6.0/base-os-container:2.1.3-7.4:libsqlite3-0-3.49.1-1.1 Container suse/sl-micro/6.0/kvm-os-container:2.1.3-6.31:libsqlite3-0-3.49.1-1.1 Container suse/sl-micro/6.0/rt-os-container:2.1.3-7.36:libsqlite3-0-3.49.1-1.1 Container suse/sl-micro/6.0/toolbox:13.2-9.1:libsqlite3-0-3.49.1-1.1 Image SL-Micro:libsqlite3-0-3.49.1-1.1 Image SLE-Micro:libsqlite3-0-3.49.1-1.1 Image SLE-Micro-Azure:libsqlite3-0-3.49.1-1.1 Image SLE-Micro-BYOS:libsqlite3-0-3.49.1-1.1 Image SLE-Micro-BYOS-Azure:libsqlite3-0-3.49.1-1.1 Image SLE-Micro-BYOS-EC2:libsqlite3-0-3.49.1-1.1 Image SLE-Micro-BYOS-GCE:libsqlite3-0-3.49.1-1.1 Image SLE-Micro-EC2:libsqlite3-0-3.49.1-1.1 Image SLE-Micro-GCE:libsqlite3-0-3.49.1-1.1 openSUSE Leap 16.0:cluster-md-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:cluster-md-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:dlm-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-allwinner-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-altera-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amazon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-amlogic-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-apple-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-arm-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-broadcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-cavium-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-exynos-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-freescale-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-hisilicon-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-lg-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-marvell-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-mediatek-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-nvidia-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-qcom-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-renesas-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-rockchip-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-socionext-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-sprd-6.12.0-160000.26.1 openSUSE Leap 16.0:dtb-xilinx-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:gfs2-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-64kb-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-azure-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 openSUSE Leap 16.0:kernel-default-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-default-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-docs-html-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-macros-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-build-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-obs-qa-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-devel-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-extra-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-optional-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-rt-vdso-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-source-vanilla-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-syms-6.12.0-160000.26.1 openSUSE Leap 16.0:kernel-zfcpdump-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:kselftests-kmp-rt-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-64kb-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-azure-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-default-6.12.0-160000.26.1 openSUSE Leap 16.0:ocfs2-kmp-rt-6.12.0-160000.26.1 SUSE Linux Enterprise Server 16.0:kernel-64kb-6.12.0-160000.26.1 SUSE Linux Enterprise Server 16.0:kernel-64kb-devel-6.12.0-160000.26.1 SUSE Linux Enterprise Server 16.0:kernel-64kb-extra-6.12.0-160000.26.1 SUSE Linux Enterprise Server 16.0:kernel-azure-6.12.0-160000.26.1 SUSE Linux Enterprise Server 16.0:kernel-azure-devel-6.12.0-160000.26.1 SUSE Linux Enterprise Server 16.0:kernel-azure-extra-6.12.0-160000.26.1 SUSE Linux Enterprise Server 16.0:kernel-azure-vdso-6.12.0-160000.26.1 SUSE Linux Enterprise Server 16.0:kernel-default-6.12.0-160000.26.1 SUSE Linux Enterprise Server 16.0:kernel-default-base-6.12.0-160000.26.1.160000.2.7 SUSE Linux Enterprise Server 16.0:kernel-default-devel-6.12.0-160000.26.1 SUSE Linux Enterprise Server 16.0:kernel-default-extra-6.12.0-160000.26.1 SUSE Linux Enterprise Server 16.0:kernel-default-livepatch-6.12.0-160000.26.1 SUSE Linux Enterprise Server 16.0:kernel-default-vdso-6.12.0-160000.26.1 SUSE Linux Enterprise Server 16.0:kernel-devel-6.12.0-160000.26.1 SUSE Linux Enterprise Server 16.0:kernel-docs-6.12.0-160000.26.1 SUSE Linux Enterprise Server 16.0:kernel-docs-html-6.12.0-160000.26.1 SUSE Linux Enterprise Server 16.0:kernel-kvmsmall-6.12.0-160000.26.1 SUSE Linux Enterprise Server 16.0:kernel-kvmsmall-devel-6.12.0-160000.26.1 SUSE Linux Enterprise Server 16.0:kernel-kvmsmall-vdso-6.12.0-160000.26.1 SUSE Linux Enterprise Server 16.0:kernel-macros-6.12.0-160000.26.1 SUSE Linux Enterprise Server 16.0:kernel-obs-qa-6.12.0-160000.26.1 SUSE Linux Enterprise Server 16.0:kernel-source-6.12.0-160000.26.1 SUSE Linux Enterprise Server 16.0:kernel-source-vanilla-6.12.0-160000.26.1 SUSE Linux Enterprise Server 16.0:kernel-syms-6.12.0-160000.26.1 SUSE Linux Enterprise Server 16.0:kernel-zfcpdump-6.12.0-160000.26.1 SUSE Linux Enterprise High Availability Extension 15 SP7:cluster-md-kmp-default SUSE Linux Enterprise High Availability Extension 15 SP7:dlm-kmp-default SUSE Linux Enterprise High Availability Extension 15 SP7:gfs2-kmp-default SUSE Linux Enterprise High Availability Extension 15 SP7:kernel-default SUSE Linux Enterprise High Availability Extension 15 SP7:kernel-source SUSE Linux Enterprise High Availability Extension 15 SP7:ocfs2-kmp-default SUSE Linux Enterprise Live Patching 12 SP5:kernel-default SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel SUSE Linux Enterprise Live Patching 12 SP5:kernel-source SUSE Linux Enterprise Live Patching 15 SP7:kernel-default SUSE Linux Enterprise Live Patching 15 SP7:kernel-default-livepatch SUSE Linux Enterprise Live Patching 15 SP7:kernel-default-livepatch-devel SUSE Linux Enterprise Live Patching 15 SP7:kernel-source SUSE Linux Enterprise Micro 5.0:kernel-default SUSE Linux Enterprise Module for Basesystem 15 SP7:kernel-default SUSE Linux Enterprise Module for Basesystem 15 SP7:kernel-default-devel SUSE Linux Enterprise Module for Basesystem 15 SP7:kernel-devel SUSE Linux Enterprise Module for Basesystem 15 SP7:kernel-macros SUSE Linux Enterprise Module for Basesystem 15 SP7:kernel-source SUSE Linux Enterprise Module for Development Tools 15 SP7:kernel-default SUSE Linux Enterprise Module for Development Tools 15 SP7:kernel-source SUSE Linux Enterprise Module for Legacy 15 SP7:kernel-default SUSE Linux Enterprise Module for Legacy 15 SP7:kernel-source SUSE Linux Enterprise Module for Legacy 15 SP7:reiserfs-kmp-default SUSE Linux Enterprise Module for Public Cloud 15 SP7:kernel-devel-azure SUSE Linux Enterprise Module for Public Cloud 15 SP7:kernel-source-azure SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security:kernel-default SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security:kernel-source SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-devel SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-devel SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-macros SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-source SUSE Linux Enterprise Server 15 SP2-LTSS:reiserfs-kmp-default SUSE Linux Enterprise Server Teradata 12 SP3:kernel-default SUSE Linux Enterprise Server Teradata 12 SP3:kernel-source SUSE Linux Enterprise Workstation Extension 15 SP7:kernel-default SUSE Linux Enterprise Workstation Extension 15 SP7:kernel-default-extra SUSE Linux Enterprise Workstation Extension 15 SP7:kernel-source SUSE Real Time Module 15 SP7:kernel-devel-rt SUSE Real Time Module 15 SP7:kernel-source-rt moderate 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L