CVE-2025-21813 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-21813 Interim 1 6 2025-05-16T23:19:35Z current 2025-03-01T00:12:18Z 2025-05-16T23:19:35Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-21813 In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix off-by-one root mis-connection Before attaching a new root to the old root, the children counter of the new root is checked to verify that only the upcoming CPU's top group have been connected to it. However since the recently added commit b729cc1ec21a ("timers/migration: Fix another race between hotplug and idle entry/exit") this check is not valid anymore because the old root is pre-accounted as a child to the new root. Therefore after connecting the upcoming CPU's top group to the new root, the children count to be expected must be 2 and not 1 anymore. This omission results in the old root to not be connected to the new root. Then eventually the system may run with more than one top level, which defeats the purpose of a single idle migrator. Also the old root is pre-accounted but not connected upon the new root creation. But it can be connected to the new root later on. Therefore the old root may be accounted twice to the new root. The propagation of such overcommit can end up creating a double final top-level root with a groupmask incorrectly initialized. Although harmless given that the final top level roots will never have a parent to walk up to, this oddity opportunistically reported the core issue: WARNING: CPU: 8 PID: 0 at kernel/time/timer_migration.c:543 tmigr_requires_handle_remote CPU: 8 UID: 0 PID: 0 Comm: swapper/8 RIP: 0010:tmigr_requires_handle_remote Call Trace: <IRQ> ? tmigr_requires_handle_remote ? hrtimer_run_queues update_process_times tick_periodic tick_handle_periodic __sysvec_apic_timer_interrupt sysvec_apic_timer_interrupt </IRQ> Fix the problem by taking the old root into account in the children count of the new root so the connection is not omitted. Also warn when more than one top level group exists to better detect similar issues in the future. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SLES-LTSS-TERADATA 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Workstation Extension 15 SP6 SUSE Linux Enterprise High Availability Extension 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Public Cloud 15 SP6 SUSE Linux Enterprise Live Patching 12 SP5 SUSE Linux Enterprise Live Patching 15 SP3 SUSE Linux Enterprise Live Patching 15 SP4 SUSE Linux Enterprise Live Patching 15 SP5 SUSE Linux Enterprise Live Patching 15 SP6 SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Real Time Module 15 SP6 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Public Cloud 15 SP6 SUSE Linux Enterprise Workstation Extension 15 SP6 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Public Cloud 15 SP6 SUSE Linux Enterprise Workstation Extension 15 SP6 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.6 cluster-md-kmp-default dlm-kmp-default gfs2-kmp-default kernel-default kernel-default-base kernel-default-devel kernel-default-extra kernel-default-kgraft kernel-default-kgraft-devel kernel-default-livepatch kernel-default-livepatch-devel kernel-default-man kernel-default-optional kernel-default-vdso kernel-devel kernel-devel-azure kernel-devel-rt kernel-macros kernel-rt kernel-source kernel-source-azure kernel-source-rt kernel-source-vanilla kselftests-kmp-default ocfs2-kmp-default reiserfs-kmp-default kernel-default as a component of SLES-LTSS-TERADATA 15 SP2 kernel-source as a component of SLES-LTSS-TERADATA 15 SP2 kernel-default as a component of SUSE Linux Enterprise High Availability Extension 12 SP5 kernel-source as a component of SUSE Linux Enterprise High Availability Extension 12 SP5 kernel-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-default-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-macros as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-source as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-macros as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-source as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS cluster-md-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS dlm-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS gfs2-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-default-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS ocfs2-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-macros as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-source as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS cluster-md-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS dlm-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS gfs2-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-default-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS ocfs2-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-macros as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-source as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-default-kgraft as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-default-kgraft-devel as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-default as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-source as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-default-livepatch as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-default-livepatch-devel as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-default as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-source as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-default-livepatch as a component of SUSE Linux Enterprise Live Patching 15 SP4 kernel-default-livepatch-devel as a component of SUSE Linux Enterprise Live Patching 15 SP4 kernel-default as a component of SUSE Linux Enterprise Live Patching 15 SP4 kernel-source as a component of SUSE Linux Enterprise Live Patching 15 SP4 kernel-default-livepatch as a component of SUSE Linux Enterprise Live Patching 15 SP5 kernel-default-livepatch-devel as a component of SUSE Linux Enterprise Live Patching 15 SP5 kernel-default as a component of SUSE Linux Enterprise Live Patching 15 SP5 kernel-source as a component of SUSE Linux Enterprise Live Patching 15 SP5 kernel-default-livepatch as a component of SUSE Linux Enterprise Live Patching 15 SP6 kernel-default-livepatch-devel as a component of SUSE Linux Enterprise Live Patching 15 SP6 kernel-default as a component of SUSE Linux Enterprise Live Patching 15 SP6 kernel-source as a component of SUSE Linux Enterprise Live Patching 15 SP6 kernel-default as a component of SUSE Linux Enterprise Micro 5.0 kernel-default as a component of SUSE Linux Enterprise Micro 5.1 kernel-rt as a component of SUSE Linux Enterprise Micro 5.1 kernel-source as a component of SUSE Linux Enterprise Micro 5.1 kernel-source-rt as a component of SUSE Linux Enterprise Micro 5.1 kernel-default as a component of SUSE Linux Enterprise Micro 5.2 kernel-rt as a component of SUSE Linux Enterprise Micro 5.2 kernel-source as a component of SUSE Linux Enterprise Micro 5.2 kernel-source-rt as a component of SUSE Linux Enterprise Micro 5.2 kernel-default as a component of SUSE Linux Enterprise Micro 5.3 kernel-rt as a component of SUSE Linux Enterprise Micro 5.3 kernel-source as a component of SUSE Linux Enterprise Micro 5.3 kernel-source-rt as a component of SUSE Linux Enterprise Micro 5.3 kernel-default as a component of SUSE Linux Enterprise Micro 5.4 kernel-rt as a component of SUSE Linux Enterprise Micro 5.4 kernel-source as a component of SUSE Linux Enterprise Micro 5.4 kernel-source-rt as a component of SUSE Linux Enterprise Micro 5.4 kernel-default as a component of SUSE Linux Enterprise Micro 5.5 kernel-macros as a component of SUSE Linux Enterprise Micro 5.5 kernel-source as a component of SUSE Linux Enterprise Micro 5.5 kernel-devel-rt as a component of SUSE Linux Enterprise Micro 5.5 kernel-source-rt as a component of SUSE Linux Enterprise Micro 5.5 kernel-default as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-default-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-macros as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-source as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-default as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-source as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-devel-azure as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP6 kernel-source-azure as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP6 kernel-default as a component of SUSE Linux Enterprise Server 11 SP4 LTSS kernel-source as a component of SUSE Linux Enterprise Server 11 SP4 LTSS kernel-default as a component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-default-base as a component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-default-devel as a component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-source as a component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-default as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-base as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-man as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-source as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-base as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-man as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-source as a component of SUSE Linux Enterprise Server 12 SP4-LTSS cluster-md-kmp-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS dlm-kmp-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS gfs2-kmp-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default-base as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default-man as a component of SUSE Linux Enterprise Server 12 SP5-LTSS ocfs2-kmp-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-source as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-devel-azure as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-source-azure as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security kernel-source as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security kernel-default as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default-base as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default-man as a component of SUSE Linux Enterprise Server 15 SP1-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-source as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kernel-source as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kernel-default as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-source as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-default as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 15 SP4-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-source as a component of SUSE Linux Enterprise Server 15 SP4-LTSS cluster-md-kmp-default as a component of SUSE Linux Enterprise Server 15 SP5-LTSS dlm-kmp-default as a component of SUSE Linux Enterprise Server 15 SP5-LTSS gfs2-kmp-default as a component of SUSE Linux Enterprise Server 15 SP5-LTSS kernel-default as a component of SUSE Linux Enterprise Server 15 SP5-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 15 SP5-LTSS ocfs2-kmp-default as a component of SUSE Linux Enterprise Server 15 SP5-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise Server 15 SP5-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 15 SP5-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 15 SP5-LTSS kernel-source as a component of SUSE Linux Enterprise Server 15 SP5-LTSS kernel-default as a component of SUSE Linux Enterprise Server 15-LTSS kernel-default-base as a component of SUSE Linux Enterprise Server 15-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 15-LTSS kernel-default-man as a component of SUSE Linux Enterprise Server 15-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise Server 15-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 15-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 15-LTSS kernel-source as a component of SUSE Linux Enterprise Server 15-LTSS kernel-default as a component of SUSE Linux Enterprise Server Teradata 12 SP3 kernel-source as a component of SUSE Linux Enterprise Server Teradata 12 SP3 kernel-default as a component of SUSE Linux Enterprise Server Teradata 15 SP4 kernel-source as a component of SUSE Linux Enterprise Server Teradata 15 SP4 kernel-default as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-source as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-default-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 reiserfs-kmp-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-macros as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-source as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-default-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 reiserfs-kmp-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-macros as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-source as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 cluster-md-kmp-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 dlm-kmp-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 gfs2-kmp-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-default-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 ocfs2-kmp-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 reiserfs-kmp-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-macros as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-source as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-default-extra as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 kernel-default as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 kernel-source as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 kernel-default as a component of SUSE Linux Micro 6.0 kernel-devel as a component of SUSE Linux Micro 6.0 kernel-macros as a component of SUSE Linux Micro 6.0 kernel-source as a component of SUSE Linux Micro 6.0 kernel-devel-rt as a component of SUSE Linux Micro 6.0 kernel-source-rt as a component of SUSE Linux Micro 6.0 kernel-default as a component of SUSE Linux Micro 6.1 kernel-devel as a component of SUSE Linux Micro 6.1 kernel-macros as a component of SUSE Linux Micro 6.1 kernel-source as a component of SUSE Linux Micro 6.1 kernel-devel-rt as a component of SUSE Linux Micro 6.1 kernel-source-rt as a component of SUSE Linux Micro 6.1 kernel-default as a component of SUSE Manager Proxy 4.3 kernel-default-devel as a component of SUSE Manager Proxy 4.3 kernel-devel as a component of SUSE Manager Proxy 4.3 kernel-macros as a component of SUSE Manager Proxy 4.3 kernel-source as a component of SUSE Manager Proxy 4.3 kernel-default as a component of SUSE Manager Retail Branch Server 4.3 kernel-default-devel as a component of SUSE Manager Retail Branch Server 4.3 kernel-devel as a component of SUSE Manager Retail Branch Server 4.3 kernel-macros as a component of SUSE Manager Retail Branch Server 4.3 kernel-source as a component of SUSE Manager Retail Branch Server 4.3 kernel-default as a component of SUSE Manager Server 4.3 kernel-default-devel as a component of SUSE Manager Server 4.3 kernel-devel as a component of SUSE Manager Server 4.3 kernel-macros as a component of SUSE Manager Server 4.3 kernel-source as a component of SUSE Manager Server 4.3 kernel-devel-rt as a component of SUSE Real Time Module 15 SP6 kernel-source-rt as a component of SUSE Real Time Module 15 SP6 cluster-md-kmp-default as a component of openSUSE Leap 15.6 dlm-kmp-default as a component of openSUSE Leap 15.6 gfs2-kmp-default as a component of openSUSE Leap 15.6 kernel-default as a component of openSUSE Leap 15.6 kernel-default-devel as a component of openSUSE Leap 15.6 kernel-default-extra as a component of openSUSE Leap 15.6 kernel-default-livepatch as a component of openSUSE Leap 15.6 kernel-default-livepatch-devel as a component of openSUSE Leap 15.6 kernel-default-optional as a component of openSUSE Leap 15.6 kernel-default-vdso as a component of openSUSE Leap 15.6 kselftests-kmp-default as a component of openSUSE Leap 15.6 ocfs2-kmp-default as a component of openSUSE Leap 15.6 reiserfs-kmp-default as a component of openSUSE Leap 15.6 kernel-devel as a component of openSUSE Leap 15.6 kernel-macros as a component of openSUSE Leap 15.6 kernel-source as a component of openSUSE Leap 15.6 kernel-source-vanilla as a component of openSUSE Leap 15.6 kernel-devel-azure as a component of openSUSE Leap 15.6 kernel-source-azure as a component of openSUSE Leap 15.6 kernel-devel-rt as a component of openSUSE Leap 15.6 kernel-source-rt as a component of openSUSE Leap 15.6 In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix off-by-one root mis-connection Before attaching a new root to the old root, the children counter of the new root is checked to verify that only the upcoming CPU's top group have been connected to it. However since the recently added commit b729cc1ec21a ("timers/migration: Fix another race between hotplug and idle entry/exit") this check is not valid anymore because the old root is pre-accounted as a child to the new root. Therefore after connecting the upcoming CPU's top group to the new root, the children count to be expected must be 2 and not 1 anymore. This omission results in the old root to not be connected to the new root. Then eventually the system may run with more than one top level, which defeats the purpose of a single idle migrator. Also the old root is pre-accounted but not connected upon the new root creation. But it can be connected to the new root later on. Therefore the old root may be accounted twice to the new root. The propagation of such overcommit can end up creating a double final top-level root with a groupmask incorrectly initialized. Although harmless given that the final top level roots will never have a parent to walk up to, this oddity opportunistically reported the core issue: WARNING: CPU: 8 PID: 0 at kernel/time/timer_migration.c:543 tmigr_requires_handle_remote CPU: 8 UID: 0 PID: 0 Comm: swapper/8 RIP: 0010:tmigr_requires_handle_remote Call Trace: <IRQ> ? tmigr_requires_handle_remote ? hrtimer_run_queues update_process_times tick_periodic tick_handle_periodic __sysvec_apic_timer_interrupt sysvec_apic_timer_interrupt </IRQ> Fix the problem by taking the old root into account in the children count of the new root so the connection is not omitted. Also warn when more than one top level group exists to better detect similar issues in the future. CVE-2025-21813 SLES-LTSS-TERADATA 15 SP2:kernel-default SLES-LTSS-TERADATA 15 SP2:kernel-source SUSE Linux Enterprise High Availability Extension 12 SP5:kernel-default SUSE Linux Enterprise High Availability Extension 12 SP5:kernel-source SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-macros SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-source SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:reiserfs-kmp-default SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default SUSE Linux Enterprise Live Patching 12 SP5:kernel-default SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel SUSE Linux Enterprise Live Patching 12 SP5:kernel-source SUSE Linux Enterprise Live Patching 15 SP3:kernel-default SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-devel SUSE Linux Enterprise Live Patching 15 SP3:kernel-source SUSE Linux Enterprise Live Patching 15 SP4:kernel-default SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel SUSE Linux Enterprise Live Patching 15 SP4:kernel-source SUSE Linux Enterprise Live Patching 15 SP6:kernel-default SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel SUSE Linux Enterprise Live Patching 15 SP6:kernel-source SUSE Linux Enterprise Micro 5.0:kernel-default SUSE Linux Enterprise Micro 5.1:kernel-default SUSE Linux Enterprise Micro 5.1:kernel-rt SUSE Linux Enterprise Micro 5.1:kernel-source SUSE Linux Enterprise Micro 5.1:kernel-source-rt SUSE Linux Enterprise Micro 5.2:kernel-default SUSE Linux Enterprise Micro 5.2:kernel-rt SUSE Linux Enterprise Micro 5.2:kernel-source SUSE Linux Enterprise Micro 5.2:kernel-source-rt SUSE Linux Enterprise Micro 5.3:kernel-default SUSE Linux Enterprise Micro 5.3:kernel-rt SUSE Linux Enterprise Micro 5.3:kernel-source SUSE Linux Enterprise Micro 5.3:kernel-source-rt SUSE Linux Enterprise Micro 5.4:kernel-default SUSE Linux Enterprise Micro 5.4:kernel-rt SUSE Linux Enterprise Micro 5.4:kernel-source SUSE Linux Enterprise Micro 5.4:kernel-source-rt SUSE Linux Enterprise Module for Basesystem 15 SP6:kernel-default SUSE Linux Enterprise Module for Basesystem 15 SP6:kernel-default-devel SUSE Linux Enterprise Module for Basesystem 15 SP6:kernel-devel SUSE Linux Enterprise Module for Basesystem 15 SP6:kernel-macros SUSE Linux Enterprise Module for Basesystem 15 SP6:kernel-source SUSE Linux Enterprise Module for Development Tools 15 SP6:kernel-default SUSE Linux Enterprise Module for Development Tools 15 SP6:kernel-source SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source SUSE Linux Enterprise Server 11 SP4 LTSS:kernel-default SUSE Linux Enterprise Server 11 SP4 LTSS:kernel-source SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security:kernel-default SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security:kernel-source SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-azure SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-azure SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-devel SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-devel SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-macros SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-source SUSE Linux Enterprise Server 15 SP2-LTSS:reiserfs-kmp-default SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-devel SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-devel SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-macros SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-source SUSE Linux Enterprise Server 15 SP3-LTSS:reiserfs-kmp-default SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default SUSE Linux Enterprise Server 15-LTSS:kernel-default SUSE Linux Enterprise Server 15-LTSS:kernel-default-base SUSE Linux Enterprise Server 15-LTSS:kernel-default-devel SUSE Linux Enterprise Server 15-LTSS:kernel-default-man SUSE Linux Enterprise Server 15-LTSS:kernel-devel SUSE Linux Enterprise Server 15-LTSS:kernel-macros SUSE Linux Enterprise Server 15-LTSS:kernel-source SUSE Linux Enterprise Server 15-LTSS:reiserfs-kmp-default SUSE Linux Enterprise Server Teradata 12 SP3:kernel-default SUSE Linux Enterprise Server Teradata 12 SP3:kernel-source SUSE Linux Enterprise Server Teradata 15 SP4:kernel-default SUSE Linux Enterprise Server Teradata 15 SP4:kernel-source SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-macros SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-source SUSE Linux Enterprise Server for SAP Applications 15 SP3:reiserfs-kmp-default SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default SUSE Linux Enterprise Workstation Extension 15 SP6:kernel-default SUSE Linux Enterprise Workstation Extension 15 SP6:kernel-default-extra SUSE Linux Enterprise Workstation Extension 15 SP6:kernel-source SUSE Linux Micro 6.0:kernel-default SUSE Linux Micro 6.0:kernel-devel SUSE Linux Micro 6.0:kernel-devel-rt SUSE Linux Micro 6.0:kernel-macros SUSE Linux Micro 6.0:kernel-source SUSE Linux Micro 6.0:kernel-source-rt SUSE Linux Micro 6.1:kernel-default SUSE Linux Micro 6.1:kernel-devel SUSE Linux Micro 6.1:kernel-devel-rt SUSE Linux Micro 6.1:kernel-macros SUSE Linux Micro 6.1:kernel-source SUSE Linux Micro 6.1:kernel-source-rt SUSE Manager Proxy 4.3:kernel-default SUSE Manager Proxy 4.3:kernel-default-devel SUSE Manager Proxy 4.3:kernel-devel SUSE Manager Proxy 4.3:kernel-macros SUSE Manager Proxy 4.3:kernel-source SUSE Manager Retail Branch Server 4.3:kernel-default SUSE Manager Retail Branch Server 4.3:kernel-default-devel SUSE Manager Retail Branch Server 4.3:kernel-devel SUSE Manager Retail Branch Server 4.3:kernel-macros SUSE Manager Retail Branch Server 4.3:kernel-source SUSE Manager Server 4.3:kernel-default SUSE Manager Server 4.3:kernel-default-devel SUSE Manager Server 4.3:kernel-devel SUSE Manager Server 4.3:kernel-macros SUSE Manager Server 4.3:kernel-source SUSE Real Time Module 15 SP6:kernel-devel-rt SUSE Real Time Module 15 SP6:kernel-source-rt openSUSE Leap 15.6:cluster-md-kmp-default openSUSE Leap 15.6:dlm-kmp-default openSUSE Leap 15.6:gfs2-kmp-default openSUSE Leap 15.6:kernel-default openSUSE Leap 15.6:kernel-default-devel openSUSE Leap 15.6:kernel-default-extra openSUSE Leap 15.6:kernel-default-livepatch openSUSE Leap 15.6:kernel-default-livepatch-devel openSUSE Leap 15.6:kernel-default-optional openSUSE Leap 15.6:kernel-default-vdso openSUSE Leap 15.6:kernel-devel openSUSE Leap 15.6:kernel-devel-azure openSUSE Leap 15.6:kernel-devel-rt openSUSE Leap 15.6:kernel-macros openSUSE Leap 15.6:kernel-source openSUSE Leap 15.6:kernel-source-azure openSUSE Leap 15.6:kernel-source-rt openSUSE Leap 15.6:kernel-source-vanilla openSUSE Leap 15.6:kselftests-kmp-default openSUSE Leap 15.6:ocfs2-kmp-default openSUSE Leap 15.6:reiserfs-kmp-default moderate 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H