SUSE-RU-2025:4052-1: moderate: Recommended update for dpdk

Tue Nov 11 12:30:08 UTC 2025

# Recommended update for dpdk

Announcement ID: SUSE-RU-2025:4052-1  
Release Date: 2025-11-11T10:30:56Z  
Rating: moderate  
References:

Affected Products:

  * Server Applications Module 15-SP7
  * SUSE Linux Enterprise Real Time 15 SP7
  * SUSE Linux Enterprise Server 15 SP7
  * SUSE Linux Enterprise Server for SAP Applications 15 SP7

An update that can now be installed.

## Description:

This update for dpdk fixes the following issues:

  * acl: fix build with GCC 15 on aarch64
  * app/crypto-perf: fix AAD offset alignment
  * app/eventdev: fix number of releases sent during cleanup
  * app/testpmd:
    * fix: flow random item token and RSS hash key update
    * relax number of TCs in DCB command
  * buildtools/test: scan muti-line registrations
  * bus/auxiliary: fix crash in cleanup
  * bus: cleanup device lists
  * bus/fslmc: fix use after free
  * bus/pci/bsd: fix device existence check
  * bus/vmbus:
    * align ring buffer data to page boundary
    * use Hyper-V page size
  * common/cnxk:
    * fix: AES-CTR salt handling, aura offset, CQ tail drop, E-tag pattern parsing, qsize in CPT iq enable 
  * common/dpaax:
    * fix: PDCP AES only 12-bit SN, PDCP key command race condition
  * common/mlx5:
    * fix: dependency detection on Windows and extraction of auxiliary device name
  * crypto/cnxk:
    * fix: out-of-bounds access in SM2, QP stats, uninitialized variable and update SG list population
  * crypto/dpaa2_sec: fix uninitialized variable
  * crypto/openssl: include private exponent in RSA session
  * crypto/qat:
    * fix: out-of-place chain/cipher/auth headers, out-of-place header bytes in AEAD raw API and size calculation for memset
  * crypto/virtio:
    * add request check on request side
    * fix cipher data source length and driver cleanup
  * doc:
    * add kernel options required for mlx5
    * fix missing feature matrix for event device
    * remove reference to deprecated â€“use-device option
  * dts: fix deterministic doc
  * eal:
    * add description of service corelist in usage
    * fix return value of lcore role and warn if no lcore is available
  * eal/freebsd: unregister alarm callback before free
  * eal/linux: improve ASLR check and unregister alarm callback before free
  * eal/unix: fix log message for madvise failure
  * eal/x86: fix C++ build
  * ethdev: fix error struct in flow configure and keep promiscuous/allmulti
    value before disabling
  * event/cnxk: fix missing HW state checks
  * eventdev: fix flag types consistency
  * event/dlb2:
    * fix: default credits based on HW version, dequeue with CQ depth less than or equal to 16, num single link ports for DLB2.5,public symbol namespace, QID depth xstat, validaton of LDB port COS ID arguments 
  * examples/flow_filtering: fix make clean
  * examples/ipsec-secgw: fix crash in event vector mode, crash with IPv6 and
    number of queue pairs
  * examples/ntb: check more heap allocations
  * mem: fix lockup on address space shortage
  * net/af_xdp: fix use after free in zero-copy Tx
  * net/bonding: avoid RSS RETA update in flow isolation mode
  * net/cnxk: fix descriptor count update on reconfig and lock for security
    session operations
  * net/e1000: fix EEPROM dump, igb Tx queue offloads capability and xstats name
  * net/ena: fix aenq timeout with low poll interval and control path interrupt
    mode
  * net: fix IPv6 check for IPv4 compat
  * net/fm10k/base: fix compilation warnings
  * net/hns3:
    * allow Tx vector when fast free not enabled, 
    * check requirement for hardware GRO and Rx packet without CRC data
    * fix: CRC data segment,divide by zero, extra wait for link up, integer overflow in interrupt unmap, interrupt rollback, memory leak for indirect flow action, memory leak on failure, queue TC configuration on VF,resources release on reset, 
  * net/i40e/base: fix compiler warnings and unused value warnings
  * net/i40e: fix RSS on plain IPv4
  * net/iavf: fix VLAN strip disabling for ADQ v2 capability and setting after
    enabling filter
  * net/ice/base: fix integer overflow, media type check, type conversion and
    typo in device ID description
  * net/ice:
    * fix: flow creation failure, handling empty DCF RSS hash, querying RSS hash for DCF and support for 3 scheduler levels
  * net/idpf: fix truncation of constant value
  * net/ixgbe/base:
    * correct definition of endianness macro, 
    * fix: compilation warnings, link status for E610 and lock checker errors 
  * net/ixgbe:
    * enable ethertype filter for E610
    * fix: indentation, port mask default value in filter, 
    * remove VLANs and skip MACsec stats for E610 
  * net/mana: check vendor ID when probing RDMA device
  * net/mlx5:
    * align PF and VF/SF MAC address handling, avoid setting kernel MTU if not needed, 
    * fix: access to auxiliary flow data, counter pool init error propagation counter service cleanup on init failure, crash in HWS counter pool destroy, crash on age query with indirect conntrack, error notification for large flow patterns, flex tunnel flow validation, crash in HWS counter pool destroy, crash on age query with indirect conntrack, GRE flow item validation, header modify action on group 0, hypervisor detection in VLAN workaround, link on Windows, mark action with shared Rx queue,masked indirect age action validation, maximal queue size query, out-of-order completions in ordinary Rx burst, template flow rule identification, validation for GENEVE options, VLAN stripping on hairpin queue, WQE size calculation for Tx queue, remove unsupported flow meter action in HWS, validate GTP PSC QFI width 
  * net/mlx5/hws: fix send queue drain on FW WQE destroy
  * net/netvsc: add stats counters from VF and use Hyper-V page size
  * net/nfp:
    * fix: control message overflow, crash with null RSS hash key flow rule freeing , hash key length logic, 
    * standardize: NFD3 Tx descriptor endianness and Rx descriptor endianness
  * net/ngbe: fix device statistics and MAC control frame forwarding
  * net/ntnic:
    * avoid divide by zero
    * fix ring queue operation
    * remove unused code
    * unmap DMA during queue release
  * net/null: fix packet copy
  * net/octeon_ep:
    * fix buffer refill
    * increase mailbox timeout
  * net/qede: fix use after free
  * net/sfc: fix action order on start failure
  * net/tap: fix qdisc add failure handling
  * net/txgbe:
    * add LRO flag in mbuf when enabled
    * fix: device statistics, FDIR perfect mode for IPv6 MAC control frame forwarding, ntuple filter parsing, packet type for FDIR filter, raw pattern match for FDIR rule reserved extra FDIR headroom, create FDIR filter for SCTP packet adn tunnel packet
    * restrict VLAN strip configuration on VF
  * pcapng: fix null dereference in close
  * power/intel_uncore: fix crash closing uninitialized driver
  * test/crypto:
    * fix: auth and cipher case IV length, EdDSA vector description, RSA decrypt validation, RSA vector as per RFC 8017
    * set to null after freeing operation
  * test/lcore: fix race in per-lcore test
  * test/malloc: improve resiliency
  * trace: fix overflow in per-lcore trace buffer
  * vhost/crypto: fix cipher data length
  * vhost:
    * fix net control virtqueue used length, wrapping on control virtqueue rings 
    * search virtqueues driver data in read-only area
  * Fix issue with always_inline on older gcc7

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * Server Applications Module 15-SP7  
    zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2025-4052=1

## Package List:

  * Server Applications Module 15-SP7 (aarch64 ppc64le x86_64)
    * dpdk-tools-24.11.3-150700.3.3.1
    * dpdk-debugsource-24.11.3-150700.3.3.1
    * dpdk-debuginfo-24.11.3-150700.3.3.1
    * dpdk-24.11.3-150700.3.3.1
    * libdpdk-25-24.11.3-150700.3.3.1
    * libdpdk-25-debuginfo-24.11.3-150700.3.3.1
    * dpdk-devel-24.11.3-150700.3.3.1
  * Server Applications Module 15-SP7 (aarch64)
    * dpdk-thunderx-debuginfo-24.11.3-150700.3.3.1
    * dpdk-thunderx-debugsource-24.11.3-150700.3.3.1
    * dpdk-thunderx-devel-24.11.3-150700.3.3.1
    * dpdk-thunderx-24.11.3-150700.3.3.1

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-updates/attachments/20251111/9f4ea0a6/attachment.htm>