Every CVE Search/ Get API key

CVE-2023-53552

drm/i915: mark requests for GuC virtual engines to avoid use-after-free

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

drm/i915: mark requests for GuC virtual engines to avoid use-after-free

References to i915_requests may be trapped by userspace inside a sync_file or dmabuf (dma-resv) and held indefinitely across different proceses. To counter-act the memory leaks, we try to not to keep references from the request past their completion. On the other side on fence release we need to know if rq->engine is valid and points to hw engine (true for non-virtual requests). To make it possible extra bit has been added to rq->execution_mask, for marking virtual engines.

(cherry picked from commit 280410677af763f3871b93e794a199cfcf6fb580)

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.17%Up 0.2 points since Oct 5, 2025
90%50%10%1%

What each source reports

CVE List Score used 7.8

drm/i915: mark requests for GuC virtual engines to avoid use-after-free

In the Linux kernel, the following vulnerability has been resolved:

drm/i915: mark requests for GuC virtual engines to avoid use-after-free

References to i915_requests may be trapped by userspace inside a sync_file or dmabuf (dma-resv) and held indefinitely across different proceses. To counter-act the memory leaks, we try to not to keep references from the request past their completion. On the other side on fence release we need to know if rq->engine is valid and points to hw engine (true for non-virtual requests). To make it possible extra bit has been added to rq->execution_mask, for marking virtual engines.

(cherry picked from commit 280410677af763f3871b93e794a199cfcf6fb580)

Record
CVE-2023-53552
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
EUVDEUVD-2025-32297 7.8

In the Linux kernel, the following vulnerability has been resolved:

drm/i915: mark requests for GuC virtual engines to avoid use-after-free

References to i915_requests may be trapped by userspace inside a sync_file or dmabuf (dma-resv) and held indefinitely across different proceses. To counter-act the memory leaks, we try to not to keep references from the request past their completion. On the other side on fence release we need to know if rq->engine is valid and points to hw engine (true for non-virtual requests). To make it possible extra bit has been added to rq->execution_mask, for marking virtual engines.

(cherry picked from commit 280410677af763f3871b93e794a199cfcf6fb580)

Record
EUVD-2025-32297
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-j4wq-v2m2-959h 7.8

In the Linux kernel, the following vulnerability has been resolved: drm/i915: mark requests for...

In the Linux kernel, the following vulnerability has been resolved:

drm/i915: mark requests for GuC virtual engines to avoid use-after-free

References to i915_requests may be trapped by userspace inside a sync_file or dmabuf (dma-resv) and held indefinitely across different proceses. To counter-act the memory leaks, we try to not to keep references from the request past their completion. On the other side on fence release we need to know if rq->engine is valid and points to hw engine (true for non-virtual requests). To make it possible extra bit has been added to rq->execution_mask, for marking virtual engines.

(cherry picked from commit 280410677af763f3871b93e794a199cfcf6fb580)

Record
GHSA-j4wq-v2m2-959h
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

drm/i915: mark requests for GuC virtual engines to avoid use-after-free

References to i915_requests may be trapped by userspace inside a sync_file or dmabuf (dma-resv) and held indefinitely across different proceses. To counter-act the memory leaks, we try to not to keep references from the request past their completion. On the other side on fence release we need to know if rq->engine is valid and points to hw engine (true for non-virtual requests). To make it possible extra bit has been added to rq->execution_mask, for marking virtual engines.

(cherry picked from commit 280410677af763f3871b93e794a199cfcf6fb580)

Record
CVE-2023-53552
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSVBELL-CVE-2023-53552 7.8
Record
BELL-CVE-2023-53552
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

drm/i915: mark requests for GuC virtual engines to avoid use-after-free

In the Linux kernel, the following vulnerability has been resolved:

drm/i915: mark requests for GuC virtual engines to avoid use-after-free

References to i915_requests may be trapped by userspace inside a sync_file or dmabuf (dma-resv) and held indefinitely across different proceses. To counter-act the memory leaks, we try to not to keep references from the request past their completion. On the other side on fence release we need to know if rq->engine is valid and points to hw engine (true for non-virtual requests). To make it possible extra bit has been added to rq->execution_mask, for marking virtual engines.

(cherry picked from commit 280410677af763f3871b93e794a199cfcf6fb580)

Record
CVE-2023-53552
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 30 moreShow less
OSVDEBIAN-CVE-2023-53552 7.8

In the Linux kernel, the following vulnerability has been resolved: drm/i915: mark requests for GuC virtual engines to avoid use-after-free References to i915_requests may be trapped by userspace inside a sync_file or dmabuf (dma-resv) and held indefinitely across different proceses. To counter-act the memory leaks, we try to not to keep references from the request past their completion. On the other side on fence release we need to know if rq->engine is valid and points to hw engine (true for non-virtual requests). To make it possible extra bit has been added to rq->execution_mask, for marking virtual engines. (cherry picked from commit 280410677af763f3871b93e794a199cfcf6fb580)

Record
DEBIAN-CVE-2023-53552
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:2458 8.1

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2023:2458
CVSS 3.1
8.1 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVRHSA-2023:2951 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2023:2951
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:2394 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2024:2394
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:0759 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:0759
CVSS 3.1
7.1 HighCVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:0760 7.1

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2026:0760
CVSS 3.1
7.1 HighCVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:1441 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:1441
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:1443 7.8

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2026:1443
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:1445 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:1445
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:0759 7.1

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: smb: client: Fix use-after-free in cifs_fill_dirent (CVE-2025-38051)

  • kernel: smb: client: let recv_done verify data_offset, data_length and remaining_data_length (CVE-2025-39933)

  • kernel: drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CVE-2023-53552)

  • kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (CVE-2025-40096)

  • kernel: net: atlantic: fix fragment overflow handling in RX path (CVE-2025-68301)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:0759
CVSS 3.1
7.1 HighCVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:0760 7.1

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: smb: client: Fix use-after-free in cifs_fill_dirent (CVE-2025-38051)

  • kernel: smb: client: let recv_done verify data_offset, data_length and remaining_data_length (CVE-2025-39933)

  • kernel: drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CVE-2023-53552)

  • kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (CVE-2025-40096)

  • kernel: net: atlantic: fix fragment overflow handling in RX path (CVE-2025-68301)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:0760
CVSS 3.1
7.1 HighCVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-53552 7.8

In the Linux kernel, the following vulnerability has been resolved: drm/i915: mark requests for GuC virtual engines to avoid use-after-free References to i915_requests may be trapped by userspace inside a sync_file or dmabuf (dma-resv) and held indefinitely across different proceses. To counter-act the memory leaks, we try to not to keep references from the request past their completion. On the other side on fence release we need to know if rq->engine is valid and points to hw engine (true for non-virtual requests). To make it possible extra bit has been added to rq->execution_mask, for marking virtual engines. (cherry picked from commit 280410677af763f3871b93e794a199cfcf6fb580)

Record
UBUNTU-CVE-2023-53552
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:0759 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: smb: client: Fix use-after-free in cifs_fill_dirent (CVE-2025-38051)
  • kernel: smb: client: let recv_done verify data_offset, data_length and remaining_data_length (CVE-2025-39933)
  • kernel: drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CVE-2023-53552)
  • kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (CVE-2025-40096)
  • kernel: net: atlantic: fix fragment overflow handling in RX path (CVE-2025-68301)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:0759
Updated
2026-11-02
OSVALSA-2026:0760 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: smb: client: Fix use-after-free in cifs_fill_dirent (CVE-2025-38051)
  • kernel: smb: client: let recv_done verify data_offset, data_length and remaining_data_length (CVE-2025-39933)
  • kernel: drm/i915: mark requests for GuC virtual engines to avoid use-after-free (CVE-2023-53552)
  • kernel: drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (CVE-2025-40096)
  • kernel: net: atlantic: fix fragment overflow handling in RX path (CVE-2025-68301)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:0760
Updated
2026-11-02
OSVCLSA-2025-1765463110 No score

kernel: Fix of 45 CVEs

  • Bluetooth: MGMT: Protect mgmt_pending list with its own lock {CVE-2025-38117}
  • padata: Fix pd UAF once and for all {CVE-2025-38584}
  • wifi: cfg80211: Fix use after free for wext {CVE-2023-53153}
  • padata: Fix list iterator in padata_do_serial()
  • padata: do not leak refcount in reorder_work {CVE-2025-38031}
  • padata: avoid UAF for reorder_work {CVE-2025-21726}
  • padata: add pd get/put refcnt helper
  • net/smc: fix UAF on smcsk after smc_listen_out() {CVE-2025-38734}
  • scsi: mpi3mr: Bad drive in topology results kernel crash {CVE-2023-53037}
  • scsi: mpi3mr: Driver unload crashes host when enhanced logging is enabled
  • wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() {CVE-2022-50258}
  • igb: Fix igb_down hung on surprise removal {CVE-2023-53148}
  • drm/i915/sseu: fix max_subslices array-index-out-of-bounds access {CVE-2023-53112}
  • i40e: fix idx validation in config queues msg {CVE-2025-39971}
  • dm-bufio: don't schedule in atomic context {CVE-2025-37928}
  • fs: prevent out-of-bounds array speculation when closing a file descriptor {CVE-2023-53117}
  • vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint {CVE-2025-22083}
  • iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid {CVE-2025-37927}
  • tracing: Fix oob write in trace_seq_to_buffer() {CVE-2025-37923}
  • KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
  • KVM: arm64: Tear down vGIC on failed vCPU creation {CVE-2025-37849}
  • KVM: Reject attempts to consume or refresh inactive gfn_to_pfn_cache {CVE-2022-49882}
  • jbd2: remove wrong sb->s_sequence check {CVE-2025-37839}
  • power: supply: gpio-charger: Fix set charge current limits {CVE-2024-57792}
  • ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object {CVE-2024-46798}
  • ipv6: prevent possible UAF in ip6_xmit() {CVE-2024-44985}
  • ipv6: fix possible UAF in ip6_finish_output2() {CVE-2024-44986}
  • netfilter: flowtable: validate vlan header {CVE-2024-44983}
  • usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() {CVE-2024-50268}
  • usb: vhci-hcd: Do not drop references before new references are gained {CVE-2024-43883}
  • drm/amd/display: Fix slab-use-after-free on hdcp_work {CVE-2025-21968}
  • drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] {CVE-2024-46815}
  • drm/amd/display: Check index msg_id before read or write {CVE-2024-42121}
  • drm/amd/display: Check pipe offset before setting vblank {CVE-2024-42120}
  • drm/amdkfd: don't allow mapping the MMIO HDP page with large pages {CVE-2024-41011}
  • drm/amdkfd: Fix an illegal memory access {CVE-2023-53090}
  • drm/shmem-helper: Remove another errant put in error path {CVE-2023-53084}
  • drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes {CVE-2023-53077}
  • drm/i915: mark requests for GuC virtual engines to avoid use-after-free {CVE-2023-53552}
  • ptp: fix integer overflow in max_vclocks_store {CVE-2024-40994}
  • nvmet: avoid potential UAF in nvmet_req_complete() {CVE-2023-53116}
  • loop: Fix use-after-free issues {CVE-2023-53111}
  • ftrace: Fix invalid address access in lookup_rec() when index is 0 {CVE-2023-53075}
  • mptcp: use the workqueue to destroy unaccepted sockets {CVE-2023-53072}
  • perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output {CVE-2023-53065}
  • erspan: do not use skb_mac_header() in ndo_start_xmit() {CVE-2023-53053}
  • HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039}
  • netlink: prevent potential spectre v1 gadgets {CVE-2023-53000}
  • coresight: Clear the connection field properly {CVE-2022-50214}
  • Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition {CVE-2023-53145}
  • Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync {CVE-2025-39982}
  • x86/tdx: Fix "in-kernel MMIO" check {CVE-2024-47727}
  • arm64: sme: Use STR P to clear FFR context field in streaming SVE mode {CVE-2023-53713}
  • wifi: mt76: mt7921: fix error code of return in…
Record
CLSA-2025-1765463110
Updated
2026-11-02
OSVCLSA-2026-1770032032 No score

kernel: Fix of 63 CVEs

  • mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory {CVE-2025-39883}
  • comedi: aio_iiro_16: Fix bit shift out of bounds {CVE-2025-38529}
  • comedi: das6402: Fix bit shift out of bounds {CVE-2025-38482}
  • comedi: pcl812: Fix bit shift out of bounds {CVE-2025-38530}
  • comedi: das16m1: Fix bit shift out of bounds {CVE-2025-38483}
  • tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). {CVE-2025-40186}
  • wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863}
  • smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051}
  • libceph: fix potential use-after-free in have_mon_and_osd_map() {CVE-2025-68285}
  • sctp: avoid NULL dereference when chunk data buffer is missing {CVE-2025-40240}
  • smb: client: let recv_done verify data_offset, data_length and remaining_data_length {CVE-2025-39933}
  • vsock: Ignore signal/timeout on connect() if already established {CVE-2025-40248}
  • ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping {CVE-2025-40154}
  • Bluetooth: hci_event: call disconnect callback before deleting conn {CVE-2023-53673}
  • net: fix information leakage in /proc/net/ptype {CVE-2022-48757}
  • net/mlx5e: fix a potential double-free in fs_any_create_groups {CVE-2023-52667}
  • mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update {CVE-2024-35855}
  • Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982}
  • crypto: qat - resolve race condition during AER recovery {CVE-2024-26974}
  • perf/core: Bail out early if the request AUX area is out of bound {CVE-2023-52835}
  • ext4: fix double-free of blocks due to wrong extents moved_len {CVE-2024-26704}
  • stm class: Fix a double free in stm_register_device() {CVE-2024-38627}
  • pinctrl: core: delete incorrect free in pinctrl_enable() {CVE-2024-36940}
  • ipvlan: add ipvlan_route_v6_outbound() helper {CVE-2023-52796}
  • wifi: ath11k: fix gtk offload status event locking {CVE-2023-52777}
  • ice: fix memory corruption bug with suspend and rebuild {CVE-2024-35911}
  • drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' {CVE-2024-27042}
  • drm/i915/vma: Fix UAF on destroy against retire race {CVE-2024-26939}
  • netfilter: nf_tables: prefer nft_chain_validate {CVE-2024-41042}
  • Bluetooth: Fix potential use-after-free when clear keys {CVE-2023-53386}
  • drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] {CVE-2024-46815}
  • drm/amd/display: Check pipe offset before setting vblank {CVE-2024-42120}
  • nbd: fix incomplete validation of ioctl arg {CVE-2023-53513}
  • RDMA/rxe: Fix incomplete state save in rxe_requester {CVE-2023-53539}
  • netfilter: nftables: exthdr: fix 4-byte stack OOB write
  • net: ppp: Add bound checking for skb data on ppp_sync_txmung {CVE-2025-37749}
  • net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too {CVE-2025-37823}
  • iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid {CVE-2025-37927}
  • drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE {CVE-2025-40277}
  • nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() {CVE-2025-38724}
  • RDMA/rxe: Fix mr->map double free {CVE-2022-50543}
  • ipc: fix to protect IPCS lookups using RCU {CVE-2025-38212}
  • vsock/vmci: Clear the vmci transport packet properly when initializing it {CVE-2025-38403}
  • RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug {CVE-2025-38024}
  • drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies {CVE-2025-40096}
  • HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
  • drm/i915: mark requests for GuC virtual engines to avoid use-after-free {CVE-2023-53552}
  • net: atlantic: fix fragment overflow handling in RX path {CVE-2025-68301}
  • net: atm: add lec_mutex {CVE-2025-38323}
  • net: openvswitch: fix nested key length validation in the set() action {CVE-2025-37789}
  • scsi: lpfc: Fix buffer free/clear order in deferred receive path…
Record
CLSA-2026-1770032032
Updated
2026-11-02
OSVSUSE-SU-2025:21040-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…
Record
SUSE-SU-2025:21040-1
Updated
2026-11-02
OSVSUSE-SU-2025:21052-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…
Record
SUSE-SU-2025:21052-1
Updated
2026-11-02
OSVSUSE-SU-2025:21056-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…
Record
SUSE-SU-2025:21056-1
Updated
2026-11-02
OSVSUSE-SU-2025:21064-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check…
Record
SUSE-SU-2025:21064-1
Updated
2026-11-02
OSVSUSE-SU-2025:4057-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
  • CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
  • CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
  • CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
  • CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39898: e1000e: fix heap overflow in e1000_set_eeprom (bsc#1250742).
  • CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051). -…
Record
SUSE-SU-2025:4057-1
Updated
2026-11-02
OSVSUSE-SU-2025:4111-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859).
  • CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (bsc#1249857).
  • CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251164).
  • CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741).
  • CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (bsc#1249988).
  • CVE-2023-53500: xfrm: fix slab-use-after-free in decode_session6 (bsc#1250816).
  • CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6 (bsc#1251052).
  • CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251222).
  • CVE-2023-53619: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (bsc#1251743).
  • CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251763).
  • CVE-2023-53705: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (bsc#1252554).
  • CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249479).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40044: fs: udf: fix OOB read in lengthAllocDescs handling (bsc#1252785).
  • CVE-2025-40088: hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() (bsc#1252904).
  • CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).

The following non security issues were fixed:

  • fbcon: Fix OOB access in font allocation (bsc#1252033)
  • mm: avoid unnecessary page fault retires on shared memory types (bsc#1251823).
  • net: hv_netvsc: fix loss of early receive events from host during channel open (bsc#1252265).
Record
SUSE-SU-2025:4111-1
Updated
2026-11-02
OSVSUSE-SU-2025:4128-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
  • CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures (bsc#1252848).
  • CVE-2025-40078: bpf: Explicitly check accesses to bpf_sock_addr…
Record
SUSE-SU-2025:4128-1
Updated
2026-11-02
OSVSUSE-SU-2025:4132-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
  • CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
  • CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
  • CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
  • CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052). -…
Record
SUSE-SU-2025:4132-1
Updated
2026-11-02
OSVSUSE-SU-2025:4139-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859).
  • CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (bsc#1249857).
  • CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251164).
  • CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741).
  • CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (bsc#1249988).
  • CVE-2023-53500: xfrm: fix slab-use-after-free in decode_session6 (bsc#1250816).
  • CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6 (bsc#1251052).
  • CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251222).
  • CVE-2023-53619: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (bsc#1251743).
  • CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251763).
  • CVE-2023-53705: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (bsc#1252554).
  • CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249479).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40044: fs: udf: fix OOB read in lengthAllocDescs handling (bsc#1252785).
  • CVE-2025-40088: hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() (bsc#1252904).
  • CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).

The following non security issues were fixed:

  • fbcon: Fix OOB access in font allocation (bsc#1252033)
  • mm: avoid unnecessary page fault retires on shared memory types (bsc#1251823).
  • net: hv_netvsc: fix loss of early receive events from host during channel open (bsc#1252265).
Record
SUSE-SU-2025:4139-1
Updated
2026-11-02
OSVSUSE-SU-2025:4140-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
  • CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation failures…
Record
SUSE-SU-2025:4140-1
Updated
2026-11-02
OSVSUSE-SU-2025:4141-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-38734: net/smc: fix UAF on smcsk after smc_listen_out() (bsc#1249324).
  • CVE-2025-38735: gve: prevent ethtool ops after shutdown (bsc#1249288).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown (bsc#1249975).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39832: net/mlx5: Add sync reset drop mode support (bsc#1249901).
  • CVE-2025-39847: ppp: fix memory leak in pad_compress_skb (bsc#1250292).
  • CVE-2025-39850: vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (bsc#1250276).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39853: i40e: Fix potential invalid access when MAC list is empty (bsc#1250275).
  • CVE-2025-39854: ice: fix NULL access of tx->in_use in ice_ll_ts_intr (bsc#1250297).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39900: net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (bsc#1250758).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052). -…
Record
SUSE-SU-2025:4141-1
Updated
2026-11-02
OSVSUSE-SU-2025:4149-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859).
  • CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (bsc#1249857).
  • CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251164).
  • CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741).
  • CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (bsc#1249988).
  • CVE-2023-53500: xfrm: fix slab-use-after-free in decode_session6 (bsc#1250816).
  • CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6 (bsc#1251052).
  • CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251222).
  • CVE-2023-53619: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (bsc#1251743).
  • CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251763).
  • CVE-2023-53705: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (bsc#1252554).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-38084: hugetlb: unshare some PMDs when splitting VMAs (bsc#1245498).
  • CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245499).
  • CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1247317).
  • CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249479).
  • CVE-2025-39797: xfrm: Duplicate SPI Handling (bsc#1249608).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-39981: Bluetooth: MGMT: Fix possible UAFs (bsc#1252060).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40044: fs: udf: fix OOB read in lengthAllocDescs handling (bsc#1252785).

The following non security issues were fixed:

  • NFS: remove revoked delegation from server's delegation list (bsc#1246211).
  • NFSv4: Allow FREE_STATEID to clean up delegations (bsc#1246211).
  • fbcon: Fix OOB access in font allocation (bsc#1252033)
  • kabi fix for NFSv4: Allow FREE_STATEID to clean up delegations (bsc#1246211).
  • mm: avoid unnecessary page fault retires on shared memory types (bsc#1251823).
  • net: hv_netvsc: fix loss of early receive events from host during channel open (bsc#1252265).
  • net: mana: Switch to page pool for jumbo frames (bsc#1248754).
  • net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency (bsc#1248754).
  • netfilter: nft_objref: validate objref and objrefmap expressions (bsc#1250237). No CVE available yet, please see the bugzilla ticket referenced.
Record
SUSE-SU-2025:4149-1
Updated
2026-11-02
OSVSUSE-SU-2025:4301-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38539: trace/fgraph: Fix the warning caused by missing unregister notifier (bsc#1248211).
  • CVE-2025-38552: mptcp: plug races between subflow fail and subflow creation (bsc#1248230).
  • CVE-2025-38653: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (bsc#1248630).
  • CVE-2025-38699: scsi: bfa: Double-free fix (bsc#1249224).
  • CVE-2025-38700: scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (bsc#1249182).
  • CVE-2025-38718: sctp: linearize cloned gso packets in sctp_rcv (bsc#1249161).
  • CVE-2025-39673: ppp: fix race conditions in ppp_fill_forward_path (bsc#1249320).
  • CVE-2025-39676: scsi: qla4xxx: Prevent a potential error pointer dereference (bsc#1249302).
  • CVE-2025-39683: tracing: Limit access to parser->buffer when trace_get_user failed (bsc#1249286).
  • CVE-2025-39697: nfs: remove dead code for the old swap over NFS implementation (bsc#1249319 bsc#1252236).
  • CVE-2025-39702: ipv6: sr: Fix MAC comparison to be constant-time (bsc#1249317).
  • CVE-2025-39756: fs: Prevent file descriptor table allocations exceeding INT_MAX (bsc#1249512).
  • CVE-2025-39794: ARM: tegra: Use I/O memcpy to write to IRAM (bsc#1249595).
  • CVE-2025-39812: sctp: initialize more fields in sctp_v6_from_sk() (bsc#1250202).
  • CVE-2025-39813: ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (bsc#1250032).
  • CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control() (bsc#1250205).
  • CVE-2025-39851: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (bsc#1250296).
  • CVE-2025-39866: fs: writeback: fix use-after-free in __mark_inode_dirty() (bsc#1250455).
  • CVE-2025-39876: net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (bsc#1250400).
  • CVE-2025-39881: kernfs: Fix UAF in polling when open file is released (bsc#1250379).
  • CVE-2025-39895: sched: Fix sched_numa_find_nth_cpu() if mask offline (bsc#1250721).
  • CVE-2025-39902: mm/slub: avoid accessing metadata when pointer is invalid in object_err() (bsc#1250702).
  • CVE-2025-39911: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (bsc#1250704).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39946: tls: make sure to abort the stream if headers are bogus (bsc#1251114).
  • CVE-2025-39947: net/mlx5e: Harden uplink netdev access against device unbind (bsc#1251232).
  • CVE-2025-39948: ice: fix Rx page leak on multi-buffer frames (bsc#1251233).
  • CVE-2025-39949: qed: Don't collect too many protection override GRC elements (bsc#1251177).
  • CVE-2025-39955: tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect() (bsc#1251804).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39969: i40e: fix validation of VF state in get resources (bsc#1252044).
  • CVE-2025-39970: i40e: fix input validation logic for action_meta (bsc#1252051).
  • CVE-2025-39971: i40e: fix idx validation in config queues msg (bsc#1252052).
  • CVE-2025-39972: i40e: fix idx validation in i40e_validate_queue_map (bsc#1252039).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-40000: wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (bsc#1252062).
  • CVE-2025-40005: spi: cadence-quadspi: Implement refcount to handle unbind during busy (bsc#1252349).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40051: vhost: vringh: Modify the return value check (bsc#1252858).
  • CVE-2025-40056: vhost: vringh: Fix copy_to_iter return value check (bsc#1252826).
  • CVE-2025-40060: coresight: trbe: Return NULL pointer for allocation…
Record
SUSE-SU-2025:4301-1
Updated
2026-11-02
OSVSUSE-SU-2025:4320-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2022-50327: ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value (bsc#1249859).
  • CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (bsc#1249857).
  • CVE-2022-50490: bpf: Propagate error from htab_lock_bucket() to userspace (bsc#1251164).
  • CVE-2022-50516: fs: dlm: fix invalid derefence of sb_lvbptr (bsc#1251741).
  • CVE-2023-53365: ip6mr: Fix skb_under_panic in ip6mr_cache_report() (bsc#1249988).
  • CVE-2023-53500: xfrm: fix slab-use-after-free in decode_session6 (bsc#1250816).
  • CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6 (bsc#1251052).
  • CVE-2023-53574: wifi: rtw88: delete timer and free skb queue when unloading (bsc#1251222).
  • CVE-2023-53619: netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (bsc#1251743).
  • CVE-2023-53673: Bluetooth: hci_event: call disconnect callback before deleting conn (bsc#1251763).
  • CVE-2023-53705: ipv6: Fix out-of-bounds access in ipv6_find_tlv() (bsc#1252554).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-38084: hugetlb: unshare some PMDs when splitting VMAs (bsc#1245498).
  • CVE-2025-38085: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245499).
  • CVE-2025-38476: rpl: Fix use-after-free in rpl_do_srh_inline() (bsc#1247317).
  • CVE-2025-39742: RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (bsc#1249479).
  • CVE-2025-39797: xfrm: Duplicate SPI Handling (bsc#1249608).
  • CVE-2025-39945: cnic: Fix use-after-free bugs in cnic_delete_task (bsc#1251230).
  • CVE-2025-39967: fbcon: fix integer overflow in fbcon_do_set_font (bsc#1252033).
  • CVE-2025-39968: i40e: add max boundary check for VF filters (bsc#1252047).
  • CVE-2025-39973: i40e: add validation for ring_len param (bsc#1252035).
  • CVE-2025-39978: octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (bsc#1252069).
  • CVE-2025-39981: Bluetooth: MGMT: Fix possible UAFs (bsc#1252060).
  • CVE-2025-40018: ipvs: Defer ip_vs_ftp unregister during netns cleanup (bsc#1252688).
  • CVE-2025-40044: fs: udf: fix OOB read in lengthAllocDescs handling (bsc#1252785).

The following non security issues were fixed:

  • NFS: remove revoked delegation from server's delegation list (bsc#1246211).
  • NFSv4: Allow FREE_STATEID to clean up delegations (bsc#1246211).
  • fbcon: Fix OOB access in font allocation (bsc#1252033)
  • kabi fix for NFSv4: Allow FREE_STATEID to clean up delegations (bsc#1246211).
  • kernel-subpackage-spec: Do not doubly-sign modules (bsc#1251930).
  • mm: avoid unnecessary page fault retires on shared memory types (bsc#1251823).
  • net: hv_netvsc: fix loss of early receive events from host during channel open (bsc#1252265).
  • net: mana: Switch to page pool for jumbo frames (bsc#1248754).
  • net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency (bsc#1248754).
  • netfilter: nft_objref: validate objref and objrefmap expressions (bsc#1250237).
  • rpm/check-for-config-changes: ignore CONFIG_SCHED_PROXY_EXEC, too (bsc#1250946)
Record
SUSE-SU-2025:4320-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bpftool
AlmaLinux:8
 before 4.18.0-553.94.1.el8_10
4.18.0-553.94.1.el8_10
kernel
AlmaLinux:8
 before 4.18.0-553.94.1.el8_10
4.18.0-553.94.1.el8_10
kernel-abi-stablelists
AlmaLinux:8
 before 4.18.0-553.94.1.el8_10
4.18.0-553.94.1.el8_10
kernel-core
AlmaLinux:8
 before 4.18.0-553.94.1.el8_10
4.18.0-553.94.1.el8_10
kernel-cross-headers
AlmaLinux:8
 before 4.18.0-553.94.1.el8_10
4.18.0-553.94.1.el8_10
kernel-debug
AlmaLinux:8
 before 4.18.0-553.94.1.el8_10
4.18.0-553.94.1.el8_10
kernel-debug-core
AlmaLinux:8
 before 4.18.0-553.94.1.el8_10
4.18.0-553.94.1.el8_10
kernel-debug-devel
AlmaLinux:8
 before 4.18.0-553.94.1.el8_10
4.18.0-553.94.1.el8_10
kernel-debug-modules
AlmaLinux:8
 before 4.18.0-553.94.1.el8_10
4.18.0-553.94.1.el8_10
kernel-debug-modules-extra
AlmaLinux:8
 before 4.18.0-553.94.1.el8_10
4.18.0-553.94.1.el8_10
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-devel
AlmaLinux:8
 before 4.18.0-553.94.1.el8_10
4.18.0-553.94.1.el8_10
kernel-doc
AlmaLinux:8
 before 4.18.0-553.94.1.el8_10
4.18.0-553.94.1.el8_10
kernel-headers
AlmaLinux:8
 before 4.18.0-553.94.1.el8_10
4.18.0-553.94.1.el8_10
kernel-modules
AlmaLinux:8
 before 4.18.0-553.94.1.el8_10
4.18.0-553.94.1.el8_10
kernel-modules-extra
AlmaLinux:8
 before 4.18.0-553.94.1.el8_10
4.18.0-553.94.1.el8_10
kernel-tools
AlmaLinux:8
 before 4.18.0-553.94.1.el8_10
4.18.0-553.94.1.el8_10
kernel-tools-libs
AlmaLinux:8
 before 4.18.0-553.94.1.el8_10
4.18.0-553.94.1.el8_10
kernel-tools-libs-devel
AlmaLinux:8
 before 4.18.0-553.94.1.el8_10
4.18.0-553.94.1.el8_10
kernel-zfcpdump
AlmaLinux:8
 before 4.18.0-553.94.1.el8_10
4.18.0-553.94.1.el8_10
kernel-zfcpdump-core
AlmaLinux:8
 before 4.18.0-553.94.1.el8_10
4.18.0-553.94.1.el8_10
kernel-zfcpdump-devel
AlmaLinux:8
 before 4.18.0-553.94.1.el8_10
4.18.0-553.94.1.el8_10
kernel-zfcpdump-modules
AlmaLinux:8
 before 4.18.0-553.94.1.el8_10
4.18.0-553.94.1.el8_10
kernel-zfcpdump-modules-extra
AlmaLinux:8
 before 4.18.0-553.94.1.el8_10
4.18.0-553.94.1.el8_10
perf
AlmaLinux:8
 before 4.18.0-553.94.1.el8_10
4.18.0-553.94.1.el8_10
python3-perf
AlmaLinux:8
 before 4.18.0-553.94.1.el8_10
4.18.0-553.94.1.el8_10
kernel-rt
AlmaLinux:8
 before 4.18.0-553.94.1.rt7.435.el8_10
4.18.0-553.94.1.rt7.435.el8_10
kernel-rt-core
AlmaLinux:8
 before 4.18.0-553.94.1.rt7.435.el8_10
4.18.0-553.94.1.rt7.435.el8_10
kernel-rt-debug
AlmaLinux:8
 before 4.18.0-553.94.1.rt7.435.el8_10
4.18.0-553.94.1.rt7.435.el8_10
kernel-rt-debug-core
AlmaLinux:8
 before 4.18.0-553.94.1.rt7.435.el8_10
4.18.0-553.94.1.rt7.435.el8_10
kernel-rt-debug-devel
AlmaLinux:8
 before 4.18.0-553.94.1.rt7.435.el8_10
4.18.0-553.94.1.rt7.435.el8_10
kernel-rt-debug-modules
AlmaLinux:8
 before 4.18.0-553.94.1.rt7.435.el8_10
4.18.0-553.94.1.rt7.435.el8_10
kernel-rt-debug-modules-extra
AlmaLinux:8
 before 4.18.0-553.94.1.rt7.435.el8_10
4.18.0-553.94.1.rt7.435.el8_10
kernel-rt-devel
AlmaLinux:8
 before 4.18.0-553.94.1.rt7.435.el8_10
4.18.0-553.94.1.rt7.435.el8_10
kernel-rt-modules
AlmaLinux:8
 before 4.18.0-553.94.1.rt7.435.el8_10
4.18.0-553.94.1.rt7.435.el8_10
kernel-rt-modules-extra
AlmaLinux:8
 before 4.18.0-553.94.1.rt7.435.el8_10
4.18.0-553.94.1.rt7.435.el8_10
linux-lts
Alpaquita:23
 6.1.53-r0 up to 6.1.54-r0
6.1.54-r0
linux-lts
Alpaquita:stream
 6.1.112-r0 up to 6.6.58-r0
6.6.58-r0
bpftool
TuxCare:AlmaLinux:9.2
 before 7.0.0-284.1101.el9_2.tuxcare.7.els25
7.0.0-284.1101.el9_2.tuxcare.7.els25
kernel
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-core
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-cross-headers
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-debug
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-debug-core
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-debug-devel
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-debug-modules
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-devel
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-devel-matched
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-doc
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-headers
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-modules
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-modules-core
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-modules-extra
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-modules-internal
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-modules-partner
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-selftests-internal
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-tools
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-tools-libs
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-tools-libs-devel
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
kernel-uki-virt
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
libbpf
TuxCare:AlmaLinux:9.2
 before 2:1.0.0-2.el9_2.tuxcare.7.els25
2:1.0.0-2.el9_2.tuxcare.7.els25
libbpf-devel
TuxCare:AlmaLinux:9.2
 before 2:1.0.0-2.el9_2.tuxcare.7.els25
2:1.0.0-2.el9_2.tuxcare.7.els25
libbpf-static
TuxCare:AlmaLinux:9.2
 before 2:1.0.0-2.el9_2.tuxcare.7.els25
2:1.0.0-2.el9_2.tuxcare.7.els25
perf
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
python3-perf
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
rtla
TuxCare:AlmaLinux:9.2
 before 5.14.0-284.1101.el9_2.tuxcare.7.els25
5.14.0-284.1101.el9_2.tuxcare.7.els25
bpftool
TuxCare:CentOS-Stream:8
 before 4.18.0-553.6.1.el8_10.tuxcare.els15
4.18.0-553.6.1.el8_10.tuxcare.els15
kernel
TuxCare:CentOS-Stream:8
 before 4.18.0-553.6.1.el8_10.tuxcare.els15
4.18.0-553.6.1.el8_10.tuxcare.els15
kernel-core
TuxCare:CentOS-Stream:8
 before 4.18.0-553.6.1.el8_10.tuxcare.els15
4.18.0-553.6.1.el8_10.tuxcare.els15
kernel-cross-headers
TuxCare:CentOS-Stream:8
 before 4.18.0-553.6.1.el8_10.tuxcare.els15
4.18.0-553.6.1.el8_10.tuxcare.els15
kernel-debug
TuxCare:CentOS-Stream:8
 before 4.18.0-553.6.1.el8_10.tuxcare.els15
4.18.0-553.6.1.el8_10.tuxcare.els15
kernel-debug-core
TuxCare:CentOS-Stream:8
 before 4.18.0-553.6.1.el8_10.tuxcare.els15
4.18.0-553.6.1.el8_10.tuxcare.els15
kernel-debug-devel
TuxCare:CentOS-Stream:8
 before 4.18.0-553.6.1.el8_10.tuxcare.els15
4.18.0-553.6.1.el8_10.tuxcare.els15
kernel-debug-modules
TuxCare:CentOS-Stream:8
 before 4.18.0-553.6.1.el8_10.tuxcare.els15
4.18.0-553.6.1.el8_10.tuxcare.els15
kernel-debug-modules-extra
TuxCare:CentOS-Stream:8
 before 4.18.0-553.6.1.el8_10.tuxcare.els15
4.18.0-553.6.1.el8_10.tuxcare.els15
kernel-debug-modules-internal
TuxCare:CentOS-Stream:8
 before 4.18.0-553.6.1.el8_10.tuxcare.els15
4.18.0-553.6.1.el8_10.tuxcare.els15
kernel-devel
TuxCare:CentOS-Stream:8
 before 4.18.0-553.6.1.el8_10.tuxcare.els15
4.18.0-553.6.1.el8_10.tuxcare.els15
kernel-headers
TuxCare:CentOS-Stream:8
 before 4.18.0-553.6.1.el8_10.tuxcare.els15
4.18.0-553.6.1.el8_10.tuxcare.els15
kernel-ipaclones-internal
TuxCare:CentOS-Stream:8
 before 4.18.0-553.6.1.el8_10.tuxcare.els15
4.18.0-553.6.1.el8_10.tuxcare.els15
kernel-modules
TuxCare:CentOS-Stream:8
 before 4.18.0-553.6.1.el8_10.tuxcare.els15
4.18.0-553.6.1.el8_10.tuxcare.els15
kernel-modules-extra
TuxCare:CentOS-Stream:8
 before 4.18.0-553.6.1.el8_10.tuxcare.els15
4.18.0-553.6.1.el8_10.tuxcare.els15
kernel-modules-internal
TuxCare:CentOS-Stream:8
 before 4.18.0-553.6.1.el8_10.tuxcare.els15
4.18.0-553.6.1.el8_10.tuxcare.els15
kernel-selftests-internal
TuxCare:CentOS-Stream:8
 before 4.18.0-553.6.1.el8_10.tuxcare.els15
4.18.0-553.6.1.el8_10.tuxcare.els15
kernel-tools
TuxCare:CentOS-Stream:8
 before 4.18.0-553.6.1.el8_10.tuxcare.els15
4.18.0-553.6.1.el8_10.tuxcare.els15
kernel-tools-libs
TuxCare:CentOS-Stream:8
 before 4.18.0-553.6.1.el8_10.tuxcare.els15
4.18.0-553.6.1.el8_10.tuxcare.els15
kernel-tools-libs-devel
TuxCare:CentOS-Stream:8
 before 4.18.0-553.6.1.el8_10.tuxcare.els15
4.18.0-553.6.1.el8_10.tuxcare.els15
perf
TuxCare:CentOS-Stream:8
 before 4.18.0-553.6.1.el8_10.tuxcare.els15
4.18.0-553.6.1.el8_10.tuxcare.els15
python3-perf
TuxCare:CentOS-Stream:8
 before 4.18.0-553.6.1.el8_10.tuxcare.els15
4.18.0-553.6.1.el8_10.tuxcare.els15
Kernel
Linux
 6.0.0 up to 6.1.54, 6.2.0 up to 6.5.4
6.1.546.5.4
linux
Debian:12
 before 6.1.55-1, plus listed versions
6.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+1
Show 5 moreShow less
6.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-1~bpo11+1
6.1.55-1
linux
Debian:13
 before 6.5.6-1
6.5.6-1
linux
Debian:14
 before 6.5.6-1
6.5.6-1
bpftool-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:7.0.0-284.11.1.el9_2
0:7.0.0-284.11.1.el9_2
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-64k-debug-devel
Red Hat:enterprise_linux:9::appstream
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-64k-devel
Red Hat:enterprise_linux:9::appstream
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-64k-devel-matched
Red Hat:enterprise_linux:9::appstream
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-debug-devel
Red Hat:enterprise_linux:9::appstream
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::appstream
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::appstream
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::appstream
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::appstream
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-devel
Red Hat:enterprise_linux:9::appstream
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-devel-matched
Red Hat:enterprise_linux:9::appstream
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-doc
Red Hat:enterprise_linux:9::appstream
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-zfcpdump-devel
Red Hat:enterprise_linux:9::appstream
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:9::appstream
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
perf
Red Hat:enterprise_linux:9::appstream
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
perf-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
python3-perf-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
rtla
Red Hat:enterprise_linux:9::appstream
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
bpftool
Red Hat:enterprise_linux:9::baseos
 before 0:7.0.0-284.11.1.el9_2
0:7.0.0-284.11.1.el9_2
bpftool-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:7.0.0-284.11.1.el9_2
0:7.0.0-284.11.1.el9_2
kernel
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-64k
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-64k-core
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-64k-debug
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-64k-debug-core
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-64k-debug-modules
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-64k-modules
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-64k-modules-core
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-64k-modules-extra
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-abi-stablelists
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-core
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-debug
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-debug-core
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-debug-modules
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-debug-modules-core
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-debug-uki-virt
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-modules
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-modules-core
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-modules-extra
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-tools
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel-tools-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:5.14.0-284.11.1.el9_2
0:5.14.0-284.11.1.el9_2
kernel
Rocky Linux:8
 before 0:4.18.0-553.94.1.el8_10
0:4.18.0-553.94.1.el8_10
kernel-rt
Rocky Linux:8
 before 0:4.18.0-553.94.1.rt7.435.el8_10
0:4.18.0-553.94.1.rt7.435.el8_10
kernel-default
SUSE:Linux Micro 6.0
 before 6.4.0-36.1
6.4.0-36.1
kernel-default-base
SUSE:Linux Micro 6.0
 before 6.4.0-36.1.21.13
6.4.0-36.1.21.13
kernel-kvmsmall
SUSE:Linux Micro 6.0
 before 6.4.0-36.1
6.4.0-36.1
kernel-source
SUSE:Linux Micro 6.0
 before 6.4.0-36.1
6.4.0-36.1
kernel-rt
SUSE:Linux Micro 6.0
 before 6.4.0-38.1
6.4.0-38.1
kernel-source-rt
SUSE:Linux Micro 6.0
 before 6.4.0-38.1
6.4.0-38.1
kernel-default
SUSE:Linux Micro 6.1
 before 6.4.0-36.1
6.4.0-36.1
kernel-default-base
SUSE:Linux Micro 6.1
 before 6.4.0-36.1.21.13
6.4.0-36.1.21.13
kernel-kvmsmall
SUSE:Linux Micro 6.1
 before 6.4.0-36.1
6.4.0-36.1
kernel-source
SUSE:Linux Micro 6.1
 before 6.4.0-36.1
6.4.0-36.1
kernel-rt
SUSE:Linux Micro 6.1
 before 6.4.0-38.1
6.4.0-38.1
kernel-source-rt
SUSE:Linux Micro 6.1
 before 6.4.0-38.1
6.4.0-38.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 6.4.0-150700.53.22.1.150700.17.15.1
6.4.0-150700.53.22.1.150700.17.15.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP7
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP7
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP7
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP7
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP7
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP7
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-livepatch-SLE15-SP7_Update_6
SUSE:Linux Enterprise Live Patching 15 SP7
 before 1-150700.15.3.1
1-150700.15.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP7
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP7
 before 6.4.0-150700.53.22.1
6.4.0-150700.53.22.1
kernel-default
SUSE:Linux Enterprise Micro 5.3
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.3
 before 5.14.21-150400.24.184.1.150400.24.94.2
5.14.21-150400.24.184.1.150400.24.94.2
kernel-default
SUSE:Linux Enterprise Micro 5.4
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.4
 before 5.14.21-150400.24.184.1.150400.24.94.2
5.14.21-150400.24.184.1.150400.24.94.2
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP4
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-livepatch-SLE15-SP4_Update_46
SUSE:Linux Enterprise Live Patching 15 SP4
 before 1-150400.9.5.1
1-150400.9.5.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP4
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 5.14.21-150400.24.184.1.150400.24.94.2
5.14.21-150400.24.184.1.150400.24.94.2
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 5.14.21-150400.24.184.1.150400.24.94.2
5.14.21-150400.24.184.1.150400.24.94.2
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-default
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 5.14.21-150400.24.184.1.150400.24.94.2
5.14.21-150400.24.184.1.150400.24.94.2
kernel-docs
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-source
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 5.14.21-150400.24.184.1.150400.24.94.2
5.14.21-150400.24.184.1.150400.24.94.2
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 5.14.21-150400.24.184.1
5.14.21-150400.24.184.1
kernel-azure
openSUSE:Leap 15.6
 before 6.4.0-150600.8.55.1
6.4.0-150600.8.55.1
kernel-source-azure
openSUSE:Leap 15.6
 before 6.4.0-150600.8.55.1
6.4.0-150600.8.55.1
kernel-syms-azure
openSUSE:Leap 15.6
 before 6.4.0-150600.8.55.1
6.4.0-150600.8.55.1
dtb-aarch64
openSUSE:Leap 15.6
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-64kb
openSUSE:Leap 15.6
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-debug
openSUSE:Leap 15.6
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-default
openSUSE:Leap 15.6
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-default-base
openSUSE:Leap 15.6
 before 6.4.0-150600.23.78.1.150600.12.34.2
6.4.0-150600.23.78.1.150600.12.34.2
kernel-docs
openSUSE:Leap 15.6
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-kvmsmall
openSUSE:Leap 15.6
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-obs-build
openSUSE:Leap 15.6
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-obs-qa
openSUSE:Leap 15.6
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-source
openSUSE:Leap 15.6
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-syms
openSUSE:Leap 15.6
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-zfcpdump
openSUSE:Leap 15.6
 before 6.4.0-150600.23.78.1
6.4.0-150600.23.78.1
kernel-rt
openSUSE:Leap 15.6
 before 6.4.0-150600.10.58.1
6.4.0-150600.10.58.1
kernel-rt_debug
openSUSE:Leap 15.6
 before 6.4.0-150600.10.58.1
6.4.0-150600.10.58.1
kernel-source-rt
openSUSE:Leap 15.6
 before 6.4.0-150600.10.58.1
6.4.0-150600.10.58.1
kernel-syms-rt
openSUSE:Leap 15.6
 before 6.4.0-150600.10.58.1
6.4.0-150600.10.58.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
 None known
linux-azure-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1
Show 7 moreShow less
5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1
 None known
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-azure-fde
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1
Show 21 moreShow less
5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1
 None known
linux-gcp-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
Show 7 moreShow less
5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3
 None known
linux-gcp-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1
Show 8 moreShow less
5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1
 None known
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-gke
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41
Show 45 moreShow less
5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111
 None known
linux-gke-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1
Show 13 moreShow less
5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1
 None known
linux-gkeop
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13
Show 45 moreShow less
5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77
 None known
linux-gkeop-5.15
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2
Show 40 moreShow less
5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1
 None known
linux-hwe-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1
Show 7 moreShow less
5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1
 None known
linux-hwe-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1
Show 11 moreShow less
5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1
 None known
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-oem-5.10
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 21 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61
 None known
linux-oem-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21
Show 7 moreShow less
5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36
 None known
linux-oem-5.14
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10
Show 30 moreShow less
5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-oracle-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1
Show 7 moreShow less
5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1
 None known
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-riscv-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1
Show 8 moreShow less
5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35
 None known
linux-riscv-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
 None known
linux-allwinner-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1
 None known
linux-aws-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1
Show 5 moreShow less
5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1
 None known
linux-aws-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 9 moreShow less
6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1
 None known
linux-aws-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1008.8~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1012.12~22.04.16.5.0-1014.14~22.04.1
Show 9 moreShow less
6.5.0-1015.15~22.04.16.5.0-1016.16~22.04.16.5.0-1017.17~22.04.26.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1021.21~22.04.16.5.0-1022.22~22.04.16.5.0-1023.23~22.04.16.5.0-1024.24~22.04.1
 None known
linux-azure-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2
 None known
linux-azure-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3
Show 8 moreShow less
6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1
 None known
linux-azure-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1007.7~22.04.16.5.0-1009.9~22.04.16.5.0-1010.10~22.04.16.5.0-1011.11~22.04.16.5.0-1015.15~22.04.1
Show 9 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.19~22.04.26.5.0-1019.20~22.04.16.5.0-1021.22~22.04.16.5.0-1022.23~22.04.16.5.0-1023.24~22.04.16.5.0-1024.25~22.04.16.5.0-1025.26~22.04.1
 None known
linux-azure-fde-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1
 None known
linux-azure-fde-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1
Show 5 moreShow less
6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1
 None known
linux-gcp-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1
 None known
linux-gcp-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1
Show 7 moreShow less
6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1
 None known
linux-gcp-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-1010.10~22.04.36.5.0-1011.11~22.04.16.5.0-1013.13~22.04.16.5.0-1014.14~22.04.16.5.0-1015.15~22.04.1
Show 8 moreShow less
6.5.0-1016.16~22.04.16.5.0-1017.17~22.04.16.5.0-1018.18~22.04.16.5.0-1020.20~22.04.16.5.0-1022.24~22.04.16.5.0-1023.25~22.04.16.5.0-1024.26~22.04.16.5.0-1025.27~22.04.1
 None known
linux-hwe-5.19
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1
Show 6 moreShow less
5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50
 None known
linux-hwe-6.2
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1
Show 5 moreShow less
6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1
 None known
linux-hwe-6.5
Ubuntu:22.04:LTS
 All versions, plus listed versions
6.5.0-14.14~22.04.16.5.0-15.15~22.04.16.5.0-17.17~22.04.16.5.0-18.18~22.04.16.5.0-21.21~22.04.1
Show 8 moreShow less
6.5.0-25.25~22.04.16.5.0-26.26~22.04.16.5.0-27.28~22.04.16.5.0-28.29~22.04.16.5.0-35.35~22.04.16.5.0-41.41~22.04.26.5.0-44.44~22.04.16.5.0-45.45~22.04.1
 None known

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-53552 is a high vulnerability (CVSS 7.8) in Linux, published September 13, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.17%, the 6th percentile. Fixed in bpftool 4.18.0-553.94.1.el8_10.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 513 package rows, 29 versions, 5,243 references and the rest of 12 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open