Every CVE Search/ Get API key

CVE-2026-63922

ipv6: exthdrs: refresh nh after handling HAO option

9.8 CriticalFix available

In the Linux kernel, the following vulnerability has been resolved:

ipv6: exthdrs: refresh nh after handling HAO option

ip6_parse_tlv() caches skb_network_header(skb) in nh while walking IPv6 TLVs.

ipv6_dest_hao() may call pskb_expand_head() for a cloned skb, which can move the skb head and invalidate the cached network header pointer. Refresh nh after ipv6_dest_hao() returns so any trailing padding or TLVs are parsed from the current skb head.

This matches the existing pattern used in ip6_parse_tlv() after helpers that can modify skb header storage.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.71%Up 0.5 points since Jul 20, 2026
90%50%10%1%

What each source reports

CVE List Score used 9.8

ipv6: exthdrs: refresh nh after handling HAO option

In the Linux kernel, the following vulnerability has been resolved:

ipv6: exthdrs: refresh nh after handling HAO option

ip6_parse_tlv() caches skb_network_header(skb) in nh while walking IPv6 TLVs.

ipv6_dest_hao() may call pskb_expand_head() for a cloned skb, which can move the skb head and invalidate the cached network header pointer. Refresh nh after ipv6_dest_hao() returns so any trailing padding or TLVs are parsed from the current skb head.

This matches the existing pattern used in ip6_parse_tlv() after helpers that can modify skb header storage.

Record
CVE-2026-63922
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
EUVDEUVD-2026-45695 9.8

In the Linux kernel, the following vulnerability has been resolved:

ipv6: exthdrs: refresh nh after handling HAO option

ip6_parse_tlv() caches skb_network_header(skb) in nh while walking IPv6 TLVs.

ipv6_dest_hao() may call pskb_expand_head() for a cloned skb, which can move the skb head and invalidate the cached network header pointer. Refresh nh after ipv6_dest_hao() returns so any trailing padding or TLVs are parsed from the current skb head.

This matches the existing pattern used in ip6_parse_tlv() after helpers that can modify skb header storage.

Record
EUVD-2026-45695
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-5w2v-4j6c-44h8 9.8

In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh...

In the Linux kernel, the following vulnerability has been resolved:

ipv6: exthdrs: refresh nh after handling HAO option

ip6_parse_tlv() caches skb_network_header(skb) in nh while walking IPv6 TLVs.

ipv6_dest_hao() may call pskb_expand_head() for a cloned skb, which can move the skb head and invalidate the cached network header pointer. Refresh nh after ipv6_dest_hao() returns so any trailing padding or TLVs are parsed from the current skb head.

This matches the existing pattern used in ip6_parse_tlv() after helpers that can modify skb header storage.

Record
GHSA-5w2v-4j6c-44h8
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
NVD 9.8

In the Linux kernel, the following vulnerability has been resolved:

ipv6: exthdrs: refresh nh after handling HAO option

ip6_parse_tlv() caches skb_network_header(skb) in nh while walking IPv6 TLVs.

ipv6_dest_hao() may call pskb_expand_head() for a cloned skb, which can move the skb head and invalidate the cached network header pointer. Refresh nh after ipv6_dest_hao() returns so any trailing padding or TLVs are parsed from the current skb head.

This matches the existing pattern used in ip6_parse_tlv() after helpers that can modify skb header storage.

Record
CVE-2026-63922
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSVBELL-CVE-2026-63922 9.8
Record
BELL-CVE-2026-63922
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 9.8

ipv6: exthdrs: refresh nh after handling HAO option

In the Linux kernel, the following vulnerability has been resolved:

ipv6: exthdrs: refresh nh after handling HAO option

ip6_parse_tlv() caches skb_network_header(skb) in nh while walking IPv6 TLVs.

ipv6_dest_hao() may call pskb_expand_head() for a cloned skb, which can move the skb head and invalidate the cached network header pointer. Refresh nh after ipv6_dest_hao() returns so any trailing padding or TLVs are parsed from the current skb head.

This matches the existing pattern used in ip6_parse_tlv() after helpers that can modify skb header storage.

Record
CVE-2026-63922
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
Show 48 moreShow less
OSVDEBIAN-CVE-2026-63922 9.8

In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh after handling HAO option ip6_parse_tlv() caches skb_network_header(skb) in nh while walking IPv6 TLVs. ipv6_dest_hao() may call pskb_expand_head() for a cloned skb, which can move the skb head and invalidate the cached network header pointer. Refresh nh after ipv6_dest_hao() returns so any trailing padding or TLVs are parsed from the current skb head. This matches the existing pattern used in ip6_parse_tlv() after helpers that can modify skb header storage.

Record
DEBIAN-CVE-2026-63922
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:76739 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:76739
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:77218 8.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:77218
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:77219 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:77219
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:83707 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:83707
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:83796 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:83796
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:84677 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:84677
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:84793 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:84793
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:85000 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:85000
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-63922 8.2

In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh after handling HAO option ip6_parse_tlv() caches skb_network_header(skb) in nh while walking IPv6 TLVs. ipv6_dest_hao() may call pskb_expand_head() for a cloned skb, which can move the skb head and invalidate the cached network header pointer. Refresh nh after ipv6_dest_hao() returns so any trailing padding or TLVs are parsed from the current skb head. This matches the existing pattern used in ip6_parse_tlv() after helpers that can modify skb header storage.

Record
UBUNTU-CVE-2026-63922
CVSS 4.0
8.2 HighCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVALSA-2026:76738 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: netfilter: nf_conncount: increase the connection clean up limit to 64 (CVE-2026-45860)
  • kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856)
  • kernel: Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (CVE-2026-46275)
  • kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)
  • kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270)
  • kernel: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (CVE-2026-53357)
  • kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829)
  • kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794)
  • kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924)
  • kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922)
  • kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920)
  • kernel: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction (CVE-2026-64024)
  • kernel: l2tp: use refcount_inc_not_zero in l2tp_session_get_by_ifname (CVE-2026-63918)
  • kernel: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (CVE-2026-63984)
  • kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (CVE-2026-63992)
  • kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (CVE-2026-63994)
  • kernel: netfilter: x_tables: add and use xtables_unregister_table_exit (CVE-2026-64078)
  • kernel: ipv6: ioam: refresh hdr pointer before ioam6_event() (CVE-2026-64132)
  • kernel: Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() (CVE-2026-64557)
  • kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432)
  • kernel: ipvs: reload ip header after head reallocation (CVE-2026-68476)
  • kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052)
  • kernel: netfilter: nft_lookup: fix catchall element handling with inverted lookups (CVE-2026-72320)
  • kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255)
  • kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516)
  • kernel: packet: use consistent hard_header_len in non-ring send paths ()
  • kernel: packet: use consistent hard_header_len in non-ring send paths (CVE-2026-74582)
  • kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669)
  • kernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746)
  • kernel: ipv6: fix use-after-free in ip6_finish_output2() (CVE-2026-80792)
  • kernel: futex: Fix race on the initial mm->futex.phash.ref allocation (CVE-2026-80775)
  • kernel: KVM: s390: vsie: zero stale crypto bits (CVE-2026-80921)
  • kernel: nvme: add missing SRCU grace period in error path (CVE-2026-89972)
  • kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227)
  • kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417)
  • kernel: netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state (CVE-2026-93288)

Bug Fix(es) and Enhancement(s):

  • wifi card breaks using FIPS (JIRA:AlmaLinux-257457)
  • AlmaLinux10.0 - kernel: CPU hotplug unsupported by CPUMF [almalinux-10.2.z] (JIRA:AlmaLinux-270888)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:76738
Updated
2026-11-02
OSVALSA-2026:93436 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924)
  • kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922)
  • kernel: af_unix: Fix UAF read of tail->len in unix_stream_data_wait() (CVE-2026-64109)
  • kernel: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (CVE-2026-72083)
  • kernel: tipc: require net admin for TIPCv2 netlink mutators (CVE-2026-74283)
  • kernel: smb: client: bound dirent name against end of SMB response in cifs_filldir (CVE-2026-93787)
  • kernel: ZDI-CAN-33367: Linux Kernel skbuff skb_zerocopy Improper Ownership Management Local Privilege Escalation Vulnerability ()

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:93436
Updated
2026-11-03
OSVALSA-2026:93437 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924)
  • kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922)
  • kernel: af_unix: Fix UAF read of tail->len in unix_stream_data_wait() (CVE-2026-64109)
  • kernel: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE (CVE-2026-72083)
  • kernel: tipc: require net admin for TIPCv2 netlink mutators (CVE-2026-74283)
  • kernel: smb: client: bound dirent name against end of SMB response in cifs_filldir (CVE-2026-93787)
  • kernel: ZDI-CAN-33367: Linux Kernel skbuff skb_zerocopy Improper Ownership Management Local Privilege Escalation Vulnerability ()

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:93437
Updated
2026-11-02
OSVCLSA-2026-1791132991 No score

Fix of 400 CVEs

  • CVE-2026-53266
    • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • CVE-2025-39964
    • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • CVE-2025-39827
    • net: rose: include node references in rose_neigh refcount {CVE-2025-39827}
  • CVE-2026-93140
    • udf: Mark LVID buffer as uptodate before marking it dirty {CVE-2026-93140}
  • CVE-2026-90112
    • net: qlcnic: validate unified ROM sections before loading {CVE-2026-90112}
  • CVE-2026-90237
    • netfilter: nft_ct: move custom expectation support to helper {CVE-2026-90237}
  • CVE-2026-93051
    • misc: ad525x_dpot: use driver core groups for sysfs files {CVE-2026-93051}
  • CVE-2026-90379
    • wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash {CVE-2026-90379}
  • CVE-2026-90302
    • ocfs2: synchronize heartbeat callbacks with o2net teardown {CVE-2026-90302}
  • CVE-2026-90383
    • misc: sgi-gru: remove interrupt-context page-table walks {CVE-2026-90383}
  • CVE-2026-90320
    • ocfs2: validate external xattr entries when reading metadata {CVE-2026-90320}
  • CVE-2026-93047
    • drm/v3d: Associate BOs with every job that accesses them {CVE-2026-93047}
  • CVE-2026-93192
    • drm/v3d: Clear queue->active_job when v3d_fence_create() fails {CVE-2026-93192}
  • CVE-2026-93050
    • ipack: ipoctal: fix UAF, null-ptr-deref, and use-after-free in cleanup on remove {CVE-2026-93050}
  • CVE-2026-90311
    • thermal: hwmon: Remove hwmon class device along with its parent {CVE-2026-90311}
  • CVE-2026-93191
    • smack: fix incorrect task context in smack_msg_queue_msgrcv {CVE-2026-93191}
  • CVE-2026-93042
    • dmaengine: dw-edma: Terminate all descriptors without callbacks {CVE-2026-93042}
  • CVE-2026-93056
    • usb: gadget: f_uac1_legacy: remove broken string configfs attributes {CVE-2026-93056}
  • CVE-2026-93203
    • batman-adv: bla: avoid CRC corruption due to parallel claim add {CVE-2026-93203}
  • CVE-2026-93204
    • batman-adv: dat: atomically update mac addresses {CVE-2026-93204}
  • CVE-2026-90000
    • HID: rmi: fix OOB access with undersized RMI reports {CVE-2026-90000}
  • CVE-2026-90431
    • remoteproc: Prevent crash handling to race with rproc_del() {CVE-2026-90431}
  • CVE-2026-93202
    • i3c: master: Fix recursive locking during device registration {CVE-2026-93202}
  • CVE-2026-90347
    • arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry {CVE-2026-90347}
  • CVE-2026-90267
    • scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails {CVE-2026-90267}
  • CVE-2026-92500
    • ext4: use fsdata to track inline data write state and fix race {CVE-2026-92500}
  • CVE-2026-93196
    • nvdimm: virtio_pmem: refcount requests for token lifetime {CVE-2026-93196}
  • CVE-2026-90207
    • ALSA: seq: midi: Serialize input teardown with event_input {CVE-2026-90207}
  • CVE-2026-90307
    • RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ {CVE-2026-90307}
  • CVE-2026-90110
    • inetpeer: randomize RB-tree node comparison using SipHash {CVE-2026-90110}
  • CVE-2026-90293
    • IB/isert: post the full-feature receive buffers after session registration {CVE-2026-90293}
  • CVE-2026-89838
    • f2fs: limit recovery filename logging to stored length {CVE-2026-89838}
  • CVE-2026-93177
    • drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup {CVE-2026-93177}
  • CVE-2026-89823
    • drm: fix race between partial drm_dev_register() failure and ioctl {CVE-2026-89823}
  • CVE-2026-90041
    • HID: sony: clean up device list on probe failure {CVE-2026-90041}
  • CVE-2026-90015
    • xhci: fix lost bounce buffers on TDs spanning several ring segments {CVE-2026-90015}
  • CVE-2026-93095 -…
Record
CLSA-2026-1791132991
Updated
2026-11-02
OSVCLSA-2026-1791876326 No score

Fix of 274 CVEs

  • CVE-2026-53091
    • xfrm: Don't clobber inner headers when already set {CVE-2026-53091}
    • net: account for encap headers in qdisc pkt len {CVE-2026-53091}
  • CVE-2026-93803
    • wifi: libipw: fix key index receive bound checks {CVE-2026-93803}
  • CVE-2026-93286
    • net: appletalk: fix NULL pointer dereference in aarp_send_ddp() {CVE-2026-93286}
  • CVE-2026-93280
    • greybus: audio: bound the topology section sizes against the fetched size {CVE-2026-93280}
  • CVE-2026-93213
    • of: fix out-of-bounds read in of_alias_scan() stem parser {CVE-2026-93213}
  • CVE-2026-93802
    • wifi: rsi: validate beacon length before fixed buffer copy {CVE-2026-93802}
  • CVE-2026-93206
    • PCI/proc: Use file_ns_capable() when checking config space read access {CVE-2026-93206}
  • CVE-2026-97448
    • ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
  • CVE-2026-97408
    • Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408}
  • CVE-2026-93268
    • ext4: skip extra isize expansion during mount to prevent deadlock {CVE-2026-93268}
  • CVE-2026-93782
    • vhost-scsi: flush backend after device ioctls {CVE-2026-93782}
  • CVE-2026-93783
    • Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame {CVE-2026-93783}
  • CVE-2026-97455
    • ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() {CVE-2026-97455}
  • CVE-2026-93807
    • wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers {CVE-2026-93807}
  • CVE-2026-93808
    • ALSA: usb-audio: caiaq: validate EP1 reply lengths {CVE-2026-93808}
  • CVE-2026-89938
    • iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF {CVE-2026-89938}
  • CVE-2026-89927
    • KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock {CVE-2026-89927}
  • CVE-2026-89949
    • batman-adv: dat: avoid unaligned fault in IP extraction {CVE-2026-89949}
  • CVE-2026-89912
    • KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save {CVE-2026-89912}
  • CVE-2026-89932
    • KVM: nVMX: Always flush vpid02 on first use {CVE-2026-89932}
  • CVE-2026-89833
    • f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages() {CVE-2026-89833}
  • CVE-2026-90045
    • USB: gadget: ffs: fix mm lifetime handling {CVE-2026-90045}
  • CVE-2026-89854
    • scsi: qla2xxx: Fix cs84xx use-after-free on host teardown {CVE-2026-89854}
  • CVE-2026-90015
    • xhci: fix lost bounce buffers on TDs spanning several ring segments {CVE-2026-90015}
  • CVE-2026-89979
    • ALSA: pcm: Fix race between non-atomic ops and trigger-start {CVE-2026-89979}
  • CVE-2026-89852
    • scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() {CVE-2026-89852}
  • CVE-2026-89861
    • scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() {CVE-2026-89861}
  • CVE-2026-89859
    • scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak {CVE-2026-89859}
  • CVE-2026-90036
    • NFSD: Prevent client use-after-free during blocked-lock reaping {CVE-2026-90036}
  • CVE-2026-89987
    • mm/huge_memory: transfer the pmd dirty bit to the folio on zap {CVE-2026-89987}
  • CVE-2026-89799
    • bpf: Disable preemption in bpf_get_stackid {CVE-2026-89799}
  • CVE-2026-90032
    • media: usbtv: keep device alive while ALSA card exists {CVE-2026-90032}
  • CVE-2026-89822
    • drm/i915: Guard against NULL driver_data in i915_pci_probe() {CVE-2026-89822}
  • CVE-2026-89929
    • KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU {CVE-2026-89929}
  • CVE-2026-89840
    • f2fs: validate MOVE_RANGE destination size {CVE-2026-89840}
  • CVE-2026-89913
    • KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables {CVE-2026-89913} *…
Record
CLSA-2026-1791876326
Updated
2026-11-02
OSVCLSA-2026-1791878869 No score

Fix of 274 CVEs

  • CVE-2026-53091
    • xfrm: Don't clobber inner headers when already set {CVE-2026-53091}
    • net: account for encap headers in qdisc pkt len {CVE-2026-53091}
  • CVE-2026-93803
    • wifi: libipw: fix key index receive bound checks {CVE-2026-93803}
  • CVE-2026-93286
    • net: appletalk: fix NULL pointer dereference in aarp_send_ddp() {CVE-2026-93286}
  • CVE-2026-93280
    • greybus: audio: bound the topology section sizes against the fetched size {CVE-2026-93280}
  • CVE-2026-93213
    • of: fix out-of-bounds read in of_alias_scan() stem parser {CVE-2026-93213}
  • CVE-2026-93802
    • wifi: rsi: validate beacon length before fixed buffer copy {CVE-2026-93802}
  • CVE-2026-93206
    • PCI/proc: Use file_ns_capable() when checking config space read access {CVE-2026-93206}
  • CVE-2026-97448
    • ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
  • CVE-2026-97408
    • Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408}
  • CVE-2026-93268
    • ext4: skip extra isize expansion during mount to prevent deadlock {CVE-2026-93268}
  • CVE-2026-93782
    • vhost-scsi: flush backend after device ioctls {CVE-2026-93782}
  • CVE-2026-93783
    • Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame {CVE-2026-93783}
  • CVE-2026-97455
    • ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() {CVE-2026-97455}
  • CVE-2026-93807
    • wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers {CVE-2026-93807}
  • CVE-2026-93808
    • ALSA: usb-audio: caiaq: validate EP1 reply lengths {CVE-2026-93808}
  • CVE-2026-89938
    • iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF {CVE-2026-89938}
  • CVE-2026-89927
    • KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock {CVE-2026-89927}
  • CVE-2026-89949
    • batman-adv: dat: avoid unaligned fault in IP extraction {CVE-2026-89949}
  • CVE-2026-89912
    • KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save {CVE-2026-89912}
  • CVE-2026-89932
    • KVM: nVMX: Always flush vpid02 on first use {CVE-2026-89932}
  • CVE-2026-89833
    • f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages() {CVE-2026-89833}
  • CVE-2026-90045
    • USB: gadget: ffs: fix mm lifetime handling {CVE-2026-90045}
  • CVE-2026-89854
    • scsi: qla2xxx: Fix cs84xx use-after-free on host teardown {CVE-2026-89854}
  • CVE-2026-90015
    • xhci: fix lost bounce buffers on TDs spanning several ring segments {CVE-2026-90015}
  • CVE-2026-89979
    • ALSA: pcm: Fix race between non-atomic ops and trigger-start {CVE-2026-89979}
  • CVE-2026-89852
    • scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state() {CVE-2026-89852}
  • CVE-2026-89861
    • scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition() {CVE-2026-89861}
  • CVE-2026-89859
    • scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak {CVE-2026-89859}
  • CVE-2026-90036
    • NFSD: Prevent client use-after-free during blocked-lock reaping {CVE-2026-90036}
  • CVE-2026-89987
    • mm/huge_memory: transfer the pmd dirty bit to the folio on zap {CVE-2026-89987}
  • CVE-2026-89799
    • bpf: Disable preemption in bpf_get_stackid {CVE-2026-89799}
  • CVE-2026-90032
    • media: usbtv: keep device alive while ALSA card exists {CVE-2026-90032}
  • CVE-2026-89822
    • drm/i915: Guard against NULL driver_data in i915_pci_probe() {CVE-2026-89822}
  • CVE-2026-89929
    • KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU {CVE-2026-89929}
  • CVE-2026-89840
    • f2fs: validate MOVE_RANGE destination size {CVE-2026-89840}
  • CVE-2026-89913
    • KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables {CVE-2026-89913} *…
Record
CLSA-2026-1791878869
Updated
2026-11-02
OSVCLSA-2026-1791946572 No score

Fix of 198 CVEs

  • CVE-2024-36894
    • usb: gadget: f_fs: drop the duplicate usb_ep_free_request() in ffs_user_copy_worker() {CVE-2024-36894}
  • CVE-2026-97447
    • ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() {CVE-2026-97447}
  • CVE-2026-93822
    • PCI: iproc: Protect root bus removal with rescan lock {CVE-2026-93822}
  • CVE-2026-93826
    • HID: hidpp: fix potential UAF in hidpp_connect_event() {CVE-2026-93826}
  • CVE-2026-97954
    • net/rds: fix tcp stream corruption with large pages {CVE-2026-97954}
  • CVE-2026-97949
    • configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
  • CVE-2026-97931
    • ALSA: us122l: Prevent write upgrades for read mappings {CVE-2026-97931}
  • CVE-2026-97940
    • ipv6: fix fib6 walker UAF on seq stop {CVE-2026-97940}
  • CVE-2026-97539
    • usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
  • CVE-2026-74510
    • Bluetooth: mgmt: fix UAF in pair command cancellation {CVE-2026-74510}
  • CVE-2026-72084
    • scsi: target: Bound PR-OUT TransportID parsing to the received buffer {CVE-2026-72084}
  • CVE-2026-90302
    • ocfs2: synchronize heartbeat callbacks with o2net teardown {CVE-2026-90302}
  • CVE-2026-90320
    • ocfs2: validate external xattr entries when reading metadata {CVE-2026-90320}
  • CVE-2026-90321
    • ocfs2: validate inline xattrs during inode block validation {CVE-2026-90321}
  • CVE-2026-90431
    • remoteproc: Prevent crash handling to race with rproc_del() {CVE-2026-90431}
  • CVE-2026-74637
    • perf/core: Fix group leader use-after-free after sibling detach {CVE-2026-74637}
  • CVE-2026-74752
    • sctp: validate cookie AUTH state before use {CVE-2026-74752}
  • CVE-2026-74387
    • ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}
  • CVE-2026-80536
    • xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}
  • CVE-2026-89659
    • NFSD: Prevent client use-after-free during delegation revoke {CVE-2026-89659}
  • CVE-2026-80576
    • drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
  • CVE-2026-90223
    • nfc: llcp: bound SNL TLV parsing to the skb and add length checks {CVE-2026-90223}
  • CVE-2026-80994
    • net: openvswitch: fix flow mask use-after-free on flow deletion {CVE-2026-80994}
  • CVE-2026-72398
    • sctp: add INIT verification after cookie unpacking {CVE-2026-72398}
  • CVE-2026-74583
    • net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
  • CVE-2026-72322
    • ipv6: mcast: Fix potential UAF in MLD delayed work {CVE-2026-72322}
  • CVE-2026-93095
    • hfsplus: validate thread record before delete key rebuild {CVE-2026-93095}
  • CVE-2026-72472
    • nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
  • CVE-2026-90045
    • USB: gadget: ffs: fix mm lifetime handling {CVE-2026-90045}
  • CVE-2026-90421
    • PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421}
  • CVE-2026-64583
    • usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown {CVE-2026-64583}
  • CVE-2026-68329
    • iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() {CVE-2026-68329}
  • CVE-2026-89448
    • iommu/vt-d: Force requesting ACS when tboot is enabled {CVE-2026-89448}
  • CVE-2026-64001
    • ALSA: pcm: oss: Fix setup list UAF on proc write error {CVE-2026-64001}
  • CVE-2026-64305
    • crypto: qat - protect service table iterations with service_lock {CVE-2026-64305}
  • CVE-2026-64348
    • usb: free iso schedules on failed submit {CVE-2026-64348}
  • CVE-2026-64422
    • net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
  • CVE-2026-90180
    • block:…
Record
CLSA-2026-1791946572
Updated
2026-11-02
OSVCLSA-2026-1791949745 No score

kernel: Fix of 69 CVEs

  • sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}
  • ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() {CVE-2026-97455}
  • ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() {CVE-2026-97445}
  • Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408}
  • wifi: libipw: fix key index receive bound checks {CVE-2026-93803}
  • netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() {CVE-2026-98077}
  • configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
  • reboot: fix cad_pid use-after-free race {CVE-2026-97938}
  • ALSA: us122l: Prevent write upgrades for read mappings {CVE-2026-97931}
  • net: usb: pegasus: don't rely on id table pointer arithmetic {CVE-2026-97540}
  • usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
  • scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown {CVE-2026-97536}
  • xfrm: hold net_device reference under RCU in bundle creation {CVE-2026-98364}
  • wifi: libipw: reject too-short beacon and probe responses {CVE-2026-98349}
  • wifi: libipw: reject too-short association responses {CVE-2026-98348}
  • net: lock the socket in sock_gettstamp() {CVE-2026-98276}
  • ALSA: core: Fix potential UAF after asynchronous card release {CVE-2026-98266}
  • wifi: libertas_tf: fix UAF in lbtf_free_adapter() {CVE-2026-98194}
  • wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() {CVE-2026-72070}
  • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data {CVE-2026-74388}
  • PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421}
  • sunrpc: route to a populated pool in svc_pool_for_cpu() {CVE-2026-89549}
  • nfsd: validate symlink target length in NFSv4 CREATE {CVE-2026-89699}
  • smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}
  • KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug {CVE-2026-68093}
  • inet: frags: strip GSO state from fragments before reassembly {CVE-2026-80590}
  • misc: sgi-gru: remove interrupt-context page-table walks {CVE-2026-90383}
  • slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057}
  • slip: fix use-after-free in sl_sync() {CVE-2026-81001}
  • xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}
  • nfsd: gate nfs3 setacl by argp->mask {CVE-2026-89671}
  • SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
  • ALSA: mtpav: shut down output timer before card teardown {CVE-2026-90116}
  • char: tlclk: fix use-after-free in tlclk_cleanup() {CVE-2026-80622}
  • net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}
  • sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
  • ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
  • scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
  • sctp: add INIT verification after cookie unpacking {CVE-2026-72398}
  • sctp: validate embedded address parameter length {CVE-2026-74287}
  • configfs_lookup(): don't leave ->s_dentry dangling on failure {CVE-2026-74359}
  • ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}
  • ipv6: mcast: Fix potential UAF in MLD delayed work {CVE-2026-72322}
  • ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
  • USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
  • sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
  • net/sched: fix packet loop on netem when duplicate is on {CVE-2026-63983}
  • fbdev: fix use-after-free in store_modes() {CVE-2026-63826}
  • ipv6: exthdrs: refresh nh after handling HAO option {CVE-2026-63922}
  • Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}
  • Squashfs: check block offset is not negative {CVE-2026-90203}
  • ALSA: usb-audio: fix OOB write in…
Record
CLSA-2026-1791949745
Updated
2026-11-02
OSVCLSA-2026-1792020435 No score

kernel: Fix of 68 CVEs

  • sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}
  • ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() {CVE-2026-97455}
  • ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() {CVE-2026-97445}
  • Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408}
  • wifi: libipw: fix key index receive bound checks {CVE-2026-93803}
  • netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() {CVE-2026-98077}
  • configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
  • reboot: fix cad_pid use-after-free race {CVE-2026-97938}
  • ALSA: us122l: Prevent write upgrades for read mappings {CVE-2026-97931}
  • net: usb: pegasus: don't rely on id table pointer arithmetic {CVE-2026-97540}
  • usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
  • scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown {CVE-2026-97536}
  • xfrm: hold net_device reference under RCU in bundle creation {CVE-2026-98364}
  • wifi: libipw: reject too-short beacon and probe responses {CVE-2026-98349}
  • wifi: libipw: reject too-short association responses {CVE-2026-98348}
  • net: lock the socket in sock_gettstamp() {CVE-2026-98276}
  • ALSA: core: Fix potential UAF after asynchronous card release {CVE-2026-98266}
  • wifi: libertas_tf: fix UAF in lbtf_free_adapter() {CVE-2026-98194}
  • wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() {CVE-2026-72070}
  • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data {CVE-2026-74388}
  • PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421}
  • sunrpc: route to a populated pool in svc_pool_for_cpu() {CVE-2026-89549}
  • nfsd: validate symlink target length in NFSv4 CREATE {CVE-2026-89699}
  • smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}
  • KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug {CVE-2026-68093}
  • inet: frags: strip GSO state from fragments before reassembly {CVE-2026-80590}
  • misc: sgi-gru: remove interrupt-context page-table walks {CVE-2026-90383}
  • slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057}
  • slip: fix use-after-free in sl_sync() {CVE-2026-81001}
  • xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}
  • nfsd: gate nfs3 setacl by argp->mask {CVE-2026-89671}
  • SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
  • ALSA: mtpav: shut down output timer before card teardown {CVE-2026-90116}
  • char: tlclk: fix use-after-free in tlclk_cleanup() {CVE-2026-80622}
  • net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}
  • sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
  • ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
  • scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
  • sctp: add INIT verification after cookie unpacking {CVE-2026-72398}
  • sctp: validate embedded address parameter length {CVE-2026-74287}
  • configfs_lookup(): don't leave ->s_dentry dangling on failure {CVE-2026-74359}
  • ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}
  • ipv6: mcast: Fix potential UAF in MLD delayed work {CVE-2026-72322}
  • ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
  • USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}
  • sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
  • net/sched: fix packet loop on netem when duplicate is on {CVE-2026-63983}
  • fbdev: fix use-after-free in store_modes() {CVE-2026-63826}
  • ipv6: exthdrs: refresh nh after handling HAO option {CVE-2026-63922}
  • Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}
  • Squashfs: check block offset is not negative {CVE-2026-90203}
  • ALSA: usb-audio: fix OOB write in…
Record
CLSA-2026-1792020435
Updated
2026-11-02
OSVCLSA-2026-1792419819 No score

Fix of 74 CVEs

  • Bump kernel ABI to 30: ship the ELS kernel as 4.19.0-30-*, distinct from the prior 4.19.0-29.
  • CVE-2021-3493
    • vfs: move cap_convert_nscap() call into vfs_setxattr() {CVE-2021-3493}
    • ecryptfs: fix uid translation for setxattr on security.capability {CVE-2021-3493}
  • CVE-2025-23142
    • sctp: detect and prevent references to a freed transport in sendmsg {CVE-2025-23142}
  • CVE-2025-38352
    • posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
  • CVE-2025-39964
    • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • CVE-2026-52955
    • libceph: Fix potential out-of-bounds access in crush_decode() {CVE-2026-52955}
  • CVE-2026-53091
    • net: account for encap headers in qdisc pkt len {CVE-2026-53091}
    • xfrm: Don't clobber inner headers when already set {CVE-2026-53091}
  • CVE-2026-53266
    • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • CVE-2026-63814
    • f2fs: validate ACL entry sizes in f2fs_acl_from_disk() {CVE-2026-63814}
  • CVE-2026-63815
    • f2fs: bound i_inline_xattr_size for non-inline-xattr inodes {CVE-2026-63815}
  • CVE-2026-63922
    • ipv6: exthdrs: refresh nh after handling HAO option {CVE-2026-63922}
  • CVE-2026-63962
    • usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() {CVE-2026-63962}
  • CVE-2026-64001
    • ALSA: pcm: oss: Fix setup list UAF on proc write error {CVE-2026-64001}
  • CVE-2026-64009
    • xfrm: Check for underflow in xfrm_state_mtu {CVE-2026-64009}
  • CVE-2026-64011
    • nfc: llcp: Fix use-after-free in llcp_sock_release() {CVE-2026-64011}
  • CVE-2026-64372
    • cpufreq: pcc: fix use-after-free and double free in _OSC evaluation {CVE-2026-64372}
  • CVE-2026-64378
    • writeback, cgroup: increment isw_nr_in_flight before grabbing an inode {CVE-2026-64378}
    • writeback, cgroup: add smp_mb() to cgroup_writeback_umount() {CVE-2026-64378}
  • CVE-2026-64381
    • smb: client: Fix next buffer leak in receive_encrypted_standard() {CVE-2026-64381}
  • CVE-2026-64471
    • Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}
  • CVE-2026-64483
    • ALSA: firewire: isight: bound the sample count to the packet payload {CVE-2026-64483}
  • CVE-2026-64504
    • iio: accel: bmc150: clamp the device-reported FIFO frame count {CVE-2026-64504}
  • CVE-2026-64505
    • usb: gadget: function: rndis: add length check for header {CVE-2026-64505}
  • CVE-2026-64541
    • net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket {CVE-2026-64541}
  • CVE-2026-64543
    • tipc: fix use-after-free of the discoverer in tipc_disc_rcv() {CVE-2026-64543}
  • CVE-2026-64546
    • drm/edid: fix OOB read in drm_parse_tiled_block() {CVE-2026-64546}
  • CVE-2026-64563
    • rhashtable: clear stale iter->p on table restart {CVE-2026-64563}
  • CVE-2026-64564
    • sctp: don't free the ASCONF's own transport in DEL-IP processing {CVE-2026-64564}
  • CVE-2026-72389
    • bridge: stp: Fix a potential use-after-free when deleting a bridge {CVE-2026-72389}
  • CVE-2026-74444
    • drm/vmwgfx: validate DRAW_PRIMITIVES header size before division {CVE-2026-74444}
  • CVE-2026-74454
    • drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size {CVE-2026-74454}
  • CVE-2026-74469
    • sctp: prevent peer transport count overflow {CVE-2026-74469}
  • CVE-2026-74479
    • net: pktgen: fix proc entry use-after-free {CVE-2026-74479}
  • CVE-2026-74498
    • ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set {CVE-2026-74498}
  • CVE-2026-74499
    • ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() …
Record
CLSA-2026-1792419819
Updated
2026-11-02
OSVCLSA-2026-1792445930 No score

kernel: Fix of 92 CVEs

  • ipv4: validate checksum_start before completing checksum {CVE-2026-99999}
  • smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 {CVE-2026-89637}
  • smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}
  • sunrpc: defer rq_argp and rq_resp free until after RCU grace period {CVE-2026-89545}
  • seg6: reset IP6CB after IPv6 decapsulation {CVE-2026-80976}
  • ipv6: seg6: clear IPv4 control block on IPIP decapsulation {CVE-2026-80840}
  • i3c: master: svc: bound IBI payload to the requested max_payload_len {CVE-2026-80951}
  • i3c: master: svc: Use readsb helper for reading MDB {CVE-2026-80951}
  • configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
  • ALSA: us122l: Prevent write upgrades for read mappings {CVE-2026-97931}
  • RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access {CVE-2026-98365}
  • ipv4: raw: reject IP_HDRINCL packets with ihl < 5 {CVE-2026-64114}
  • ixgbevf: fix use-after-free in VEPA multicast source pruning {CVE-2026-64113}
  • drm/virtio: use uninterruptible resv lock for plane updates {CVE-2026-64098}
  • keys: Pin request_key_auth payload in instantiate paths {CVE-2026-63823}
  • exfat: fix potential use-after-free in exfat_find_dir_entry() {CVE-2026-63808}
  • ethtool: cmis: require exact CDB reply length {CVE-2026-63996}
  • tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 {CVE-2026-63994}
  • ipv6: exthdrs: refresh nh after handling HAO option {CVE-2026-63922}
  • netpoll: fix a use-after-free on shutdown path {CVE-2026-64424}
  • HID: lg-g15: cancel pending work on remove to fix a use-after-free {CVE-2026-64362}
  • bpf: Validate BTF repeated field counts before expansion {CVE-2026-64354}
  • USB: iowarrior: fix use-after-free on disconnect {CVE-2026-64342}
  • ALSA: seq: Serialize UMP output teardown with event_input {CVE-2026-64029}
  • xfrm: Check for underflow in xfrm_state_mtu {CVE-2026-64009}
  • vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() {CVE-2026-63993}
  • tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() {CVE-2026-63992}
  • vsock/virtio: bind uarg before filling zerocopy skb {CVE-2026-63970}
  • KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops() {CVE-2026-64555}
  • drm/edid: fix OOB read in drm_parse_tiled_block() {CVE-2026-64546}
  • crypto: af_alg - zero initialize memory allocated via sock_kmalloc {CVE-2025-71113}
  • mailbox: mailbox-test: don't free the reused channel {CVE-2026-53294}
  • drm/amd/display: Bound VBIOS record-chain walk loops {CVE-2026-53138}
  • af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109}
  • nfsd: release layout stid on setlease failure {CVE-2026-53399}
  • fuse: re-lock request before replacing page cache folio {CVE-2026-53388}
  • blk-mq: pop cached request if it is usable {CVE-2026-64017}
  • scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() {CVE-2026-63888}
  • posix-cpu-timers: Prevent UAF caused by non-leader exec() race {CVE-2026-64560}
  • sctp: add INIT verification after cookie unpacking {CVE-2026-72398}
  • sctp: validate embedded INIT chunk and address list lengths in cookie {CVE-2026-53224}
  • sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing {CVE-2026-53246}
  • tcp: clear sock_ops cb flags before force-closing a child socket {CVE-2026-74268}
  • Bluetooth: btusb: fix use-after-free on marvell probe failure {CVE-2026-64470}
  • Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}
  • sched/core: Make core-sched flips wait for in-flight selections {CVE-2026-89520}
  • net/packet: defer vmalloc TX_RING free until skbs finish {CVE-2026-80841}
  • reboot: fix cad_pid use-after-free race {CVE-2026-97938}
  • drm/amd/pm: fix pptable use-after-free {CVE-2026-74450}
  • tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() {CVE-2026-72404}
  • NFSD: Prevent client use-after-free during delegation revoke…
Record
CLSA-2026-1792445930
Updated
2026-11-02
OSVCLSA-2026-1792750763 No score

kernel: Fix of 91 CVEs

  • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
  • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331}
  • ipvs: do not propagate one-packet flag to synced conns {CVE-2026-80714}
  • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • smb: client: harden POSIX SID length parsing {CVE-2026-64380}
  • RDMA: Fix use-after-free in rxe_queue_cleanup {CVE-2021-47616}
  • nfsd: validate symlink target length in NFSv4 CREATE {CVE-2026-89699}
  • sctp: fix addr_wq_timer race in sctp_free_addr_wq() {CVE-2026-72383}
  • isofs: fix out-of-bounds page array access on empty zisofs block {CVE-2026-89778}
  • configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
  • netfilter: ipset: fix race between dump and ip_set_list resize {CVE-2026-64189}
  • netfilter: conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}
  • ipvs: clear the svc scheduler ptr early on edit {CVE-2026-53270}
  • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}
  • media: cx23885: cancel NetUP CI work before teardown {CVE-2026-89893}
  • dmaengine: Fix possible use after free {CVE-2026-72476}
  • net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring {CVE-2026-64047}
  • tipc: prevent snt_unacked underflow on CONN_ACK {CVE-2026-74282}
  • xfrm: hold net_device reference under RCU in bundle creation {CVE-2026-98364}
  • xfrm: Check for underflow in xfrm_state_mtu {CVE-2026-64009}
  • net: mpls: clear inner_protocol when the last label is popped {CVE-2026-97612}
  • net: guard timestamp cmsgs to real error queue skbs {CVE-2026-53223}
  • thunderbolt: Bound root directory content to block size {CVE-2026-53149}
  • SUNRPC: always drain cache_cleaner before destroying a cache_detail {CVE-2026-89548}
  • SUNRPC: harden gss_krb5_unwrap_v2 against short tokens {CVE-2026-89542}
  • SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}
  • SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 {CVE-2026-89537}
  • SUNRPC: make sure cache entry active before cache_show {CVE-2024-53174}
  • ipv6: fix fib6 walker UAF on seq stop {CVE-2026-97940}
  • ipv6: sr: restore network header before routing and forwarding {CVE-2026-98096}
  • ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
  • ipv6: mcast: Fix use-after-free when processing MLD queries {CVE-2026-53275}
  • ipv6: exthdrs: refresh nh after handling HAO option {CVE-2026-63922}
  • ip6_gre: Use cached t->net in ip6erspan_changelink(). {CVE-2026-46120}
  • ipv6: fix possible UAF in icmpv6_rcv() {CVE-2026-53006}
  • ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() {CVE-2026-64002}
  • Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count {CVE-2026-64276}
  • ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
  • scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() {CVE-2026-46149}
  • usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
  • USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
  • mrp: introduce active flags to prevent UAF when applicant uninit {CVE-2022-50697}
  • HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature {CVE-2026-89729}
  • net/sched: defer qdisc freeing after failed creation {CVE-2026-98017}
  • Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp {CVE-2026-53071}
  • Bluetooth: L2CAP: Fix invalid access if ECRED Reconfigure fails {CVE-2026-53071}
  • scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation {CVE-2026-89856}
  • drm: fix race between partial drm_dev_register() failure and ioctl {CVE-2026-89823}
  • drm/amd/pm: bound pp_dpm_set_pp_table() memcpy {CVE-2026-97427}
  • dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059} -…
Record
CLSA-2026-1792750763
Updated
2026-11-02
OSVCLSA-2026-1792751700 No score

kernel: Fix of 106 CVEs

  • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • ALSA: virtio: reset device before deleting virtqueues {CVE-2026-98264}
  • ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033}
  • ALSA: 6fire: Fix UAF at error handling during probe {CVE-2026-74505}
  • net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring {CVE-2026-64047}
  • SUNRPC: Fix a server shutdown leak {CVE-2023-53131}
  • libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() {CVE-2026-52956}
  • usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
  • thunderbolt: Keep XDomain reference during the lifetime of a service {CVE-2026-97509}
  • nvdimm/btt: reject an arena whose nfree is below the lane count {CVE-2026-89965}
  • libnvdimm/labels: Prevent integer overflow in __nd_label_validate() {CVE-2026-89559}
  • wifi: brcmsmac: fix UAF in brcms_free_timer() {CVE-2026-98196}
  • wifi: mwifiex: validate scan response extents {CVE-2026-98185}
  • net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}
  • net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put {CVE-2026-98015}
  • qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info {CVE-2023-53066}
  • Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count {CVE-2026-64276}
  • Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count {CVE-2026-64277}
  • dmaengine: Fix possible use after free {CVE-2026-72476}
  • netfilter: nf_log: unregister loggers before per-net teardown {CVE-2026-97608}
  • netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state {CVE-2026-93288}
  • mpls: add seqcount to protect the platform_label{,s} pair {CVE-2026-43042}
  • Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp {CVE-2026-74540}
  • usb: dwc2: Fix use after free in debug code {CVE-2026-63927}
  • KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path {CVE-2026-63794}
  • KVM: nVMX: Always flush vpid02 on first use {CVE-2026-89932}
  • x86/mm/ident_map: Use gbpages only where full GB page should be mapped. {CVE-2024-50017}
  • crypto: authencesn - reject short ahash digests during instance creation {CVE-2026-46033}
  • ACPICA: Add validation for node in acpi_ns_build_normalized_path() {CVE-2026-97448}
  • drm/amd/pm: bound pp_dpm_set_pp_table() memcpy {CVE-2026-97427}
  • drm/vmwgfx: validate DRAW_PRIMITIVES header size before division {CVE-2026-74444}
  • HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature {CVE-2026-89729}
  • i2c: stub: Reject I2C block transfers with invalid length {CVE-2026-64191}
  • RDMA/ucma: Lock the handler in ucma_set_ib_path() {CVE-2026-89508}
  • RDMA/srpt: fix integer overflow in immediate data length check {CVE-2026-74394}
  • dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059}
  • dm raid1: reserve space for NUL-terminator in build_constructor_string() {CVE-2026-89575}
  • veth: fix NAPI leak in XDP enable error path {CVE-2026-80613}
  • net: hns3: fix kernel crash when 1588 is received on HIP08 devices {CVE-2024-26881}
  • ixgbevf: fix use-after-free in VEPA multicast source pruning {CVE-2026-64113}
  • net: mana: validate rx_req_idx to prevent out-of-bounds array access {CVE-2026-64018}
  • net: stmmac: xgmac2: disable RBUE in default RX interrupt mask {CVE-2026-93830}
  • net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() {CVE-2026-64351}
  • net: usb: pegasus: don't rely on id table pointer arithmetic {CVE-2026-97540}
  • vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() {CVE-2026-63993}
  • wifi: ath9k: fix OOB access from firmware tx status queue ID {CVE-2026-74408}
  • PCI: iproc: Protect root bus removal with rescan lock {CVE-2026-93822}
  • scsi: qla2xxx: Avoid double completion in async IOCB timeout {CVE-2026-89847}
  • fs/mbcache: cancel…
Record
CLSA-2026-1792751700
Updated
2026-11-02
OSVCLSA-2026-1792751773 No score

kernel: Fix of 88 CVEs

  • can: esd_usb: kill anchored URBs before freeing netdevs {CVE-2026-64585}
  • ext4: fix kernel BUG in ext4_write_inline_data_end {CVE-2026-74308}
  • netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop {CVE-2026-72348}
  • xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() {CVE-2026-64580}
  • platform/x86: dell-laptop: fix missing cleanups in init error path {CVE-2026-72144}
  • ALSA: seq: Clear variable event pointer on read {CVE-2026-74339}
  • netfilter: xt_cluster: reject template conntracks in hash match {CVE-2026-72256}
  • net/sched: cls_flow: Dont expose folded kernel pointers {CVE-2026-74290}
  • mfd: sm501: Fix reference leak on failed device registration {CVE-2026-72240}
  • net: atm: reject out-of-range traffic classes in QoS validation {CVE-2026-72297}
  • ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser {CVE-2026-64487}
  • scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker {CVE-2026-63890}
  • net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331}
  • RDMA/cxgb4: free STAG index when TPT entry write fails {CVE-2026-90415}
  • isofs: release zisofs block pointer buffer head {CVE-2026-90434}
  • HID: roccat: bound device-supplied profile index {CVE-2026-93188}
  • fat: release buffer head after rebuilding parent {CVE-2026-90318}
  • wifi: mac80211: ibss: wait for in-flight TX on disconnect {CVE-2026-93804}
  • wifi: rtlwifi: pci: fix error path in rtl_pci_probe() {CVE-2026-90403}
  • serial: core: clear freed pointers on uart_register_driver() failure {CVE-2026-90336}
  • locking/lockdep: Fix NULL pointer dereference in __lock_set_class() {CVE-2026-93261}
  • smb: client: reject short READ responses in CIFSSMBRead() {CVE-2026-97565}
  • UDF symlink pathComponent header OOB read {CVE-2026-93055}
  • ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root {CVE-2026-92521}
  • RDMA/ipoib: Drain RCU callbacks during module teardown {CVE-2026-93108}
  • cifs: call pagecache_isize_extended() in cifs_setsize() when extending {CVE-2026-89642}
  • nfsd: release path refs on follow_down() error {CVE-2026-89707}
  • HID: roccat: free buffered reports when destroying device {CVE-2026-89627}
  • NTB: ntb_transport: Reject oversized TX buffers {CVE-2026-80987}
  • wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() {CVE-2026-80949}
  • svcrdma: Reject connection when transport allocation fails {CVE-2026-89531}
  • xfrm: fix xfrm_state_construct() auth-trunc leak {CVE-2026-80843}
  • sctp: reject stale cookies with mismatched verification tags {CVE-2026-80890}
  • SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails {CVE-2022-50821}
  • ipv6/sit: use DEV_STATS_INC() to avoid data-races {CVE-2022-50764}
  • mtd: Fix device name leak when register device failed in add_mtd_device() {CVE-2022-50566}
  • virtio_console: eliminate anonymous module_init & module_exit {CVE-2022-49100}
  • mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) {CVE-2022-49077}
  • lockd: fix NULL dereference on lockowner allocation failure {CVE-2026-89484}
  • mfd: sm501: Fix potential memory leaks during remove {CVE-2026-80974}
  • wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start() {CVE-2026-80948}
  • acct: fix potential integer overflow in encode_comp_t() {CVE-2022-50749}
  • media: dvb-frontends: fix leak of memory fw {CVE-2022-50664}
  • usb: core: Add lock to usb_wakeup_notification() {CVE-2026-80830}
  • rndis_host: add overflow check in rndis_rx_fixup() {CVE-2026-80814}
  • udf: reject VAT indexes equal to the entry count {CVE-2026-89525}
  • lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() {CVE-2026-89726}
  • ceph: bound xattr value length in __build_xattrs() {CVE-2026-89649}
  • bnx2x: fix double free in bnx2x_init_firmware() error path {CVE-2026-89582}
  • SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow {CVE-2026-89551}
  • sctp: stop processing a packet once its association is deleted {CVE-2026-89479}
  • ALSA: aloop: Check card index…
Record
CLSA-2026-1792751773
Updated
2026-11-02
OSVCLSA-2026-1792752282 No score

kernel: Fix of 90 CVEs

  • can: esd_usb: kill anchored URBs before freeing netdevs {CVE-2026-64585}
  • ext4: fix kernel BUG in ext4_write_inline_data_end {CVE-2026-74308}
  • netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop {CVE-2026-72348}
  • xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() {CVE-2026-64580}
  • platform/x86: dell-laptop: fix missing cleanups in init error path {CVE-2026-72144}
  • ALSA: seq: Clear variable event pointer on read {CVE-2026-74339}
  • netfilter: xt_cluster: reject template conntracks in hash match {CVE-2026-72256}
  • net/sched: cls_flow: Dont expose folded kernel pointers {CVE-2026-74290}
  • mfd: sm501: Fix reference leak on failed device registration {CVE-2026-72240}
  • net: atm: reject out-of-range traffic classes in QoS validation {CVE-2026-72297}
  • ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser {CVE-2026-64487}
  • scsi: fcoe: Reject FIP descriptors with zero fip_dlen in CVL walker {CVE-2026-63890}
  • net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331}
  • RDMA/cxgb4: free STAG index when TPT entry write fails {CVE-2026-90415}
  • isofs: release zisofs block pointer buffer head {CVE-2026-90434}
  • HID: roccat: bound device-supplied profile index {CVE-2026-93188}
  • fat: release buffer head after rebuilding parent {CVE-2026-90318}
  • wifi: mac80211: ibss: wait for in-flight TX on disconnect {CVE-2026-93804}
  • wifi: rtlwifi: pci: fix error path in rtl_pci_probe() {CVE-2026-90403}
  • serial: core: clear freed pointers on uart_register_driver() failure {CVE-2026-90336}
  • locking/lockdep: Fix NULL pointer dereference in __lock_set_class() {CVE-2026-93261}
  • smb: client: reject short READ responses in CIFSSMBRead() {CVE-2026-97565}
  • UDF symlink pathComponent header OOB read {CVE-2026-93055}
  • ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root {CVE-2026-92521}
  • RDMA/ipoib: Drain RCU callbacks during module teardown {CVE-2026-93108}
  • cifs: call pagecache_isize_extended() in cifs_setsize() when extending {CVE-2026-89642}
  • nfsd: release path refs on follow_down() error {CVE-2026-89707}
  • HID: roccat: free buffered reports when destroying device {CVE-2026-89627}
  • NTB: ntb_transport: Reject oversized TX buffers {CVE-2026-80987}
  • wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() {CVE-2026-80949}
  • svcrdma: Reject connection when transport allocation fails {CVE-2026-89531}
  • xfrm: fix xfrm_state_construct() auth-trunc leak {CVE-2026-80843}
  • sctp: reject stale cookies with mismatched verification tags {CVE-2026-80890}
  • SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails {CVE-2022-50821}
  • ipv6/sit: use DEV_STATS_INC() to avoid data-races {CVE-2022-50764}
  • mtd: Fix device name leak when register device failed in add_mtd_device() {CVE-2022-50566}
  • virtio_console: eliminate anonymous module_init & module_exit {CVE-2022-49100}
  • mmmremap.c: avoid pointless invalidate_range_start/end on mremap(old_size=0) {CVE-2022-49077}
  • lockd: fix NULL dereference on lockowner allocation failure {CVE-2026-89484}
  • mfd: sm501: Fix potential memory leaks during remove {CVE-2026-80974}
  • wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start() {CVE-2026-80948}
  • acct: fix potential integer overflow in encode_comp_t() {CVE-2022-50749}
  • media: dvb-frontends: fix leak of memory fw {CVE-2022-50664}
  • usb: core: Add lock to usb_wakeup_notification() {CVE-2026-80830}
  • rndis_host: add overflow check in rndis_rx_fixup() {CVE-2026-80814}
  • udf: reject VAT indexes equal to the entry count {CVE-2026-89525}
  • lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() {CVE-2026-89726}
  • ceph: bound xattr value length in __build_xattrs() {CVE-2026-89649}
  • bnx2x: fix double free in bnx2x_init_firmware() error path {CVE-2026-89582}
  • SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow {CVE-2026-89551}
  • sctp: stop processing a packet once its association is deleted {CVE-2026-89479}
  • ALSA: aloop: Check card index…
Record
CLSA-2026-1792752282
Updated
2026-11-02
OSVCLSA-2026-1792759740 No score

kernel: Fix of 134 CVEs

  • net: skbuff: propagate shared-frag marker in skb_zerocopy()
  • net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
  • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • ipvs: do not propagate one-packet flag to synced conns {CVE-2026-80714}
  • net: skbuff: propagate shared-frag marker through frag-transfer helpers {CVE-2026-43503}
  • net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}
  • ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF {CVE-2026-98116}
  • sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START {CVE-2026-98130}
  • dm cache policy smq: check allocation under invalidate lock {CVE-2026-53265}
  • RDMA/siw: Bound fragmented header copies by the remaining length {CVE-2026-98323}
  • tty: clear cdev pointer after cdev_add() failure {CVE-2026-90334}
  • tty: skip cdev_del() when no cdev is registered {CVE-2026-90335}
  • procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}
  • sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL {CVE-2026-46227}
  • drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() {CVE-2026-46209}
  • drm: Remove plane hsub/vsub alignment requirement for core helpers {CVE-2026-46209}
  • RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path {CVE-2026-46189}
  • RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181}
  • scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() {CVE-2026-46149}
  • RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}
  • ip6_gre: Use cached t->net in ip6erspan_changelink(). {CVE-2026-46120}
  • libceph: Fix slab-out-of-bounds access in auth message processing {CVE-2026-46119}
  • Bluetooth: hci_event: fix potential UAF in SSP passkey handlers {CVE-2026-46056}
  • net: qrtr: ns: Fix use-after-free in driver remove() {CVE-2026-46047}
  • RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv {CVE-2026-46043}
  • gfs2: Fix use-after-free in iomap inline data write path {CVE-2026-45984}
  • gfs2: Add metapath_dibh helper {CVE-2026-45984}
  • bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}
  • gfs2: Fix slab-use-after-free in qd_put {CVE-2026-45861}
  • RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send {CVE-2026-45856}
  • dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}
  • wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task {CVE-2026-46180}
  • netfilter: nf_log: validate MAC header was set before dumping it {CVE-2026-52942}
  • xfrm: espintcp: do not reuse an in-progress partial send {CVE-2026-52935}
  • sctp: purge outqueue on stale COOKIE-ECHO handling {CVE-2026-52924}
  • ipc: limit next_id allocation to the valid ID range {CVE-2026-52923}
  • netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920}
  • netfilter: nf_queue: hold bridge skb->dev while queued {CVE-2026-52912}
  • ipvs: clear the svc scheduler ptr early on edit {CVE-2026-53270}
  • netfilter: conntrack_irc: fix possible out-of-bounds read {CVE-2026-53268}
  • net/sched: act_api: use RCU with deferred freeing for action lifecycle {CVE-2026-53264}
  • Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}
  • Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
  • xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() {CVE-2026-53239}
  • ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
  • net: guard timestamp cmsgs to real error queue skbs {CVE-2026-53223}
  • USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
  • wifi: nl80211: reject oversized EMA RNR lists {CVE-2026-53182}
  • netfilter: require Ethernet MAC header before using eth_hdr() {CVE-2026-53131}
  • bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops {CVE-2026-53078}
  • ppp: require CAP_NET_ADMIN in target…
Record
CLSA-2026-1792759740
Updated
2026-11-02
OSVopenSUSE-SU-2026:21910-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
openSUSE-SU-2026:21910-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-63922 No score

CVE-2026-63922 in linux - Patched by Root

Root has patched CVE-2026-63922 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-63922
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2026-63922 No score

CVE-2026-63922 in linux - Patched by Root

Root has patched CVE-2026-63922 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2026-63922
Updated
2026-11-06
OSVSUSE-SU-2026:23193-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
  • CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
  • CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
  • CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
  • CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
  • CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
  • CVE-2026-46040: inotify:…
Record
SUSE-SU-2026:23193-1
Updated
2026-11-02
OSVSUSE-SU-2026:23194-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
  • CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
  • CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
  • CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
  • CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
  • CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
  • CVE-2026-46040: inotify: fix…
Record
SUSE-SU-2026:23194-1
Updated
2026-11-02
OSVSUSE-SU-2026:23241-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
  • CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
  • CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
  • CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
  • CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
  • CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
  • CVE-2026-46040: inotify:…
Record
SUSE-SU-2026:23241-1
Updated
2026-11-02
OSVSUSE-SU-2026:23244-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (bsc#1256675).
  • CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
  • CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer overflow in create_dirty_log() (bsc#1267449).
  • CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
  • CVE-2026-46027: net/smc: avoid early lgr access in smc_clc_wait_msg (bsc#1266744).
  • CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
  • CVE-2026-46040: inotify: fix…
Record
SUSE-SU-2026:23244-1
Updated
2026-11-02
OSVSUSE-SU-2026:23881-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
SUSE-SU-2026:23881-1
Updated
2026-11-02
OSVSUSE-SU-2026:23887-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
SUSE-SU-2026:23887-1
Updated
2026-11-02
OSVSUSE-SU-2026:23897-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
SUSE-SU-2026:23897-1
Updated
2026-11-02
OSVSUSE-SU-2026:23902-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68214: timers: Fix NULL function pointer race in timer_shutdown_sync() (bsc#1255225).
  • CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
  • CVE-2025-68780: sched/deadline: only set free_cpus for online runqueues (bsc#1256671).
  • CVE-2025-71075: scsi: aic94xx: fix use-after-free in device removal path (bsc#1256629).
  • CVE-2026-23113: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).
  • CVE-2026-23306: scsi: pm8001: Fix use-after-free in pm8001_queue_command() (bsc#1260501).
  • CVE-2026-23348: cxl/mem: Clarify @host for devm_cxl_add_nvdimm() (bsc#1260577).
  • CVE-2026-31418: netfilter: ipset: drop logically empty buckets in mtype_del (bsc#1262073).
  • CVE-2026-31530: cxl/port: Fix use after free of parent_port in cxl_detach_ep() (bsc#1262756).
  • CVE-2026-31531: ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() (bsc#1263004).
  • CVE-2026-43116: netfilter: ctnetlink: ensure safe access to master conntrack (bsc#1264619).
  • CVE-2026-43125: dlm: validate length in dlm_search_rsb_tree (bsc#1264541).
  • CVE-2026-43163: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).
  • CVE-2026-43239: smb: client: prevent races in ->query_interfaces() (bsc#1264444).
  • CVE-2026-43271: md-cluster: fix NULL pointer dereference in process_metadata_update (bsc#1264587).
  • CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
  • CVE-2026-43331: x86/kexec: Disable KCOV instrumentation after load_segments() (bsc#1265132).
  • CVE-2026-43355: iio: light: bh1780: fix PM runtime leak on error path (bsc#1265036).
  • CVE-2026-43363: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).
  • CVE-2026-43416: powerpc, perf: Check that current->mm is alive before getting user callchain (bsc#1265121).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43448: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45897: netfilter: nft_counter: serialize reset with spinlock (bsc#1266897).
  • CVE-2026-45968: cpuidle: Skip governor when only one idle state is available (bsc#1267023).
  • CVE-2026-46007: hwmon: (powerz) Avoid cacheline sharing for DMA buffer (bsc#1267586).
  • CVE-2026-46070: md/raid5: validate payload size before accessing journal metadata (bsc#1267501).
  • CVE-2026-46107: dm-thin: fix metadata refcount underflow (bsc#1267612).
  • CVE-2026-46115: block: add pgmap check to biovec_phys_mergeable (bsc#1266874).
  • CVE-2026-46133: RDMA/rxe: Reject unknown opcodes before ICRC processing (bsc#1266928).
  • CVE-2026-46135: nvmet-tcp: remove redundant calls to nvmet_tcp_fatal_error() (bsc#1267373).
  • CVE-2026-46195: smb: client: validate dacloffset before building DACL pointers (bsc#1266860).
  • CVE-2026-46304: nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free (bsc#1267985).
  • CVE-2026-52912: netfilter: nf_queue: hold bridge skb->dev while queued (bsc#1269000).
  • CVE-2026-52920: netfilter: xt_policy: fix strict mode inbound policy matching (bsc#1269013).
  • CVE-2026-52928: af_unix: Reject SIOCATMARK on non-stream sockets (bsc#1269010).
  • CVE-2026-52929: sctp: stream: fully roll back denied add-stream state (bsc#1269004).
  • CVE-2026-52935: xfrm: espintcp: do not reuse an in-progress partial send (bsc#1268979).
  • CVE-2026-52939: net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion (bsc#1268972).
  • CVE-2026-52946: fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling (bsc#1269113).
  • CVE-2026-52977: futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (bsc#1269242).
  • CVE-2026-52990: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). -…
Record
SUSE-SU-2026:23902-1
Updated
2026-11-02
OSVSUSE-SU-2026:3593-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2022-4994: KVM: x86: wean fast IN from emulator_pio_in (bsc#1273097).
  • CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1255616).
  • CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494).
  • CVE-2026-46056: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (bsc#1267435).
  • CVE-2026-46145: RDMA/mana: Validate rx_hash_key_len (bsc#1267715).
  • CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
  • CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).
  • CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode() (bsc#1269174).
  • CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).
  • CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).
  • CVE-2026-53050: quota: Fix race of dquot_scan_active() with quota deactivation (bsc#1269188).
  • CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).
  • CVE-2026-53196: USB: serial: io_ti: fix heap overflow in get_manuf_info() (bsc#1269986).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).
  • CVE-2026-53256: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (bsc#1269993).
  • CVE-2026-53260: preempt: Provide preempt_[dis|en]able_nested() (bsc#1269731).
  • CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).
  • CVE-2026-53354: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1270230).
  • CVE-2026-53357: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (bsc#1270257).
  • CVE-2026-53375: drm/amdgpu/vce: Prevent partial address patches (bsc#1271899).
  • CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).
  • CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).
  • CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of (bsc#1271908).
  • CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).
  • CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() (bsc#1272268).
  • CVE-2026-63807: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (bsc#1272263).
  • CVE-2026-63824: KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1272180).
  • CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).
  • CVE-2026-63893: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904).
  • CVE-2026-63919: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918).
  • CVE-2026-63922,CVE-2026-63924: ipv6: exthdrs: recompute network header pointer once (bsc#1272855).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).
  • CVE-2026-63975: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (bsc#1272694).
  • CVE-2026-63984: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035).
  • CVE-2026-64106: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272207).
  • CVE-2026-64561: KVM: x86: Check for invalid/obsolete root after making MMU pages available (bsc#1273231). -…
Record
SUSE-SU-2026:3593-1
Updated
2026-11-02
OSVSUSE-SU-2026:3594-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31510: Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb (bsc#1262603).
  • CVE-2026-31624: HID: core: clamp report_size in s32ton() to avoid undefined shift (bsc#1263657).
  • CVE-2026-43068: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (bsc#1264255).
  • CVE-2026-43069: Bluetooth: hci_ll: Fix firmware leak on error path (bsc#1264190).
  • CVE-2026-43123: fbcon: check return value of con2fb_acquire_newinfo() (bsc#1264598).
  • CVE-2026-43124: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545).
  • CVE-2026-43156: net: usb: pegasus: enable basic endpoint checking (bsc#1265092).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43180: net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode (bsc#1265093).
  • CVE-2026-43211: PCI: Fix pci_slot_trylock() error handling (bsc#1264387).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43226: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43253: iommu/amd: move wait_on_sem() out of spinlock (bsc#1264419).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43268: hfsplus: pretend special inodes as regular files (bsc#1265083).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43287: drm: Account property blob allocations to memcg (bsc#1265037).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43313: ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() (bsc#1264821).
  • CVE-2026-43370: drm/amdgpu: Fix use-after-free race in VM acquire (bsc#1264782).
  • CVE-2026-43373: net: ncsi: fix skb leak in error paths (bsc#1265079).
  • CVE-2026-43383: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744).
  • CVE-2026-43425: usb: image: mdc800: kill download URB on timeout (bsc#1265133).
  • CVE-2026-43427: usb: class: cdc-wdm: fix reordering issue in read code path (bsc#1264746).
  • CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
  • CVE-2026-43449: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023).
  • CVE-2026-43450: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (bsc#1264794).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43452: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142).
  • CVE-2026-43466: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790).
  • CVE-2026-43493: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (bsc#1265627).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45857: scsi: csiostor: Fix dereference of null pointer rn (bsc#1266458).
  • CVE-2026-45858: ext4: subdivide EXT4_EXT_DATA_VALID1 (bsc#1266773).
  • CVE-2026-45871: tpm: st33zp24: Fix missing cleanup on get_burstcount() error (bsc#1266755).
  • CVE-2026-45877: HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients (bsc#1266468).
  • CVE-2026-45899: ext4: drop extent cache when splitting extent fails (bsc#1266883).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45915:…
Record
SUSE-SU-2026:3594-1
Updated
2026-11-02
OSVSUSE-SU-2026:3595-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2022-4994: KVM: x86: wean fast IN from emulator_pio_in (bsc#1273097).
  • CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1255616).
  • CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks (bsc#1226591).
  • CVE-2025-21953: net: mana: cleanup mana struct after debugfs_remove() (bsc#1240727).
  • CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494).
  • CVE-2026-46056: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (bsc#1267435).
  • CVE-2026-46145: RDMA/mana: Validate rx_hash_key_len (bsc#1267715).
  • CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
  • CVE-2026-52933: io_uring/poll: fix signed comparison in io_poll_get_ownership() (bsc#1268989).
  • CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).
  • CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode() (bsc#1269174).
  • CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).
  • CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).
  • CVE-2026-53050: quota: Fix race of dquot_scan_active() with quota deactivation (bsc#1269188).
  • CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).
  • CVE-2026-53196: USB: serial: io_ti: fix heap overflow in get_manuf_info() (bsc#1269986).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).
  • CVE-2026-53256: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (bsc#1269993).
  • CVE-2026-53260: preempt: Provide preempt_[dis|en]able_nested() (bsc#1269731).
  • CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).
  • CVE-2026-53357: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (bsc#1270257).
  • CVE-2026-53375: drm/amdgpu/vce: Prevent partial address patches (bsc#1271899).
  • CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).
  • CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).
  • CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of (bsc#1271908).
  • CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).
  • CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() (bsc#1272268).
  • CVE-2026-63807: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (bsc#1272263).
  • CVE-2026-63824: KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1272180).
  • CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).
  • CVE-2026-63884: drm/i915: Fix potential UAF in TTM object purge (bsc#1272573).
  • CVE-2026-63893: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904).
  • CVE-2026-63919: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918).
  • CVE-2026-63922,CVE-2026-63924: ipv6: exthdrs: recompute network header pointer once (bsc#1272855).
  • CVE-2026-63946: Bluetooth: ISO: fix UAF in iso_recv_frame (bsc#1272665).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).
  • CVE-2026-63975: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (bsc#1272694).
  • CVE-2026-63984: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in…
Record
SUSE-SU-2026:3595-1
Updated
2026-11-02
OSVSUSE-SU-2026:3602-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-46056: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (bsc#1267435).
  • CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
  • CVE-2026-46324: netfilter: nf_tables: Introduce functions freeing nft_hook objects (bsc#1267995).
  • CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).
  • CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).
  • CVE-2026-53050: quota: Fix race of dquot_scan_active() with quota deactivation (bsc#1269188).
  • CVE-2026-53129: fs/mbcache: cancel shrink work before destroying the cache (bsc#1269633).
  • CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).
  • CVE-2026-53250: xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata() (bsc#1269808).
  • CVE-2026-53262: l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() (bsc#1270000).
  • CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).
  • CVE-2026-53354: arm64: errata: Mitigate TLBI errata on various Arm CPUs (bsc#1270230).
  • CVE-2026-53375: drm/amdgpu/vce: Prevent partial address patches (bsc#1271899).
  • CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).
  • CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).
  • CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of (bsc#1271908).
  • CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).
  • CVE-2026-63802: blk-cgroup: fix UAF in __blkcg_rstat_flush() (bsc#1272282).
  • CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() (bsc#1272268).
  • CVE-2026-63807: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (bsc#1272263).
  • CVE-2026-63824: KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1272180).
  • CVE-2026-63826: fbdev: fix use-after-free in store_modes() (bsc#1272183).
  • CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).
  • CVE-2026-63884: drm/i915: Fix potential UAF in TTM object purge (bsc#1272573).
  • CVE-2026-63893: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607).
  • CVE-2026-63912: xfrm: esp: restore combined single-frag length gate (bsc#1272836).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904).
  • CVE-2026-63919: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918).
  • CVE-2026-63922,CVE-2026-63924: ipv6: exthdrs: refresh nh after handling HAO option (bsc#1272855).
  • CVE-2026-63946: Bluetooth: ISO: fix UAF in iso_recv_frame (bsc#1272665).
  • CVE-2026-63952: memfd: deny writeable mappings when implying SEAL_WRITE (bsc#1272468).
  • CVE-2026-63968: ipv6: fix possible infinite loop in fib6_select_path() (bsc#1272466).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).
  • CVE-2026-63975: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (bsc#1272694).
  • CVE-2026-63984: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035).
  • CVE-2026-64106: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272207).
  • CVE-2026-64560: posix-cpu-timers:…
Record
SUSE-SU-2026:3602-1
Updated
2026-11-02
OSVSUSE-SU-2026:3616-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2022-4994: KVM: x86: wean fast IN from emulator_pio_in (bsc#1273097).
  • CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1255616).
  • CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494).
  • CVE-2026-46056: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (bsc#1267435).
  • CVE-2026-46145: RDMA/mana: Validate rx_hash_key_len (bsc#1267715).
  • CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
  • CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).
  • CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode() (bsc#1269174).
  • CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).
  • CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).
  • CVE-2026-53050: quota: Fix race of dquot_scan_active() with quota deactivation (bsc#1269188).
  • CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).
  • CVE-2026-53196: USB: serial: io_ti: fix heap overflow in get_manuf_info() (bsc#1269986).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).
  • CVE-2026-53256: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (bsc#1269993).
  • CVE-2026-53260: preempt: Provide preempt_[dis|en]able_nested() (bsc#1269731).
  • CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).
  • CVE-2026-53357: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (bsc#1270257).
  • CVE-2026-53375: drm/amdgpu/vce: Prevent partial address patches (bsc#1271899).
  • CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).
  • CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).
  • CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of (bsc#1271908).
  • CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).
  • CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() (bsc#1272268).
  • CVE-2026-63807: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (bsc#1272263).
  • CVE-2026-63824: KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1272180).
  • CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).
  • CVE-2026-63893: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904).
  • CVE-2026-63919: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918).
  • CVE-2026-63922,CVE-2026-63924: ipv6: exthdrs: refresh nh after handling HAO option (bsc#1272855).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).
  • CVE-2026-63975: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (bsc#1272694).
  • CVE-2026-63984: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035).
  • CVE-2026-64106: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242).
  • CVE-2026-64189: netfilter: ipset: fix race between dump and ip_set_list resize (bsc#1272207).
  • CVE-2026-64560: posix-cpu-timers: Prevent UAF caused by non-leader exec() race (bsc#1273004).
  • CVE-2026-64561: KVM: x86: Check for invalid/obsolete root after making MMU pages available (bsc#1273231). -…
Record
SUSE-SU-2026:3616-1
Updated
2026-11-02
OSVSUSE-SU-2026:3617-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2022-4994: KVM: x86: wean fast IN from emulator_pio_in (bsc#1273097).
  • CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1255616).
  • CVE-2024-38542: RDMA/mana_ib: boundary check before installing cq callbacks (bsc#1226591).
  • CVE-2025-21953: net: mana: cleanup mana struct after debugfs_remove() (bsc#1240727).
  • CVE-2026-46052: ceph: only d_add() negative dentries when they are unhashed (bsc#1267494).
  • CVE-2026-46056: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (bsc#1267435).
  • CVE-2026-46145: RDMA/mana: Validate rx_hash_key_len (bsc#1267715).
  • CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
  • CVE-2026-52933: io_uring/poll: fix signed comparison in io_poll_get_ownership() (bsc#1268989).
  • CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).
  • CVE-2026-52958: libceph: Fix potential out-of-bounds access in osdmap_decode() (bsc#1269174).
  • CVE-2026-52967: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).
  • CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).
  • CVE-2026-53050: quota: Fix race of dquot_scan_active() with quota deactivation (bsc#1269188).
  • CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).
  • CVE-2026-53196: USB: serial: io_ti: fix heap overflow in get_manuf_info() (bsc#1269986).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).
  • CVE-2026-53256: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (bsc#1269993).
  • CVE-2026-53260: preempt: Provide preempt_[dis|en]able_nested() (bsc#1269731).
  • CVE-2026-53267: netfilter: nft_ct: bail out on template ct in get eval (bsc#1269577).
  • CVE-2026-53357: Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (bsc#1270257).
  • CVE-2026-53375: drm/amdgpu/vce: Prevent partial address patches (bsc#1271899).
  • CVE-2026-53388: fuse: re-lock request before replacing page cache folio (bsc#1271825).
  • CVE-2026-53391: NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr (bsc#1271904).
  • CVE-2026-53402: fbdev: fbcon: fix out-of-bounds read in err_out of (bsc#1271908).
  • CVE-2026-63794: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (bsc#1271964).
  • CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() (bsc#1272268).
  • CVE-2026-63807: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (bsc#1272263).
  • CVE-2026-63824: KEYS: fix overflow in keyctl_pkey_params_get_2() (bsc#1272180).
  • CVE-2026-63829: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (bsc#1272176).
  • CVE-2026-63884: drm/i915: Fix potential UAF in TTM object purge (bsc#1272573).
  • CVE-2026-63893: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607).
  • CVE-2026-63917: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904).
  • CVE-2026-63919: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).
  • CVE-2026-63921: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918).
  • CVE-2026-63922,CVE-2026-63924: ipv6: exthdrs: refresh nh after handling HAO option (bsc#1272855).
  • CVE-2026-63946: Bluetooth: ISO: fix UAF in iso_recv_frame (bsc#1272665).
  • CVE-2026-63971: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).
  • CVE-2026-63975: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (bsc#1272694).
  • CVE-2026-63984: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865).
  • CVE-2026-63994: tunnels: load network headers after skb_cow() in…
Record
SUSE-SU-2026:3617-1
Updated
2026-11-02
OSVSUSE-SU-2026:3790-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: Perform lockless command completion in abort path' (bsc#1256675).
  • CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
  • CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
  • CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
  • CVE-2026-46137: mptcp: pm: ADD_ADDR rtx: fix potential data-race (bsc#1267570).
  • CVE-2026-46147: KVM: arm64: Factor out pKVM hyp vcpu creation to separate function (bsc#1267689).
  • CVE-2026-46158: mptcp: pm: ADD_ADDR rtx: always decrease sk refcount (bsc#1266880).
  • CVE-2026-46168: mptcp: sockopt: set timestamp flags on subflow socket, not msk (bsc#1266869).
  • CVE-2026-46170: mptcp: pm: reuse ID 0 after delete and re-add (bsc#1267714).
  • CVE-2026-46180: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task (bsc#1266813).
  • CVE-2026-46189: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (bsc#1266918).
  • CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
  • CVE-2026-46234: vsock: fix buffer size clamping order (bsc#1266904).
  • CVE-2026-46245: drm/amd/display: Fix dc_link NULL handling in HPD init (bsc#1267678). -…
Record
SUSE-SU-2026:3790-1
Updated
2026-11-02
OSVSUSE-SU-2026:3809-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2023-53995: net: ipv4: fix one memleak in __inet_del_ifa() (bsc#1255616).
  • CVE-2026-23204: net: add skb_header_pointer_careful() helper (bsc#1258340).
  • CVE-2026-52986: netfilter: nf_conntrack_sip: don't use simple_strtoul (bsc#1269289).
  • CVE-2026-53131: netfilter: require Ethernet MAC header before using eth_hdr() (bsc#1269773).
  • CVE-2026-53196: USB: serial: io_ti: fix heap overflow in get_manuf_info() (bsc#1269986).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1269988).
  • CVE-2026-53256: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() (bsc#1269993).
  • CVE-2026-63806: KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() (bsc#1272268).
  • CVE-2026-63922: ipv6: exthdrs: recompute network header pointer once (bsc#1272855).
  • CVE-2026-63924: ipv6: exthdrs: recompute network header pointer once (bsc#1272855).
  • CVE-2026-64114: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742).
  • CVE-2026-64564: sctp: don't free the ASCONF's own transport in DEL-IP processing (bsc#1274072).

The following non security issues were fixed:

  • scripts/cve_tools/kpm-bot: quote branch pattern properly.
  • sctp: validate embedded address parameter length (git-fixes).
Record
SUSE-SU-2026:3809-1
Updated
2026-11-02
OSVSUSE-SU-2026:3810-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item (bsc#1255703).
  • CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: Perform lockless command completion in abort path' (bsc#1256675).
  • CVE-2026-23097: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43130: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).
  • CVE-2026-43161: iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (bsc#1264333).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43170: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43328: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832).
  • CVE-2026-43439: cgroup: fix race between task migration and iteration (bsc#1265141).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-45860: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46026: net: qrtr: ns: Limit the maximum number of lookups (bsc#1266876).
  • CVE-2026-46038: net: qrtr: ns: Free the node during ctrl_cmd_bye() (bsc#1266695).
  • CVE-2026-46137: mptcp: pm: ADD_ADDR rtx: fix potential data-race (bsc#1267570).
  • CVE-2026-46147: KVM: arm64: Factor out pKVM hyp vcpu creation to separate function (bsc#1267689).
  • CVE-2026-46158: mptcp: pm: ADD_ADDR rtx: always decrease sk refcount (bsc#1266880).
  • CVE-2026-46168: mptcp: sockopt: set timestamp flags on subflow socket, not msk (bsc#1266869).
  • CVE-2026-46170: mptcp: pm: reuse ID 0 after delete and re-add (bsc#1267714).
  • CVE-2026-46180: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task (bsc#1266813).
  • CVE-2026-46189: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (bsc#1266918).
  • CVE-2026-46193: xfrm: ah: account for ESN high bits in async callbacks (bsc#1267656).
  • CVE-2026-46234: vsock: fix buffer size clamping order (bsc#1266904).
  • CVE-2026-46245: drm/amd/display: Fix dc_link NULL handling in HPD init (bsc#1267678). -…
Record
SUSE-SU-2026:3810-1
Updated
2026-11-02
OSVUSN-8593-1 No score

linux-ibm, linux-oracle vulnerabilities

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • x86 platform drivers;
  • PSP security protocol;
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Intel NPU Driver;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • DPLL subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • FWCTL subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • IOMMU subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NVME drivers;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • ACPI WMI driver;
  • Generic PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • MPAM driver;
  • Amlogic Meson reset controller drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • NVIDIA Tegra Control Backbone (CBB) driver;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • TCM subsystem;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • TI TPS6598x USB Power Delivery controller driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Framebuffer layer;
  • TSM AMD SEV Guest driver;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • File systems infrastructure;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • HugeTLB file system;
  • Network file systems library;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • File system notification infrastructure;
  • NTFS3 file system;
  • OCFS2 file system;
  • Overlay file system;
  • Diskquota system;
  • SMB network file system;
  • Tracing file system;
  • UDF file system;
  • DRM TTM subsystem;
  • Control group (cgroup);
  • Kernel CPU control infrastructure;
  • Tracing infrastructure;
  • QorIQ DPAA2 FSL-MC bus driver;
  • Freescale ENETC Ethernet drivers;
  • Memory management;
  • Memory Management;
  • Linked list library;
  • Netfilter;
  • padata…
Record
USN-8593-1
Updated
2026-11-07
OSVUSN-8603-1 No score

linux-azure, linux-azure-fde vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • x86 platform drivers;
  • PSP security protocol;
  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • User-Mode Linux (UML);
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Intel NPU Driver;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Auxiliary display drivers;
  • Drivers core;
  • DRBD Distributed Replicated Block Device drivers;
  • Rados block device (RBD) driver;
  • Ublk userspace block driver;
  • Compressed RAM block device driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Buffer Sharing and Synchronization framework;
  • DPLL subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • EFI core;
  • FWCTL subsystem;
  • GPIO subsystem;
  • GPU drivers;
  • Greybus drivers;
  • HID subsystem;
  • Microsoft Hyper-V drivers;
  • Hardware monitoring drivers;
  • I2C subsystem;
  • I3C subsystem;
  • IIO ADC drivers;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • IOMMU subsystem;
  • LED subsystem;
  • Mailbox framework;
  • Multiple devices driver;
  • Media drivers;
  • NVIDIA Tegra memory controller driver;
  • IBM Advanced System Management driver;
  • MTD block device drivers;
  • Network drivers;
  • Ethernet bonding driver;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • STMicroelectronics network drivers;
  • Texas Instruments network drivers;
  • MediaTek network drivers;
  • NTB driver;
  • NVME drivers;
  • Device tree and open firmware driver;
  • Parport drivers;
  • PCI subsystem;
  • Pin controllers subsystem;
  • Chrome hardware platform drivers;
  • ACPI WMI driver;
  • Generic PM domains;
  • MediaTek PM domains;
  • Power supply drivers;
  • Remote Processor subsystem;
  • MPAM driver;
  • Amlogic Meson reset controller drivers;
  • S/390 drivers;
  • SCSI subsystem;
  • NVIDIA Tegra Control Backbone (CBB) driver;
  • SPI subsystem;
  • Greybus lights staging drivers;
  • Media staging drivers;
  • Realtek RTL8723BS SDIO drivers;
  • SM750 framebuffer staging driver;
  • TCM subsystem;
  • Thermal drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • Userspace I/O drivers;
  • USB Device Class drivers;
  • ULPI bus;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • TI TPS6598x USB Power Delivery controller driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • vDPA drivers;
  • VFIO drivers;
  • Framebuffer layer;
  • TSM AMD SEV Guest driver;
  • Xen hypervisor drivers;
  • 9P distributed file system;
  • File systems infrastructure;
  • AFS file system;
  • BTRFS file system;
  • Ceph distributed file system;
  • EROFS file system;
  • Ext4 file system;
  • F2FS file system;
  • FUSE (File system in Userspace);
  • GFS2 file system;
  • HFS+ file system;
  • HugeTLB file system;
  • Journaling layer for block devices (JBD2);
  • Network file systems…
Record
USN-8603-1
Updated
2026-11-07

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k-debug
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k-debug-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k-debug-devel
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k-debug-devel-matched
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k-debug-modules
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-devel
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k-devel-matched
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k-modules
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k-modules-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-64k-modules-extra
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-abi-stablelists
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-cross-headers
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-debug
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-debug-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-debug-devel
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-debug-devel-matched
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-debug-modules
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-debug-modules-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-debug-modules-extra
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-debug-uki-virt
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-devel
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-devel-matched
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-doc
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-headers
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-modules
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-modules-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-modules-extra
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-modules-extra-matched
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-64k
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-64k-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-64k-debug
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-64k-debug-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-64k-debug-devel
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-64k-debug-modules
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-64k-debug-modules-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-64k-debug-modules-extra
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-64k-devel
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-64k-modules
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-64k-modules-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-64k-modules-extra
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-debug
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-debug-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-debug-devel
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-debug-modules
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-debug-modules-core
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-debug-modules-extra
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-devel
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
kernel-rt-modules
AlmaLinux:10
From an advisory covering 35 CVEs
 before 6.12.0-211.63.1.el10_2
6.12.0-211.63.1.el10_2
linux-lts
Alpaquita:23
 6.1.175-r0 up to 6.1.177-r0
6.1.177-r0
linux-lts
Alpaquita:25
 6.12.92-r0 up to 6.12.95-r0
6.12.95-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
linux-buildinfo-5.4.0-239-generic
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-buildinfo-5.4.0-239-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-cloud-tools-5.4.0-239
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-cloud-tools-5.4.0-239-generic
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-cloud-tools-5.4.0-239-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-cloud-tools-common
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-doc
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-headers-5.4.0-239
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-headers-5.4.0-239-generic
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-headers-5.4.0-239-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-image-unsigned-5.4.0-239-generic
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-image-unsigned-5.4.0-239-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-libc-dev
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-modules-5.4.0-239-generic
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-modules-5.4.0-239-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-modules-extra-5.4.0-239-generic
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-source-5.4.0
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-tools-5.4.0-239
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-tools-5.4.0-239-generic
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-tools-5.4.0-239-lowlatency
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-tools-common
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-tools-host
TuxCare:Ubuntu:20.04
From an advisory covering 396 CVEs
 before 5.4.0-239.259+tuxcare.els1
5.4.0-239.259+tuxcare.els1
linux-buildinfo-4.15.0-266-generic
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-buildinfo-4.15.0-266-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-cloud-tools-4.15.0-266
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-cloud-tools-4.15.0-266-generic
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-cloud-tools-4.15.0-266-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-cloud-tools-common
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-doc
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-headers-4.15.0-266
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-headers-4.15.0-266-generic
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-headers-4.15.0-266-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-image-unsigned-4.15.0-266-generic
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-image-unsigned-4.15.0-266-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-libc-dev
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-modules-4.15.0-266-generic
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-modules-4.15.0-266-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-modules-extra-4.15.0-266-generic
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-source-4.15.0
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-tools-4.15.0-266
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-tools-4.15.0-266-generic
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-tools-4.15.0-266-lowlatency
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-tools-common
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-tools-host
TuxCare:Ubuntu:18.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277+tuxcare.els1
4.15.0-266.277+tuxcare.els1
linux-buildinfo-4.15.0-266-generic
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-buildinfo-4.15.0-266-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-cloud-tools-4.15.0-266-generic
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-cloud-tools-4.15.0-266-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-headers-4.15.0-266
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-headers-4.15.0-266-generic
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-headers-4.15.0-266-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-hwe-cloud-tools-4.15.0-266
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-hwe-tools-4.15.0-266
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-image-unsigned-4.15.0-266-generic
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
linux-image-unsigned-4.15.0-266-lowlatency
TuxCare:Ubuntu:16.04
From an advisory covering 277 CVEs
 before 4.15.0-266.277~16.04.1+tuxcare.els1
4.15.0-266.277~16.04.1+tuxcare.els1
Kernel
Linux
 2.6.19 up to 5.10.259, 5.11.0 up to 5.15.210, 5.16.0 up to 6.1.176, 6.2.0 up to 6.6.143, 6.7.0 up to 6.12.93, 6.13.0 up to 6.18.35, 6.19.0 up to 7.0.12
5.10.2595.15.2106.1.1766.6.1436.12.936.18.357.0.12
linux
Debian:12
 before 6.1.176-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 45 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-1
6.1.176-1
linux
Debian:13
 before 6.12.94-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 22 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-1~bpo12+1
6.12.94-1
linux
Debian:14
 before 7.0.12-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
7.0.12-1
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-doc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-rt-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-zfcpdump-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
libperf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
perf
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
python3-perf
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
python3-perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
rtla
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
rv
Red Hat:enterprise_linux:9::appstream
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-64k-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-abi-stablelists
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debug-uki-virt
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
kernel-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 38 CVEs
 before 0:5.14.0-687.55.1.el9_8
0:5.14.0-687.55.1.el9_8
linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
rootio-linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 648 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 648 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 648 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 648 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1.160000.2.23
6.12.0-160000.38.1.160000.2.23
kernel-rt
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
SUSE:Linux Micro 6.2
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-azure
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1.160000.2.23
6.12.0-160000.38.1.160000.2.23
kernel-docs
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-azure
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1.160000.2.23
6.12.0-160000.38.1.160000.2.23
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1
5.14.21-150400.24.235.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1.150400.24.118.3
5.14.21-150400.24.235.1.150400.24.118.3
kernel-source
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1
5.14.21-150400.24.235.1
kernel-default
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1
5.14.21-150400.24.235.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1.150400.24.118.3
5.14.21-150400.24.235.1.150400.24.118.3
kernel-source
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1
5.14.21-150400.24.235.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP4
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1
5.14.21-150400.24.235.1
kernel-livepatch-SLE15-SP4_Update_58
SUSE:Linux Enterprise Live Patching 15 SP4
From an advisory covering 59 CVEs
 before 1-150400.9.7.1
1-150400.9.7.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP4
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1
5.14.21-150400.24.235.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1
5.14.21-150400.24.235.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1
5.14.21-150400.24.235.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1.150400.24.118.3
5.14.21-150400.24.235.1.150400.24.118.3
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1
5.14.21-150400.24.235.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1
5.14.21-150400.24.235.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1
5.14.21-150400.24.235.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1
5.14.21-150400.24.235.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 59 CVEs
 before 5.14.21-150400.24.235.1
5.14.21-150400.24.235.1
linux
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8
Show 45 moreShow less
3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70
 None known
linux-aws
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9
Show 45 moreShow less
4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80
 None known
linux-azure
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
 None known
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
 None known
linux
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
 None known
linux-aws
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
 None known
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
 None known
linux-azure
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
 None known
linux-gcp
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
 None known
linux-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
 None known
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-kvm
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15
Show 45 moreShow less
4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84
 None known
linux-oracle
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:16.04:LTS
 All versions, plus listed versions
4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13
Show 45 moreShow less
4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78
 None known
linux-fips
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.14.4.0-1002.2
 None known
linux
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
 None known
linux-aws
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
 None known
linux-kvm
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
 None known
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
 None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 45 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93
 None known
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 45 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 45 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21
Show 45 moreShow less
4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83
 None known
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.4
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.2
 None known
linux-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1011.12
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.1
 None known
linux
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
 None known
linux-aws
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1.160000.2.22
6.12.0-160000.38.1.160000.2.22
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 885 CVEs
 before 6.12.0-160000.38.1
6.12.0-160000.38.1

History

History
RecordedChangedSources
affectedOSV
affectedOSV
factsOSV
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-63922 is a critical vulnerability (CVSS 9.8) in Linux, published July 19, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.71%, the 53rd percentile. Fixed in linux-lts 6.1.177-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,377 package rows, 2,505 versions, 6,836 references and the rest of 32 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 22 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open