CVE-2023-3268

An out of bounds (OOB) memory access flaw was found in the Linux kernel in...

7.1 HighFix available

An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs. This flaw could allow a local attacker to crash the system or leak kernel internal information.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: High

Exploit likelihood

0.52%Up 0.5 points since Jun 17, 2023

What each source reports

NVD Score used 7.1

Record: CVE-2023-3268
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness: CWE-125
Updated: 2026-11-02

CVE List 7.1

Record: CVE-2023-3268
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness: CWE-125
Updated: 2026-11-02

EUVDEUVD-2023-43944 7.1

Record: EUVD-2023-43944
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-r2p2-3cx2-xc3r 7.1

An out of bounds (OOB) memory access flaw was found in the Linux kernel in...

Record: GHSA-r2p2-3cx2-xc3r
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness: CWE-125
Updated: 2026-11-02

OSVAZL-27248 7.1

CVE-2023-3268 affecting package kernel for versions less than 5.15.122.1-2

Record: AZL-27248
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVBELL-CVE-2023-3268 7.1

CVE-2023-3268 does not affect BellSoft software

Record: BELL-CVE-2023-3268
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

Show 44 moreShow less

OSV 7.1

Record: CVE-2023-3268
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness: CWE-125
Updated: 2026-11-02

OSVDEBIAN-CVE-2023-3268 7.1

Record: DEBIAN-CVE-2023-3268
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVOESA-2023-1379 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local attacker to crash the system at device disconnect, possibly leading to a kernel information leak.(CVE-2023-3141)

An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation.(CVE-2023-35788)

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105_remove in drivers/media/pci/dm1105/dm1105.c.(CVE-2023-35824)

Record: OESA-2023-1379
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2023-1380 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105_remove in drivers/media/pci/dm1105/dm1105.c.(CVE-2023-35824)

Record: OESA-2023-1380
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2023-1381 7.1

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

A memory corruption flaw was found in the Linux kernel’s human interface device (HID) subsystem in how a user inserts a malicious USB device. This flaw allows a local user to crash or potentially escalate their privileges on the system.(CVE-2023-1073)

A memory leak flaw was found in the Linux kernel's Stream Control Transmission Protocol. This issue may occur when a user starts a malicious networking service and someone connects to this service. This could allow a local user to starve resources, causing a denial of service.(CVE-2023-1074)

In nf_tables_updtable, if nf_tables_table_enable returns an error, nft_trans_destroy is called to free the transaction object. nft_trans_destroy() calls list_del(), but the transaction was never placed on a list -- the list head is all zeroes, this results in a NULL pointer dereference.(CVE-2023-1095)

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c.(CVE-2023-35829)

Record: OESA-2023-1381
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVOESA-2023-1382 7.1

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c.(CVE-2023-35829)

Record: OESA-2023-1382
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVOESA-2023-1493 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c.(CVE-2023-35829)

An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemble_neg_contexts.(CVE-2023-38427)

An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/connection.c in ksmbd has an off-by-one error in memory allocation (because of ksmbd_smb2_check_message) that may lead to out-of-bounds access.(CVE-2023-38429)

An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read.(CVE-2023-38430)

A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. This issue could allow a local user to crash the system or potentially escalate their privileges on the system.(CVE-2023-4004)

Record: OESA-2023-1493
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:6583 8.2

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2023:6583
CVSS 3.1: 8.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:6901 7.8

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record: RHSA-2023:6901
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:7077 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2023:7077
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:0412 8.8

Red Hat Security Advisory: kernel security and bug fix update

Record: RHSA-2024:0412
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:1250 8.2

Red Hat Security Advisory: kernel security and bug fix update

Record: RHSA-2024:1250
CVSS 3.1: 8.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:1306 8.2

Red Hat Security Advisory: kernel-rt security and bug fix update

Record: RHSA-2024:1306
CVSS 3.1: 8.2 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2023-3268 7.1

Record: UBUNTU-CVE-2023-3268
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVALSA-2023:7077 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: tun: avoid double free in tun_free_netdev (CVE-2022-4744)
kernel: net/sched: multiple vulnerabilities (CVE-2023-3609, CVE-2023-3611, CVE-2023-4128, CVE-2023-4206, CVE-2023-4207, CVE-2023-4208)
kernel: out-of-bounds write in qfq_change_class function (CVE-2023-31436)
kernel: out-of-bounds write in hw_atl_utils_fw_rpc_wait (CVE-2021-43975)
kernel: Rate limit overflow messages in r8152 in intr_callback (CVE-2022-3594)
kernel: use after free flaw in l2cap_conn_del (CVE-2022-3640)
kernel: double free in usb_8dev_start_xmit (CVE-2022-28388)
kernel: vmwgfx: multiple vulnerabilities (CVE-2022-38457, CVE-2022-40133, CVE-2023-33951, CVE-2023-33952)
hw: Intel: Gather Data Sampling (GDS) side channel vulnerability (CVE-2022-40982)
kernel: Information leak in l2cap_parse_conf_req (CVE-2022-42895)
kernel: KVM: multiple vulnerabilities (CVE-2022-45869, CVE-2023-4155, CVE-2023-30456)
kernel: memory leak in ttusb_dec_exit_dvb (CVE-2022-45887)
kernel: speculative pointer dereference in do_prlimit (CVE-2023-0458)
kernel: use-after-free due to race condition in qdisc_graft (CVE-2023-0590)
kernel: x86/mm: Randomize per-cpu entry area (CVE-2023-0597)
kernel: HID: check empty report_list in hid_validate_values (CVE-2023-1073)
kernel: sctp: fail if no bound addresses can be used for a given scope (CVE-2023-1074)
kernel: hid: Use After Free in asus_remove (CVE-2023-1079)
kernel: use-after-free in drivers/media/rc/ene_ir.c (CVE-2023-1118)
kernel: hash collisions in the IPv6 connection lookup table (CVE-2023-1206)
kernel: ovl: fix use after free in struct ovl_aio_req (CVE-2023-1252)
kernel: denial of service in tipc_conn_close (CVE-2023-1382)
kernel: Use after free bug in btsdio_remove due to race condition (CVE-2023-1989)
kernel: Spectre v2 SMT mitigations problem (CVE-2023-1998)
kernel: ext4: use-after-free in ext4_xattr_set_entry (CVE-2023-2513)
kernel: fbcon: shift-out-of-bounds in fbcon_set_font (CVE-2023-3161)
kernel: out-of-bounds access in relay_file_read (CVE-2023-3268)
kernel: xfrm: NULL pointer dereference in xfrm_update_ae_params (CVE-2023-3772)
kernel: smsusb: use-after-free caused by do_submit_urb (CVE-2023-4132)
kernel: Race between task migrating pages and another task calling exit_mmap (CVE-2023-4732)
Kernel: denial of service in atm_tc_enqueue due to type confusion (CVE-2023-23455)
kernel: mpls: double free on sysctl allocation failure (CVE-2023-26545)
kernel: Denial of service issue in az6027 driver (CVE-2023-28328)
kernel: lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow (CVE-2023-28772)
kernel: blocking operation in dvb_frontend_get_event and wait_event_interruptible (CVE-2023-31084)
kernel: net: qcom/emac: race condition leading to use-after-free in emac_remove (CVE-2023-33203)
kernel: saa7134: race condition leading to use-after-free in saa7134_finidev (CVE-2023-35823)
kernel: dm1105: race condition leading to use-after-free in dm1105_remove.c (CVE-2023-35824)
kernel: r592: race condition leading to use-after-free in r592_remove (CVE-2023-35825)
kernel: net/tls: tls_is_tx_ready() checked list_entry (CVE-2023-1075)
kernel: use-after-free bug in remove function xgene_hwmon_remove (CVE-2023-1855)
kernel: Use after free bug in r592_remove (CVE-2023-3141)
kernel: gfs2: NULL pointer dereference in gfs2_evict_inode (CVE-2023-3212)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record: ALSA-2023:7077
Updated: 2026-11-02

OSVCLSA-2023-1690395161 No score

Fix of 12 CVEs

Bionic update: upstream stable patchset 2021-11-12 (LP: #1950816) // CVE- url: https://ubuntu.com/security/CVE-2021-20321
- ovl: fix missing negative dentry check in ovl_rename()
CVE-url: https://ubuntu.com/security/CVE-2021-20321
- ovl: cleanup unused var in rename2
Jammy update: v5.15.93 upstream stable release (LP: #2012665) // CVE-url: https://ubuntu.com/security/CVE-2023-3161
- fbcon: Check font dimension limits
CVE-url: https://ubuntu.com/security/CVE-2021-3753
- vt_kdsetmode: extend console locking
Jammy update: v5.15.75 upstream stable release (LP: #1996825) // CVE-url: https://ubuntu.com/security/CVE-2022-1184
- ext4: fix check for block being out of directory size
Jammy update: v5.15.61 upstream stable release (LP: #1990162) // CVE-url: https://ubuntu.com/security/CVE-2022-1184
- ext4: check if directory block is within i_size
Jammy update: v5.15.104 upstream stable release (LP: #2023225) // CVE-url: https://ubuntu.com/security/CVE-2023-1990
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
CVE-url: https://ubuntu.com/security/CVE-2023-3090
- ipvlan:Fix out-of-bounds caused by unclear skb->cb
Jammy update: v5.15.63 upstream stable release (LP: #1990564) // CVE-url: https://ubuntu.com/security/CVE-2023-3111
- btrfs: unset reloc control if transaction commit fails in prepare_to_relocate()
CVE-url: https://ubuntu.com/security/CVE-2023-3111
- Btrfs: fill relocation block rsv after allocation
- btrfs: check return value of btrfs_commit_transaction in relocation
CVE-url: https://ubuntu.com/security/CVE-2023-3141
- memstick: r592: Fix UAF bug in r592_remove due to race condition
CVE-url: https://ubuntu.com/security/CVE-2023-3212
- gfs2: Don't deref jdesc in evict
CVE-url: https://ubuntu.com/security/CVE-2023-3268
- kernel/relay.c: fix read_pos error when multiple readers
- relayfs: fix out-of-bounds access in relay_file_read
CVE-url: https://ubuntu.com/security/CVE-2023-3390
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
CVE-url: https://ubuntu.com/security/CVE-2023-35824
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition

Record: CLSA-2023-1690395161
Updated: 2026-11-02

OSVCLSA-2023-1690395540 No score

Fix of 12 CVEs

Bionic update: upstream stable patchset 2021-11-12 (LP: #1950816) // CVE- url: https://ubuntu.com/security/CVE-2021-20321
- ovl: fix missing negative dentry check in ovl_rename()
CVE-url: https://ubuntu.com/security/CVE-2021-20321
- ovl: cleanup unused var in rename2
Jammy update: v5.15.93 upstream stable release (LP: #2012665) // CVE-url: https://ubuntu.com/security/CVE-2023-3161
- fbcon: Check font dimension limits
CVE-url: https://ubuntu.com/security/CVE-2021-3753
- vt_kdsetmode: extend console locking
Jammy update: v5.15.75 upstream stable release (LP: #1996825) // CVE-url: https://ubuntu.com/security/CVE-2022-1184
- ext4: fix check for block being out of directory size
Jammy update: v5.15.61 upstream stable release (LP: #1990162) // CVE-url: https://ubuntu.com/security/CVE-2022-1184
- ext4: check if directory block is within i_size
Jammy update: v5.15.104 upstream stable release (LP: #2023225) // CVE-url: https://ubuntu.com/security/CVE-2023-1990
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
CVE-url: https://ubuntu.com/security/CVE-2023-3090
- ipvlan:Fix out-of-bounds caused by unclear skb->cb
Jammy update: v5.15.63 upstream stable release (LP: #1990564) // CVE-url: https://ubuntu.com/security/CVE-2023-3111
- btrfs: unset reloc control if transaction commit fails in prepare_to_relocate()
CVE-url: https://ubuntu.com/security/CVE-2023-3111
- Btrfs: fill relocation block rsv after allocation
- btrfs: check return value of btrfs_commit_transaction in relocation
CVE-url: https://ubuntu.com/security/CVE-2023-3141
- memstick: r592: Fix UAF bug in r592_remove due to race condition
CVE-url: https://ubuntu.com/security/CVE-2023-3212
- gfs2: Don't deref jdesc in evict
CVE-url: https://ubuntu.com/security/CVE-2023-3268
- kernel/relay.c: fix read_pos error when multiple readers
- relayfs: fix out-of-bounds access in relay_file_read
CVE-url: https://ubuntu.com/security/CVE-2023-3390
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
CVE-url: https://ubuntu.com/security/CVE-2023-35824
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition

Record: CLSA-2023-1690395540
Updated: 2026-11-02

OSVCLSA-2023-1693429208 No score

Fix of 17 CVEs

Jammy update: v5.15.75 upstream stable release (LP: #1996825) // CVE-url: https://ubuntu.com/security/CVE-2022-1184
- ext4: fix check for block being out of directory size
Jammy update: v5.15.61 upstream stable release (LP: #1990162) // CVE-url: https://ubuntu.com/security/CVE-2022-1184
- ext4: check if directory block is within i_size
Jammy update: v5.15.68 upstream stable release (LP: #1993003) // CVE-url: https://ubuntu.com/security/CVE-2022-3303
- ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC
CVE-2023-1670 // CVE-url: https://ubuntu.com/security/CVE-2023-1670
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
CVE-url: https://ubuntu.com/security/CVE-2023-1989
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
Jammy update: v5.15.104 upstream stable release (LP: #2023225) // CVE-url: https://ubuntu.com/security/CVE-2023-1990
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
CVE-url: https://ubuntu.com/security/CVE-2023-2007
- scsi: dpt_i2o: Remove obsolete driver
CVE-2023-2124 // CVE-url: https://ubuntu.com/security/CVE-2023-2124
- xfs: verify buffer contents when we skip log replay
CVE-url: https://ubuntu.com/security/CVE-2023-23000
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
CVE-url: https://ubuntu.com/security/CVE-2023-28466
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
CVE-url: https://ubuntu.com/security/CVE-2023-3090
- ipvlan:Fix out-of-bounds caused by unclear skb->cb
Jammy update: v5.15.63 upstream stable release (LP: #1990564) // CVE-url: https://ubuntu.com/security/CVE-2023-3111
- btrfs: unset reloc control if transaction commit fails in prepare_to_relocate()
CVE-url: https://ubuntu.com/security/CVE-2023-3111
- btrfs: check return value of btrfs_commit_transaction in relocation
CVE-url: https://ubuntu.com/security/CVE-2023-3141
- memstick: r592: Fix UAF bug in r592_remove due to race condition
CVE-url: https://ubuntu.com/security/CVE-2023-3212
- gfs2: Don't deref jdesc in evict
CVE-url: https://ubuntu.com/security/CVE-2023-3268
- kernel/relay.c: fix read_pos error when multiple readers
- relayfs: fix out-of-bounds access in relay_file_read
CVE-url: https://ubuntu.com/security/CVE-2023-3390
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
CVE-url: https://ubuntu.com/security/CVE-2023-35823
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
CVE-url: https://ubuntu.com/security/CVE-2023-35824
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
Miscellaneous Ubuntu changes
- [Config] updateconfigs for SCSI_DPT_I2O
Miscellaneous upstream changes
- fixup! UBUNTU: [Packaging]: add tuxcare suffix

Record: CLSA-2023-1693429208
Updated: 2026-11-02

OSVCLSA-2023-1693431257 No score

Fix of 17 CVEs

Jammy update: v5.15.75 upstream stable release (LP: #1996825) // CVE-url: https://ubuntu.com/security/CVE-2022-1184
- ext4: fix check for block being out of directory size
Jammy update: v5.15.61 upstream stable release (LP: #1990162) // CVE-url: https://ubuntu.com/security/CVE-2022-1184
- ext4: check if directory block is within i_size
Jammy update: v5.15.68 upstream stable release (LP: #1993003) // CVE-url: https://ubuntu.com/security/CVE-2022-3303
- ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC
CVE-2023-1670 // CVE-url: https://ubuntu.com/security/CVE-2023-1670
- xirc2ps_cs: Fix use after free bug in xirc2ps_detach
CVE-url: https://ubuntu.com/security/CVE-2023-1989
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
Jammy update: v5.15.104 upstream stable release (LP: #2023225) // CVE-url: https://ubuntu.com/security/CVE-2023-1990
- nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition
CVE-url: https://ubuntu.com/security/CVE-2023-2007
- scsi: dpt_i2o: Remove obsolete driver
CVE-2023-2124 // CVE-url: https://ubuntu.com/security/CVE-2023-2124
- xfs: verify buffer contents when we skip log replay
CVE-url: https://ubuntu.com/security/CVE-2023-23000
- phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
CVE-url: https://ubuntu.com/security/CVE-2023-28466
- net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf()
CVE-url: https://ubuntu.com/security/CVE-2023-3090
- ipvlan:Fix out-of-bounds caused by unclear skb->cb
Jammy update: v5.15.63 upstream stable release (LP: #1990564) // CVE-url: https://ubuntu.com/security/CVE-2023-3111
- btrfs: unset reloc control if transaction commit fails in prepare_to_relocate()
CVE-url: https://ubuntu.com/security/CVE-2023-3111
- btrfs: check return value of btrfs_commit_transaction in relocation
CVE-url: https://ubuntu.com/security/CVE-2023-3141
- memstick: r592: Fix UAF bug in r592_remove due to race condition
CVE-url: https://ubuntu.com/security/CVE-2023-3212
- gfs2: Don't deref jdesc in evict
CVE-url: https://ubuntu.com/security/CVE-2023-3268
- kernel/relay.c: fix read_pos error when multiple readers
- relayfs: fix out-of-bounds access in relay_file_read
CVE-url: https://ubuntu.com/security/CVE-2023-3390
- netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE
CVE-url: https://ubuntu.com/security/CVE-2023-35823
- media: saa7134: fix use after free bug in saa7134_finidev due to race condition
CVE-url: https://ubuntu.com/security/CVE-2023-35824
- media: dm1105: Fix use after free bug in dm1105_remove due to race condition
Miscellaneous Ubuntu changes
- [Config] updateconfigs for SCSI_DPT_I2O
Miscellaneous upstream changes
- fixup! UBUNTU: [Packaging]: add tuxcare suffix

Record: CLSA-2023-1693431257
Updated: 2026-11-02

OSVCLSA-2023-1695715460 No score

kernel: Fix of 24 CVEs

xen/xenbus: don't let xenbus_grant_ring() remove grants in error case {CVE-2022-23040}
xen/xenbus: Fix granting of vmalloc'd memory
xen/blkfront: don't use gnttab_query_foreign_access() for mapped status {CVE-2022-23036}
xen/grant-table: add gnttab_try_end_foreign_access() {CVE-2022-23036}
xen/blkfront: don't trust the backend response data blindly
xen/blkfront: don't take local copy of a request from the ring page
xen/blkfront: read response from backend only once
net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4128}
net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4128}
net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4128}
media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 {CVE-2022-45919}
media: dvb-core: Fix use-after-free due on race condition at dvb_net {CVE-2022-45886}
vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567}
Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283}
net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() {CVE-2023-4387}
tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() {CVE-2022-1462}
tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push()
mmu_gather: Force tlb-flush VM_PFNMAP vmas {CVE-2022-39188}
net/sched: cls_u32: Fix reference counter leak leading to overflow {CVE-2023-3609}
netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE {CVE-2023-3117}
relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268}
xfs: verify buffer contents when we skip log replay {CVE-2023-2124}
netfilter: nf_tables: stricter validation of element data {CVE-2022-34918}
tpm: fix reference counting for struct tpm_chip {CVE-2022-2977}
drm/virtio: Fix compile warnings (ents/nents) {CVE-2023-22998}
drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling {CVE-2023-22998}
drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init {CVE-2023-22998}
gfs2: Don't deref jdesc in evict {CVE-2023-3212}
drm/i915/gvt: fix double free bug in split_2MB_gtt_entry {CVE-2022-3707}
drm/amdkfd: Check for null pointer after calling kmemdup {CVE-2022-3108}
hv_netvsc: Add check for kvmalloc_array {CVE-2022-3107}
sfc_ef100: potential dereference of null pointer {CVE-2022-3106}
RDMA/uverbs: Check for null return of kmalloc_array {CVE-2022-3105}
drm: use the lookup lock in drm_is_current_master {CVE-2022-1280}
drm: add a locked version of drm_is_current_master {CVE-2022-1280}
drm: serialize drm_file.master with a new spinlock {CVE-2022-1280}
drm/vmwgfx: fix potential UAF in vmwgfx_surface.c {CVE-2022-1280}
drm: protect drm_master pointers in drm_lease.c {CVE-2022-1280}

Record: CLSA-2023-1695715460
Updated: 2026-11-02

OSVCLSA-2023-1695716575 No score

kernel: Fix of 28 CVEs

xen/xenbus: don't let xenbus_grant_ring() remove grants in error case {CVE-2022-23040}
xen/xenbus: Fix granting of vmalloc'd memory
xen/blkfront: don't use gnttab_query_foreign_access() for mapped status {CVE-2022-23036}
xen/grant-table: add gnttab_try_end_foreign_access() {CVE-2022-23036}
xen/blkfront: don't trust the backend response data blindly
xen/blkfront: don't take local copy of a request from the ring page
xen/blkfront: read response from backend only once
net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4128}
net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4128}
net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4128}
media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 {CVE-2022-45919}
media: dvb-core: Fix use-after-free due on race condition at dvb_net {CVE-2022-45886}
vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567}
Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283}
net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() {CVE-2023-4387}
tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() {CVE-2022-1462}
tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push()
mmu_gather: Force tlb-flush VM_PFNMAP vmas {CVE-2022-39188}
net/sched: cls_u32: Fix reference counter leak leading to overflow {CVE-2023-3609}
netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE {CVE-2023-3117}
relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268}
xfs: verify buffer contents when we skip log replay {CVE-2023-2124}
netfilter: nf_tables: stricter validation of element data {CVE-2022-34918}
tpm: fix reference counting for struct tpm_chip {CVE-2022-2977}
drm/virtio: Fix compile warnings (ents/nents) {CVE-2023-22998}
drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling {CVE-2023-22998}
drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init {CVE-2023-22998}
gfs2: Don't deref jdesc in evict {CVE-2023-3212}
drm/i915/gvt: fix double free bug in split_2MB_gtt_entry {CVE-2022-3707}
drm/amdkfd: Check for null pointer after calling kmemdup {CVE-2022-3108}
hv_netvsc: Add check for kvmalloc_array {CVE-2022-3107}
sfc_ef100: potential dereference of null pointer {CVE-2022-3106}
RDMA/uverbs: Check for null return of kmalloc_array {CVE-2022-3105}
drm: use the lookup lock in drm_is_current_master {CVE-2022-1280}
drm: add a locked version of drm_is_current_master {CVE-2022-1280}
drm: serialize drm_file.master with a new spinlock {CVE-2022-1280}
drm/vmwgfx: fix potential UAF in vmwgfx_surface.c {CVE-2022-1280}
drm: protect drm_master pointers in drm_lease.c {CVE-2022-1280}
KVM: avoid NULL pointer dereference in kvm_dirty_ring_push {CVE-2022-1263}

Record: CLSA-2023-1695716575
Updated: 2026-11-02

OSVCLSA-2024-1705494430 No score

kernel: Fix of 16 CVEs

Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283}
ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet {CVE-2023-6932}
smb: client: fix OOB in smbCalcSize() {CVE-2023-6606}
net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623}
net/sched: cls_fw: Fix improper refcount update leads to use-after-free {CVE-2023-3776}
vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567}
relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268}
btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() {CVE-2023-3111}
xirc2ps_cs: Fix use after free bug in xirc2ps_detach {CVE-2023-1670}
Bluetooth: L2CAP: Fix u8 overflow {CVE-2022-45934}
Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM {CVE-2022-42896}
tcp: Fix data races around icsk->icsk_af_ops. {CVE-2022-3566}
ipv6: use prandom_u32() for ID generation {CVE-2021-45485}

Record: CLSA-2024-1705494430
Updated: 2026-11-02

OSVCLSA-2024-1705494763 No score

kernel: Fix of 13 CVEs

Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283}
ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet {CVE-2023-6932}
smb: client: fix OOB in smbCalcSize() {CVE-2023-6606}
net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623}
net/sched: cls_fw: Fix improper refcount update leads to use-after-free {CVE-2023-3776}
vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567}
relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268}
btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() {CVE-2023-3111}
xirc2ps_cs: Fix use after free bug in xirc2ps_detach {CVE-2023-1670}
Bluetooth: L2CAP: Fix u8 overflow {CVE-2022-45934}
Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM {CVE-2022-42896}
tcp: Fix data races around icsk->icsk_af_ops. {CVE-2022-3566}
ipv6: use prandom_u32() for ID generation {CVE-2021-45485}

Record: CLSA-2024-1705494763
Updated: 2026-11-02

OSVCLSA-2024-1705496067 No score

kernel: Fix of 16 CVEs

Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283}
ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet {CVE-2023-6932}
smb: client: fix OOB in smbCalcSize() {CVE-2023-6606}
net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623}
net/sched: cls_fw: Fix improper refcount update leads to use-after-free {CVE-2023-3776}
vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567}
relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268}
btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() {CVE-2023-3111}
xirc2ps_cs: Fix use after free bug in xirc2ps_detach {CVE-2023-1670}
Bluetooth: L2CAP: Fix u8 overflow {CVE-2022-45934}
Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM {CVE-2022-42896}
tcp: Fix data races around icsk->icsk_af_ops. {CVE-2022-3566}
ipv6: use prandom_u32() for ID generation {CVE-2021-45485}

Record: CLSA-2024-1705496067
Updated: 2026-11-02

OSVCLSA-2024-1705496273 No score

kernel: Fix of 13 CVEs

Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283}
ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet {CVE-2023-6932}
smb: client: fix OOB in smbCalcSize() {CVE-2023-6606}
net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623}
net/sched: cls_fw: Fix improper refcount update leads to use-after-free {CVE-2023-3776}
vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567}
relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268}
btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() {CVE-2023-3111}
xirc2ps_cs: Fix use after free bug in xirc2ps_detach {CVE-2023-1670}
Bluetooth: L2CAP: Fix u8 overflow {CVE-2022-45934}
Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM {CVE-2022-42896}
tcp: Fix data races around icsk->icsk_af_ops. {CVE-2022-3566}
ipv6: use prandom_u32() for ID generation {CVE-2021-45485}

Record: CLSA-2024-1705496273
Updated: 2026-11-02

OSVCLSA-2024-1712263970 No score

kernel: Fix of 48 CVEs

bpf: Fix re-attachment branch in bpf_tracing_prog_attach {CVE-2024-26591}
ext4: improve error recovery code paths in __ext4_remount() {CVE-2024-0775}
smb: client: fix OOB in receive_encrypted_standard() {CVE-2024-0565}
mtd: Fix gluebi NULL pointer dereference caused by ftl notifier {CVE-2023-52449}
net: prevent mss overflow in skb_segment() {CVE-2023-52435}
smb: client: fix potential OOBs in smb2_parse_contexts() {CVE-2023-52434}
atm: Fix Use-After-Free in do_vcc_ioctl {CVE-2023-51780}
ida: Fix crash in ida_free when the bitmap is empty {CVE-2023-6915}
nvmet: nul-terminate the NQNs passed in the connect command {CVE-2023-6121}
netfilter: nf_tables: Reject tables of unsupported family {CVE-2023-6040}
Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work {CVE-2023-1989}
NFSD: fix use-after-free in nfsd4_ssc_setup_dul() {CVE-2023-1652}
x86/bugs: Flush IBP in ib_prctl_set() {CVE-2023-0045}
Bluetooth: L2CAP: Fix u8 overflow {CVE-2022-45934}
Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm {CVE-2022-42896}
x86: Clear .brk area at early boot {CVE-2022-36123}
misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os {CVE-2022-3424}
Fix double fget() in vhost_net_set_backend() {CVE-2023-1838}
wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() {CVE-2023-1380}
netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one {CVE-2023-39197}
relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268}
ipv6: rpl: Fix Route of Death. {CVE-2023-2156}
ipv6: Fix out-of-bounds access in ipv6_find_tlv() {CVE-2023-2156}
net: rpl: fix rpl header size calculation {CVE-2023-2156}
memstick: r592: Fix UAF bug in r592_remove due to race condition {CVE-2023-3141}
ovl: fix use after free in struct ovl_aio_req {CVE-2023-1252}
drm/amdgpu: Fix potential fence use-after-free v2 {CVE-2023-51042}
netfilter: nf_tables: reject QUEUE/DROP verdict parameters {CVE-2024-1086}
perf: Fix perf_event_validate_size() lockdep splat {CVE-2023-6931}
perf: Fix perf_event_validate_size() {CVE-2023-6931}
drm/atomic: Fix potential use-after-free in nonblocking commits {CVE-2023-51043}
nvmet-tcp: Fix the H2C expected PDU len calculation {CVE-2023-6356}
nvmet-tcp: remove boilerplate code {CVE-2023-6356}
nvmet-tcp: fix a crash in nvmet_req_complete() {CVE-2023-6356}
nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length {CVE-2023-6356}
net: tls, update curr on splice as well {CVE-2024-0646}
smb: client: fix potential OOB in smb2_dump_detail() {CVE-2023-6610}
smb: client: fix potential OOB in cifs_dump_detail() {CVE-2023-6610}
smb: client: fix OOB in smbCalcSize() {CVE-2023-6606}
ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet {CVE-2023-6932}
RDMA/core: Update CMA destination address on rdma_resolve_addr {CVE-2023-2176}
RDMA/core: Refactor rdma_bind_addr {CVE-2023-2176}
nfp: fix use-after-free in area_cache_get() {CVE-2022-3545}
netfilter: nf_tables: skip bound chain on rule flush {CVE-2023-3777}
Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb {CVE-2023-40283}
drivers: net: slip: fix NPD bug in sl_tx_timeout() {CVE-2022-41858}
net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve {CVE-2023-4623}
net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623}
vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF {CVE-2023-3567}
nvmet-tcp: Fix a possible UAF in queue intialization setup {CVE-2023-5178}
net: tun: fix bugs for oversize packet when napi frags enabled {CVE-2023-3812}
netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c {CVE-2023-42753}
bpf: Fix incorrect verifier pruning due to missing register precision taints {CVE-2023-2163}
net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free {CVE-2023-4206}…

Record: CLSA-2024-1712263970
Updated: 2026-11-02

OSVCLSA-2024-1720468480 No score

kernel: Fix of 101 CVEs

kvm: initialize all of the kvm_debugregs structure before sending it to userspace {CVE-2023-1513}
wifi: mac80211: fix MBSSID parsing use-after-free {CVE-2022-42719}
mac80211: always allocate struct ieee802_11_elems {CVE-2022-42719}
netfilter: nf_tables: initialize registers in nft_do_chain() {CVE-2022-1016}
xprtrdma: fix incorrect header size calculations {CVE-2022-0812}
net: usb: fix memory leak in smsc75xx_bind {CVE-2021-47171}
i2c: i801: Don't generate an interrupt on bus reset {CVE-2021-47153}
pid: take a reference when initializing cad_pid {CVE-2021-47118}
Input: appletouch - initialize work before device registration {CVE-2021-46932}
HID: usbhid: fix info leak in hid_submit_ctrl {CVE-2021-46906}
quota: check block number when reading the block in quota file {CVE-2021-45868}
mwifiex: Fix skb_over_panic in mwifiex_usb_recv() {CVE-2021-43976}
atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait {CVE-2021-43975}
isdn: cpai: check ctr->cnr to avoid array index out of bound {CVE-2021-43389}
usb: hso: fix error handling code of hso_create_net_device {CVE-2021-37159}
can: bcm: fix infoleak in struct bcm_msg_head {CVE-2021-34693}
dm ioctl: fix out of bounds array access when no devices {CVE-2021-31916}
KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref {CVE-2021-30178}
perf/x86/intel: Fix a crash caused by zero PEBS status {CVE-2021-28971}
btrfs: fix race when cloning extent buffer during rewind of an old root {CVE-2021-28964}
ovl: fix missing negative dentry check in ovl_rename() {CVE-2021-20321}
drm/ttm/nouveau: don't call tt destroy callback on alloc failure. {CVE-2021-20292}
bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds() {CVE-2021-4159}
btrfs: unlock newly allocated extent buffer after error {CVE-2021-4149}
tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. {CVE-2021-3679}
net: mac802154: Fix general protection fault {CVE-2021-3659}
nfsd4: readdirplus shouldn't return parent of export {CVE-2021-3178}
Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2021-0129}
drm/nouveau: clean up all clients on device removal {CVE-2020-27820}
drm/nouveau: Add a dedicated mutex for the clients list {CVE-2020-27820}
drm/nouveau: use drm_dev_unplug() during device removal {CVE-2020-27820}
Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2020-26555}
vsock: Fix memory leak in vsock_connect() {CVE-2022-3629}
RDMA/core: Don't infoleak GRH fields {CVE-2021-3923}
xen/netfront: force data bouncing when backend is untrusted {CVE-2022-33741}
net: Rename and export copy_skb_header
floppy: use a statically allocated error counter {CVE-2022-1652}
fuse: fix pipe buffer lifetime for direct_io {CVE-2022-1011}
aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts {CVE-2024-26898}
smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752}
media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445}
media: dm1105: Fix use after free bug in dm1105_remove due to race condition {CVE-2023-35824}
perf: Fix perf_event_validate_size() lockdep splat {CVE-2023-6931}
perf: Fix perf_event_validate_size() {CVE-2023-6931}
net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623}
relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268}
xfs: verify buffer contents when we skip log replay {CVE-2023-2124}
Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition {CVE-2023-1989}
Fix double fget() in vhost_net_set_backend() {CVE-2023-1838}
net/sched: cls_tcindex: downgrade to imperfect hash {CVE-2023-1829}
xen/netfront: fix leaking data in shared pages {CVE-2022-33740}
can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path {CVE-2022-28390}
xen/blkfront: fix leaking data in shared pages {CVE-2022-26365}
mISDN: fix use-after-free bugs in l1oip timer…

Record: CLSA-2024-1720468480
Updated: 2026-11-02

OSVMGASA-2023-0201 No score

Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.15.117 and fixes atleast the following security issues:

In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs (CVE-2022-48425).

An out-of-bounds memory access flaw was found in the Linux kernel’s XFS file system in how a user restores an XFS image after failure (with a dirty log journal). This flaw allows a local user to crash or potentially escalate their privileges on the system (CVE-2023-2124).

A flaw was found in the networking subsystem of the Linux kernel within the handling of the RPL protocol. This issue results from the lack of proper handling of user-supplied data, which can lead to an assertion failure. This may allow an unauthenticated remote attacker to create a denial of service condition on the system (CVE-2023-2156).

A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub-component (CVE-2023-2269).

A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic (CVE-2023-3212).

An issue was discovered in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel 6.2. There is a blocking operation when a task is in !TASK_RUNNING. In dvb_frontend_get_event, wait_event_interruptible is called; the condition is dvb_frontend_test_event(fepriv,events). In dvb_frontend_test_event, down(&fepriv->sem) is called. However, wait_event_interruptible would put the process to sleep, and down(&fepriv->sem) may block the process (CVE-2023-31084).

In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled (CVE-2023-32233).

An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/super.c because ext4_group_desc_csum does not properly check an offset (CVE-2023-34256).

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c (CVE-2023-35823).

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105_remove in drivers/media/pci/dm1105/dm1105.c (CVE-2023-35824).

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c (CVE-2023-35828).

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c (CVE-2023-35829).

For other upstream fixes in this update, see the referenced changelogs.

Record: MGASA-2023-0201
Updated: 2026-11-02

OSVMGASA-2023-0202 No score

Updated kernel-linus packages fix security vulnerabilities

This kernel-linus update is based on upstream 5.15.117 and fixes atleast the following security issues:

In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs (CVE-2022-48425).

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c (CVE-2023-35823).

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105_remove in drivers/media/pci/dm1105/dm1105.c (CVE-2023-35824).

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c (CVE-2023-35828).

An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c (CVE-2023-35829).

For other upstream fixes in this update, see the referenced changelogs.

Record: MGASA-2023-0202
Updated: 2026-11-02

OSVSUSE-SU-2023:2804-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842).
CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051).
CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606).
CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039).
CVE-2023-3268: Fixed an out of bounds (OOB) memory access flaw in relay_file_read_start_pos in kernel/relay.c (bsc#1212502).
CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533).
CVE-2023-35824: Fixed a use-after-free in dm1105_remove in drivers/media/pci/dm1105/dm1105.c (bsc#1212501).
CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154).
CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129).
CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212128).
CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600).
CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779).
CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604).

The following non-security bugs were fixed:

Decrease the number of SMB3 smbdirect client SGEs (bsc#1190317).
Drop dvb-core fix patch due to bug (bsc#1205758).
Fix formatting of client smbdirect RDMA logging (bsc#1190317).
Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
Fix usrmerge error (boo#1211796)
Handle variable number of SGEs in client smbdirect send (bsc#1190317).
Reduce client smbdirect max receive segment size (bsc#1190317).
Squashfs: fix handling and sanity checking of xattr_ids count (git-fixes).
affs: initialize fsdata in affs_truncate() (git-fixes).
bnx2x: Check if transceiver implements DDM before access (git-fixes).
bnxt_en: Fix mqprio and XDP ring checking logic (git-fixes).
bnxt_en: Fix typo in PCI id to device description string mapping (git-fixes).
bnxt_en: Query default VLAN before VNIC setup on a VF (git-fixes).
bnxt_en: Remove debugfs when pci_register_driver failed (git-fixes).
bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (git-fixes).
bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer (git-fixes).
bnxt_en: reclaim max resources if sriov enable fails (git-fixes).
bonding: show full hw address in sysfs for slave entries (git-fixes).
cdc-ncm: avoid overflow in sanity checking (git-fixes).
ceph: fix use-after-free bug for inodes when flushing capsnaps (bsc#1212938).
cifs: Add helper function to check smb1+ server (bsc#1190317).
cifs: Convert struct fealist away from 1-element array (bsc#1190317).
cifs: Fix connections leak when tlink setup failed (bsc#1190317).
cifs: Fix lost destroy smbd connection when MR allocate failed (bsc#1190317).
cifs: Fix memory leak when build ntlmssp negotiate blob failed (bsc#1190317).
cifs: Fix oops due to uncleared server->smbd_conn in reconnect (bsc#1190317).
cifs: Fix pages array leak when writedata alloc failed in cifs_writedata_alloc() (bsc#1190317).
cifs: Fix pages leak when writedata alloc failed in cifs_write_from_iter() (bsc#1190317).
cifs: Fix smb2_set_path_size() (bsc#1190317).
cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message…

Record: SUSE-SU-2023:2804-1
Updated: 2026-11-02

OSVSUSE-SU-2023:2808-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600).
CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604).
CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039).
CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779).
CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533).
CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842).
CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051).
CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129).
CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212128).
CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154).
CVE-2023-3268: Fixed an out of bounds (OOB) memory access flaw in relay_file_read_start_pos in kernel/relay.c (bsc#1212502).
CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606).
CVE-2023-35824: Fixed a use-after-free in dm1105_remove in drivers/media/pci/dm1105/dm1105.c (bsc#1212501).

The following non-security bugs were fixed:

Also include kernel-docs build requirements for ALP
Avoid unsuported tar parameter on SLE12
CDC-NCM: avoid overflow in sanity checking (git-fixes).
CIFS: Spelling s/EACCESS/EACCES/ (bsc#1190317).
Decrease the number of SMB3 smbdirect client SGEs (bsc#1190317).
Fix formatting of client smbdirect RDMA logging (bsc#1190317).
Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
Generalize kernel-doc build requirements.
Handle variable number of SGEs in client smbdirect send (bsc#1190317).
Move obsolete KMP list into a separate file. The list of obsoleted KMPs varies per release, move it out of the spec file.
Move setting %%build_html to config.sh
Move setting %%split_optional to config.sh
Move setting %%supported_modules_check to config.sh
Move the kernel-binary conflicts out of the spec file. Thie list of conflicting packages varies per release. To reduce merge conflicts move the list out of the spec file.
PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error (git-fixes).
PCI/MSI: Destroy sysfs before freeing entries (git-fixes).
PCI/MSI: Fix pci_irq_vector()/pci_irq_get_affinity() (git-fixes).
PCI/MSI: Mask MSI-X vectors only on success (git-fixes).
PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros (git-fixes).
PCI: aardvark: Clear all MSIs at setup (git-fixes).
PCI: aardvark: Do not clear status bits of masked interrupts (git-fixes).
PCI: aardvark: Do not unmask unused interrupts (git-fixes).
PCI: aardvark: Fix return value of MSI domain .alloc() method (git-fixes).
PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG (git-fixes).
PCI: aardvark: Replace custom macros by standard linux/pci_regs.h macros (git-fixes).
PCI: pciehp: Clear cmd_busy bit in polling mode (git-fixes).
PCI: pciehp: Fix infinite loop in IRQ handler upon power fault (git-fixes).
README.BRANCH: Add Miroslav Franc as a co-maintainer
Reduce client smbdirect max receive segment size (bsc#1190317).
Squashfs: fix handling and sanity checking of xattr_ids count (git-fixes).
Trim obsolete KMP list. SLE11 is out of support, we do not need to handle…

Record: SUSE-SU-2023:2808-1
Updated: 2026-11-02

OSVSUSE-SU-2023:2810-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842).
CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606).
CVE-2023-35828: Fixed a use-after-free flaw in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c (bsc#1212513).
CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039).
CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533).
CVE-2023-3268: Fixed an out of bounds (OOB) memory access flaw in relay_file_read_start_pos in kernel/relay.c (bsc#1212502).
CVE-2023-35824: Fixed a use-after-free in dm1105_remove in drivers/media/pci/dm1105/dm1105.c (bsc#1212501).
CVE-2023-35823: Fixed a use-after-free flaw in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c (bsc#1212494).
CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/sched/cls_flower.c (bsc#1212504).
CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154).
CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129).
CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212128).
CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600).

The following non-security bugs were fixed:

Drivers: hv: vmbus: Optimize vmbus_on_event (bsc#1211622).
Drivers: vmbus: Check for channel allocation before looking up relids (git-fixes).
Drop dvb-core fix patch due to bug (bsc#1205758).
Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
Fix usrmerge error (boo#1211796)
Remove obsolete KMP obsoletes (bsc#1210469).
Replace mkinitrd dependency with dracut (bsc#1202353). Also update mkinitrd refrences in documentation and comments.
cifs: do not include page data when checking signature (bsc#1200217).
cifs: fix negotiate context parsing (bsc#1210301).
cifs: fix open leaks in open_cached_dir() (bsc#1209342).
google/gve:fix repeated words in comments (bsc#1211519).
gve: Adding a new AdminQ command to verify driver (bsc#1211519).
gve: Cache link_speed value from device (bsc#1211519).
gve: Fix GFP flags when allocing pages (bsc#1211519).
gve: Fix error return code in gve_prefill_rx_pages() (bsc#1211519).
gve: Fix spelling mistake 'droping' -> 'dropping' (bsc#1211519).
gve: Handle alternate miss completions (bsc#1211519).
gve: Reduce alloc and copy costs in the GQ rx path (bsc#1211519).
gve: Remove the code of clearing PBA bit (bsc#1211519).
gve: Secure enough bytes in the first TX desc for all TCP pkts (bsc#1211519).
gve: enhance no queue page list detection (bsc#1211519).
ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592).
k-m-s: Drop Linux 2.6 support
kernel-binary: install expoline.o (boo#1210791 bsc#1211089)
keys: Fix linking a duplicate key to a keyring's assoc_array (bsc#1207088).
rpm/kernel-binary.spec.in: Add Provides of kernel-preempt (jsc#SLE-18857) For smooth migration with the former kernel-preempt user, kernel-default provides kernel-preempt now when CONFIG_PREEMPT_DYNAMIC is defined.
rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm
rpm/kernel-binary.spec.in: Fix missing kernel-preempt-devel and KMP Provides (bsc#1199046)
rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435)
s390,dcssblk,dax: Add dax zero_page_range operation to dcssblk…

Record: SUSE-SU-2023:2810-1
Updated: 2026-11-02

OSVSUSE-SU-2023:2822-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842).
CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051).
CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606).
CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039).
CVE-2023-3268: Fixed an out of bounds (OOB) memory access flaw in relay_file_read_start_pos in kernel/relay.c (bsc#1212502).
CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533).
CVE-2023-35824: Fixed a use-after-free in dm1105_remove in drivers/media/pci/dm1105/dm1105.c (bsc#1212501).
CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154).
CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129).
CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212128).
CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600).
CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779).
CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604).

The following non-security bugs were fixed:

Decrease the number of SMB3 smbdirect client SGEs (bsc#1190317).
Drop dvb-core fix patch due to bug (bsc#1205758).
Fix formatting of client smbdirect RDMA logging (bsc#1190317).
Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
Fix usrmerge error (boo#1211796).
Handle variable number of SGEs in client smbdirect send (bsc#1190317).
Reduce client smbdirect max receive segment size (bsc#1190317).
Remove usrmerge compatibility symlink in buildroot (boo#1211796)
affs: initialize fsdata in affs_truncate() (git-fixes).
bnx2x: Check if transceiver implements DDM before access (git-fixes).
bnxt_en: Fix mqprio and XDP ring checking logic (git-fixes).
bnxt_en: Fix typo in PCI id to device description string mapping (git-fixes).
bnxt_en: Query default VLAN before VNIC setup on a VF (git-fixes).
bnxt_en: Remove debugfs when pci_register_driver failed (git-fixes).
bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (git-fixes).
bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer (git-fixes).
bnxt_en: reclaim max resources if sriov enable fails (git-fixes).
bugzilla-create: always end email with @suse.com
bugzilla-create: take bugzilla email from BUGZILLA_ACCOUNT_EMAIL env var Some people have emails in bugzilla that are completely different than emails they use in git and providing one with -e option is tedious. Make bugzilla-create more flexible by providing the third options that sits between command line option and git-config automation.
cdc-ncm: avoid overflow in sanity checking (git-fixes).
ceph: fix use-after-free bug for inodes when flushing capsnaps (bsc#1212938).
cifs: Add helper function to check smb1+ server (bsc#1190317).
cifs: Convert struct fealist away from 1-element array (bsc#1190317).
cifs: Fix connections leak when tlink setup failed (bsc#1190317).
cifs: Fix lost destroy smbd connection when MR allocate failed (bsc#1190317).
cifs: Fix memory leak when build ntlmssp negotiate blob failed (bsc#1190317).
cifs: Fix oops due to uncleared server->smbd_conn in reconnect…

Record: SUSE-SU-2023:2822-1
Updated: 2026-11-02

OSVSUSE-SU-2023:2830-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604).
CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039).
CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779).
CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533).
CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842).
CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051).
CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129).
CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212128).
CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154).
CVE-2023-3268: Fixed an out of bounds flaw in relay_file_read_start_pos in kernel/relay.c that allowed a local attacker to crash the system or leak kernel internal information (bsc#1212502).
CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606).
CVE-2023-35824: Fixed a use-after-free in dm1105_remove in drivers/media/pci/dm1105/dm1105.c (bsc#1212501).

The following non-security bugs were fixed:

Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
Move setting %%build_html to config.sh
Move setting %%split_optional to config.sh
Move setting %%supported_modules_check to config.sh
rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm
rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435)

Record: SUSE-SU-2023:2830-1
Updated: 2026-11-02

OSVSUSE-SU-2023:2834-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842).
CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606).
CVE-2023-35828: Fixed a use-after-free flaw in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c (bsc#1212513).
CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039).
CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533).
CVE-2023-3268: Fixed an out of bounds (OOB) memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502).
CVE-2023-35824: Fixed a use-after-free in dm1105_remove in drivers/media/pci/dm1105/dm1105.c (bsc#1212501).
CVE-2023-35823: Fixed a use-after-free flaw in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c (bsc#1212494).
CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/sched/cls_flower.c (bsc#1212504).
CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154).
CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129).
CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212128).
CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600).

The following non-security bugs were fixed:

Drop dvb-core fix patch due to bug (bsc#1205758).
Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
fbcon: Check font dimension limits (CVE-2023-3161 bsc#1212154).
google/gve:fix repeated words in comments (bsc#1211519).
gve: Adding a new AdminQ command to verify driver (bsc#1211519).
gve: Cache link_speed value from device (bsc#1211519).
gve: Fix GFP flags when allocing pages (bsc#1211519).
gve: Fix error return code in gve_prefill_rx_pages() (bsc#1211519).
gve: Fix spelling mistake 'droping' -> 'dropping' (bsc#1211519).
gve: Handle alternate miss completions (bsc#1211519).
gve: Reduce alloc and copy costs in the GQ rx path (bsc#1211519).
gve: Remove the code of clearing PBA bit (bsc#1211519).
gve: Secure enough bytes in the first TX desc for all TCP pkts (bsc#1211519).
gve: enhance no queue page list detection (bsc#1211519).
rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm
rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435)
x86/build: Avoid relocation information in final vmlinux (bsc#1187829).

Record: SUSE-SU-2023:2834-1
Updated: 2026-11-02

OSVSUSE-SU-2023:2859-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600).
CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039).
CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533).
CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842).
CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129).
CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212128).
CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154).
CVE-2023-3268: Fixed an out of bounds (OOB) memory access flaw in relay_file_read_start_pos in kernel/relay.c (bsc#1212502).
CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606).
CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/sched/cls_flower.c (bsc#1212504).
CVE-2023-35823: Fixed a use-after-free flaw in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c (bsc#1212494).
CVE-2023-35824: Fixed a use-after-free in dm1105_remove in drivers/media/pci/dm1105/dm1105.c (bsc#1212501).
CVE-2023-35828: Fixed a use-after-free flaw in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c (bsc#1212513).

The following non-security bugs were fixed:

Also include kernel-docs build requirements for ALP
Avoid unsuported tar parameter on SLE12
Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
Fix usrmerge error (boo#1211796)
Generalize kernel-doc build requirements.
Move obsolete KMP list into a separate file. The list of obsoleted KMPs varies per release, move it out of the spec file.
Move setting %%build_html to config.sh
Move setting %%split_optional to config.sh
Move setting %%supported_modules_check to config.sh
Move the kernel-binary conflicts out of the spec file. Thie list of conflicting packages varies per release. To reduce merge conflicts move the list out of the spec file.
Remove obsolete rpm spec constructs defattr does not need to be specified anymore buildroot does not need to be specified anymore
Remove usrmerge compatibility symlink in buildroot (boo#1211796).
Trim obsolete KMP list. SLE11 is out of support, we do not need to handle upgrading from SLE11 SP1.
cifs: do not include page data when checking signature (bsc#1200217).
cifs: fix open leaks in open_cached_dir() (bsc#1209342).
google/gve:fix repeated words in comments (bsc#1211519).
gve: Adding a new AdminQ command to verify driver (bsc#1211519).
gve: Cache link_speed value from device (bsc#1211519).
gve: Fix GFP flags when allocing pages (bsc#1211519).
gve: Fix error return code in gve_prefill_rx_pages() (bsc#1211519).
gve: Fix spelling mistake 'droping' -> 'dropping' (bsc#1211519).
gve: Handle alternate miss completions (bsc#1211519).
gve: Reduce alloc and copy costs in the GQ rx path (bsc#1211519).
gve: Remove the code of clearing PBA bit (bsc#1211519).
gve: Secure enough bytes in the first TX desc for all TCP pkts (bsc#1211519).
gve: enhance no queue page list detection (bsc#1211519).
kernel-binary: Add back kernel-default-base guarded by option Add configsh option for splitting off kernel-default-base, and for not signing the kernel on non-efi
kernel-binary: install expoline.o (boo#1210791 bsc#1211089)
kernel-source: Remove unused macro variant_symbols
kernel-spec-macros: Fix up…

Record: SUSE-SU-2023:2859-1
Updated: 2026-11-02

OSVSUSE-SU-2023:3302-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418).
CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738).
CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287).
CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286).
CVE-2023-21400: Fixed several memory corruptions due to improper locking in io_uring (bsc#1213272).
CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131).
CVE-2023-2166: Fixed NULL pointer dereference in can_rcv_filter (bsc#1210627).
CVE-2023-2430: Fixed amissing lock for IOPOLL in io_cqring_event_overflow() in io_uring.c that could allow a privileged user to cause a denial of service (bsc#1211014).
CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867).
CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842).
CVE-2023-31083: Fixed race condition in hci_uart_tty_ioctl (bsc#1210780).
CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051).
CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245).
CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213061).
CVE-2023-3212: Fixed a NULL pointer dereference flaw in the gfs2 file system (bsc#1212265).
CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502).
CVE-2023-3389: Fixed a use-after-free vulnerability in the io_uring subsystem (bsc#1212838).
CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846).
CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059).
CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167).
CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213586).
CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585).
CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1213588).
CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).
CVE-2023-38409: Fixed a use-after-free in drivers/video/fbdev/core/fbcon.c (bsc#1213417).
CVE-2023-3863: Fixed a use-after-free flaw in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC (bsc#1213601).
CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1213812).

The following non-security bugs were fixed:

acpi/iort: remove erroneous id_count check in iort_node_get_rmr_info() (git-fixes).
acpi: cppc: add acpi disabled check to acpi_cpc_valid() (bsc#1212445).
acpi: cppc: add definition for undefined fadt preferred pm profile value (bsc#1212445).
acpi: fix suspend with xen pv (git-fixes).
acpi: utils: fix acpi_evaluate_dsm_typed() redefinition error…

Record: SUSE-SU-2023:3302-1
Updated: 2026-11-02

OSVSUSE-SU-2023:3311-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418).
CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738).
CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287).
CVE-2023-21400: Fixed several memory corruptions due to improper locking in io_uring (bsc#1213272).
CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131).
CVE-2023-2166: Fixed NULL pointer dereference in can_rcv_filter (bsc#1210627).
CVE-2023-31083: Fixed race condition in hci_uart_tty_ioctl (bsc#1210780).
CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502).
CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167).
CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213586).
CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585).
CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1213588).
CVE-2023-38409: Fixed an issue in set_con2fb_map in drivers/video/fbdev/core/fbcon.c. Because an assignment occurs only for the first vc, the fbcon_registered_fb and fbcon_display arrays can be desynchronized in fbcon_mode_deleted (the con2fb_map points at the old fb_info) (bsc#1213417).
CVE-2023-3863: Fixed a use-after-free flaw in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC. This flaw allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).
CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1213812).

The following non-security bugs were fixed:

ACPI: CPPC: Add ACPI disabled check to acpi_cpc_valid() (bsc#1212445).
ACPI: CPPC: Add definition for undefined FADT preferred PM profile value (bsc#1212445).
ACPI/IORT: Remove erroneous id_count check in iort_node_get_rmr_info() (git-fixes).
ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error (git-fixes).
afs: Adjust ACK interpretation to try and cope with NAT (git-fixes).
afs: Fix access after dec in put functions (git-fixes).
afs: Fix afs_getattr() to refetch file status if callback break occurred (git-fixes).
afs: Fix dynamic root getattr (git-fixes).
afs: Fix fileserver probe RTT handling (git-fixes).
afs: Fix infinite loop found by xfstest generic/676 (git-fixes).
afs: Fix lost servers_outstanding count (git-fixes).
afs: Fix server->active leak in afs_put_server (git-fixes).
afs: Fix setting of mtime when creating a file/dir/symlink (git-fixes).
afs: Fix updating of i_size with dv jump from server (git-fixes).
afs: Fix vlserver probe RTT handling (git-fixes).
afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked (git-fixes).
afs: Use refcount_t rather than atomic_t (git-fixes).
afs: Use the operation issue time instead of the reply time for callbacks (git-fixes).
ALSA: emu10k1: roll up loops in DSP setup code for Audigy (git-fixes).
ALSA: hda/realtek: Add quirk for Clevo NS70AU (git-fixes).
ALSA: hda/realtek: Add support for DELL Oasis 13/14/16 laptops (git-fixes).
ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx (git-fixes).
ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp (git-fixes).
ALSA: hda/realtek - remove 3k pull low procedure (git-fixes).
ALSA: hda/realtek: Support ASUS G713PV laptop (git-fixes).
ALSA: hda/relatek: Enable Mute LED on HP 250 G8 (git-fixes).
ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum610 Wireless (git-fixes).
ALSA: usb-audio: Add new quirk FIXED_RATE for JBL Quantum810 Wireless (git-fixes).
ALSA: usb-audio: Add quirk for Microsoft Modern Wireless Headset (bsc#1207129).
ALSA: usb-audio: Always initialize…

Record: SUSE-SU-2023:3311-1
Updated: 2026-11-02

OSVSUSE-SU-2023:3313-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418).
CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738).
CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287).
CVE-2023-21400: Fixed several memory corruptions due to improper locking in io_uring (bsc#1213272).
CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131).
CVE-2023-2166: Fixed NULL pointer dereference in can_rcv_filter (bsc#1210627).
CVE-2023-31083: Fixed race condition in hci_uart_tty_ioctl (bsc#1210780).
CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502).
CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167).
CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213586).
CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585).
CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1213588).
CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1213812).

The following non-security bugs were fixed:

afs: Fix access after dec in put functions (git-fixes).
afs: Fix afs_getattr() to refetch file status if callback break occurred (git-fixes).
afs: Fix dynamic root getattr (git-fixes).
afs: Fix fileserver probe RTT handling (git-fixes).
afs: Fix infinite loop found by xfstest generic/676 (git-fixes).
afs: Fix lost servers_outstanding count (git-fixes).
afs: Fix server->active leak in afs_put_server (git-fixes).
afs: Fix setting of mtime when creating a file/dir/symlink (git-fixes).
afs: Fix updating of i_size with dv jump from server (git-fixes).
afs: Fix vlserver probe RTT handling (git-fixes).
afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked (git-fixes).
afs: Use refcount_t rather than atomic_t (git-fixes).
afs: Use the operation issue time instead of the reply time for callbacks (git-fixes).
afs: adjust ack interpretation to try and cope with nat (git-fixes).
alsa: emu10k1: roll up loops in dsp setup code for audigy (git-fixes).
alsa: hda/realtek: support asus g713pv laptop (git-fixes).
alsa: hda/relatek: enable mute led on hp 250 g8 (git-fixes).
alsa: usb-audio: add quirk for microsoft modern wireless headset (bsc#1207129).
alsa: usb-audio: update for native dsd support quirks (git-fixes).
asoc: atmel: fix the 8k sample parameter in i2sc master (git-fixes).
asoc: codecs: es8316: fix dmic config (git-fixes).
asoc: da7219: check for failure reading aad irq events (git-fixes).
asoc: da7219: flush pending aad irq when suspending (git-fixes).
asoc: fsl_sai: disable bit clock with transmitter (git-fixes).
asoc: fsl_spdif: silence output on stop (git-fixes).
asoc: rt5682-sdw: fix for jd event handling in clockstop mode0 (git-fixes).
asoc: rt711-sdca: fix for jd event handling in clockstop mode0 (git-fixes).
asoc: rt711: fix for jd event handling in clockstop mode0 (git-fixes).
asoc: wm8904: fill the cache for wm8904_adc_test_0 register (git-fixes).
ata: pata_ns87415: mark ns87560_tf_read static (git-fixes).
block, bfq: Fix division by zero error on zero wsum (bsc#1213653).
block: Fix a source code comment in include/uapi/linux/blkzoned.h (git-fixes).
can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (git-fixes).
ceph: do not let check_caps skip sending responses for revoke msgs (bsc#1213856).
coda: Avoid partial allocation of sig_inputArgs (git-fixes).
dlm: fix missing lkb refcount handling (git-fixes).
dlm: fix plock invalid read (git-fixes).
documentation: devices.txt: reconcile serial/ucc_uart minor numers (git-fixes). -…

Record: SUSE-SU-2023:3313-1
Updated: 2026-11-02

OSVSUSE-SU-2023:3318-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418).
CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738).
CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287).
CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286).
CVE-2023-21400: Fixed several memory corruptions due to improper locking in io_uring (bsc#1213272).
CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131).
CVE-2023-2166: Fixed NULL pointer dereference in can_rcv_filter (bsc#1210627).
CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867).
CVE-2023-31083: Fixed race condition in hci_uart_tty_ioctl (bsc#1210780).
CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245).
CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213061).
CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502).
CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846).
CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059).
CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167).
CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213586).
CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585).
CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1213588).
CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).
CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1213812).

The following non-security bugs were fixed:

acpi: utils: fix acpi_evaluate_dsm_typed() redefinition error (git-fixes).
add module_firmware() for firmware_tg357766 (git-fixes).
afs: adjust ack interpretation to try and cope with nat (git-fixes).
afs: fix access after dec in put functions (git-fixes).
afs: fix afs_getattr() to refetch file status if callback break occurred (git-fixes).
afs: fix dynamic root getattr (git-fixes).
afs: fix fileserver probe rtt handling (git-fixes).
afs: fix infinite loop found by xfstest generic/676 (git-fixes).
afs: fix lost servers_outstanding count (git-fixes).
afs: fix server->active leak in afs_put_server (git-fixes).
afs: fix setting of mtime when creating a file/dir/symlink (git-fixes).
afs: fix updating of i_size with dv jump from server (git-fixes).
afs: fix vlserver probe rtt handling (git-fixes).
afs: return -eagain, not -eremoteio, when a file already locked (git-fixes).
afs: use refcount_t rather than atomic_t (git-fixes).
afs: use the operation issue time instead of the reply time for callbacks (git-fixes).
alsa: emu10k1: roll up loops in dsp setup code for audigy (git-fixes).
alsa: fireface: make read-only const array for model names static (git-fixes).
alsa: hda/realtek - remove 3k pull low…

Record: SUSE-SU-2023:3318-1
Updated: 2026-11-02

OSVSUSE-SU-2023:3324-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2018-20784: Fixed a denial of service (infinite loop in update_blocked_averages) by mishandled leaf cfs_rq in kernel/sched/fair.c (bsc#1126703).
CVE-2018-3639: Fixed Speculative Store Bypass aka 'Memory Disambiguation' (bsc#1087082).
CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418).
CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738).
CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779).
CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287).
CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286).
CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867).
CVE-2023-3106: Fixed crash in XFRM_MSG_GETSA netlink handler (bsc#1213251).
CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502).
CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059).
CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167).
CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585).
CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1213588).

The following non-security bugs were fixed:

net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585).
ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584).
ubi: ensure that VID header offset + VID header size <= alloc, size (bsc#1210584).
x86: Treat R_X86_64_PLT32 as R_X86_64_PC32 (git-fixes) No it's not git-fixes it's used to make sle12-sp2 compile with newer toolchain to make the life of all the poor souls maintaining this ancient kernel on their modern machines, a little bit easier....

Record: SUSE-SU-2023:3324-1
Updated: 2026-11-02

OSVSUSE-SU-2023:3333-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502).
CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1213588).
CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418).
CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167).
CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738).
CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286).
CVE-2018-3639: Fixed Speculative Store Bypass aka 'Memory Disambiguation' (bsc#1087082).
CVE-2017-18344: Fixed an OOB access led by an invalid check in timer_create. (bsc#1102851).
CVE-2022-45919: Fixed a use-after-free in dvb_ca_en50221.c that could occur if there is a disconnect after an open, because of the lack of a wait_event (bsc#1205803).
CVE-2023-35824: Fixed a use-after-free in dm1105_remove in drivers/media/pci/dm1105/dm1105.c (bsc#1212501).
CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154).
CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129).
CVE-2023-3159: Fixed use-after-free issue in driver/firewire in outbound_phy_packet_callback (bsc#1212128).

The following non-security bugs were fixed:

fbcon: Check font dimension limits (CVE-2023-3161 bsc#1212154).
firewire: fix potential uaf in outbound_phy_packet_callback() (CVE-2023-3159 bsc#1212128).
kABI: restore _copy_from_user on x86_64 and copy_to_user on x86 (bsc#1211738 CVE-2023-0459).
media: dm1105: Fix use after free bug in dm1105_remove due to race condition (bsc#1212501 CVE-2023-35824).
media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
memstick: r592: Fix UAF bug in r592_remove due to race condition (CVE-2023-3141 bsc#1212129 bsc#1211449).
net/sched: cls_fw: Fix improper refcount update leads to use-after-free (CVE-2023-3776 bsc#1213588).
pkt_sched: fix error return code in fw_change_attrs() (bsc#1213588).
pkt_sched: fix error return code in fw_change_attrs() (bsc#1213588).
posix-timer: Properly check sigevent->sigev_notify (CVE-2017-18344, bsc#1102851, bsc#1208715).
relayfs: fix out-of-bounds access in relay_file_read (bsc#1212502 CVE-2023-3268).
uaccess: Add speculation barrier to copy_from_user() (bsc#1211738 CVE-2023-0459).
vc_screen: don't clobber return value in vcs_read (bsc#1213167 CVE-2023-3567).
vc_screen: modify vcs_size() handling in vcs_read() (bsc#1213167 CVE-2023-3567).
vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (bsc#1213167 CVE-2023-3567).
x86: Unify copy_from_user() size checking (bsc#1211738 CVE-2023-0459).
x86/copy_user: Unify the code by removing the 64-bit asm copy*_user() variants (bsc#1211738 CVE-2023-0459).
x86/cpu/amd: Add a Zenbleed fix (bsc#1213286, CVE-2023-20593).
x86/speculation: Add Gather Data Sampling mitigation (bsc#1206418, CVE-2022-40982).

Record: SUSE-SU-2023:3333-1
Updated: 2026-11-02

OSVSUSE-SU-2023:3376-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287).
CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502).
CVE-2023-2166: Fixed NULL pointer dereference in can_rcv_filter (bsc#1210627).
CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738).
CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1213812).
CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131).
CVE-2023-21400: Fixed several memory corruptions due to improper locking in io_uring (bsc#1213272).
CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1213588).
CVE-2023-3863: Fixed a use-after-free flaw in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC. This flaw allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).
CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167).
CVE-2023-31083: Fixed race condition in hci_uart_tty_ioctl (bsc#1210780).
CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213586).
CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585).
CVE-2023-38409: Fixed an issue in set_con2fb_map in drivers/video/fbdev/core/fbcon.c. Because an assignment occurs only for the first vc, the fbcon_registered_fb and fbcon_display arrays can be desynchronized in fbcon_mode_deleted (the con2fb_map points at the old fb_info) (bsc#1213417).
CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418).

The following non-security bugs were fixed:

ACPI: CPPC: Add ACPI disabled check to acpi_cpc_valid() (bsc#1212445).
ACPI: CPPC: Add definition for undefined FADT preferred PM profile value (bsc#1212445).
ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error (git-fixes).
ACPI/IORT: Remove erroneous id_count check in iort_node_get_rmr_info() (git-fixes).
afs: Adjust ACK interpretation to try and cope with NAT (git-fixes).
afs: Fix access after dec in put functions (git-fixes).
afs: Fix afs_getattr() to refetch file status if callback break occurred (git-fixes).
afs: Fix dynamic root getattr (git-fixes).
afs: Fix fileserver probe RTT handling (git-fixes).
afs: Fix infinite loop found by xfstest generic/676 (git-fixes).
afs: Fix lost servers_outstanding count (git-fixes).
afs: Fix server->active leak in afs_put_server (git-fixes).
afs: Fix setting of mtime when creating a file/dir/symlink (git-fixes).
afs: Fix updating of i_size with dv jump from server (git-fixes).
afs: Fix vlserver probe RTT handling (git-fixes).
afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked (git-fixes).
afs: Use refcount_t rather than atomic_t (git-fixes).
afs: Use the operation issue time instead of the reply time for callbacks (git-fixes).
ALSA: emu10k1: roll up loops in DSP setup code for Audigy (git-fixes).
ALSA: hda/realtek - remove 3k pull low procedure (git-fixes).
ALSA: hda/realtek: Add quirk for Clevo NS70AU (git-fixes).
ALSA: hda/realtek: Add support for DELL Oasis 13/14/16 laptops (git-fixes).
ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx (git-fixes).
ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp (git-fixes).
ALSA: hda/realtek: Support ASUS G713PV laptop (git-fixes).
ALSA: hda/relatek: Enable Mute LED on HP 250 G8 (git-fixes).
ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum610 Wireless (git-fixes).
ALSA: usb-audio: Add new quirk FIXED_RATE for JBL Quantum810 Wireless (git-fixes).
ALSA: usb-audio: Add quirk for Microsoft Modern Wireless Headset (bsc#1207129).
ALSA: usb-audio: Add quirk for Tascam…

Record: SUSE-SU-2023:3376-1
Updated: 2026-11-02

OSVSUSE-SU-2023:3377-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418).
CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738).
CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287).
CVE-2023-21400: Fixed several memory corruptions due to improper locking in io_uring (bsc#1213272).
CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131).
CVE-2023-2166: Fixed NULL pointer dereference in can_rcv_filter (bsc#1210627).
CVE-2023-31083: Fixed race condition in hci_uart_tty_ioctl (bsc#1210780).
CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502).
CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167).
CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1213588).
CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1213812).

The following non-security bugs were fixed:

afs: adjust ack interpretation to try and cope with nat (git-fixes).
afs: fix access after dec in put functions (git-fixes).
afs: fix afs_getattr() to refetch file status if callback break occurred (git-fixes).
afs: fix dynamic root getattr (git-fixes).
afs: fix fileserver probe rtt handling (git-fixes).
afs: fix infinite loop found by xfstest generic/676 (git-fixes).
afs: fix lost servers_outstanding count (git-fixes).
afs: fix server->active leak in afs_put_server (git-fixes).
afs: fix setting of mtime when creating a file/dir/symlink (git-fixes).
afs: fix updating of i_size with dv jump from server (git-fixes).
afs: fix vlserver probe rtt handling (git-fixes).
afs: return -eagain, not -eremoteio, when a file already locked (git-fixes).
afs: use refcount_t rather than atomic_t (git-fixes).
afs: use the operation issue time instead of the reply time for callbacks (git-fixes).
alsa: emu10k1: roll up loops in dsp setup code for audigy (git-fixes).
alsa: hda/realtek: support asus g713pv laptop (git-fixes).
alsa: hda/relatek: enable mute led on hp 250 g8 (git-fixes).
alsa: usb-audio: add quirk for microsoft modern wireless headset (bsc#1207129).
alsa: usb-audio: update for native dsd support quirks (git-fixes).
asoc: atmel: fix the 8k sample parameter in i2sc master (git-fixes).
asoc: codecs: es8316: fix dmic config (git-fixes).
asoc: da7219: check for failure reading aad irq events (git-fixes).
asoc: da7219: flush pending aad irq when suspending (git-fixes).
asoc: fsl_sai: disable bit clock with transmitter (git-fixes).
asoc: fsl_spdif: silence output on stop (git-fixes).
asoc: rt5682-sdw: fix for jd event handling in clockstop mode0 (git-fixes).
asoc: rt711-sdca: fix for jd event handling in clockstop mode0 (git-fixes).
asoc: rt711: fix for jd event handling in clockstop mode0 (git-fixes).
asoc: wm8904: fill the cache for wm8904_adc_test_0 register (git-fixes).
ata: pata_ns87415: mark ns87560_tf_read static (git-fixes).
block, bfq: fix division by zero error on zero wsum (bsc#1213653).
block: fix a source code comment in include/uapi/linux/blkzoned.h (git-fixes).
can: gs_usb: gs_can_close(): add missing set of can state to can_state_stopped (git-fixes).
ceph: do not let check_caps skip sending responses for revoke msgs (bsc#1213856).
coda: avoid partial allocation of sig_inputargs (git-fixes).
dlm: fix missing lkb refcount handling (git-fixes).
dlm: fix plock invalid read (git-fixes).
documentation: devices.txt: reconcile serial/ucc_uart minor numers (git-fixes).
drm/amd/display: disable mpc split by default on special asic (git-fixes).
drm/amd/display: keep phy active for dp displays on dcn31 (git-fixes).
drm/client: fix memory…

Record: SUSE-SU-2023:3377-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`bpftool` AlmaLinux:8	before 4.18.0-513.5.1.el8_9	4.18.0-513.5.1.el8_9
`kernel` AlmaLinux:8	before 4.18.0-513.5.1.el8_9	4.18.0-513.5.1.el8_9
`kernel-abi-stablelists` AlmaLinux:8	before 4.18.0-513.5.1.el8_9	4.18.0-513.5.1.el8_9
`kernel-core` AlmaLinux:8	before 4.18.0-513.5.1.el8_9	4.18.0-513.5.1.el8_9
`kernel-cross-headers` AlmaLinux:8	before 4.18.0-513.5.1.el8_9	4.18.0-513.5.1.el8_9
`kernel-debug` AlmaLinux:8	before 4.18.0-513.5.1.el8_9	4.18.0-513.5.1.el8_9
`kernel-debug-core` AlmaLinux:8	before 4.18.0-513.5.1.el8_9	4.18.0-513.5.1.el8_9
`kernel-debug-devel` AlmaLinux:8	before 4.18.0-513.5.1.el8_9	4.18.0-513.5.1.el8_9
`kernel-debug-modules` AlmaLinux:8	before 4.18.0-513.5.1.el8_9	4.18.0-513.5.1.el8_9
`kernel-debug-modules-extra` AlmaLinux:8	before 4.18.0-513.5.1.el8_9	4.18.0-513.5.1.el8_9

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-devel` AlmaLinux:8	before 4.18.0-513.5.1.el8_9	4.18.0-513.5.1.el8_9
`kernel-doc` AlmaLinux:8	before 4.18.0-513.5.1.el8_9	4.18.0-513.5.1.el8_9
`kernel-headers` AlmaLinux:8	before 4.18.0-513.5.1.el8_9	4.18.0-513.5.1.el8_9
`kernel-modules` AlmaLinux:8	before 4.18.0-513.5.1.el8_9	4.18.0-513.5.1.el8_9
`kernel-modules-extra` AlmaLinux:8	before 4.18.0-513.5.1.el8_9	4.18.0-513.5.1.el8_9
`kernel-tools` AlmaLinux:8	before 4.18.0-513.5.1.el8_9	4.18.0-513.5.1.el8_9
`kernel-tools-libs` AlmaLinux:8	before 4.18.0-513.5.1.el8_9	4.18.0-513.5.1.el8_9
`kernel-tools-libs-devel` AlmaLinux:8	before 4.18.0-513.5.1.el8_9	4.18.0-513.5.1.el8_9
`kernel-zfcpdump` AlmaLinux:8	before 4.18.0-513.5.1.el8_9	4.18.0-513.5.1.el8_9
`kernel-zfcpdump-core` AlmaLinux:8	before 4.18.0-513.5.1.el8_9	4.18.0-513.5.1.el8_9
`kernel-zfcpdump-devel` AlmaLinux:8	before 4.18.0-513.5.1.el8_9	4.18.0-513.5.1.el8_9
`kernel-zfcpdump-modules` AlmaLinux:8	before 4.18.0-513.5.1.el8_9	4.18.0-513.5.1.el8_9
`kernel-zfcpdump-modules-extra` AlmaLinux:8	before 4.18.0-513.5.1.el8_9	4.18.0-513.5.1.el8_9
`perf` AlmaLinux:8	before 4.18.0-513.5.1.el8_9	4.18.0-513.5.1.el8_9
`python3-perf` AlmaLinux:8	before 4.18.0-513.5.1.el8_9	4.18.0-513.5.1.el8_9
`kernel` Azure Linux:2	before 5.15.122.1-2	5.15.122.1-2
`linux-buildinfo-4.4.0-242-tuxcare.els13-generic` TuxCare:Ubuntu:16.04	before 4.4.0-242.276	4.4.0-242.276
`linux-buildinfo-4.4.0-242-tuxcare.els13-lowlatency` TuxCare:Ubuntu:16.04	before 4.4.0-242.276	4.4.0-242.276
`linux-cloud-tools-4.4.0-242-tuxcare.els13` TuxCare:Ubuntu:16.04	before 4.4.0-242.276	4.4.0-242.276
`linux-cloud-tools-4.4.0-242-tuxcare.els13-generic` TuxCare:Ubuntu:16.04	before 4.4.0-242.276	4.4.0-242.276
`linux-cloud-tools-4.4.0-242-tuxcare.els13-lowlatency` TuxCare:Ubuntu:16.04	before 4.4.0-242.276	4.4.0-242.276
`linux-cloud-tools-common` TuxCare:Ubuntu:16.04	before 4.4.0-242.276	4.4.0-242.276
`linux-cloud-tools-generic` TuxCare:Ubuntu:16.04	before 4.4.0.242.276	4.4.0.242.276
`linux-cloud-tools-lowlatency` TuxCare:Ubuntu:16.04	before 4.4.0.242.276	4.4.0.242.276
`linux-crashdump` TuxCare:Ubuntu:16.04	before 4.4.0.242.276	4.4.0.242.276
`linux-doc` TuxCare:Ubuntu:16.04	before 4.4.0-242.276	4.4.0-242.276
`linux-generic` TuxCare:Ubuntu:16.04	before 4.4.0.242.276	4.4.0.242.276
`linux-headers-4.4.0-242-tuxcare.els13` TuxCare:Ubuntu:16.04	before 4.4.0-242.276	4.4.0-242.276
`linux-headers-4.4.0-242-tuxcare.els13-generic` TuxCare:Ubuntu:16.04	before 4.4.0-242.276	4.4.0-242.276
`linux-headers-4.4.0-242-tuxcare.els13-lowlatency` TuxCare:Ubuntu:16.04	before 4.4.0-242.276	4.4.0-242.276
`linux-headers-generic` TuxCare:Ubuntu:16.04	before 4.4.0.242.276	4.4.0.242.276
`linux-headers-lowlatency` TuxCare:Ubuntu:16.04	before 4.4.0.242.276	4.4.0.242.276
`linux-image-generic` TuxCare:Ubuntu:16.04	before 4.4.0.242.276	4.4.0.242.276
`linux-image-lowlatency` TuxCare:Ubuntu:16.04	before 4.4.0.242.276	4.4.0.242.276
`linux-image-unsigned-4.4.0-242-tuxcare.els13-generic` TuxCare:Ubuntu:16.04	before 4.4.0-242.276	4.4.0-242.276
`linux-image-unsigned-4.4.0-242-tuxcare.els13-lowlatency` TuxCare:Ubuntu:16.04	before 4.4.0-242.276	4.4.0-242.276
`linux-libc-dev` TuxCare:Ubuntu:16.04	before 4.4.0-242.276	4.4.0-242.276
`linux-lowlatency` TuxCare:Ubuntu:16.04	before 4.4.0.242.276	4.4.0.242.276
`linux-modules-4.4.0-242-tuxcare.els13-generic` TuxCare:Ubuntu:16.04	before 4.4.0-242.276	4.4.0-242.276
`linux-modules-4.4.0-242-tuxcare.els13-lowlatency` TuxCare:Ubuntu:16.04	before 4.4.0-242.276	4.4.0-242.276
`linux-modules-extra-4.4.0-242-tuxcare.els13-generic` TuxCare:Ubuntu:16.04	before 4.4.0-242.276	4.4.0-242.276
`linux-source` TuxCare:Ubuntu:16.04	before 4.4.0.242.276	4.4.0.242.276
`linux-source-4.4.0` TuxCare:Ubuntu:16.04	before 4.4.0-242.276	4.4.0-242.276
`linux-tools-4.4.0-242-tuxcare.els13` TuxCare:Ubuntu:16.04	before 4.4.0-242.276	4.4.0-242.276
`linux-tools-4.4.0-242-tuxcare.els13-generic` TuxCare:Ubuntu:16.04	before 4.4.0-242.276	4.4.0-242.276
`linux-tools-4.4.0-242-tuxcare.els13-lowlatency` TuxCare:Ubuntu:16.04	before 4.4.0-242.276	4.4.0-242.276
`linux-tools-common` TuxCare:Ubuntu:16.04	before 4.4.0-242.276	4.4.0-242.276
`linux-tools-generic` TuxCare:Ubuntu:16.04	before 4.4.0.242.276	4.4.0.242.276
`linux-tools-host` TuxCare:Ubuntu:16.04	before 4.4.0-242.276	4.4.0-242.276
`linux-tools-lowlatency` TuxCare:Ubuntu:16.04	before 4.4.0.242.276	4.4.0.242.276
`linux-buildinfo-4.15.0-214-tuxcare.els2-generic` TuxCare:Ubuntu:18.04	before 4.15.0-214.225	4.15.0-214.225
`linux-buildinfo-4.15.0-214-tuxcare.els2-lowlatency` TuxCare:Ubuntu:18.04	before 4.15.0-214.225	4.15.0-214.225
`linux-cloud-tools-4.15.0-214-tuxcare.els2` TuxCare:Ubuntu:18.04	before 4.15.0-214.225	4.15.0-214.225
`linux-cloud-tools-4.15.0-214-tuxcare.els2-generic` TuxCare:Ubuntu:18.04	before 4.15.0-214.225	4.15.0-214.225
`linux-cloud-tools-4.15.0-214-tuxcare.els2-lowlatency` TuxCare:Ubuntu:18.04	before 4.15.0-214.225	4.15.0-214.225
`linux-cloud-tools-common` TuxCare:Ubuntu:18.04	before 4.15.0-214.225	4.15.0-214.225
`linux-cloud-tools-generic` TuxCare:Ubuntu:18.04	before 4.15.0.214.225	4.15.0.214.225
`linux-cloud-tools-lowlatency` TuxCare:Ubuntu:18.04	before 4.15.0.214.225	4.15.0.214.225
`linux-crashdump` TuxCare:Ubuntu:18.04	before 4.15.0.214.225	4.15.0.214.225
`linux-doc` TuxCare:Ubuntu:18.04	before 4.15.0-214.225	4.15.0-214.225
`linux-generic` TuxCare:Ubuntu:18.04	before 4.15.0.214.225	4.15.0.214.225
`linux-headers-4.15.0-214-tuxcare.els2` TuxCare:Ubuntu:18.04	before 4.15.0-214.225	4.15.0-214.225
`linux-headers-4.15.0-214-tuxcare.els2-generic` TuxCare:Ubuntu:18.04	before 4.15.0-214.225	4.15.0-214.225
`linux-headers-4.15.0-214-tuxcare.els2-lowlatency` TuxCare:Ubuntu:18.04	before 4.15.0-214.225	4.15.0-214.225
`linux-headers-generic` TuxCare:Ubuntu:18.04	before 4.15.0.214.225	4.15.0.214.225
`linux-headers-lowlatency` TuxCare:Ubuntu:18.04	before 4.15.0.214.225	4.15.0.214.225
`linux-image-generic` TuxCare:Ubuntu:18.04	before 4.15.0.214.225	4.15.0.214.225
`linux-image-lowlatency` TuxCare:Ubuntu:18.04	before 4.15.0.214.225	4.15.0.214.225
`linux` Debian:12	before 6.1.37-1, plus listed versions 6.1.27-1	6.1.37-1
`linux` Debian:13	before 6.3.7-1	6.3.7-1
`linux` Debian:14	before 6.3.7-1	6.3.7-1
`linux` Debian:10	before 4.19.289-1, plus listed versions 4.19.118-14.19.118-24.19.118-2+deb10u14.19.118-2+deb10u1~bpo9+14.19.118-2~bpo9+1 Show 38 moreShow less 4.19.131-14.19.131-24.19.132-14.19.146-14.19.152-14.19.160-14.19.160-24.19.171-14.19.171-24.19.177-14.19.181-14.19.194-14.19.194-24.19.194-34.19.208-14.19.232-14.19.235-14.19.249-14.19.249-24.19.260-14.19.269-14.19.282-14.19.37-54.19.37-5+deb10u14.19.37-5+deb10u24.19.37-5+deb10u2~bpo9+14.19.37-64.19.67-14.19.67-24.19.67-2+deb10u14.19.67-2+deb10u1~bpo9+14.19.67-2+deb10u24.19.67-2+deb10u2~bpo9+14.19.67-2~bpo9+14.19.87-14.19.98-14.19.98-1+deb10u14.19.98-1~bpo9+1	4.19.289-1
`linux-5.10` Debian:10	before 5.10.197-1~deb10u1, plus listed versions 5.10.136-1~deb10u15.10.136-1~deb10u25.10.136-1~deb10u35.10.149-2~deb10u15.10.158-2~deb10u1 Show 5 moreShow less 5.10.162-1~deb10u15.10.178-3~deb10u15.10.179-1~deb10u15.10.179-3~deb10u15.10.179-5~deb10u1	5.10.197-1~deb10u1
`linux` Debian:11	before 5.10.191-1, plus listed versions 5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1 Show 28 moreShow less 5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2	5.10.191-1
`kernel` Mageia:8	before 5.15.117-2.mga8	5.15.117-2.mga8
`kmod-virtualbox` Mageia:8	before 7.0.8-1.8.mga8	7.0.8-1.8.mga8
`kmod-xtables-addons` Mageia:8	before 3.23-1.18.mga8	3.23-1.18.mga8
`kernel-linus` Mageia:8	before 5.15.117-1.mga8	5.15.117-1.mga8
`kernel` openEuler:20.03-LTS-SP1	before 4.19.90-2306.7.0.0208.oe1	4.19.90-2306.7.0.0208.oe1
`kernel` openEuler:20.03-LTS-SP3	before 4.19.90-2306.7.0.0208.oe1	4.19.90-2306.7.0.0208.oe1
`kernel` openEuler:22.03-LTS	before 5.10.0-60.100.0.124.oe2203	5.10.0-60.100.0.124.oe2203
`kernel` openEuler:22.03-LTS-SP1	before 5.10.0-136.38.0.114.oe2203sp1	5.10.0-136.38.0.114.oe2203sp1
`kernel` openEuler:22.03-LTS-SP2	before 5.10.0-153.22.0.98.oe2203sp2	5.10.0-153.22.0.98.oe2203sp2
`bpftool-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:7.2.0-362.8.1.el9_3	0:7.2.0-362.8.1.el9_3
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-64k-debug-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-64k-debug-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-64k-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-64k-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-debug-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-debug-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-doc` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-tools-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-zfcpdump-devel-matched` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`libperf-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`perf` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`perf-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`python3-perf-debuginfo` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`rtla` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`rv` Red Hat:enterprise_linux:9::appstream	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`bpftool` Red Hat:enterprise_linux:9::baseos	before 0:7.2.0-362.8.1.el9_3	0:7.2.0-362.8.1.el9_3
`bpftool-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:7.2.0-362.8.1.el9_3	0:7.2.0-362.8.1.el9_3
`kernel` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-64k` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-64k-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-64k-debug` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-64k-debug-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-64k-debug-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-64k-debug-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-64k-debug-modules-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-64k-debug-modules-extra` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-64k-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-64k-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-64k-modules-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-64k-modules-extra` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-abi-stablelists` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-debug` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-debug-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-debug-debuginfo` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-debug-modules` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-debug-modules-core` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-debug-modules-extra` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-debug-uki-virt` Red Hat:enterprise_linux:9::baseos	before 0:5.14.0-362.8.1.el9_3	0:5.14.0-362.8.1.el9_3
`kernel-rt` SUSE:Linux Enterprise Real Time 12 SP5	before 4.12.14-10.130.1	4.12.14-10.130.1
`kernel-rt_debug` SUSE:Linux Enterprise Real Time 12 SP5	before 4.12.14-10.130.1	4.12.14-10.130.1
`kernel-source-rt` SUSE:Linux Enterprise Real Time 12 SP5	before 4.12.14-10.130.1	4.12.14-10.130.1
`kernel-syms-rt` SUSE:Linux Enterprise Real Time 12 SP5	before 4.12.14-10.130.1	4.12.14-10.130.1
`kernel-azure` SUSE:Linux Enterprise Server 12 SP5	before 4.12.14-16.139.1	4.12.14-16.139.1
`kernel-source-azure` SUSE:Linux Enterprise Server 12 SP5	before 4.12.14-16.139.1	4.12.14-16.139.1
`kernel-syms-azure` SUSE:Linux Enterprise Server 12 SP5	before 4.12.14-16.139.1	4.12.14-16.139.1
`kernel-azure` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 4.12.14-16.139.1	4.12.14-16.139.1
`kernel-source-azure` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 4.12.14-16.139.1	4.12.14-16.139.1
`kernel-syms-azure` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 4.12.14-16.139.1	4.12.14-16.139.1
`kernel-rt` SUSE:Real Time Module 15 SP3	before 5.3.18-150300.135.1	5.3.18-150300.135.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP3	before 5.3.18-150300.135.1	5.3.18-150300.135.1
`kernel-source-rt` SUSE:Real Time Module 15 SP3	before 5.3.18-150300.135.1	5.3.18-150300.135.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP3	before 5.3.18-150300.135.1	5.3.18-150300.135.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.1	before 5.3.18-150300.135.1	5.3.18-150300.135.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.2	before 5.3.18-150300.135.1	5.3.18-150300.135.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 12 SP5	before 4.12.14-122.165.1	4.12.14-122.165.1
`kernel-default` SUSE:Linux Enterprise Live Patching 12 SP5	before 4.12.14-122.165.1	4.12.14-122.165.1
`kgraft-patch-SLE12-SP5_Update_45` SUSE:Linux Enterprise Live Patching 12 SP5	before 1-8.3.1	1-8.3.1
`kernel-docs` SUSE:Linux Enterprise Software Development Kit 12 SP5	before 4.12.14-122.165.1	4.12.14-122.165.1
`kernel-obs-build` SUSE:Linux Enterprise Software Development Kit 12 SP5	before 4.12.14-122.165.1	4.12.14-122.165.1
`kernel-default` SUSE:Linux Enterprise Server 12 SP5	before 4.12.14-122.165.1	4.12.14-122.165.1
`kernel-source` SUSE:Linux Enterprise Server 12 SP5	before 4.12.14-122.165.1	4.12.14-122.165.1
`kernel-syms` SUSE:Linux Enterprise Server 12 SP5	before 4.12.14-122.165.1	4.12.14-122.165.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 4.12.14-122.165.1	4.12.14-122.165.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 4.12.14-122.165.1	4.12.14-122.165.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 12 SP5	before 4.12.14-122.165.1	4.12.14-122.165.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 12 SP5	before 4.12.14-122.165.1	4.12.14-122.165.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP1	before 4.12.14-150100.197.151.1	4.12.14-150100.197.151.1
`kernel-livepatch-SLE15-SP1_Update_42` SUSE:Linux Enterprise Live Patching 15 SP1	before 1-150100.3.3.1	1-150100.3.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP1	before 4.12.14-150100.197.151.1	4.12.14-150100.197.151.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS	before 4.12.14-150100.197.151.1	4.12.14-150100.197.151.1
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS	before 4.12.14-150100.197.151.1	4.12.14-150100.197.151.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS	before 4.12.14-150100.197.151.1	4.12.14-150100.197.151.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS	before 4.12.14-150100.197.151.1	4.12.14-150100.197.151.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS	before 4.12.14-150100.197.151.1	4.12.14-150100.197.151.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP1-LTSS	before 4.12.14-150100.197.151.1	4.12.14-150100.197.151.1
`kernel-docs` SUSE:Linux Enterprise Server 15 SP1-LTSS	before 4.12.14-150100.197.151.1	4.12.14-150100.197.151.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP1-LTSS	before 4.12.14-150100.197.151.1	4.12.14-150100.197.151.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP1-LTSS	before 4.12.14-150100.197.151.1	4.12.14-150100.197.151.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP1-LTSS	before 4.12.14-150100.197.151.1	4.12.14-150100.197.151.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 15 SP1-LTSS	before 4.12.14-150100.197.151.1	4.12.14-150100.197.151.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP1	before 4.12.14-150100.197.151.1	4.12.14-150100.197.151.1
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP1	before 4.12.14-150100.197.151.1	4.12.14-150100.197.151.1
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP1	before 4.12.14-150100.197.151.1	4.12.14-150100.197.151.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP1	before 4.12.14-150100.197.151.1	4.12.14-150100.197.151.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 15 SP1	before 4.12.14-150100.197.151.1	4.12.14-150100.197.151.1
`kernel-debug` openSUSE:Leap 15.4	before 4.12.14-150100.197.151.1	4.12.14-150100.197.151.1
`kernel-default` openSUSE:Leap 15.4	before 4.12.14-150100.197.151.1	4.12.14-150100.197.151.1
`kernel-kvmsmall` openSUSE:Leap 15.4	before 4.12.14-150100.197.151.1	4.12.14-150100.197.151.1
`kernel-vanilla` openSUSE:Leap 15.4	before 4.12.14-150100.197.151.1	4.12.14-150100.197.151.1
`kernel-zfcpdump` openSUSE:Leap 15.4	before 4.12.14-150100.197.151.1	4.12.14-150100.197.151.1
`kernel-vanilla` openSUSE:Leap 15.5	before 4.12.14-150100.197.151.1	4.12.14-150100.197.151.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP2	before 5.3.18-150200.24.157.1	5.3.18-150200.24.157.1
`kernel-livepatch-SLE15-SP2_Update_38` SUSE:Linux Enterprise Live Patching 15 SP2	before 1-150200.5.3.1	1-150200.5.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP2	before 5.3.18-150200.24.157.1	5.3.18-150200.24.157.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS	before 5.3.18-150200.24.157.1	5.3.18-150200.24.157.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS	before 5.3.18-150200.24.157.1.150200.9.77.1	5.3.18-150200.24.157.1.150200.9.77.1
`dtb-aarch64` openSUSE:Leap 15.4	before 5.3.18-150300.59.127.1	5.3.18-150300.59.127.1
`kernel-rt` openSUSE:Leap 15.5	before 5.14.21-150500.13.11.1	5.14.21-150500.13.11.1
`kernel-rt_debug` openSUSE:Leap 15.5	before 5.14.21-150500.13.11.1	5.14.21-150500.13.11.1
`kernel-source-rt` openSUSE:Leap 15.5	before 5.14.21-150500.13.11.1	5.14.21-150500.13.11.1
`kernel-syms-rt` openSUSE:Leap 15.5	before 5.14.21-150500.13.11.1	5.14.21-150500.13.11.1
`dtb-aarch64` openSUSE:Leap 15.5	before 5.14.21-150500.55.19.1	5.14.21-150500.55.19.1
`kernel-64kb` openSUSE:Leap 15.5	before 5.14.21-150500.55.19.1	5.14.21-150500.55.19.1
`kernel-debug` openSUSE:Leap 15.5	before 5.14.21-150500.55.19.1	5.14.21-150500.55.19.1
`kernel-default` openSUSE:Leap 15.5	before 5.14.21-150500.55.19.1	5.14.21-150500.55.19.1
`kernel-default-base` openSUSE:Leap 15.5	before 5.14.21-150500.55.19.1.150500.6.6.4	5.14.21-150500.55.19.1.150500.6.6.4
`kernel-docs` openSUSE:Leap 15.5	before 5.14.21-150500.55.19.1	5.14.21-150500.55.19.1
`kernel-kvmsmall` openSUSE:Leap 15.5	before 5.14.21-150500.55.19.1	5.14.21-150500.55.19.1
`kernel-obs-build` openSUSE:Leap 15.5	before 5.14.21-150500.55.19.1	5.14.21-150500.55.19.1
`kernel-obs-qa` openSUSE:Leap 15.5	before 5.14.21-150500.55.19.1	5.14.21-150500.55.19.1
`kernel-source` openSUSE:Leap 15.5	before 5.14.21-150500.55.19.1	5.14.21-150500.55.19.1
`kernel-syms` openSUSE:Leap 15.5	before 5.14.21-150500.55.19.1	5.14.21-150500.55.19.1
`kernel-zfcpdump` openSUSE:Leap 15.5	before 5.14.21-150500.55.19.1	5.14.21-150500.55.19.1
`kernel-default` openSUSE:Leap Micro 5.3	before 5.14.21-150400.24.81.1	5.14.21-150400.24.81.1
`kernel-default-base` openSUSE:Leap Micro 5.3	before 5.14.21-150400.24.81.1.150400.24.35.3	5.14.21-150400.24.81.1.150400.24.35.3
`kernel-default` openSUSE:Leap Micro 5.4	before 5.14.21-150400.24.81.1	5.14.21-150400.24.81.1
`kernel-default-base` openSUSE:Leap Micro 5.4	before 5.14.21-150400.24.81.1.150400.24.35.3	5.14.21-150400.24.81.1.150400.24.35.3
`dtb-aarch64` openSUSE:Leap 15.4	before 5.14.21-150400.24.81.1	5.14.21-150400.24.81.1
`kernel-64kb` openSUSE:Leap 15.4	before 5.14.21-150400.24.81.1	5.14.21-150400.24.81.1
`kernel-debug` openSUSE:Leap 15.4	before 5.14.21-150400.24.81.1	5.14.21-150400.24.81.1
`kernel-default` openSUSE:Leap 15.4	before 5.14.21-150400.24.81.1	5.14.21-150400.24.81.1
`kernel-default-base` openSUSE:Leap 15.4	before 5.14.21-150400.24.81.1.150400.24.35.3	5.14.21-150400.24.81.1.150400.24.35.3
`kernel-docs` openSUSE:Leap 15.4	before 5.14.21-150400.24.81.1	5.14.21-150400.24.81.1
`kernel-kvmsmall` openSUSE:Leap 15.4	before 5.14.21-150400.24.81.1	5.14.21-150400.24.81.1
`kernel-obs-build` openSUSE:Leap 15.4	before 5.14.21-150400.24.81.1	5.14.21-150400.24.81.1
`kernel-obs-qa` openSUSE:Leap 15.4	before 5.14.21-150400.24.81.1	5.14.21-150400.24.81.1
`kernel-source` openSUSE:Leap 15.4	before 5.14.21-150400.24.81.1	5.14.21-150400.24.81.1
`kernel-syms` openSUSE:Leap 15.4	before 5.14.21-150400.24.81.1	5.14.21-150400.24.81.1
`kernel-zfcpdump` openSUSE:Leap 15.4	before 5.14.21-150400.24.81.1	5.14.21-150400.24.81.1
`kernel-rt` openSUSE:Leap Micro 5.3	before 5.14.21-150400.15.46.1	5.14.21-150400.15.46.1
`kernel-rt` openSUSE:Leap Micro 5.4	before 5.14.21-150400.15.46.1	5.14.21-150400.15.46.1
`kernel-rt` openSUSE:Leap 15.4	before 5.14.21-150400.15.46.1	5.14.21-150400.15.46.1
`kernel-rt_debug` openSUSE:Leap 15.4	before 5.14.21-150400.15.46.1	5.14.21-150400.15.46.1
`kernel-source-rt` openSUSE:Leap 15.4	before 5.14.21-150400.15.46.1	5.14.21-150400.15.46.1
`kernel-syms-rt` openSUSE:Leap 15.4	before 5.14.21-150400.15.46.1	5.14.21-150400.15.46.1
`kernel-azure` openSUSE:Leap 15.5	before 5.14.21-150500.33.14.1	5.14.21-150500.33.14.1
`kernel-source-azure` openSUSE:Leap 15.5	before 5.14.21-150500.33.14.1	5.14.21-150500.33.14.1
`kernel-syms-azure` openSUSE:Leap 15.5	before 5.14.21-150500.33.14.1	5.14.21-150500.33.14.1
`kernel-azure` openSUSE:Leap 15.4	before 5.14.21-150400.14.63.1	5.14.21-150400.14.63.1
`kernel-source-azure` openSUSE:Leap 15.4	before 5.14.21-150400.14.63.1	5.14.21-150400.14.63.1
`kernel-syms-azure` openSUSE:Leap 15.4	before 5.14.21-150400.14.63.1	5.14.21-150400.14.63.1
`linux-aws` Ubuntu:Pro:14.04:LTS	before 4.4.0-1121.127, plus listed versions 4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9 Show 45 moreShow less 4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80	4.4.0-1121.127
`linux-azure` Ubuntu:Pro:14.04:LTS	before 4.15.0-1168.183~14.04.1, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less 4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1	4.15.0-1168.183~14.04.1
`linux-lts-xenial` Ubuntu:Pro:14.04:LTS	before 4.4.0-243.277~14.04.1, plus listed versions 4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1 Show 45 moreShow less 4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1	4.4.0-243.277~14.04.1
`linux` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8 Show 45 moreShow less 3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70	None known
`linux` Ubuntu:Pro:16.04:LTS	before 4.4.0-243.277, plus listed versions 4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11 Show 45 moreShow less 4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96	4.4.0-243.277
`linux-aws` Ubuntu:Pro:16.04:LTS	before 4.4.0-1159.174, plus listed versions 4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18 Show 45 moreShow less 4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93	4.4.0-1159.174
`linux-aws-hwe` Ubuntu:Pro:16.04:LTS	before 4.15.0-1159.172~16.04.1, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less 4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1	4.15.0-1159.172~16.04.1
`linux-azure` Ubuntu:Pro:16.04:LTS	before 4.15.0-1168.183~16.04.1, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less 4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71	4.15.0-1168.183~16.04.1
`linux-gcp` Ubuntu:Pro:16.04:LTS	before 4.15.0-1153.170~16.04.1, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less 4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1	4.15.0-1153.170~16.04.1
`linux-hwe` Ubuntu:Pro:16.04:LTS	before 4.15.0-214.225~16.04.1, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less 4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1	4.15.0-214.225~16.04.1
`linux-kvm` Ubuntu:Pro:16.04:LTS	before 4.4.0-1122.132, plus listed versions 4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15 Show 45 moreShow less 4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84	4.4.0-1122.132
`linux-oracle` Ubuntu:Pro:16.04:LTS	before 4.15.0-1122.133~16.04.1, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less 4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1	4.15.0-1122.133~16.04.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:16.04:LTS	before 4.4.0-1091.98, plus listed versions 4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13 Show 45 moreShow less 4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78	4.4.0-1091.98
`linux-fips` Ubuntu:Pro:FIPS:16.04:LTS	All versions, plus listed versions 4.4.0-1001.14.4.0-1002.2	None known
`linux` Ubuntu:Pro:18.04:LTS	before 4.15.0-214.225, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less 4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107	4.15.0-214.225
`linux-aws` Ubuntu:Pro:18.04:LTS	before 4.15.0-1159.172, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87	4.15.0-1159.172
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1109.118~18.04.1, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	5.4.0-1109.118~18.04.1
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-4.15` Ubuntu:Pro:18.04:LTS	before 4.15.0-1168.183, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less 4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176	4.15.0-1168.183
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1115.122~18.04.1, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	5.4.0-1115.122~18.04.1
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-4.15` Ubuntu:Pro:18.04:LTS	before 4.15.0-1153.170, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less 4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161	4.15.0-1153.170
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gcp-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1112.121~18.04.1, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2	5.4.0-1112.121~18.04.1
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-162.179~18.04.1, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	5.4.0-162.179~18.04.1
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-ibm-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1056.61~18.04.1, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 28 moreShow less 5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.1	5.4.0-1056.61~18.04.1
`linux-kvm` Ubuntu:Pro:18.04:LTS	before 4.15.0-1143.148, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less 4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83	4.15.0-1143.148
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle` Ubuntu:Pro:18.04:LTS	before 4.15.0-1122.133, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less 4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88	4.15.0-1122.133
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-oracle-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1108.117~18.04.1, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1	5.4.0-1108.117~18.04.1
`linux-raspi-5.4` Ubuntu:Pro:18.04:LTS	before 5.4.0-1093.104~18.04.1, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1	5.4.0-1093.104~18.04.1
`linux-aws-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2098.104, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 45 moreShow less 4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93	4.15.0-2098.104
`linux-azure-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2077.83, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 45 moreShow less 4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80	4.15.0-2077.83
`linux-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-1114.125, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 45 moreShow less 4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110	4.15.0-1114.125
`linux-gcp-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	before 4.15.0-2061.66, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21 Show 28 moreShow less 4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.65	4.15.0-2061.66
`linux-aws-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-2000.4	None known
`linux-azure-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1002.2	None known
`linux-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1011.12	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1001.1	None known
`linux` Ubuntu:20.04:LTS	before 5.4.0-162.179, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less 5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110	5.4.0-162.179

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-3268 is a high vulnerability (CVSS 7.1) in Debian Linux, published June 16, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.52%, the 43rd percentile. Fixed in bpftool 4.18.0-513.5.1.el8_9.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 668 package rows, 1,102 versions, 3,433 references and the rest of 13 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 11 source records.