Every CVE Search/ Get API key

CVE-2025-38350

net/sched: Always pass notifications when child class becomes empty

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Always pass notifications when child class becomes empty

Certain classful qdiscs may invoke their classes' dequeue handler on an enqueue operation. This may unexpectedly empty the child qdisc and thus make an in-flight class passive via qlen_notify(). Most qdiscs do not expect such behaviour at this point in time and may re-activate the class eventually anyways which will lead to a use-after-free.

The referenced fix commit attempted to fix this behavior for the HFSC case by moving the backlog accounting around, though this turned out to be incomplete since the parent's parent may run into the issue too. The following reproducer demonstrates this use-after-free:

tc qdisc add dev lo root handle 1: drr
tc filter add dev lo parent 1: basic classid 1:1
tc class add dev lo parent 1: classid 1:1 drr
tc qdisc add dev lo parent 1:1 handle 2: hfsc def 1
tc class add dev lo parent 2: classid 2:1 hfsc rt m1 8 d 1 m2 0
tc qdisc add dev lo parent 2:1 handle 3: netem
tc qdisc add dev lo parent 3:1 handle 4: blackhole

echo 1 | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888
tc class delete dev lo classid 1:1
echo 1 | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888

Since backlog accounting issues leading to a use-after-frees on stale class pointers is a recurring pattern at this point, this patch takes a different approach. Instead of trying to fix the accounting, the patch ensures that qdisc_tree_reduce_backlog always calls qlen_notify when the child qdisc is empty. This solves the problem because deletion of qdiscs always involves a call to qdisc_reset() and / or qdisc_purge_queue() which ultimately resets its qlen to 0 thus causing the following qdisc_tree_reduce_backlog() to report to the parent. Note that this may call qlen_notify on passive classes multiple times. This is not a problem after the recent patch series that made all the classful qdiscs qlen_notify() handlers idempotent.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.30%Up 0.3 points since Jul 19, 2025
90%50%10%1%

What each source reports

CVE List Score used 7.8

net/sched: Always pass notifications when child class becomes empty

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Always pass notifications when child class becomes empty

Certain classful qdiscs may invoke their classes' dequeue handler on an enqueue operation. This may unexpectedly empty the child qdisc and thus make an in-flight class passive via qlen_notify(). Most qdiscs do not expect such behaviour at this point in time and may re-activate the class eventually anyways which will lead to a use-after-free.

The referenced fix commit attempted to fix this behavior for the HFSC case by moving the backlog accounting around, though this turned out to be incomplete since the parent's parent may run into the issue too. The following reproducer demonstrates this use-after-free:

tc qdisc add dev lo root handle 1: drr
tc filter add dev lo parent 1: basic classid 1:1
tc class add dev lo parent 1: classid 1:1 drr
tc qdisc add dev lo parent 1:1 handle 2: hfsc def 1
tc class add dev lo parent 2: classid 2:1 hfsc rt m1 8 d 1 m2 0
tc qdisc add dev lo parent 2:1 handle 3: netem
tc qdisc add dev lo parent 3:1 handle 4: blackhole

echo 1 | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888
tc class delete dev lo classid 1:1
echo 1 | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888

Since backlog accounting issues leading to a use-after-frees on stale class pointers is a recurring pattern at this point, this patch takes a different approach. Instead of trying to fix the accounting, the patch ensures that qdisc_tree_reduce_backlog always calls qlen_notify when the child qdisc is empty. This solves the problem because deletion of qdiscs always involves a call to qdisc_reset() and / or qdisc_purge_queue() which ultimately resets its qlen to 0 thus causing the following qdisc_tree_reduce_backlog() to report to the parent. Note that this may call qlen_notify on passive classes multiple times. This is not a problem after the recent patch series that made all the classful qdiscs qlen_notify() handlers idempotent.

Record
CVE-2025-38350
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
EUVDEUVD-2025-21953 7.8

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Always pass notifications when child class becomes empty

Certain classful qdiscs may invoke their classes' dequeue handler on an enqueue operation. This may unexpectedly empty the child qdisc and thus make an in-flight class passive via qlen_notify(). Most qdiscs do not expect such behaviour at this point in time and may re-activate the class eventually anyways which will lead to a use-after-free.

The referenced fix commit attempted to fix this behavior for the HFSC case by moving the backlog accounting around, though this turned out to be incomplete since the parent's parent may run into the issue too. The following reproducer demonstrates this use-after-free:

tc qdisc add dev lo root handle 1: drr
tc filter add dev lo parent 1: basic classid 1:1
tc class add dev lo parent 1: classid 1:1 drr
tc qdisc add dev lo parent 1:1 handle 2: hfsc def 1
tc class add dev lo parent 2: classid 2:1 hfsc rt m1 8 d 1 m2 0
tc qdisc add dev lo parent 2:1 handle 3: netem
tc qdisc add dev lo parent 3:1 handle 4: blackhole

echo 1 | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888
tc class delete dev lo classid 1:1
echo 1 | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888

Since backlog accounting issues leading to a use-after-frees on stale class pointers is a recurring pattern at this point, this patch takes a different approach. Instead of trying to fix the accounting, the patch ensures that qdisc_tree_reduce_backlog always calls qlen_notify when the child qdisc is empty. This solves the problem because deletion of qdiscs always involves a call to qdisc_reset() and / or qdisc_purge_queue() which ultimately resets its qlen to 0 thus causing the following qdisc_tree_reduce_backlog() to report to the parent. Note that this may call qlen_notify on passive classes multiple times. This is not a problem after the recent patch series that made all the classful qdiscs qlen_notify() handlers idempotent.

Record
EUVD-2025-21953
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-6mr5-83vp-r7m7 7.8

In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass...

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Always pass notifications when child class becomes empty

Certain classful qdiscs may invoke their classes' dequeue handler on an enqueue operation. This may unexpectedly empty the child qdisc and thus make an in-flight class passive via qlen_notify(). Most qdiscs do not expect such behaviour at this point in time and may re-activate the class eventually anyways which will lead to a use-after-free.

The referenced fix commit attempted to fix this behavior for the HFSC case by moving the backlog accounting around, though this turned out to be incomplete since the parent's parent may run into the issue too. The following reproducer demonstrates this use-after-free:

tc qdisc add dev lo root handle 1: drr
tc filter add dev lo parent 1: basic classid 1:1
tc class add dev lo parent 1: classid 1:1 drr
tc qdisc add dev lo parent 1:1 handle 2: hfsc def 1
tc class add dev lo parent 2: classid 2:1 hfsc rt m1 8 d 1 m2 0
tc qdisc add dev lo parent 2:1 handle 3: netem
tc qdisc add dev lo parent 3:1 handle 4: blackhole

echo 1 | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888
tc class delete dev lo classid 1:1
echo 1 | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888

Since backlog accounting issues leading to a use-after-frees on stale class pointers is a recurring pattern at this point, this patch takes a different approach. Instead of trying to fix the accounting, the patch ensures that qdisc_tree_reduce_backlog always calls qlen_notify when the child qdisc is empty. This solves the problem because deletion of qdiscs always involves a call to qdisc_reset() and / or qdisc_purge_queue() which ultimately resets its qlen to 0 thus causing the following qdisc_tree_reduce_backlog() to report to the parent. Note that this may call qlen_notify on passive classes multiple times. This is not a problem after the recent patch series that made all the classful qdiscs qlen_notify() handlers idempotent.

Record
GHSA-6mr5-83vp-r7m7
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Always pass notifications when child class becomes empty

Certain classful qdiscs may invoke their classes' dequeue handler on an enqueue operation. This may unexpectedly empty the child qdisc and thus make an in-flight class passive via qlen_notify(). Most qdiscs do not expect such behaviour at this point in time and may re-activate the class eventually anyways which will lead to a use-after-free.

The referenced fix commit attempted to fix this behavior for the HFSC case by moving the backlog accounting around, though this turned out to be incomplete since the parent's parent may run into the issue too. The following reproducer demonstrates this use-after-free:

tc qdisc add dev lo root handle 1: drr
tc filter add dev lo parent 1: basic classid 1:1
tc class add dev lo parent 1: classid 1:1 drr
tc qdisc add dev lo parent 1:1 handle 2: hfsc def 1
tc class add dev lo parent 2: classid 2:1 hfsc rt m1 8 d 1 m2 0
tc qdisc add dev lo parent 2:1 handle 3: netem
tc qdisc add dev lo parent 3:1 handle 4: blackhole

echo 1 | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888
tc class delete dev lo classid 1:1
echo 1 | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888

Since backlog accounting issues leading to a use-after-frees on stale class pointers is a recurring pattern at this point, this patch takes a different approach. Instead of trying to fix the accounting, the patch ensures that qdisc_tree_reduce_backlog always calls qlen_notify when the child qdisc is empty. This solves the problem because deletion of qdiscs always involves a call to qdisc_reset() and / or qdisc_purge_queue() which ultimately resets its qlen to 0 thus causing the following qdisc_tree_reduce_backlog() to report to the parent. Note that this may call qlen_notify on passive classes multiple times. This is not a problem after the recent patch series that made all the classful qdiscs qlen_notify() handlers idempotent.

Record
CVE-2025-38350
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSVBELL-CVE-2025-38350 7.8
Record
BELL-CVE-2025-38350
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

net/sched: Always pass notifications when child class becomes empty

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Always pass notifications when child class becomes empty

Certain classful qdiscs may invoke their classes' dequeue handler on an enqueue operation. This may unexpectedly empty the child qdisc and thus make an in-flight class passive via qlen_notify(). Most qdiscs do not expect such behaviour at this point in time and may re-activate the class eventually anyways which will lead to a use-after-free.

The referenced fix commit attempted to fix this behavior for the HFSC case by moving the backlog accounting around, though this turned out to be incomplete since the parent's parent may run into the issue too. The following reproducer demonstrates this use-after-free:

tc qdisc add dev lo root handle 1: drr
tc filter add dev lo parent 1: basic classid 1:1
tc class add dev lo parent 1: classid 1:1 drr
tc qdisc add dev lo parent 1:1 handle 2: hfsc def 1
tc class add dev lo parent 2: classid 2:1 hfsc rt m1 8 d 1 m2 0
tc qdisc add dev lo parent 2:1 handle 3: netem
tc qdisc add dev lo parent 3:1 handle 4: blackhole

echo 1 | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888
tc class delete dev lo classid 1:1
echo 1 | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888

Since backlog accounting issues leading to a use-after-frees on stale class pointers is a recurring pattern at this point, this patch takes a different approach. Instead of trying to fix the accounting, the patch ensures that qdisc_tree_reduce_backlog always calls qlen_notify when the child qdisc is empty. This solves the problem because deletion of qdiscs always involves a call to qdisc_reset() and / or qdisc_purge_queue() which ultimately resets its qlen to 0 thus causing the following qdisc_tree_reduce_backlog() to report to the parent. Note that this may call qlen_notify on passive classes multiple times. This is not a problem after the recent patch series that made all the classful qdiscs qlen_notify() handlers idempotent.

Record
CVE-2025-38350
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2025-38350 7.8

In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain classful qdiscs may invoke their classes' dequeue handler on an enqueue operation. This may unexpectedly empty the child qdisc and thus make an in-flight class passive via qlen_notify(). Most qdiscs do not expect such behaviour at this point in time and may re-activate the class eventually anyways which will lead to a use-after-free. The referenced fix commit attempted to fix this behavior for the HFSC case by moving the backlog accounting around, though this turned out to be incomplete since the parent's parent may run into the issue too. The following reproducer demonstrates this use-after-free: tc qdisc add dev lo root handle 1: drr tc filter add dev lo parent 1: basic classid 1:1 tc class add dev lo parent 1: classid 1:1 drr tc qdisc add dev lo parent 1:1 handle 2: hfsc def 1 tc class add dev lo parent 2: classid 2:1 hfsc rt m1 8 d 1 m2 0 tc qdisc add dev lo parent 2:1 handle 3: netem tc qdisc add dev lo parent 3:1 handle 4: blackhole echo 1 | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888 tc class delete dev lo classid 1:1 echo 1 | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888 Since backlog accounting issues leading to a use-after-frees on stale class pointers is a recurring pattern at this point, this patch takes a different approach. Instead of trying to fix the accounting, the patch ensures that qdisc_tree_reduce_backlog always calls qlen_notify when the child qdisc is empty. This solves the problem because deletion of qdiscs always involves a call to qdisc_reset() and / or qdisc_purge_queue() which ultimately resets its qlen to 0 thus causing the following qdisc_tree_reduce_backlog() to report to the parent. Note that this may call qlen_notify on passive classes multiple times. This is not a problem after the recent patch series that made all the classful qdiscs qlen_notify() handlers idempotent.

Record
DEBIAN-CVE-2025-38350
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-2080 8.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

A vulnerability was found in Linux Kernel up to 6.15.3 (Operating System). It has been rated as problematic.Using CWE to declare the problem leads to CWE-252. The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.Impacted is confidentiality, integrity, and availability.Upgrading to version 5.4.295, 5.10.239, 5.15.186, 6.1.142, 6.6.95, 6.12.35, 6.15.4 or 6.16-rc1 eliminates this vulnerability. Applying the patch 119766de4930ff40db9f36b960cb53b0c400e81b/33163c68d2e3061fa3935b5f0a1867958b1cdbd2/9da3e442714f7f4393ff01c265c4959c03e88c2f/9a350f30d65197354706b7759b5c89d6c267b1a9/6bd2569d0b2f918e9581f744df0263caf73ee76c/4da7fcc098218ff92b2e83a43f545c02f714cedd/cdaa6d1cb2ff1219c6c822b27655dd170ffb0f72/9ad0452c0277b816a435433cca601304cfac7c21 is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-19447).(CVE-2025-38086)

In the Linux kernel, the following vulnerability has been resolved:

sch_hfsc: make hfsc_qlen_notify() idempotent

hfsc_qlen_notify() is not idempotent either and not friendly to its callers, like fq_codel_dequeue(). Let's make it idempotent to ease qdisc_tree_reduce_backlog() callers' life:

  1. update_vf() decreases cl->cl_nactive, so we can check whether it is non-zero before calling it.

  2. eltree_remove() always removes RB node cl->el_node, but we can use RB_EMPTY_NODE() + RB_CLEAR_NODE() to make it safe.(CVE-2025-38177)

A vulnerability was found in Linux Kernel up to 6.16-rc2 (Operating System) and classified as critical.Using CWE to declare the problem leads to CWE-911. The product uses a reference count to manage a resource, but it does not update or incorrectly updates the reference count.Impacted is availability.Upgrading to version 5.4.295, 5.10.239, 5.15.186, 6.1.142, 6.6.95, 6.12.35, 6.15.4 or 6.16-rc3 eliminates this vulnerability. Applying the patch 956f1499412ed0953f6a116df7fdb855e9f1fc66/f4ae0f61dd9a63329ecb49b1e6356139d43240b8/dc724bd34d56f5589f7587a091a8cda2386826c4/058dd4a370f23a5553a9449f2db53d5bfa88d45e/bde8833eb075ba8e8674de88e32de6b669966451/988edde4d52d5c02ea4dd95d7619372a5e2fb7b7/d092c7fd8e220b23d6c47e03d7d0cc79e731f379/10876da918fa1aec0227fb4c67647513447f53a9 is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.(CVE-2025-38181)

A vulnerability, which was classified as problematic, was found in Linux Kernel up to 6.15.3 (Operating System).The manipulation of the argument ext4_prepare_inline_data with an unknown input leads to a unknown weakness.This is going to have an impact on confidentiality, integrity, and availability.Upgrading to version 5.4.295, 5.10.239, 5.15.186, 6.1.142, 6.6.95, 6.12.35, 6.15.4 or 6.16-rc1 eliminates this vulnerability. Applying the patch d3dfc60efd145df5324b99a244b0b05505cde29b/717414a8c083c376d4a8940a1230fe0c6ed4ee00/9d1d1c5bf4fc1af76be154d3afb2acdbd89ec7d8/cf5f319a2d8ab8238f8cf3a19463b9bff6420934/26e09d18599da0adc543eabd300080daaeda6869/5766da2237e539f259aa0e5f3639ae37b44ca458/e80ee0263d88d77f2fd1927f915003a7066cbb50/227cb4ca5a6502164f850d22aec3104d7888b270 is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-20034).(CVE-2025-38222)

A vulnerability was found in Linux Kernel up to 6.16-rc4 (Operating System). It has been classified as critical.CWE is classifying the issue as CWE-416. Referencing memory after it has been freed can cause a program to crash, use unexpected values, or…

Record
OESA-2025-2080
CVSS 3.1
8.0 HighCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-2800 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ext4: update s_journal_inum if it changes after journal replay

When mounting a crafted ext4 image, s_journal_inum may change after journal replay, which is obviously unreasonable because we have successfully loaded and replayed the journal through the old s_journal_inum. And the new s_journal_inum bypasses some of the checks in ext4_get_journal(), which may trigger a null pointer dereference problem. So if s_journal_inum changes after the journal replay, we ignore the change, and rewrite the current journal_inum to the superblock.(CVE-2023-53091)

In the Linux kernel, the following vulnerability has been resolved:

vxlan: Fix nexthop hash size

The nexthop code expects a 31 bit hash, such as what is returned by fib_multipath_hash() and rt6_multipath_hash(). Passing the 32 bit hash returned by skb_get_hash() can lead to problems related to the fact that 'int hash' is a negative number when the MSB is set.

In the case of hash threshold nexthop groups, nexthop_select_path_hthr() will disproportionately select the first nexthop group entry. In the case of resilient nexthop groups, nexthop_select_path_res() may do an out of bounds access in nh_buckets[], for example: hash = -912054133 num_nh_buckets = 2 bucket_index = 65535

which leads to the following panic:

BUG: unable to handle page fault for address: ffffc900025910c8 PGD 100000067 P4D 100000067 PUD 10026b067 PMD 0 Oops: 0002 [#1] PREEMPT SMP KASAN NOPTI CPU: 4 PID: 856 Comm: kworker/4:3 Not tainted 6.5.0-rc2+ #34 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Workqueue: ipv6_addrconf addrconf_dad_work RIP: 0010:nexthop_select_path+0x197/0xbf0 Code: c1 e4 05 be 08 00 00 00 4c 8b 35 a4 14 7e 01 4e 8d 6c 25 00 4a 8d 7c 25 08 48 01 dd e8 c2 25 15 ff 49 8d 7d 08 e8 39 13 15 ff <4d> 89 75 08 48 89 ef e8 7d 12 15 ff 48 8b 5d 00 e8 14 55 2f 00 85 RSP: 0018:ffff88810c36f260 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 00000000002000c0 RCX: ffffffffaf02dd77 RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffc900025910c8 RBP: ffffc900025910c0 R08: 0000000000000001 R09: fffff520004b2219 R10: ffffc900025910cf R11: 31392d2068736168 R12: 00000000002000c0 R13: ffffc900025910c0 R14: 00000000fffef608 R15: ffff88811840e900 FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffc900025910c8 CR3: 0000000129d00000 CR4: 0000000000750ee0 PKRU: 55555554 Call Trace: <TASK> ? __die+0x23/0x70 ? page_fault_oops+0x1ee/0x5c0 ? __pfx_is_prefetch.constprop.0+0x10/0x10 ? __pfx_page_fault_oops+0x10/0x10 ? search_bpf_extables+0xfe/0x1c0 ? fixup_exception+0x3b/0x470 ? exc_page_fault+0xf6/0x110 ? asm_exc_page_fault+0x26/0x30 ? nexthop_select_path+0x197/0xbf0 ? nexthop_select_path+0x197/0xbf0 ? lock_is_held_type+0xe7/0x140 vxlan_xmit+0x5b2/0x2340 ? __lock_acquire+0x92b/0x3370 ? __pfx_vxlan_xmit+0x10/0x10 ? __pfx___lock_acquire+0x10/0x10 ? __pfx_register_lock_class+0x10/0x10 ? skb_network_protocol+0xce/0x2d0 ? dev_hard_start_xmit+0xca/0x350 ? __pfx_vxlan_xmit+0x10/0x10 dev_hard_start_xmit+0xca/0x350 __dev_queue_xmit+0x513/0x1e20 ? __pfx___dev_queue_xmit+0x10/0x10 ? __pfx_lock_release+0x10/0x10 ? mark_held_locks+0x44/0x90 ? skb_push+0x4c/0x80 ? eth_header+0x81/0xe0 ? __pfx_eth_header+0x10/0x10 ? neigh_resolve_output+0x215/0x310 ? ip6_finish_output2+0x2ba/0xc90 ip6_finish_output2+0x2ba/0xc90 ? lock_release+0x236/0x3e0 ? ip6_mtu+0xbb/0x240 ? __pfx_ip6_finish_output2+0x10/0x10 ? find_held_lock+0x83/0xa0 ? lock_is_held_type+0xe7/0x140 ip6_finish_output+0x1ee/0x780 ip6_output+0x138/0x460 ? __pfx_ip6_output+0x10/0x10 ? __pfx___lock_acquire+0x10/0x10 ? __pfx_ip6_finish_output+0x10/0x10 NF_HOOK.constprop.0+0xc0/0x420 ? __pfx_NF_HOOK.constprop.0+0x10/0x10 ?…

Record
OESA-2025-2800
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-2801 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

ext4: update s_journal_inum if it changes after journal replay

When mounting a crafted ext4 image, s_journal_inum may change after journal replay, which is obviously unreasonable because we have successfully loaded and replayed the journal through the old s_journal_inum. And the new s_journal_inum bypasses some of the checks in ext4_get_journal(), which may trigger a null pointer dereference problem. So if s_journal_inum changes after the journal replay, we ignore the change, and rewrite the current journal_inum to the superblock.(CVE-2023-53091)

In the Linux kernel, the following vulnerability has been resolved:

scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write

During the sysfs firmware write process, a use-after-free read warning is logged from the lpfc_wr_object() routine:

BUG: KFENCE: use-after-free read in lpfc_wr_object+0x235/0x310 [lpfc] Use-after-free read at 0x0000000000cf164d (in kfence-#111): lpfc_wr_object+0x235/0x310 [lpfc] lpfc_write_firmware.cold+0x206/0x30d [lpfc] lpfc_sli4_request_firmware_update+0xa6/0x100 [lpfc] lpfc_request_firmware_upgrade_store+0x66/0xb0 [lpfc] kernfs_fop_write_iter+0x121/0x1b0 new_sync_write+0x11c/0x1b0 vfs_write+0x1ef/0x280 ksys_write+0x5f/0xe0 do_syscall_64+0x59/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd

The driver accessed wr_object pointer data, which was initialized into mailbox payload memory, after the mailbox object was released back to the mailbox pool.

Fix by moving the mailbox free calls to the end of the routine ensuring that we don't reference internal mailbox memory after release.(CVE-2023-53282)

In the Linux kernel, the following vulnerability has been resolved:

start_kernel: Add __no_stack_protector function attribute

Back during the discussion of commit a9a3ed1eff36 ("x86: Fix early boot crash on gcc-10, third try") we discussed the need for a function attribute to control the omission of stack protectors on a per-function basis; at the time Clang had support for no_stack_protector but GCC did not. This was fixed in gcc-11. Now that the function attribute is available, let's start using it.

Callers of boot_init_stack_canary need to use this function attribute unless they're compiled with -fno-stack-protector, otherwise the canary stored in the stack slot of the caller will differ upon the call to boot_init_stack_canary. This will lead to a call to __stack_chk_fail() then panic.(CVE-2023-53491)

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: Fix hci_suspend_sync crash

If hci_unregister_dev() frees the hci_dev object but hci_suspend_notifier may still be accessing it, it can cause the program to crash. Here's the call trace: <4>[102152.653246] Call Trace: <4>[102152.653254] hci_suspend_sync+0x109/0x301 [bluetooth] <4>[102152.653259] hci_suspend_dev+0x78/0xcd [bluetooth] <4>[102152.653263] hci_suspend_notifier+0x42/0x7a [bluetooth] <4>[102152.653268] notifier_call_chain+0x43/0x6b <4>[102152.653271] __blocking_notifier_call_chain+0x48/0x69 <4>[102152.653273] __pm_notifier_call_chain+0x22/0x39 <4>[102152.653276] pm_suspend+0x287/0x57c <4>[102152.653278] state_store+0xae/0xe5 <4>[102152.653281] kernfs_fop_write+0x109/0x173 <4>[102152.653284] __vfs_write+0x16f/0x1a2 <4>[102152.653287] ? selinux_file_permission+0xca/0x16f <4>[102152.653289] ? security_file_permission+0x36/0x109 <4>[102152.653291] vfs_write+0x114/0x21d <4>[102152.653293] __x64_sys_write+0x7b/0xdb <4>[102152.653296] do_syscall_64+0x59/0x194 <4>[102152.653299] entry_SYSCALL_64_after_hwframe+0x5c/0xc1

This patch holds the reference count of the hci_dev object while processing it in…

Record
OESA-2025-2801
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-2802 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

nfc: nci: Fix uninit-value in nci_rx_work

syzbot reported the following uninit-value access issue [1]

nci_rx_work() parses received packet from ndev->rx_q. It should be validated header size, payload size and total packet size before processing the packet. If an invalid packet is detected, it should be silently discarded.(CVE-2024-38381)

In the Linux kernel, the following vulnerability has been resolved:net: ti: icssg_prueth: Fix NULL pointer dereference in prueth_probe()In the prueth_probe() function, if one of the calls to emac_phy_connect()fails due to of_phy_connect() returning NULL, then the subsequent call tophy_attached_info() will dereference a NULL pointer.Check the return code of emac_phy_connect and fail cleanly if there is anerror.(CVE-2024-38584)

In the Linux kernel, the following vulnerability has been resolved:cpufreq: exit() callback is optionalThe exit() callback is optional and shouldn t be called without checkinga valid pointer first.Also, we must clear freq_table pointer even if the exit() callback isn tpresent.(CVE-2024-38615)

In the Linux kernel, the following vulnerability has been resolved:serial: max3100: Update uart_driver_registered on driver removalThe removal of the last MAX3100 device triggers the removal ofthe driver. However, code doesn t update the respective globalvariable and after insmod — rmmod — insmod cycle the kerneloopses: max3100 spi-PRP0001:01: max3100_probe: adding port 0 BUG: kernel NULL pointer dereference, address: 0000000000000408 ... RIP: 0010:serial_core_register_port+0xa0/0x840 ... max3100_probe+0x1b6/0x280 [max3100] spi_probe+0x8d/0xb0Update the actual state so next time UART driver will be registeredagain.Hugo also noticed, that the error path in the probe also affectedby having the variable set, and not cleared. Instead of clearing itmove the assignment after the successfull uart_register_driver() call.(CVE-2024-38633)

In the Linux kernel, the following vulnerability has been resolved:

enic: Validate length of nl attributes in enic_set_vf_port

enic_set_vf_port assumes that the nl attribute IFLA_PORT_PROFILE is of length PORT_PROFILE_MAX and that the nl attributes IFLA_PORT_INSTANCE_UUID, IFLA_PORT_HOST_UUID are of length PORT_UUID_MAX. These attributes are validated (in the function do_setlink in rtnetlink.c) using the nla_policy ifla_port_policy. The policy defines IFLA_PORT_PROFILE as NLA_STRING, IFLA_PORT_INSTANCE_UUID as NLA_BINARY and IFLA_PORT_HOST_UUID as NLA_STRING. That means that the length validation using the policy is for the max size of the attributes and not on exact size so the length of these attributes might be less than the sizes that enic_set_vf_port expects. This might cause an out of bands read access in the memcpys of the data of these attributes in enic_set_vf_port.(CVE-2024-38659)

In the Linux kernel, the following vulnerability has been resolved:riscv: prevent pt_regs corruption for secondary idle threadsTop of the kernel thread stack should be reserved for pt_regs. Howeverthis is not the case for the idle threads of the secondary boot harts.Their stacks overlap with their pt_regs, so both may get corrupted.Similar issue has been fixed for the primary hart, see c7cdd96eca28( riscv: prevent stack corruption by reserving task_pt_regs(p) early ).However that fix was not propagated to the secondary harts. The problemhas been noticed in some CPU hotplug tests with V enabled. The functionsmp_callin stored several registers on stack, corrupting top of pt_regsstructure including status field. As a result, kernel attempted to saveor restore inexistent V context.(CVE-2024-38667)

In the Linux kernel, the following vulnerability has been resolved:jfs: xattr: fix buffer overflow for invalid xattrWhen an xattr size is not what is expected, it is printed out to thekernel log in hex format as a…

Record
OESA-2025-2802
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-2803 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint

Patch series "nilfs2: fix null-ptr-deref bugs on block tracepoints".

This series fixes null pointer dereference bugs that occur when using nilfs2 and two block-related tracepoints.

This patch (of 2):

It has been reported that when using "block:block_touch_buffer" tracepoint, touch_buffer() called from __nilfs_get_folio_block() causes a NULL pointer dereference, or a general protection fault when KASAN is enabled.

This happens because since the tracepoint was added in touch_buffer(), it references the dev_t member bh->b_bdev->bd_dev regardless of whether the buffer head has a pointer to a block_device structure. In the current implementation, the block_device structure is set after the function returns to the caller.

Here, touch_buffer() is used to mark the folio/page that owns the buffer head as accessed, but the common search helper for folio/page used by the caller function was optimized to mark the folio/page as accessed when it was reimplemented a long time ago, eliminating the need to call touch_buffer() here in the first place.

So this solves the issue by eliminating the touch_buffer() call itself.(CVE-2024-53131)

In the Linux kernel, the following vulnerability has been resolved:drm: adv7511: Fix use-after-free in adv7533_attach_dsi()The host_node pointer was assigned and freed in adv7533_parse_dt(), andlater, adv7533_attach_dsi() uses the same. Fix this use-after-free issueby dropping of_node_put() in adv7533_parse_dt() and calling of_node_put()in error path of probe() and also in the remove().(CVE-2024-57887)

In the Linux kernel, the following vulnerability has been resolved:ila: serialize calls to nf_register_net_hooks()syzbot found a race in ila_add_mapping() [1]commit 031ae72825ce ( ila: call nf_unregister_net_hooks() sooner )attempted to fix a similar issue.Looking at the syzbot repro, we have concurrent ILA_CMD_ADD commands.Add a mutex to make sure at most one thread is calling nf_register_net_hooks().[1] BUG: KASAN: slab-use-after-free in rht_key_hashfn include/linux/rhashtable.h:159 [inline] BUG: KASAN: slab-use-after-free in __rhashtable_lookup.constprop.0+0x426/0x550 include/linux/rhashtable.h:604Read of size 4 at addr ffff888028f40008 by task dhcpcd/5501CPU: 1 UID: 0 PID: 5501 Comm: dhcpcd Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024Call Trace: <IRQ> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:378 [inline] print_report+0xc3/0x620 mm/kasan/report.c:489 kasan_report+0xd9/0x110 mm/kasan/report.c:602 rht_key_hashfn include/linux/rhashtable.h:159 [inline] __rhashtable_lookup.constprop.0+0x426/0x550 include/linux/rhashtable.h:604 rhashtable_lookup include/linux/rhashtable.h:646 [inline] rhashtable_lookup_fast include/linux/rhashtable.h:672 [inline] ila_lookup_wildcards net/ipv6/ila/ila_xlat.c:127 [inline] ila_xlat_addr net/ipv6/ila/ila_xlat.c:652 [inline] ila_nf_input+0x1ee/0x620 net/ipv6/ila/ila_xlat.c:185 nf_hook_entry_hookfn include/linux/netfilter.h:154 [inline] nf_hook_slow+0xbb/0x200 net/netfilter/core.c:626 nf_hook.constprop.0+0x42e/0x750 include/linux/netfilter.h:269 NF_HOOK include/linux/netfilter.h:312 [inline] ipv6_rcv+0xa4/0x680 net/ipv6/ip6_input.c:309 __netif_receive_skb_one_core+0x12e/0x1e0 net/core/dev.c:5672 __netif_receive_skb+0x1d/0x160 net/core/dev.c:5785 process_backlog+0x443/0x15f0 net/core/dev.c:6117 __napi_poll.constprop.0+0xb7/0x550 net/core/dev.c:6883 napi_poll net/core/dev.c:6952 [inline] net_rx_action+0xa94/0x1010 net/core/dev.c:7074 handle_softirqs+0x213/0x8f0 kernel/softirq.c:561 __do_softirq kernel/softirq.c:595 [inline] …

Record
OESA-2025-2803
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2025-2804 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

drm/amd/display: Fix slab-use-after-free on hdcp_work

[Why] A slab-use-after-free is reported when HDCP is destroyed but the property_validate_dwork queue is still running.

[How] Cancel the delayed work when destroying workqueue.

(cherry picked from commit 725a04ba5a95e89c89633d4322430cfbca7ce128)(CVE-2025-21968)

In the Linux kernel, the following vulnerability has been resolved:

nfsd: put dl_stid if fail to queue dl_recall

Before calling nfsd4_run_cb to queue dl_recall to the callback_wq, we increment the reference count of dl_stid. We expect that after the corresponding work_struct is processed, the reference count of dl_stid will be decremented through the callback function nfsd4_cb_recall_release. However, if the call to nfsd4_run_cb fails, the incremented reference count of dl_stid will not be decremented correspondingly, leading to the following nfs4_stid leak: unreferenced object 0xffff88812067b578 (size 344): comm "nfsd", pid 2761, jiffies 4295044002 (age 5541.241s) hex dump (first 32 bytes): 01 00 00 00 6b 6b 6b 6b b8 02 c0 e2 81 88 ff ff ....kkkk........ 00 6b 6b 6b 6b 6b 6b 6b 00 00 00 00 ad 4e ad de .kkkkkkk.....N.. backtrace: kmem_cache_alloc+0x4b9/0x700 nfsd4_process_open1+0x34/0x300 nfsd4_open+0x2d1/0x9d0 nfsd4_proc_compound+0x7a2/0xe30 nfsd_dispatch+0x241/0x3e0 svc_process_common+0x5d3/0xcc0 svc_process+0x2a3/0x320 nfsd+0x180/0x2e0 kthread+0x199/0x1d0 ret_from_fork+0x30/0x50 ret_from_fork_asm+0x1b/0x30 unreferenced object 0xffff8881499f4d28 (size 368): comm "nfsd", pid 2761, jiffies 4295044005 (age 5541.239s) hex dump (first 32 bytes): 01 00 00 00 00 00 00 00 30 4d 9f 49 81 88 ff ff ........0M.I.... 30 4d 9f 49 81 88 ff ff 20 00 00 00 01 00 00 00 0M.I.... ....... backtrace: kmem_cache_alloc+0x4b9/0x700 nfs4_alloc_stid+0x29/0x210 alloc_init_deleg+0x92/0x2e0 nfs4_set_delegation+0x284/0xc00 nfs4_open_delegation+0x216/0x3f0 nfsd4_process_open2+0x2b3/0xee0 nfsd4_open+0x770/0x9d0 nfsd4_proc_compound+0x7a2/0xe30 nfsd_dispatch+0x241/0x3e0 svc_process_common+0x5d3/0xcc0 svc_process+0x2a3/0x320 nfsd+0x180/0x2e0 kthread+0x199/0x1d0 ret_from_fork+0x30/0x50 ret_from_fork_asm+0x1b/0x30 Fix it by checking the result of nfsd4_run_cb and call nfs4_put_stid if fail to queue dl_recall.(CVE-2025-22025)

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: add bounds check for create lease context

Add missing bounds check for create lease context.(CVE-2025-22042)

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: add bounds check for durable handle context

Add missing bounds check for durable handle context.(CVE-2025-22043)

In the Linux kernel, the following vulnerability has been resolved:

wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation

Currently during the multi-link element defragmentation process, the multi-link element length added to the total IEs length when calculating the length of remaining IEs after the multi-link element in cfg80211_defrag_mle(). This could lead to out-of-bounds access if the multi-link element or its corresponding fragment elements are the last elements in the IEs buffer.

To address this issue, correctly calculate the remaining IEs length by deducting the multi-link element end offset from total IEs end offset.(CVE-2025-37973)

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Always pass notifications when child class becomes empty

Certain classful qdiscs may invoke their classes' dequeue handler on an enqueue operation. This may unexpectedly empty the child qdisc and thus make an in-flight class passive via qlen_notify(). Most qdiscs do not expect such behaviour at this point…

Record
OESA-2025-2804
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:14413 7.0

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:14413
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:14511 7.0

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:14511
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:14691 7.0

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2025:14691
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:14692 7.3

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:14692
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-02
OSVRHSA-2025:14696 7.0

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:14696
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:14742 7.3

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:14742
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-02
OSVRHSA-2025:14744 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:14744
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:14746 7.1

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2025:14746
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:14748 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:14748
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:14749 7.1

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2025:14749
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:15011 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:15011
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:15016 7.0

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:15016
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:15035 7.3

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:15035
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-02
OSVRHSA-2025:15447 7.3

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:15447
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:15785 7.5

Red Hat Security Advisory: kernel security update

Record
RHSA-2025:15785
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2025:15786 7.3

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2025:15786
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:16538 7.0

Red Hat Security Advisory: kpatch-patch-5_14_0-570_17_1 security update

Record
RHSA-2025:16538
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:16539 7.0

Red Hat Security Advisory: kpatch-patch-5_14_0-284_104_1, kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_79_1, and kpatch-patch-5_14_0-284_92_1 security update

Record
RHSA-2025:16539
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:16540 7.0

Red Hat Security Advisory: kpatch-patch-5_14_0-427_31_1, kpatch-patch-5_14_0-427_44_1, kpatch-patch-5_14_0-427_55_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 security update

Record
RHSA-2025:16540
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:16541 7.0

Red Hat Security Advisory: kpatch-patch-5_14_0-70_112_1, kpatch-patch-5_14_0-70_121_1, kpatch-patch-5_14_0-70_124_1, and kpatch-patch-5_14_0-70_132_1 security update

Record
RHSA-2025:16541
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:16580 7.0

Red Hat Security Advisory: kpatch-patch-4_18_0-372_118_1, kpatch-patch-4_18_0-372_131_1, kpatch-patch-4_18_0-372_137_1, and kpatch-patch-4_18_0-372_145_1 security update

Record
RHSA-2025:16580
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:16582 7.0

Red Hat Security Advisory: kpatch-patch-4_18_0-553_16_1, kpatch-patch-4_18_0-553_30_1, kpatch-patch-4_18_0-553_40_1, kpatch-patch-4_18_0-553_53_1, and kpatch-patch-4_18_0-553_72_1 security update

Record
RHSA-2025:16582
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:16583 7.0

Red Hat Security Advisory: kpatch-patch-4_18_0-477_67_1, kpatch-patch-4_18_0-477_81_1, kpatch-patch-4_18_0-477_89_1, and kpatch-patch-4_18_0-477_97_1 security update

Record
RHSA-2025:16583
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2025:15011 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CVE-2025-37823)

  • kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (CVE-2025-38200)

  • kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CVE-2025-38211)

  • kernel: net/sched: Always pass notifications when child class becomes empty (CVE-2025-38350)

  • kernel: tipc: Fix use-after-free in tipc_conn_close() (CVE-2025-38464)

  • kernel: vsock: Fix transport_* TOCTOU (CVE-2025-38461)

  • kernel: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CVE-2025-38500)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:15011
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2025-38350 7.8

CVE-2025-38350 in linux - Patched by Root

Root has patched CVE-2025-38350 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2025-38350
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2025-38350 7.8

CVE-2025-38350 in linux - Patched by Root

Root has patched CVE-2025-38350 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2025-38350
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2204-CVE-2025-38350 7.8

CVE-2025-38350 in linux - Patched by Root

Root has patched CVE-2025-38350 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2025-38350
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVROOT-OS-UBUNTU-2404-CVE-2025-38350 7.8

CVE-2025-38350 in linux - Patched by Root

Root has patched CVE-2025-38350 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2025-38350
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVUBUNTU-CVE-2025-38350 8.5

In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain classful qdiscs may invoke their classes' dequeue handler on an enqueue operation. This may unexpectedly empty the child qdisc and thus make an in-flight class passive via qlen_notify(). Most qdiscs do not expect such behaviour at this point in time and may re-activate the class eventually anyways which will lead to a use-after-free. The referenced fix commit attempted to fix this behavior for the HFSC case by moving the backlog accounting around, though this turned out to be incomplete since the parent's parent may run into the issue too. The following reproducer demonstrates this use-after-free: tc qdisc add dev lo root handle 1: drr tc filter add dev lo parent 1: basic classid 1:1 tc class add dev lo parent 1: classid 1:1 drr tc qdisc add dev lo parent 1:1 handle 2: hfsc def 1 tc class add dev lo parent 2: classid 2:1 hfsc rt m1 8 d 1 m2 0 tc qdisc add dev lo parent 2:1 handle 3: netem tc qdisc add dev lo parent 3:1 handle 4: blackhole echo 1 | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888 tc class delete dev lo classid 1:1 echo 1 | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888 Since backlog accounting issues leading to a use-after-frees on stale class pointers is a recurring pattern at this point, this patch takes a different approach. Instead of trying to fix the accounting, the patch ensures that qdisc_tree_reduce_backlog always calls qlen_notify when the child qdisc is empty. This solves the problem because deletion of qdiscs always involves a call to qdisc_reset() and / or qdisc_purge_queue() which ultimately resets its qlen to 0 thus causing the following qdisc_tree_reduce_backlog() to report to the parent. Note that this may call qlen_notify on passive classes multiple times. This is not a problem after the recent patch series that made all the classful qdiscs qlen_notify() handlers idempotent.

Record
UBUNTU-CVE-2025-38350
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVALSA-2025:15011 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CVE-2025-37823)
  • kernel: i40e: fix MMIO write access to an invalid page in i40e_clear_hw (CVE-2025-38200)
  • kernel: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CVE-2025-38211)
  • kernel: net/sched: Always pass notifications when child class becomes empty (CVE-2025-38350)
  • kernel: tipc: Fix use-after-free in tipc_conn_close() (CVE-2025-38464)
  • kernel: vsock: Fix transport_* TOCTOU (CVE-2025-38461)
  • kernel: xfrm: interface: fix use-after-free after changing collect_md xfrm interface (CVE-2025-38500)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:15011
Updated
2026-11-02
OSVALSA-2025:15447 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: drm/vkms: Fix use after free and double free on init error (CVE-2025-22097)
  • kernel: udmabuf: fix a buf size overflow issue during udmabuf creation (CVE-2025-37803)
  • kernel: net/sched: Always pass notifications when child class becomes empty (CVE-2025-38350)
  • kernel: drm/gem: Acquire references on GEM handles for framebuffers (CVE-2025-38449)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:15447
Updated
2026-11-05
OSVALSA-2025:15785 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: net: usb: smsc75xx: Limit packet length to skb->len (CVE-2023-53125)
  • kernel: net/sched: Always pass notifications when child class becomes empty (CVE-2025-38350)
  • kernel: idpf: convert control queue mutex to a spinlock (CVE-2025-38392)
  • kernel: drm/gem: Acquire references on GEM handles for framebuffers (CVE-2025-38449)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:15785
Updated
2026-11-02
OSVALSA-2025:15786 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: net/sched: Always pass notifications when child class becomes empty (CVE-2025-38350)
  • kernel: idpf: convert control queue mutex to a spinlock (CVE-2025-38392)
  • kernel: drm/gem: Acquire references on GEM handles for framebuffers (CVE-2025-38449)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:15786
Updated
2026-11-02
OSVAZL-72593 No score

CVE-2025-38350 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved:

net/sched: Always pass notifications when child class becomes empty

Certain classful qdiscs may invoke their classes' dequeue handler on an enqueue operation. This may unexpectedly empty the child qdisc and thus make an in-flight class passive via qlen_notify(). Most qdiscs do not expect such behaviour at this point in time and may re-activate the class eventually anyways which will lead to a use-after-free.

The referenced fix commit attempted to fix this behavior for the HFSC case by moving the backlog accounting around, though this turned out to be incomplete since the parent's parent may run into the issue too. The following reproducer demonstrates this use-after-free:

tc qdisc add dev lo root handle 1: drr
tc filter add dev lo parent 1: basic classid 1:1
tc class add dev lo parent 1: classid 1:1 drr
tc qdisc add dev lo parent 1:1 handle 2: hfsc def 1
tc class add dev lo parent 2: classid 2:1 hfsc rt m1 8 d 1 m2 0
tc qdisc add dev lo parent 2:1 handle 3: netem
tc qdisc add dev lo parent 3:1 handle 4: blackhole

echo 1 | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888
tc class delete dev lo classid 1:1
echo 1 | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888

Since backlog accounting issues leading to a use-after-frees on stale class pointers is a recurring pattern at this point, this patch takes a different approach. Instead of trying to fix the accounting, the patch ensures that qdisc_tree_reduce_backlog always calls qlen_notify when the child qdisc is empty. This solves the problem because deletion of qdiscs always involves a call to qdisc_reset() and / or qdisc_purge_queue() which ultimately resets its qlen to 0 thus causing the following qdisc_tree_reduce_backlog() to report to the parent. Note that this may call qlen_notify on passive classes multiple times. This is not a problem after the recent patch series that made all the classful qdiscs qlen_notify() handlers idempotent.

Record
AZL-72593
Updated
2026-11-02
OSVCLSA-2025-1757699471 No score

kernel: Fix of 13 CVEs

  • mm/hugetlb: unshare page tables during VMA split, not before {CVE-2025-38084}
  • hugetlb: unshare some PMDs when splitting VMAs {CVE-2025-38084}
  • posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
  • tipc: Fix use-after-free in tipc_conn_close(). {CVE-2025-38464}
  • vsock: Fix transport_* TOCTOU {CVE-2025-38461}
  • RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211}
  • i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
  • net_sched: ets: Fix double list add in class with netem as child qdisc {CVE-2025-37914}
  • net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too {CVE-2025-37823}
  • udp: Fix memory accounting leak. {CVE-2025-22058}
  • net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350}
  • codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-38177}
  • sch_htb: make htb_deactivate() idempotent {CVE-2025-38177}
  • sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38177}
  • sch_htb: make htb_qlen_notify() idempotent {CVE-2025-38177}
  • sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38177}
  • sch_ets: make est_qlen_notify() idempotent {CVE-2025-38177}
  • sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177}
  • sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000}
  • net: fix udp gso skb_segment after pull from frag_list {CVE-2025-38124}
Record
CLSA-2025-1757699471
Updated
2026-11-02
OSVCLSA-2025-1757922878 No score

kernel: Fix of 4 CVEs

  • net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350}
  • sch_cbq: make cbq_qlen_notify() idempotent {CVE-2025-38000}
  • sch_htb: make htb_qlen_notify() idempotent {CVE-2025-37932}
  • codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-37798}
  • sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38350}
  • sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38350}
  • sch_htb: make htb_deactivate() idempotent {CVE-2025-38350}
Record
CLSA-2025-1757922878
Updated
2026-11-02
OSVCLSA-2025-1757961506 No score

kernel: Fix of 28 CVEs

  • posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
  • xfrm: state: fix out-of-bounds read during lookup {CVE-2024-57982}
  • nfsd: fix race between laundromat and free_stateid {CVE-2024-50106}
  • nfsd: split sc_status out of sc_type {CVE-2024-50106}
  • nfsd: avoid race after unhash_delegation_locked() {CVE-2024-50106}
  • nfsd: don't call functions with side-effecting inside WARN_ON() {CVE-2024-50106}
  • can: peak_usb: fix use after free bugs {CVE-2021-47670}
  • wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds {CVE-2025-38159}
  • i2c/designware: Fix an initialization issue {CVE-2025-38380}
  • RDMA/rxe: Fix error unwind in rxe_create_qp() {CVE-2022-50127}
  • i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
  • udp: Fix memory accounting leak. {CVE-2025-22058}
  • Bluetooth: hci_core: Fix use-after-free in vhci_flush() {CVE-2025-38250}
  • net_sched: ets: Fix double list add in class with netem as child qdisc {CVE-2025-38085}
  • mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085}
  • mm/khugepaged: fix GUP-fast interaction by sending IPI {CVE-2025-38085}
  • padata: fix UAF in padata_reorder {CVE-2025-21727}
  • net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350}
  • codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-38177}
  • sch_ets: make est_qlen_notify() idempotent {CVE-2025-38177}
  • sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38177}
  • sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177}
  • sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38177}
  • sch_htb: make htb_qlen_notify() idempotent {CVE-2025-38177}
  • sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000}
  • net/sched: sch_qfq: Fix race condition on qfq_aggregate {CVE-2025-38477}
  • tipc: Fix use-after-free in tipc_conn_close(). {CVE-2025-38464}
  • RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211}
  • scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
  • netfilter: xtables: avoid NFPROTO_UNSPEC where needed {CVE-2024-50038}
  • netfilter: xtables: Add snapshot of hardidletimer target {CVE-2024-50038}
  • crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079}
  • ext4: avoid resizing to a partial cluster size {CVE-2022-50020}
  • net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc {CVE-2025-37890}
  • net: tipc: fix refcount warning in tipc_aead_encrypt {CVE-2025-38273}
  • net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done {CVE-2025-38052}
  • memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove {CVE-2025-22020}
Record
CLSA-2025-1757961506
Updated
2026-11-02
OSVCLSA-2025-1757961864 No score

kernel: Fix of 34 CVEs

  • inet: fully convert sk->sk_rx_dst to RCU rules {CVE-2021-47103}
  • ALSA: usb-audio: Fix out of bounds reads when finding clock sources {CVE-2024-53150}
  • posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
  • can: peak_usb: fix use after free bugs {CVE-2021-47670}
  • wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds {CVE-2025-38159}
  • RDMA/rxe: Fix error unwind in rxe_create_qp() {CVE-2022-50127}
  • i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
  • udp: Fix memory accounting leak. {CVE-2025-22058}
  • ALSA: bcd2000: Fix a UAF bug on the error path of probing {CVE-2022-50083}
  • ext4: correct the misjudgment in ext4_iget_extra_inode {CVE-2022-50083}
  • ext4: correct max_inline_xattr_value_size computing {CVE-2022-50083}
  • ext4: fix use-after-free in ext4_xattr_set_entry {CVE-2022-50083}
  • ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h {CVE-2022-50083}
  • Bluetooth: hci_core: Fix use-after-free in vhci_flush() {CVE-2025-38250}
  • net_sched: ets: Fix double list add in class with netem as child qdisc {CVE-2025-38085}
  • mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085}
  • padata: fix UAF in padata_reorder {CVE-2025-21727}
  • net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350}
  • codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-38177}
  • sch_ets: make est_qlen_notify() idempotent {CVE-2025-38177}
  • sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38177}
  • sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177}
  • sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38177}
  • sch_htb: make htb_qlen_notify() idempotent {CVE-2025-38177}
  • sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000}
  • mptcp: do not queue data on closed subflows {CVE-2022-50070}
  • mptcp: export mptcp_subflow_active {CVE-2022-50070}
  • net/sched: sch_qfq: Fix race condition on qfq_aggregate {CVE-2025-38477}
  • tipc: Fix use-after-free in tipc_conn_close(). {CVE-2025-38464}
  • RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211}
  • scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
  • crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079}
  • net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc {CVE-2025-37890}
  • ext4: avoid resizing to a partial cluster size {CVE-2022-50020}
  • net: tipc: fix refcount warning in tipc_aead_encrypt {CVE-2025-38273}
  • ice: xsk: prohibit usage of non-balanced queue id {CVE-2022-50003}
  • net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done {CVE-2025-38052}
  • virtio-gpu: fix a missing check to avoid NULL dereference {CVE-2022-50181}
  • usb: xhci_plat_remove: avoid NULL dereference {CVE-2022-50133}
  • ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot {CVE-2022-50015}
  • netfilter: nft_tproxy: restrict to prerouting hook {CVE-2022-50001}
  • scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq {CVE-2022-49986}
  • ath11k: fix netdev open race {CVE-2022-50187}
Record
CLSA-2025-1757961864
Updated
2026-11-02
OSVCLSA-2025-1757962453 No score

kernel: Fix of 34 CVEs

  • inet: fully convert sk->sk_rx_dst to RCU rules {CVE-2021-47103}
  • ALSA: usb-audio: Fix out of bounds reads when finding clock sources {CVE-2024-53150}
  • posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
  • can: peak_usb: fix use after free bugs {CVE-2021-47670}
  • wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds {CVE-2025-38159}
  • RDMA/rxe: Fix error unwind in rxe_create_qp() {CVE-2022-50127}
  • i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
  • udp: Fix memory accounting leak. {CVE-2025-22058}
  • ALSA: bcd2000: Fix a UAF bug on the error path of probing {CVE-2022-50083}
  • ext4: correct the misjudgment in ext4_iget_extra_inode {CVE-2022-50083}
  • ext4: correct max_inline_xattr_value_size computing {CVE-2022-50083}
  • ext4: fix use-after-free in ext4_xattr_set_entry {CVE-2022-50083}
  • ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h {CVE-2022-50083}
  • Bluetooth: hci_core: Fix use-after-free in vhci_flush() {CVE-2025-38250}
  • net_sched: ets: Fix double list add in class with netem as child qdisc {CVE-2025-38085}
  • mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085}
  • padata: fix UAF in padata_reorder {CVE-2025-21727}
  • net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350}
  • codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-38177}
  • sch_ets: make est_qlen_notify() idempotent {CVE-2025-38177}
  • sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38177}
  • sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177}
  • sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38177}
  • sch_htb: make htb_qlen_notify() idempotent {CVE-2025-38177}
  • sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000}
  • mptcp: do not queue data on closed subflows {CVE-2022-50070}
  • mptcp: export mptcp_subflow_active {CVE-2022-50070}
  • net/sched: sch_qfq: Fix race condition on qfq_aggregate {CVE-2025-38477}
  • tipc: Fix use-after-free in tipc_conn_close(). {CVE-2025-38464}
  • RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211}
  • scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
  • crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079}
  • ext4: avoid resizing to a partial cluster size {CVE-2022-50020}
  • net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc {CVE-2025-37890}
  • net: tipc: fix refcount warning in tipc_aead_encrypt {CVE-2025-38273}
  • ice: xsk: prohibit usage of non-balanced queue id {CVE-2022-50003}
  • net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done {CVE-2025-38052}
  • virtio-gpu: fix a missing check to avoid NULL dereference {CVE-2022-50181}
  • usb: xhci_plat_remove: avoid NULL dereference {CVE-2022-50133}
  • ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot {CVE-2022-50015}
  • netfilter: nft_tproxy: restrict to prerouting hook {CVE-2022-50001}
  • scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq {CVE-2022-49986}
  • ath11k: fix netdev open race {CVE-2022-50187}
Record
CLSA-2025-1757962453
Updated
2026-11-02
OSVCLSA-2025-1757963029 No score

kernel-uek: Fix of 195 CVEs

  • rds: tcp: block BH in TCP callbacks
  • kexec: Improve & fix crash_exclude_mem_range() to handle overlapping ranges
  • module: correctly exit module_kallsyms_on_each_symbol when fn() != 0
  • module: potential uninitialized return in module_kallsyms_on_each_symbol()
  • module: use RCU to synchronize find_module
  • kallsyms: refactor {,module_}kallsyms_on_each_symbol
  • LTS tag: v5.4.295
  • scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops
  • arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() {CVE-2025-38320}
  • perf: Fix sample vs do_exit() {CVE-2025-38424}
  • s390/pci: Fix __pcilg_mio_inuser() inline assembly
  • rtc: test: Fix invalid format specifier.
  • jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() {CVE-2025-38337}
  • mm/huge_memory: fix dereferencing invalid pmd migration entry {CVE-2025-37958}
  • rtc: Make rtc_time64_to_tm() support dates before 1970
  • rtc: Improve performance of rtc_time64_to_tm(). Add tests.
  • xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create {CVE-2022-48773}
  • posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
  • ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms
  • ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
  • ARM: dts: am335x-bone-common: Add GPIO PHY reset on revision C3 board
  • net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180}
  • net: atm: add lec_mutex {CVE-2025-38323}
  • calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). {CVE-2025-38181}
  • tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer {CVE-2025-38184}
  • tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior
  • atm: atmtcp: Free invalid length skb in atmtcp_c_send(). {CVE-2025-38185}
  • mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). {CVE-2025-38324}
  • wifi: carl9170: do not ping device which has failed to load firmware {CVE-2025-38420}
  • aoe: clean device rq_list in aoedev_downdev() {CVE-2025-38326}
  • hwmon: (occ) fix unaligned accesses
  • drm/nouveau/bl: increase buffer size to avoid truncate warning
  • erofs: remove unused trace event erofs_destroy_inode
  • ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
  • ALSA: hda/intel: Add Thinkpad E15 to PM deny list
  • Input: sparcspkr - avoid unannotated fall-through
  • HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
  • atm: Revert atm_account_tx() if copy_from_iter_full() fails. {CVE-2025-38190}
  • selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
  • scsi: s390: zfcp: Ensure synchronous unit_add
  • scsi: storvsc: Increase the timeouts to storvsc_timeout
  • jffs2: check jffs2_prealloc_raw_node_refs() result in few other places {CVE-2025-38328}
  • jffs2: check that raw node were preallocated before writing summary {CVE-2025-38194}
  • drivers/rapidio/rio_cm.c: prevent possible heap overwrite {CVE-2025-38090}
  • powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery
  • platform/x86: dell_rbu: Stop overwriting data buffer
  • platform: Add Surface platform directory
  • Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first"
  • tee: Prevent size calculation wraparound on 32-bit kernels
  • ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY
  • bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
  • watchdog: da9052_wdt: respect TWDMIN
  • i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
  • sock: Correct error checking condition for (assign|release)_proto_idx()
  • scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
  • vxlan: Do not treat dst cache initialization errors as fatal
  • clk: rockchip: rk3036: mark ddrphy as critical
  • wifi: mac80211: do not offer a mesh path if forwarding is disabled
  • net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info
  • pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get()
  • pinctrl: armada-37xx:…
Record
CLSA-2025-1757963029
Updated
2026-11-02
OSVCLSA-2025-1759431860 No score

kernel: Fix of 39 CVEs

  • ASoC: topology: Clean up route loading {CVE-2024-41069}
  • ASoC: topology: Fix references to freed memory {CVE-2024-41069}
  • drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616}
  • Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965}
  • Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() {CVE-2024-35965}
  • usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704}
  • igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332}
  • vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214}
  • Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966}
  • Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35966}
  • media: stk1160: fix bounds checking in stk1160_copy_video() {CVE-2024-38621}
  • net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350}
  • sch_htb: make htb_qlen_notify() idempotent {CVE-2025-37932}
  • codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-37798}
  • sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38350}
  • sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38350}
  • sch_htb: make htb_deactivate() idempotent {CVE-2025-38350}
  • sch_cbq: make cbq_qlen_notify() idempotent {CVE-2025-38000}
  • inet: fully convert sk->sk_rx_dst to RCU rules {CVE-2021-47103}
  • scsi: mpt3sas: Fix use-after-free warning {CVE-2022-48695}
  • scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901}
  • vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499}
  • USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760}
  • nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497}
  • virtio-net: Add validation for used length {CVE-2021-47352}
  • watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321}
  • scsi: qedi: Fix crash while reading debugfs attribute {CVE-2024-40978}
  • wifi: iwlwifi: mvm: check n_ssids before accessing the ssids {CVE-2024-40929}
  • wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921}
  • mac802154: fix llsec key resources release in mac802154_llsec_key_del {CVE-2024-26961}
  • platform/x86: wmi: Fix opening of char device {CVE-2023-52864}
  • media: gspca: cpia1: shift-out-of-bounds in set_flicker {CVE-2023-52764}
  • wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
  • net: fix information leakage in /proc/net/ptype {CVE-2022-48757}
  • crypto: qat - resolve race condition during AER recovery {CVE-2024-26974}
  • perf/core: Bail out early if the request AUX area is out of bound {CVE-2023-52835}
  • net: ti: fix UAF in tlan_remove_one {CVE-2021-47310}
  • wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() {CVE-2023-52594}
  • net: bridge: use DEV_STATS_INC() {CVE-2023-52578}
  • net: add atomic_long_t to net_device_stats fields {CVE-2023-52578}
  • media: dvb-core: Fix use-after-free due to race at dvb_register_device() {CVE-2022-45884}
  • media: dvb-core: Fix use-after-free on race condition at dvb_frontend {CVE-2022-45885}
  • xen/gntalloc: don't use gnttab_query_foreign_access() {CVE-2022-23039}
  • xen/netfront: don't use gnttab_query_foreign_access() for mapped status {CVE-2022-23037}
  • xen/grant-table: add gnttab_try_end_foreign_access() {CVE-2022-23038}
  • ovl: fail on invalid uid/gid mapping at copy up {CVE-2023-0386}
  • ALSA: oss: Fix PCM OSS buffer allocation overflow {CVE-2022-49292}
  • gfs2: Fix length of holes reported at end-of-file
  • gfs2: Only do glock put in gfs2_create_inode for free inodes
  • gfs2: Fix use-after-free in gfs2_logd after withdraw
  • gfs2: fix use-after-free in trans_drain
  • gfs2: Clean up revokes on normal withdraws
  • GFS2: gfs2_free_extlen can return an extent that is too long
  • gfs2: Wipe jdata and ail1 in gfs2_journal_wipe, formerly gfs2_meta_wipe
  • GFS2: Refactor gfs2_remove_from_journal
  • GFS2: Only set PageChecked for jdata…
Record
CLSA-2025-1759431860
Updated
2026-11-02

Affected products

Show 10 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
kernel
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-64k
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-64k-core
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-64k-debug
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-64k-debug-core
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-64k-debug-devel
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-64k-debug-devel-matched
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-64k-debug-modules
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-devel
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-64k-devel-matched
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-64k-modules
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-64k-modules-core
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-64k-modules-extra
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-abi-stablelists
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-core
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-cross-headers
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-debug
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-debug-core
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-debug-devel
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-debug-devel-matched
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-debug-modules
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-debug-modules-core
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-debug-modules-extra
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-debug-uki-virt
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-devel
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-devel-matched
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-doc
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-headers
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-modules
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-modules-core
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-modules-extra
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-rt
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-rt-64k
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-rt-64k-core
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-rt-64k-debug
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-rt-64k-debug-core
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-rt-64k-debug-devel
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-rt-64k-debug-modules
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-rt-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-rt-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-rt-64k-devel
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-rt-64k-modules
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-rt-64k-modules-core
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-rt-64k-modules-extra
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-rt-core
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel-rt-debug
AlmaLinux:9
From an advisory covering 8 CVEs
before 5.14.0-570.39.1.el9_6
5.14.0-570.39.1.el9_6
kernel
Azure Linux:2
before 5.15.200.1-1
5.15.200.1-1
linux-lts
Alpaquita:23
6.1.143-r1 up to 6.1.147-r0
6.1.147-r0
linux-lts
Alpaquita:25
6.6.89-r0 up to 6.12.41-r0
6.12.41-r0
linux-lts
Alpaquita:stream
6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 7.0.0-284.1101.el9_2.tuxcare.7.els19
7.0.0-284.1101.el9_2.tuxcare.7.els19
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-selftests-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-tools
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-tools-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-tools-libs-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
kernel-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
libbpf
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 2:1.0.0-2.el9_2.tuxcare.7.els19
2:1.0.0-2.el9_2.tuxcare.7.els19
libbpf-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 2:1.0.0-2.el9_2.tuxcare.7.els19
2:1.0.0-2.el9_2.tuxcare.7.els19
libbpf-static
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 2:1.0.0-2.el9_2.tuxcare.7.els19
2:1.0.0-2.el9_2.tuxcare.7.els19
perf
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
python3-perf
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
rtla
TuxCare:AlmaLinux:9.2
From an advisory covering 13 CVEs
before 5.14.0-284.1101.el9_2.tuxcare.7.els19
5.14.0-284.1101.el9_2.tuxcare.7.els19
bpftool
TuxCare:RHEL:7
From an advisory covering 4 CVEs
before 3.10.0-1160.137.1.el7.tuxcare.els24
3.10.0-1160.137.1.el7.tuxcare.els24
kernel
TuxCare:RHEL:7
From an advisory covering 4 CVEs
before 3.10.0-1160.137.1.el7.tuxcare.els24
3.10.0-1160.137.1.el7.tuxcare.els24
kernel-debug
TuxCare:RHEL:7
From an advisory covering 4 CVEs
before 3.10.0-1160.137.1.el7.tuxcare.els24
3.10.0-1160.137.1.el7.tuxcare.els24
kernel-debug-devel
TuxCare:RHEL:7
From an advisory covering 4 CVEs
before 3.10.0-1160.137.1.el7.tuxcare.els24
3.10.0-1160.137.1.el7.tuxcare.els24
kernel-devel
TuxCare:RHEL:7
From an advisory covering 4 CVEs
before 3.10.0-1160.137.1.el7.tuxcare.els24
3.10.0-1160.137.1.el7.tuxcare.els24
kernel-headers
TuxCare:RHEL:7
From an advisory covering 4 CVEs
before 3.10.0-1160.137.1.el7.tuxcare.els24
3.10.0-1160.137.1.el7.tuxcare.els24
kernel-tools
TuxCare:RHEL:7
From an advisory covering 4 CVEs
before 3.10.0-1160.137.1.el7.tuxcare.els24
3.10.0-1160.137.1.el7.tuxcare.els24
kernel-tools-libs
TuxCare:RHEL:7
From an advisory covering 4 CVEs
before 3.10.0-1160.137.1.el7.tuxcare.els24
3.10.0-1160.137.1.el7.tuxcare.els24
kernel-tools-libs-devel
TuxCare:RHEL:7
From an advisory covering 4 CVEs
before 3.10.0-1160.137.1.el7.tuxcare.els24
3.10.0-1160.137.1.el7.tuxcare.els24
perf
TuxCare:RHEL:7
From an advisory covering 4 CVEs
before 3.10.0-1160.137.1.el7.tuxcare.els24
3.10.0-1160.137.1.el7.tuxcare.els24
python-perf
TuxCare:RHEL:7
From an advisory covering 4 CVEs
before 3.10.0-1160.137.1.el7.tuxcare.els24
3.10.0-1160.137.1.el7.tuxcare.els24
bpftool
TuxCare:CentOS-Stream:8
From an advisory covering 26 CVEs
before 4.18.0-553.6.1.el8_10.tuxcare.els13
4.18.0-553.6.1.el8_10.tuxcare.els13
Kernel
Linux
before 5.4.296, 5.5.0 up to 5.10.240, 5.11.0 up to 5.15.187, 5.16.0 up to 6.1.144, 6.2.0 up to 6.6.97, 6.7.0 up to 6.12.37, 6.13.0 up to 6.15.6
5.4.2965.10.2405.15.1876.1.1446.6.976.12.376.15.6
linux
Debian:12
before 6.1.147-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 36 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.147-1
linux
Debian:13
before 6.12.37-1
6.12.37-1
linux
Debian:14
before 6.12.37-1
6.12.37-1
linux
Debian:11
From an advisory covering 331 CVEs
before 5.10.244-1, plus listed versions
5.10.103-15.10.103-1~bpo10+15.10.106-15.10.113-15.10.120-1
Show 41 moreShow less
5.10.120-1~bpo10+15.10.127-15.10.127-25.10.127-2~bpo10+15.10.136-15.10.140-15.10.148-15.10.149-15.10.149-25.10.158-15.10.158-25.10.162-15.10.178-15.10.178-25.10.178-35.10.179-15.10.179-25.10.179-35.10.179-45.10.179-55.10.191-15.10.197-15.10.205-15.10.205-25.10.209-15.10.209-25.10.216-15.10.218-15.10.221-15.10.223-15.10.226-15.10.234-15.10.237-15.10.46-45.10.46-55.10.70-15.10.70-1~bpo10+15.10.84-15.10.92-15.10.92-1~bpo10+15.10.92-2
5.10.244-1
linux-6.1
Debian:11
From an advisory covering 465 CVEs
before 6.1.153-1~deb11u1, plus listed versions
6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u1
Show 6 moreShow less
6.1.128-1~deb11u16.1.129-1~deb11u16.1.137-1~deb11u16.1.140-1~deb11u16.1.147-1~deb11u16.1.148-1~deb11u1
6.1.153-1~deb11u1
linux
Debian:12
From an advisory covering 233 CVEs
before 6.1.147-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 36 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1
6.1.147-1
kernel-linus
Mageia:9
From an advisory covering 237 CVEs
before 6.6.101-1.mga9
6.6.101-1.mga9
kernel
Mageia:9
From an advisory covering 237 CVEs
before 6.6.101-1.mga9
6.6.101-1.mga9
kmod-virtualbox
Mageia:9
From an advisory covering 237 CVEs
before 7.1.10-7.mga9
7.1.10-7.mga9
kmod-xtables-addons
Mageia:9
From an advisory covering 237 CVEs
before 3.24-83.mga9
3.24-83.mga9
wireless-regdb
Mageia:9
From an advisory covering 237 CVEs
before 20250710-1.mga9
20250710-1.mga9
kernel
openEuler:20.03-LTS-SP4
From an advisory covering 12 CVEs
before 4.19.90-2508.3.0.0341.oe2003sp4
4.19.90-2508.3.0.0341.oe2003sp4
kernel
openEuler:22.03-LTS-SP3
From an advisory covering 34 CVEs
before 5.10.0-294.0.0.196.oe2203sp3
5.10.0-294.0.0.196.oe2203sp3
kernel
openEuler:22.03-LTS-SP4
From an advisory covering 30 CVEs
before 5.10.0-294.0.0.197.oe2203sp4
5.10.0-294.0.0.197.oe2203sp4
kernel
openEuler:24.03-LTS
From an advisory covering 95 CVEs
before 6.6.0-127.0.0.113.oe2403
6.6.0-127.0.0.113.oe2403
kernel
openEuler:24.03-LTS-SP1
From an advisory covering 67 CVEs
before 6.6.0-127.0.0.125.oe2403sp1
6.6.0-127.0.0.125.oe2403sp1
kernel
openEuler:24.03-LTS-SP2
From an advisory covering 20 CVEs
before 6.6.0-127.0.0.126.oe2403sp2
6.6.0-127.0.0.126.oe2403sp2
bpftool
Red Hat:rhel_aus:7.7::server
From an advisory covering 3 CVEs
before 0:3.10.0-1062.99.1.el7
0:3.10.0-1062.99.1.el7
bpftool-debuginfo
Red Hat:rhel_aus:7.7::server
From an advisory covering 3 CVEs
before 0:3.10.0-1062.99.1.el7
0:3.10.0-1062.99.1.el7
kernel
Red Hat:rhel_aus:7.7::server
From an advisory covering 3 CVEs
before 0:3.10.0-1062.99.1.el7
0:3.10.0-1062.99.1.el7
kernel-abi-whitelists
Red Hat:rhel_aus:7.7::server
From an advisory covering 3 CVEs
before 0:3.10.0-1062.99.1.el7
0:3.10.0-1062.99.1.el7
kernel-debug
Red Hat:rhel_aus:7.7::server
From an advisory covering 3 CVEs
before 0:3.10.0-1062.99.1.el7
0:3.10.0-1062.99.1.el7
kernel-debug-debuginfo
Red Hat:rhel_aus:7.7::server
From an advisory covering 3 CVEs
before 0:3.10.0-1062.99.1.el7
0:3.10.0-1062.99.1.el7
kernel-debug-devel
Red Hat:rhel_aus:7.7::server
From an advisory covering 3 CVEs
before 0:3.10.0-1062.99.1.el7
0:3.10.0-1062.99.1.el7
kernel-debuginfo
Red Hat:rhel_aus:7.7::server
From an advisory covering 3 CVEs
before 0:3.10.0-1062.99.1.el7
0:3.10.0-1062.99.1.el7
kernel-debuginfo-common-x86_64
Red Hat:rhel_aus:7.7::server
From an advisory covering 3 CVEs
before 0:3.10.0-1062.99.1.el7
0:3.10.0-1062.99.1.el7
kernel-devel
Red Hat:rhel_aus:7.7::server
From an advisory covering 3 CVEs
before 0:3.10.0-1062.99.1.el7
0:3.10.0-1062.99.1.el7
kernel-doc
Red Hat:rhel_aus:7.7::server
From an advisory covering 3 CVEs
before 0:3.10.0-1062.99.1.el7
0:3.10.0-1062.99.1.el7
kernel-tools
Red Hat:rhel_aus:7.7::server
From an advisory covering 3 CVEs
before 0:3.10.0-1062.99.1.el7
0:3.10.0-1062.99.1.el7
kernel-tools-debuginfo
Red Hat:rhel_aus:7.7::server
From an advisory covering 3 CVEs
before 0:3.10.0-1062.99.1.el7
0:3.10.0-1062.99.1.el7
kernel-tools-libs
Red Hat:rhel_aus:7.7::server
From an advisory covering 3 CVEs
before 0:3.10.0-1062.99.1.el7
0:3.10.0-1062.99.1.el7
perf
Red Hat:rhel_aus:7.7::server
From an advisory covering 3 CVEs
before 0:3.10.0-1062.99.1.el7
0:3.10.0-1062.99.1.el7
perf-debuginfo
Red Hat:rhel_aus:7.7::server
From an advisory covering 3 CVEs
before 0:3.10.0-1062.99.1.el7
0:3.10.0-1062.99.1.el7
python-perf
Red Hat:rhel_aus:7.7::server
From an advisory covering 3 CVEs
before 0:3.10.0-1062.99.1.el7
0:3.10.0-1062.99.1.el7
python-perf-debuginfo
Red Hat:rhel_aus:7.7::server
From an advisory covering 3 CVEs
before 0:3.10.0-1062.99.1.el7
0:3.10.0-1062.99.1.el7
kernel-tools-libs-devel
Red Hat:rhel_aus:7.7::server
From an advisory covering 3 CVEs
before 0:3.10.0-1062.99.1.el7
0:3.10.0-1062.99.1.el7
bpftool
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
bpftool-debuginfo
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
kernel
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
kernel-abi-stablelists
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
kernel-core
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
kernel-debug
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
kernel-debug-core
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
kernel-debug-debuginfo
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
kernel-debug-devel
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
kernel-debug-modules
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
kernel-debug-modules-extra
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
kernel-debuginfo
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
kernel-debuginfo-common-ppc64le
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
kernel-debuginfo-common-x86_64
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
kernel-devel
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
kernel-doc
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
kernel-modules
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
kernel-modules-extra
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
kernel-tools
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
kernel-tools-debuginfo
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
kernel-tools-libs
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
perf
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
perf-debuginfo
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
python3-perf
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
python3-perf-debuginfo
Red Hat:rhel_e4s:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
bpftool
Red Hat:rhel_tus:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
bpftool-debuginfo
Red Hat:rhel_tus:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
kernel
Red Hat:rhel_tus:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
kernel-abi-stablelists
Red Hat:rhel_tus:8.8::baseos
From an advisory covering 8 CVEs
before 0:4.18.0-477.107.1.el8_8
0:4.18.0-477.107.1.el8_8
kernel
Rocky Linux:9
From an advisory covering 7 CVEs
before 0:5.14.0-570.39.1.el9_6
0:5.14.0-570.39.1.el9_6
linux
Root:Debian:11
before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
rootio-linux
Root:Debian:11
before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
linux
Root:Debian:12
before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
linux
Root:Ubuntu:22.04
before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
linux
Root:Ubuntu:24.04
before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 83 CVEs
before 4.12.14-122.269.1
4.12.14-122.269.1
kgraft-patch-SLE12-SP5_Update_71
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 83 CVEs
before 1-8.3.1
1-8.3.1
kernel-default
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 83 CVEs
before 4.12.14-122.269.1
4.12.14-122.269.1
kernel-source
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 83 CVEs
before 4.12.14-122.269.1
4.12.14-122.269.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 83 CVEs
before 4.12.14-122.269.1
4.12.14-122.269.1
kernel-default
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 83 CVEs
before 4.12.14-122.269.1
4.12.14-122.269.1
kernel-source
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 83 CVEs
before 4.12.14-122.269.1
4.12.14-122.269.1
kernel-syms
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 83 CVEs
before 4.12.14-122.269.1
4.12.14-122.269.1
kernel-default
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1.150400.24.88.1
5.14.21-150400.24.173.1.150400.24.88.1
kernel-default
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1.150400.24.88.1
5.14.21-150400.24.173.1.150400.24.88.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP4
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-livepatch-SLE15-SP4_Update_43
SUSE:Linux Enterprise Live Patching 15 SP4
From an advisory covering 28 CVEs
before 1-150400.9.3.1
1-150400.9.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP4
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1.150400.24.88.1
5.14.21-150400.24.173.1.150400.24.88.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-64kb
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-default-base
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1.150400.24.88.1
5.14.21-150400.24.173.1.150400.24.88.1
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-64kb
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-default
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-default-base
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1.150400.24.88.1
5.14.21-150400.24.173.1.150400.24.88.1
kernel-docs
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-source
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-syms
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1.150400.24.88.1
5.14.21-150400.24.173.1.150400.24.88.1
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-default
SUSE:Manager Proxy LTS 4.3
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-default-base
SUSE:Manager Proxy LTS 4.3
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1.150400.24.88.1
5.14.21-150400.24.173.1.150400.24.88.1
kernel-source
SUSE:Manager Proxy LTS 4.3
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-syms
SUSE:Manager Proxy LTS 4.3
From an advisory covering 28 CVEs
before 5.14.21-150400.24.173.1
5.14.21-150400.24.173.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
before 6.4.0-150600.8.48.1
6.4.0-150600.8.48.1
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
before 6.4.0-150600.8.48.1
6.4.0-150600.8.48.1
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
before 6.4.0-150600.8.48.1
6.4.0-150600.8.48.1
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-default
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
before 6.4.0-150600.23.65.1.150600.12.28.4
6.4.0-150600.23.65.1.150600.12.28.4
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 238 CVEs
before 6.4.0-150600.23.65.1
6.4.0-150600.23.65.1
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 235 CVEs
before 6.4.0-150600.10.49.1
6.4.0-150600.10.49.1
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 235 CVEs
before 6.4.0-150600.10.49.1
6.4.0-150600.10.49.1
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 235 CVEs
before 6.4.0-150600.10.49.1
6.4.0-150600.10.49.1
kernel-syms-rt
openSUSE:Leap 15.6
From an advisory covering 235 CVEs
before 6.4.0-150600.10.49.1
6.4.0-150600.10.49.1
linux-azure
Ubuntu:Pro:14.04:LTS
before 4.15.0-1192.207~14.04.1, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
4.15.0-1192.207~14.04.1
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
before 4.15.0-1184.197~16.04.1, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
4.15.0-1184.197~16.04.1
linux-azure
Ubuntu:Pro:16.04:LTS
before 4.15.0-1192.207~16.04.1, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
4.15.0-1192.207~16.04.1
linux-gcp
Ubuntu:Pro:16.04:LTS
before 4.15.0-1177.194~16.04.1, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
4.15.0-1177.194~16.04.1
linux-hwe
Ubuntu:Pro:16.04:LTS
before 4.15.0-241.253~16.04.1, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
4.15.0-241.253~16.04.1
linux-oracle
Ubuntu:Pro:16.04:LTS
before 4.15.0-1148.159~16.04.1, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
4.15.0-1148.159~16.04.1
linux-hwe-edge
Ubuntu:16.04:LTS
All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
None known
linux
Ubuntu:Pro:18.04:LTS
before 4.15.0-241.253, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
4.15.0-241.253
linux-aws
Ubuntu:Pro:18.04:LTS
before 4.15.0-1184.197, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
4.15.0-1184.197
linux-aws-5.0
Ubuntu:18.04:LTS
All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
None known
linux-aws-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
None known
linux-aws-5.4
Ubuntu:Pro:18.04:LTS
before 5.4.0-1150.160~18.04.1, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2
5.4.0-1150.160~18.04.1
linux-azure
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
None known
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
before 4.15.0-1192.207, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
4.15.0-1192.207
linux-azure-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
None known
linux-azure-5.4
Ubuntu:Pro:18.04:LTS
before 5.4.0-1154.161~18.04.1, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 45 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1
5.4.0-1154.161~18.04.1
linux-azure-edge
Ubuntu:18.04:LTS
All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
None known
linux-gcp
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
None known
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
before 4.15.0-1177.194, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
4.15.0-1177.194
linux-gcp-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
None known
linux-gcp-5.4
Ubuntu:Pro:18.04:LTS
before 5.4.0-1153.162~18.04.1, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2
5.4.0-1153.162~18.04.1
linux-gke-4.15
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
None known
linux-gke-5.4
Ubuntu:18.04:LTS
All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
None known
linux-hwe
Ubuntu:18.04:LTS
All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
None known
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
before 5.4.0-221.241~18.04.1, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
5.4.0-221.241~18.04.1
linux-hwe-edge
Ubuntu:18.04:LTS
All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
None known
linux-ibm-5.4
Ubuntu:Pro:18.04:LTS
before 5.4.0-1096.101~18.04.1, plus listed versions
5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1
Show 45 moreShow less
5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1
5.4.0-1096.101~18.04.1
linux-kvm
Ubuntu:Pro:18.04:LTS
before 4.15.0-1167.172, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
4.15.0-1167.172
linux-oem
Ubuntu:18.04:LTS
All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
None known
linux-oracle
Ubuntu:Pro:18.04:LTS
before 4.15.0-1146.157, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
4.15.0-1146.157
linux-oracle-5.0
Ubuntu:18.04:LTS
All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
None known
linux-oracle-5.3
Ubuntu:18.04:LTS
All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
None known
linux-oracle-5.4
Ubuntu:Pro:18.04:LTS
before 5.4.0-1148.158~18.04.1, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 45 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1
5.4.0-1148.158~18.04.1
linux-raspi-5.4
Ubuntu:Pro:18.04:LTS
before 5.4.0-1133.146~18.04.1, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 45 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1
5.4.0-1133.146~18.04.1
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
before 4.15.0-2122.128, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 45 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93
4.15.0-2122.128
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
before 4.15.0-2101.107, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 45 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80
4.15.0-2101.107
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
before 4.15.0-1139.150, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 45 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110
4.15.0-1139.150
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
before 4.15.0-2085.91, plus listed versions
4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21
Show 45 moreShow less
4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83
4.15.0-2085.91
linux
Ubuntu:Pro:20.04:LTS
before 5.4.0-221.241, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
5.4.0-221.241
linux-aws
Ubuntu:Pro:20.04:LTS
before 5.4.0-1150.160, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 45 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78
5.4.0-1150.160
linux-aws-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
None known
linux-aws-5.13
Ubuntu:20.04:LTS
All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
before 5.15.0-1091.98~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1091.98~20.04.1
linux-aws-5.8
Ubuntu:20.04:LTS
All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
None known
linux-azure
Ubuntu:Pro:20.04:LTS
before 5.4.0-1154.161, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 45 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87
5.4.0-1154.161
linux-azure-5.11
Ubuntu:20.04:LTS
All versions, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1
Show 8 moreShow less
5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2
None known
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
before 6.12.0-160000.6.1.160000.2.4
6.12.0-160000.6.1.160000.2.4
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
before 6.12.0-160000.6.1
6.12.0-160000.6.1

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affectedOSV
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-38350 is a high vulnerability (CVSS 7.8) in Debian Linux, published July 19, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 22nd percentile. Fixed in kernel 5.15.200.1-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,628 package rows, 1,397 versions, 3,113 references and the rest of 8 source descriptions. The JSON record has them. Also not on the record: 10 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 59 source records.

MoveEnter Open