Every CVE Search/ Get API key

CVE-2026-46319

net/sched: act_ct: Only release RCU read lock after ct_ft

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

net/sched: act_ct: Only release RCU read lock after ct_ft

When looking up a flow table in act_ct in tcf_ct_flow_table_get(), rhashtable_lookup_fast() internally opens and closes an RCU read critical section before returning ct_ft. The tcf_ct_flow_table_cleanup_work() can complete before refcount_inc_not_zero() is invoked on the returned ct_ft resulting in a UAF on the already freed ct_ft object. This vulnerability can lead to privilege escalation.

Analysis from [email protected]: When initializing act_ct, tcf_ct_init() is called, which internally triggers tcf_ct_flow_table_get().

static int tcf_ct_flow_table_get(struct net *net, struct tcf_ct_params *params)

{ struct zones_ht_key key = { .net = net, .zone = params->zone }; struct tcf_ct_flow_table *ct_ft; int err = -ENOMEM;

            mutex_lock(&zones_mutex);
            ct_ft = rhashtable_lookup_fast(&zones_ht, &key, zones_params); // [1]
            if (ct_ft && refcount_inc_not_zero(&ct_ft->ref)) // [2]
                            goto out_unlock;
            ...

}

static __always_inline void *rhashtable_lookup_fast( struct rhashtable *ht, const void *key, const struct rhashtable_params params) { void *obj;

            rcu_read_lock();
            obj = rhashtable_lookup(ht, key, params);
            rcu_read_unlock();

            return obj;

}

At [1], rhashtable_lookup_fast() looks up and returns the corresponding ct_ft from zones_ht . The lookup is performed within an RCU read critical section through rcu_read_lock() / rcu_read_unlock(), which prevents the object from being freed. However, at the point of function return, rcu_read_unlock() has already been called, and there is nothing preventing ct_ft from being freed before reaching refcount_inc_not_zero(&ct_ft->ref) at [2]. This interval becomes the race window, during which ct_ft can be freed.

Free Process:

tcf_ct_flow_table_put() is executed through the path tcf_ct_cleanup() call_rcu() tcf_ct_params_free_rcu() tcf_ct_params_free() tcf_ct_flow_table_put().

static void tcf_ct_flow_table_put(struct tcf_ct_flow_table *ct_ft) { if (refcount_dec_and_test(&ct_ft->ref)) { rhashtable_remove_fast(&zones_ht, &ct_ft->node, zones_params); INIT_RCU_WORK(&ct_ft->rwork, tcf_ct_flow_table_cleanup_work); // [3] queue_rcu_work(act_ct_wq, &ct_ft->rwork); } }

At [3], tcf_ct_flow_table_cleanup_work() is scheduled as RCU work

static void tcf_ct_flow_table_cleanup_work(struct work_struct *work)

{ struct tcf_ct_flow_table *ct_ft; struct flow_block *block;

            ct_ft = container_of(to_rcu_work(work), struct tcf_ct_flow_table,
                                                            rwork);
            nf_flow_table_free(&ct_ft->nf_ft);
            block = &ct_ft->nf_ft.flow_block;
            down_write(&ct_ft->nf_ft.flow_block_lock);
            WARN_ON(!list_empty(&block->cb_list));
            up_write(&ct_ft->nf_ft.flow_block_lock);
            kfree(ct_ft); // [4]

            module_put(THIS_MODULE);

}

tcf_ct_flow_table_cleanup_work() frees ct_ft at [4]. When this function executes between [1] and [2], UAF occurs.

This race condition has a very short race window, making it generally difficult to trigger. Therefore, to trigger the vulnerability an msleep(100) was inserted after[1]

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.10%Up 0.1 points since Jun 10, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.8

net/sched: act_ct: Only release RCU read lock after ct_ft

In the Linux kernel, the following vulnerability has been resolved:

net/sched: act_ct: Only release RCU read lock after ct_ft

When looking up a flow table in act_ct in tcf_ct_flow_table_get(), rhashtable_lookup_fast() internally opens and closes an RCU read critical section before returning ct_ft. The tcf_ct_flow_table_cleanup_work() can complete before refcount_inc_not_zero() is invoked on the returned ct_ft resulting in a UAF on the already freed ct_ft object. This vulnerability can lead to privilege escalation.

Analysis from [email protected]: When initializing act_ct, tcf_ct_init() is called, which internally triggers tcf_ct_flow_table_get().

static int tcf_ct_flow_table_get(struct net *net, struct tcf_ct_params *params)

{ struct zones_ht_key key = { .net = net, .zone = params->zone }; struct tcf_ct_flow_table *ct_ft; int err = -ENOMEM;

            mutex_lock(&zones_mutex);
            ct_ft = rhashtable_lookup_fast(&zones_ht, &key, zones_params); // [1]
            if (ct_ft && refcount_inc_not_zero(&ct_ft->ref)) // [2]
                            goto out_unlock;
            ...

}

static __always_inline void *rhashtable_lookup_fast( struct rhashtable *ht, const void *key, const struct rhashtable_params params) { void *obj;

            rcu_read_lock();
            obj = rhashtable_lookup(ht, key, params);
            rcu_read_unlock();

            return obj;

}

At [1], rhashtable_lookup_fast() looks up and returns the corresponding ct_ft from zones_ht . The lookup is performed within an RCU read critical section through rcu_read_lock() / rcu_read_unlock(), which prevents the object from being freed. However, at the point of function return, rcu_read_unlock() has already been called, and there is nothing preventing ct_ft from being freed before reaching refcount_inc_not_zero(&ct_ft->ref) at [2]. This interval becomes the race window, during which ct_ft can be freed.

Free Process:

tcf_ct_flow_table_put() is executed through the path tcf_ct_cleanup() call_rcu() tcf_ct_params_free_rcu() tcf_ct_params_free() tcf_ct_flow_table_put().

static void tcf_ct_flow_table_put(struct tcf_ct_flow_table *ct_ft) { if (refcount_dec_and_test(&ct_ft->ref)) { rhashtable_remove_fast(&zones_ht, &ct_ft->node, zones_params); INIT_RCU_WORK(&ct_ft->rwork, tcf_ct_flow_table_cleanup_work); // [3] queue_rcu_work(act_ct_wq, &ct_ft->rwork); } }

At [3], tcf_ct_flow_table_cleanup_work() is scheduled as RCU work

static void tcf_ct_flow_table_cleanup_work(struct work_struct *work)

{ struct tcf_ct_flow_table *ct_ft; struct flow_block *block;

            ct_ft = container_of(to_rcu_work(work), struct tcf_ct_flow_table,
                                                            rwork);
            nf_flow_table_free(&ct_ft->nf_ft);
            block = &ct_ft->nf_ft.flow_block;
            down_write(&ct_ft->nf_ft.flow_block_lock);
            WARN_ON(!list_empty(&block->cb_list));
            up_write(&ct_ft->nf_ft.flow_block_lock);
            kfree(ct_ft); // [4]

            module_put(THIS_MODULE);

}

tcf_ct_flow_table_cleanup_work() frees ct_ft at [4]. When this function executes between [1] and [2], UAF occurs.

This race condition has a very short race window, making it generally difficult to trigger. Therefore, to trigger the vulnerability an msleep(100) was inserted after[1]

Record
CVE-2026-46319
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-362
Updated
2026-11-02
EUVDEUVD-2026-35409 7.8

In the Linux kernel, the following vulnerability has been resolved:

net/sched: act_ct: Only release RCU read lock after ct_ft

When looking up a flow table in act_ct in tcf_ct_flow_table_get(), rhashtable_lookup_fast() internally opens and closes an RCU read critical section before returning ct_ft. The tcf_ct_flow_table_cleanup_work() can complete before refcount_inc_not_zero() is invoked on the returned ct_ft resulting in a UAF on the already freed ct_ft object. This vulnerability can lead to privilege escalation.

Analysis from [email protected]: When initializing act_ct, tcf_ct_init() is called, which internally triggers tcf_ct_flow_table_get().

static int tcf_ct_flow_table_get(struct net *net, struct tcf_ct_params *params)

{ struct zones_ht_key key = { .net = net, .zone = params->zone }; struct tcf_ct_flow_table *ct_ft; int err = -ENOMEM;

            mutex_lock(&zones_mutex);
            ct_ft = rhashtable_lookup_fast(&zones_ht, &key, zones_params); // [1]
            if (ct_ft && refcount_inc_not_zero(&ct_ft->ref)) // [2]
                            goto out_unlock;
            ...

}

static __always_inline void *rhashtable_lookup_fast( struct rhashtable *ht, const void *key, const struct rhashtable_params params) { void *obj;

            rcu_read_lock();
            obj = rhashtable_lookup(ht, key, params);
            rcu_read_unlock();

            return obj;

}

At [1], rhashtable_lookup_fast() looks up and returns the corresponding ct_ft from zones_ht . The lookup is performed within an RCU read critical section through rcu_read_lock() / rcu_read_unlock(), which prevents the object from being freed. However, at the point of function return, rcu_read_unlock() has already been called, and there is nothing preventing ct_ft from being freed before reaching refcount_inc_not_zero(&ct_ft->ref) at [2]. This interval becomes the race window, during which ct_ft can be freed.

Free Process:

tcf_ct_flow_table_put() is executed through the path tcf_ct_cleanup() call_rcu() tcf_ct_params_free_rcu() tcf_ct_params_free() tcf_ct_flow_table_put().

static void tcf_ct_flow_table_put(struct tcf_ct_flow_table *ct_ft) { if (refcount_dec_and_test(&ct_ft->ref)) { rhashtable_remove_fast(&zones_ht, &ct_ft->node, zones_params); INIT_RCU_WORK(&ct_ft->rwork, tcf_ct_flow_table_cleanup_work); // [3] queue_rcu_work(act_ct_wq, &ct_ft->rwork); } }

At [3], tcf_ct_flow_table_cleanup_work() is scheduled as RCU work

static void tcf_ct_flow_table_cleanup_work(struct work_struct *work)

{ struct tcf_ct_flow_table *ct_ft; struct flow_block *block;

            ct_ft = container_of(to_rcu_work(work), struct tcf_ct_flow_table,
                                                            rwork);
            nf_flow_table_free(&ct_ft->nf_ft);
            block = &ct_ft->nf_ft.flow_block;
            down_write(&ct_ft->nf_ft.flow_block_lock);
            WARN_ON(!list_empty(&block->cb_list));
            up_write(&ct_ft->nf_ft.flow_block_lock);
            kfree(ct_ft); // [4]

            module_put(THIS_MODULE);

}

tcf_ct_flow_table_cleanup_work() frees ct_ft at [4]. When this function executes between [1] and [2], UAF occurs.

This race condition has a very short race window, making it generally difficult to trigger. Therefore, to trigger the vulnerability an msleep(100) was inserted after[1]

Record
EUVD-2026-35409
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-q9hw-vhj5-hw57 7.8

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: Only...

In the Linux kernel, the following vulnerability has been resolved:

net/sched: act_ct: Only release RCU read lock after ct_ft

When looking up a flow table in act_ct in tcf_ct_flow_table_get(), rhashtable_lookup_fast() internally opens and closes an RCU read critical section before returning ct_ft. The tcf_ct_flow_table_cleanup_work() can complete before refcount_inc_not_zero() is invoked on the returned ct_ft resulting in a UAF on the already freed ct_ft object. This vulnerability can lead to privilege escalation.

Analysis from [email protected]: When initializing act_ct, tcf_ct_init() is called, which internally triggers tcf_ct_flow_table_get().

static int tcf_ct_flow_table_get(struct net *net, struct tcf_ct_params *params)

{ struct zones_ht_key key = { .net = net, .zone = params->zone }; struct tcf_ct_flow_table *ct_ft; int err = -ENOMEM;

            mutex_lock(&zones_mutex);
            ct_ft = rhashtable_lookup_fast(&zones_ht, &key, zones_params); // [1]
            if (ct_ft && refcount_inc_not_zero(&ct_ft->ref)) // [2]
                            goto out_unlock;
            ...

}

static __always_inline void *rhashtable_lookup_fast( struct rhashtable *ht, const void *key, const struct rhashtable_params params) { void *obj;

            rcu_read_lock();
            obj = rhashtable_lookup(ht, key, params);
            rcu_read_unlock();

            return obj;

}

At [1], rhashtable_lookup_fast() looks up and returns the corresponding ct_ft from zones_ht . The lookup is performed within an RCU read critical section through rcu_read_lock() / rcu_read_unlock(), which prevents the object from being freed. However, at the point of function return, rcu_read_unlock() has already been called, and there is nothing preventing ct_ft from being freed before reaching refcount_inc_not_zero(&ct_ft->ref) at [2]. This interval becomes the race window, during which ct_ft can be freed.

Free Process:

tcf_ct_flow_table_put() is executed through the path tcf_ct_cleanup() call_rcu() tcf_ct_params_free_rcu() tcf_ct_params_free() tcf_ct_flow_table_put().

static void tcf_ct_flow_table_put(struct tcf_ct_flow_table *ct_ft) { if (refcount_dec_and_test(&ct_ft->ref)) { rhashtable_remove_fast(&zones_ht, &ct_ft->node, zones_params); INIT_RCU_WORK(&ct_ft->rwork, tcf_ct_flow_table_cleanup_work); // [3] queue_rcu_work(act_ct_wq, &ct_ft->rwork); } }

At [3], tcf_ct_flow_table_cleanup_work() is scheduled as RCU work

static void tcf_ct_flow_table_cleanup_work(struct work_struct *work)

{ struct tcf_ct_flow_table *ct_ft; struct flow_block *block;

            ct_ft = container_of(to_rcu_work(work), struct tcf_ct_flow_table,
                                                            rwork);
            nf_flow_table_free(&ct_ft->nf_ft);
            block = &ct_ft->nf_ft.flow_block;
            down_write(&ct_ft->nf_ft.flow_block_lock);
            WARN_ON(!list_empty(&block->cb_list));
            up_write(&ct_ft->nf_ft.flow_block_lock);
            kfree(ct_ft); // [4]

            module_put(THIS_MODULE);

}

tcf_ct_flow_table_cleanup_work() frees ct_ft at [4]. When this function executes between [1] and [2], UAF occurs.

This race condition has a very short race window, making it generally difficult to trigger. Therefore, to trigger the vulnerability an msleep(100) was inserted after[1]

Record
GHSA-q9hw-vhj5-hw57
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-362, CWE-416
Updated
2026-11-02
NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

net/sched: act_ct: Only release RCU read lock after ct_ft

When looking up a flow table in act_ct in tcf_ct_flow_table_get(), rhashtable_lookup_fast() internally opens and closes an RCU read critical section before returning ct_ft. The tcf_ct_flow_table_cleanup_work() can complete before refcount_inc_not_zero() is invoked on the returned ct_ft resulting in a UAF on the already freed ct_ft object. This vulnerability can lead to privilege escalation.

Analysis from [email protected]: When initializing act_ct, tcf_ct_init() is called, which internally triggers tcf_ct_flow_table_get().

static int tcf_ct_flow_table_get(struct net *net, struct tcf_ct_params *params)

{ struct zones_ht_key key = { .net = net, .zone = params->zone }; struct tcf_ct_flow_table *ct_ft; int err = -ENOMEM;

            mutex_lock(&zones_mutex);
            ct_ft = rhashtable_lookup_fast(&zones_ht, &key, zones_params); // [1]
            if (ct_ft && refcount_inc_not_zero(&ct_ft->ref)) // [2]
                            goto out_unlock;
            ...

}

static __always_inline void *rhashtable_lookup_fast( struct rhashtable *ht, const void *key, const struct rhashtable_params params) { void *obj;

            rcu_read_lock();
            obj = rhashtable_lookup(ht, key, params);
            rcu_read_unlock();

            return obj;

}

At [1], rhashtable_lookup_fast() looks up and returns the corresponding ct_ft from zones_ht . The lookup is performed within an RCU read critical section through rcu_read_lock() / rcu_read_unlock(), which prevents the object from being freed. However, at the point of function return, rcu_read_unlock() has already been called, and there is nothing preventing ct_ft from being freed before reaching refcount_inc_not_zero(&ct_ft->ref) at [2]. This interval becomes the race window, during which ct_ft can be freed.

Free Process:

tcf_ct_flow_table_put() is executed through the path tcf_ct_cleanup() call_rcu() tcf_ct_params_free_rcu() tcf_ct_params_free() tcf_ct_flow_table_put().

static void tcf_ct_flow_table_put(struct tcf_ct_flow_table *ct_ft) { if (refcount_dec_and_test(&ct_ft->ref)) { rhashtable_remove_fast(&zones_ht, &ct_ft->node, zones_params); INIT_RCU_WORK(&ct_ft->rwork, tcf_ct_flow_table_cleanup_work); // [3] queue_rcu_work(act_ct_wq, &ct_ft->rwork); } }

At [3], tcf_ct_flow_table_cleanup_work() is scheduled as RCU work

static void tcf_ct_flow_table_cleanup_work(struct work_struct *work)

{ struct tcf_ct_flow_table *ct_ft; struct flow_block *block;

            ct_ft = container_of(to_rcu_work(work), struct tcf_ct_flow_table,
                                                            rwork);
            nf_flow_table_free(&ct_ft->nf_ft);
            block = &ct_ft->nf_ft.flow_block;
            down_write(&ct_ft->nf_ft.flow_block_lock);
            WARN_ON(!list_empty(&block->cb_list));
            up_write(&ct_ft->nf_ft.flow_block_lock);
            kfree(ct_ft); // [4]

            module_put(THIS_MODULE);

}

tcf_ct_flow_table_cleanup_work() frees ct_ft at [4]. When this function executes between [1] and [2], UAF occurs.

This race condition has a very short race window, making it generally difficult to trigger. Therefore, to trigger the vulnerability an msleep(100) was inserted after[1]

Record
CVE-2026-46319
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416, CWE-362
Updated
2026-11-02
OSVBELL-CVE-2026-46319 7.8
Record
BELL-CVE-2026-46319
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

net/sched: act_ct: Only release RCU read lock after ct_ft

In the Linux kernel, the following vulnerability has been resolved:

net/sched: act_ct: Only release RCU read lock after ct_ft

When looking up a flow table in act_ct in tcf_ct_flow_table_get(), rhashtable_lookup_fast() internally opens and closes an RCU read critical section before returning ct_ft. The tcf_ct_flow_table_cleanup_work() can complete before refcount_inc_not_zero() is invoked on the returned ct_ft resulting in a UAF on the already freed ct_ft object. This vulnerability can lead to privilege escalation.

Analysis from [email protected]: When initializing act_ct, tcf_ct_init() is called, which internally triggers tcf_ct_flow_table_get().

static int tcf_ct_flow_table_get(struct net *net, struct tcf_ct_params *params)

{ struct zones_ht_key key = { .net = net, .zone = params->zone }; struct tcf_ct_flow_table *ct_ft; int err = -ENOMEM;

            mutex_lock(&zones_mutex);
            ct_ft = rhashtable_lookup_fast(&zones_ht, &key, zones_params); // [1]
            if (ct_ft && refcount_inc_not_zero(&ct_ft->ref)) // [2]
                            goto out_unlock;
            ...

}

static __always_inline void *rhashtable_lookup_fast( struct rhashtable *ht, const void *key, const struct rhashtable_params params) { void *obj;

            rcu_read_lock();
            obj = rhashtable_lookup(ht, key, params);
            rcu_read_unlock();

            return obj;

}

At [1], rhashtable_lookup_fast() looks up and returns the corresponding ct_ft from zones_ht . The lookup is performed within an RCU read critical section through rcu_read_lock() / rcu_read_unlock(), which prevents the object from being freed. However, at the point of function return, rcu_read_unlock() has already been called, and there is nothing preventing ct_ft from being freed before reaching refcount_inc_not_zero(&ct_ft->ref) at [2]. This interval becomes the race window, during which ct_ft can be freed.

Free Process:

tcf_ct_flow_table_put() is executed through the path tcf_ct_cleanup() call_rcu() tcf_ct_params_free_rcu() tcf_ct_params_free() tcf_ct_flow_table_put().

static void tcf_ct_flow_table_put(struct tcf_ct_flow_table *ct_ft) { if (refcount_dec_and_test(&ct_ft->ref)) { rhashtable_remove_fast(&zones_ht, &ct_ft->node, zones_params); INIT_RCU_WORK(&ct_ft->rwork, tcf_ct_flow_table_cleanup_work); // [3] queue_rcu_work(act_ct_wq, &ct_ft->rwork); } }

At [3], tcf_ct_flow_table_cleanup_work() is scheduled as RCU work

static void tcf_ct_flow_table_cleanup_work(struct work_struct *work)

{ struct tcf_ct_flow_table *ct_ft; struct flow_block *block;

            ct_ft = container_of(to_rcu_work(work), struct tcf_ct_flow_table,
                                                            rwork);
            nf_flow_table_free(&ct_ft->nf_ft);
            block = &ct_ft->nf_ft.flow_block;
            down_write(&ct_ft->nf_ft.flow_block_lock);
            WARN_ON(!list_empty(&block->cb_list));
            up_write(&ct_ft->nf_ft.flow_block_lock);
            kfree(ct_ft); // [4]

            module_put(THIS_MODULE);

}

tcf_ct_flow_table_cleanup_work() frees ct_ft at [4]. When this function executes between [1] and [2], UAF occurs.

This race condition has a very short race window, making it generally difficult to trigger. Therefore, to trigger the vulnerability an msleep(100) was inserted after[1]

Record
CVE-2026-46319
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2026-46319 7.8

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: Only release RCU read lock after ct_ft When looking up a flow table in act_ct in tcf_ct_flow_table_get(), rhashtable_lookup_fast() internally opens and closes an RCU read critical section before returning ct_ft. The tcf_ct_flow_table_cleanup_work() can complete before refcount_inc_not_zero() is invoked on the returned ct_ft resulting in a UAF on the already freed ct_ft object. This vulnerability can lead to privilege escalation. Analysis from [email protected]: When initializing act_ct, tcf_ct_init() is called, which internally triggers tcf_ct_flow_table_get(). static int tcf_ct_flow_table_get(struct net *net, struct tcf_ct_params *params) { struct zones_ht_key key = { .net = net, .zone = params->zone }; struct tcf_ct_flow_table *ct_ft; int err = -ENOMEM; mutex_lock(&zones_mutex); ct_ft = rhashtable_lookup_fast(&zones_ht, &key, zones_params); // [1] if (ct_ft && refcount_inc_not_zero(&ct_ft->ref)) // [2] goto out_unlock; ... } static __always_inline void *rhashtable_lookup_fast( struct rhashtable *ht, const void *key, const struct rhashtable_params params) { void *obj; rcu_read_lock(); obj = rhashtable_lookup(ht, key, params); rcu_read_unlock(); return obj; } At [1], rhashtable_lookup_fast() looks up and returns the corresponding ct_ft from zones_ht . The lookup is performed within an RCU read critical section through rcu_read_lock() / rcu_read_unlock(), which prevents the object from being freed. However, at the point of function return, rcu_read_unlock() has already been called, and there is nothing preventing ct_ft from being freed before reaching refcount_inc_not_zero(&ct_ft->ref) at [2]. This interval becomes the race window, during which ct_ft can be freed. Free Process: tcf_ct_flow_table_put() is executed through the path tcf_ct_cleanup() call_rcu() tcf_ct_params_free_rcu() tcf_ct_params_free() tcf_ct_flow_table_put(). static void tcf_ct_flow_table_put(struct tcf_ct_flow_table *ct_ft) { if (refcount_dec_and_test(&ct_ft->ref)) { rhashtable_remove_fast(&zones_ht, &ct_ft->node, zones_params); INIT_RCU_WORK(&ct_ft->rwork, tcf_ct_flow_table_cleanup_work); // [3] queue_rcu_work(act_ct_wq, &ct_ft->rwork); } } At [3], tcf_ct_flow_table_cleanup_work() is scheduled as RCU work static void tcf_ct_flow_table_cleanup_work(struct work_struct *work) { struct tcf_ct_flow_table *ct_ft; struct flow_block *block; ct_ft = container_of(to_rcu_work(work), struct tcf_ct_flow_table, rwork); nf_flow_table_free(&ct_ft->nf_ft); block = &ct_ft->nf_ft.flow_block; down_write(&ct_ft->nf_ft.flow_block_lock); WARN_ON(!list_empty(&block->cb_list)); up_write(&ct_ft->nf_ft.flow_block_lock); kfree(ct_ft); // [4] module_put(THIS_MODULE); } tcf_ct_flow_table_cleanup_work() frees ct_ft at [4]. When this function executes between [1] and [2], UAF occurs. This race condition has a very short race window, making it generally difficult to trigger. Therefore, to trigger the vulnerability an msleep(100) was inserted after[1]

Record
DEBIAN-CVE-2026-46319
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:75746 8.8

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record
RHSA-2026:75746
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:75747 8.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:75747
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:83156 8.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:83156
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:83207 8.1

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2026:83207
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:75746 8.8

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition (CVE-2025-39994)

  • kernel: gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242)

  • kernel: Linux kernel: Denial of Service in RDMA/bnxt_re driver due to race condition during QP destruction (CVE-2023-54048)

  • kernel: nvme-pci: fix mempool alloc size (CVE-2022-50756)

  • kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation (CVE-2026-23105)

  • kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856)

  • kernel: gfs2: Fix slab-use-after-free in qd_put (CVE-2026-45861)

  • kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319)

  • kernel: gfs2: add some missing log locking (CVE-2026-53049)

  • kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)

  • kernel: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CVE-2026-53230)

  • kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270)

  • kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829)

  • kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794)

  • kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (CVE-2026-63992)

  • kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (CVE-2026-63994)

  • kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432)

  • kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052)

  • kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255)

  • kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516)

  • kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CVE-2026-74569)

  • kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669)

  • kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)

  • kernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746)

  • kernel: KVM: s390: vsie: zero stale crypto bits (CVE-2026-80921)

  • kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481)

  • kernel: nvme: add missing SRCU grace period in error path (CVE-2026-89972)

  • kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227)

  • kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417)

Bug Fix(es) and Enhancement(s):

  • Rocky Linux8.10 - s390/vfio_ccw: Error path cleanups (JIRA:Rocky Linux-252194)

  • Rocky Linux8.10 - s390/topology: Use zero-based numbering (JIRA:Rocky Linux-252199)

  • [nfs rhel8.10] Disable async copy on nfsd side (JIRA:Rocky Linux-266661)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:75746
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:75747 8.8

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition (CVE-2025-39994)

  • kernel: gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242)

  • kernel: Linux kernel: Denial of Service in RDMA/bnxt_re driver due to race condition during QP destruction (CVE-2023-54048)

  • kernel: nvme-pci: fix mempool alloc size (CVE-2022-50756)

  • kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation (CVE-2026-23105)

  • kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856)

  • kernel: gfs2: Fix slab-use-after-free in qd_put (CVE-2026-45861)

  • kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319)

  • kernel: gfs2: add some missing log locking (CVE-2026-53049)

  • kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)

  • kernel: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CVE-2026-53230)

  • kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270)

  • kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829)

  • kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794)

  • kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (CVE-2026-63992)

  • kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (CVE-2026-63994)

  • kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432)

  • kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052)

  • kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255)

  • kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516)

  • kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CVE-2026-74569)

  • kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669)

  • kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)

  • kernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746)

  • kernel: KVM: s390: vsie: zero stale crypto bits (CVE-2026-80921)

  • kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481)

  • kernel: nvme: add missing SRCU grace period in error path (CVE-2026-89972)

  • kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227)

  • kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417)

Bug Fix(es) and Enhancement(s):

  • Rocky Linux8.10 - s390/vfio_ccw: Error path cleanups (JIRA:Rocky Linux-252194)

  • Rocky Linux8.10 - s390/topology: Use zero-based numbering (JIRA:Rocky Linux-252199)

  • [nfs rhel8.10] Disable async copy on nfsd side (JIRA:Rocky Linux-266661)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:75747
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:83156 8.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319)

  • kernel: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CVE-2026-53011)

  • kernel: wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CVE-2026-64030)

  • kernel: wifi: cfg80211: use wiphy work for socket owner autodisconnect (CVE-2026-68404)

  • kernel: Linux kernel: Denial of Service due to use-after-free in act_tunnel_key (CVE-2026-68377)

  • kernel: net/iucv: fix use-after-free of a severed iucv_path (CVE-2026-68140)

  • kernel: wifi: mac80211: defer link RX stats percpu free to RCU (CVE-2026-68409)

  • kernel: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (CVE-2026-72288)

  • kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CVE-2026-72262)

  • kernel: netfilter: nft_lookup: fix catchall element handling with inverted lookups (CVE-2026-72320)

  • kernel: ALSA: usx2y: bound the hwdep mmap fault offset (CVE-2026-74641)

  • kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705)

  • kernel: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (CVE-2026-80985)

  • kernel: svcrdma: Validate Read chunk positions before reconstruction (CVE-2026-89526)

  • kernel: net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CVE-2026-81003)

  • kernel: NFSD: Prevent client use-after-free during blocked-lock reaping (CVE-2026-90036)

  • kernel: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (CVE-2026-93207)

  • kernel: svcrdma: Reject Write/Reply chunks with segcount 0 (CVE-2026-93228)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:83156
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:83207 8.1

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (CVE-2026-45859)

  • kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319)

  • kernel: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CVE-2026-53011)

  • kernel: USB: serial: mxuport: fix memory corruption with small endpoint (CVE-2026-63899)

  • kernel: bridge: mcast: Fix a possible use-after-free when removing a bridge port (CVE-2026-64032)

  • kernel: wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CVE-2026-64030)

  • kernel: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CVE-2026-63974)

  • kernel: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (CVE-2026-64162)

  • kernel: Linux kernel: Denial of Service due to use-after-free in act_tunnel_key (CVE-2026-68377)

  • kernel: net/iucv: fix use-after-free of a severed iucv_path (CVE-2026-68140)

  • kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CVE-2026-72262)

  • kernel: dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CVE-2026-74574)

  • kernel: ALSA: usx2y: bound the hwdep mmap fault offset (CVE-2026-74641)

  • kernel: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (CVE-2026-80985)

  • kernel: svcrdma: Validate Read chunk positions before reconstruction (CVE-2026-89526)

  • kernel: nfsd: don't free session slots that are still in use (CVE-2026-89689)

  • kernel: NFSD: Prevent client use-after-free during blocked-lock reaping (CVE-2026-90036)

  • kernel: media: cx231xx: reject geometry changes while the VBI queue is busy (CVE-2026-89894)

  • kernel: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (CVE-2026-93207)

  • kernel: svcrdma: Reject Write/Reply chunks with segcount 0 (CVE-2026-93228)

Bug Fix(es) and Enhancement(s):

  • cannot use VFs of i40e/ice NIC in bond device (JIRA:Rocky Linux-143410)

  • ionic: commit backported to 9.8 missing in 10.2 (JIRA:Rocky Linux-165657)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:83207
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-46319 7.3

In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: Only release RCU read lock after ct_ft When looking up a flow table in act_ct in tcf_ct_flow_table_get(), rhashtable_lookup_fast() internally opens and closes an RCU read critical section before returning ct_ft. The tcf_ct_flow_table_cleanup_work() can complete before refcount_inc_not_zero() is invoked on the returned ct_ft resulting in a UAF on the already freed ct_ft object. This vulnerability can lead to privilege escalation. Analysis from [email protected]: When initializing act_ct, tcf_ct_init() is called, which internally triggers tcf_ct_flow_table_get(). static int tcf_ct_flow_table_get(struct net *net, struct tcf_ct_params *params) { struct zones_ht_key key = { .net = net, .zone = params->zone }; struct tcf_ct_flow_table *ct_ft; int err = -ENOMEM; mutex_lock(&zones_mutex); ct_ft = rhashtable_lookup_fast(&zones_ht, &key, zones_params); // [1] if (ct_ft && refcount_inc_not_zero(&ct_ft->ref)) // [2] goto out_unlock; ... } static __always_inline void *rhashtable_lookup_fast( struct rhashtable *ht, const void *key, const struct rhashtable_params params) { void *obj; rcu_read_lock(); obj = rhashtable_lookup(ht, key, params); rcu_read_unlock(); return obj; } At [1], rhashtable_lookup_fast() looks up and returns the corresponding ct_ft from zones_ht . The lookup is performed within an RCU read critical section through rcu_read_lock() / rcu_read_unlock(), which prevents the object from being freed. However, at the point of function return, rcu_read_unlock() has already been called, and there is nothing preventing ct_ft from being freed before reaching refcount_inc_not_zero(&ct_ft->ref) at [2]. This interval becomes the race window, during which ct_ft can be freed. Free Process: tcf_ct_flow_table_put() is executed through the path tcf_ct_cleanup() call_rcu() tcf_ct_params_free_rcu() tcf_ct_params_free() tcf_ct_flow_table_put(). static void tcf_ct_flow_table_put(struct tcf_ct_flow_table *ct_ft) { if (refcount_dec_and_test(&ct_ft->ref)) { rhashtable_remove_fast(&zones_ht, &ct_ft->node, zones_params); INIT_RCU_WORK(&ct_ft->rwork, tcf_ct_flow_table_cleanup_work); // [3] queue_rcu_work(act_ct_wq, &ct_ft->rwork); } } At [3], tcf_ct_flow_table_cleanup_work() is scheduled as RCU work static void tcf_ct_flow_table_cleanup_work(struct work_struct *work) { struct tcf_ct_flow_table *ct_ft; struct flow_block *block; ct_ft = container_of(to_rcu_work(work), struct tcf_ct_flow_table, rwork); nf_flow_table_free(&ct_ft->nf_ft); block = &ct_ft->nf_ft.flow_block; down_write(&ct_ft->nf_ft.flow_block_lock); WARN_ON(!list_empty(&block->cb_list)); up_write(&ct_ft->nf_ft.flow_block_lock); kfree(ct_ft); // [4] module_put(THIS_MODULE); } tcf_ct_flow_table_cleanup_work() frees ct_ft at [4]. When this function executes between [1] and [2], UAF occurs. This race condition has a very short race window, making it generally difficult to trigger. Therefore, to trigger the vulnerability an msleep(100) was inserted after[1]

Record
UBUNTU-CVE-2026-46319
CVSS 4.0
7.3 HighCVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:75746 No score

Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition (CVE-2025-39994)
  • kernel: gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242)
  • kernel: Linux kernel: Denial of Service in RDMA/bnxt_re driver due to race condition during QP destruction (CVE-2023-54048)
  • kernel: nvme-pci: fix mempool alloc size (CVE-2022-50756)
  • kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation (CVE-2026-23105)
  • kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856)
  • kernel: gfs2: Fix slab-use-after-free in qd_put (CVE-2026-45861)
  • kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319)
  • kernel: gfs2: add some missing log locking (CVE-2026-53049)
  • kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)
  • kernel: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CVE-2026-53230)
  • kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270)
  • kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829)
  • kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794)
  • kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (CVE-2026-63992)
  • kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (CVE-2026-63994)
  • kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432)
  • kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052)
  • kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255)
  • kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516)
  • kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CVE-2026-74569)
  • kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669)
  • kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)
  • kernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746)
  • kernel: KVM: s390: vsie: zero stale crypto bits (CVE-2026-80921)
  • kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481)
  • kernel: nvme: add missing SRCU grace period in error path (CVE-2026-89972)
  • kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227)
  • kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417)

Bug Fix(es) and Enhancement(s):

  • AlmaLinux8.10 - s390/vfio_ccw: Error path cleanups (JIRA:AlmaLinux-252194)
  • AlmaLinux8.10 - s390/topology: Use zero-based numbering (JIRA:AlmaLinux-252199)
  • [nfs rhel8.10] Disable async copy on nfsd side (JIRA:AlmaLinux-266661)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:75746
Updated
2026-11-02
OSVALSA-2026:75747 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition (CVE-2025-39994)
  • kernel: gfs2: Fix unlikely race in gdlm_put_lock (CVE-2025-40242)
  • kernel: Linux kernel: Denial of Service in RDMA/bnxt_re driver due to race condition during QP destruction (CVE-2023-54048)
  • kernel: nvme-pci: fix mempool alloc size (CVE-2022-50756)
  • kernel: Linux kernel: Denial of Service in QFQ scheduler via child qlen manipulation (CVE-2026-23105)
  • kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (CVE-2026-45856)
  • kernel: gfs2: Fix slab-use-after-free in qd_put (CVE-2026-45861)
  • kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319)
  • kernel: gfs2: add some missing log locking (CVE-2026-53049)
  • kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000 (CVE-2026-52972)
  • kernel: net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CVE-2026-53230)
  • kernel: ipvs: clear the svc scheduler ptr early on edit (CVE-2026-53270)
  • kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-63829)
  • kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path (CVE-2026-63794)
  • kernel: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (CVE-2026-63992)
  • kernel: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmpv6 (CVE-2026-63994)
  • kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-68432)
  • kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink (CVE-2026-72052)
  • kernel: netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst (CVE-2026-72255)
  • kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active (CVE-2026-74516)
  • kernel: netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() (CVE-2026-74569)
  • kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors (CVE-2026-74669)
  • kernel: ipvlan: inherit needed_headroom and needed_tailroom from phy_dev (CVE-2026-74744)
  • kernel: netfilter: flowtable: publish GC-visible tuple last (CVE-2026-74746)
  • kernel: KVM: s390: vsie: zero stale crypto bits (CVE-2026-80921)
  • kernel: nvme-tcp: fix host memory disclosure on R2T for a read command (CVE-2026-89481)
  • kernel: nvme: add missing SRCU grace period in error path (CVE-2026-89972)
  • kernel: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed() (CVE-2026-90227)
  • kernel: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() (CVE-2026-97417)

Bug Fix(es) and Enhancement(s):

  • AlmaLinux8.10 - s390/vfio_ccw: Error path cleanups (JIRA:AlmaLinux-252194)
  • AlmaLinux8.10 - s390/topology: Use zero-based numbering (JIRA:AlmaLinux-252199)
  • [nfs rhel8.10] Disable async copy on nfsd side (JIRA:AlmaLinux-266661)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:75747
Updated
2026-11-02
OSVALSA-2026:83156 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319)
  • kernel: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CVE-2026-53011)
  • kernel: wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CVE-2026-64030)
  • kernel: wifi: cfg80211: use wiphy work for socket owner autodisconnect (CVE-2026-68404)
  • kernel: Linux kernel: Denial of Service due to use-after-free in act_tunnel_key (CVE-2026-68377)
  • kernel: net/iucv: fix use-after-free of a severed iucv_path (CVE-2026-68140)
  • kernel: wifi: mac80211: defer link RX stats percpu free to RCU (CVE-2026-68409)
  • kernel: KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling (CVE-2026-72288)
  • kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CVE-2026-72262)
  • kernel: netfilter: nft_lookup: fix catchall element handling with inverted lookups (CVE-2026-72320)
  • kernel: ALSA: usx2y: bound the hwdep mmap fault offset (CVE-2026-74641)
  • kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705)
  • kernel: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (CVE-2026-80985)
  • kernel: svcrdma: Validate Read chunk positions before reconstruction (CVE-2026-89526)
  • kernel: net/iucv: filter frames in afiucv_hs_rcv() by ingress device (CVE-2026-81003)
  • kernel: NFSD: Prevent client use-after-free during blocked-lock reaping (CVE-2026-90036)
  • kernel: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (CVE-2026-93207)
  • kernel: svcrdma: Reject Write/Reply chunks with segcount 0 (CVE-2026-93228)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:83156
Updated
2026-11-02
OSVALSA-2026:83207 No score

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (CVE-2026-45859)
  • kernel: net/sched: act_ct: Only release RCU read lock after ct_ft (CVE-2026-46319)
  • kernel: net/sched: taprio: fix use-after-free in advance_sched() on schedule switch (CVE-2026-53011)
  • kernel: USB: serial: mxuport: fix memory corruption with small endpoint (CVE-2026-63899)
  • kernel: bridge: mcast: Fix a possible use-after-free when removing a bridge port (CVE-2026-64032)
  • kernel: wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs (CVE-2026-64030)
  • kernel: Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (CVE-2026-63974)
  • kernel: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() (CVE-2026-64162)
  • kernel: Linux kernel: Denial of Service due to use-after-free in act_tunnel_key (CVE-2026-68377)
  • kernel: net/iucv: fix use-after-free of a severed iucv_path (CVE-2026-68140)
  • kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CVE-2026-72262)
  • kernel: dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() (CVE-2026-74574)
  • kernel: ALSA: usx2y: bound the hwdep mmap fault offset (CVE-2026-74641)
  • kernel: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry (CVE-2026-80985)
  • kernel: svcrdma: Validate Read chunk positions before reconstruction (CVE-2026-89526)
  • kernel: nfsd: don't free session slots that are still in use (CVE-2026-89689)
  • kernel: NFSD: Prevent client use-after-free during blocked-lock reaping (CVE-2026-90036)
  • kernel: media: cx231xx: reject geometry changes while the VBI queue is busy (CVE-2026-89894)
  • kernel: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry (CVE-2026-93207)
  • kernel: svcrdma: Reject Write/Reply chunks with segcount 0 (CVE-2026-93228)

Bug Fix(es) and Enhancement(s):

  • cannot use VFs of i40e/ice NIC in bond device (JIRA:AlmaLinux-143410)
  • ionic: commit backported to 9.8 missing in 10.2 (JIRA:AlmaLinux-165657)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:83207
Updated
2026-11-02
OSVAZL-89681 No score

CVE-2026-46319 affecting package kernel for versions less than 6.6.141.1-1

In the Linux kernel, the following vulnerability has been resolved:

net/sched: act_ct: Only release RCU read lock after ct_ft

When looking up a flow table in act_ct in tcf_ct_flow_table_get(), rhashtable_lookup_fast() internally opens and closes an RCU read critical section before returning ct_ft. The tcf_ct_flow_table_cleanup_work() can complete before refcount_inc_not_zero() is invoked on the returned ct_ft resulting in a UAF on the already freed ct_ft object. This vulnerability can lead to privilege escalation.

Analysis from [email protected]: When initializing act_ct, tcf_ct_init() is called, which internally triggers tcf_ct_flow_table_get().

static int tcf_ct_flow_table_get(struct net *net, struct tcf_ct_params *params)

{ struct zones_ht_key key = { .net = net, .zone = params->zone }; struct tcf_ct_flow_table *ct_ft; int err = -ENOMEM;

            mutex_lock(&zones_mutex);
            ct_ft = rhashtable_lookup_fast(&zones_ht, &key, zones_params); // [1]
            if (ct_ft && refcount_inc_not_zero(&ct_ft->ref)) // [2]
                            goto out_unlock;
            ...

}

static __always_inline void *rhashtable_lookup_fast( struct rhashtable *ht, const void *key, const struct rhashtable_params params) { void *obj;

            rcu_read_lock();
            obj = rhashtable_lookup(ht, key, params);
            rcu_read_unlock();

            return obj;

}

At [1], rhashtable_lookup_fast() looks up and returns the corresponding ct_ft from zones_ht . The lookup is performed within an RCU read critical section through rcu_read_lock() / rcu_read_unlock(), which prevents the object from being freed. However, at the point of function return, rcu_read_unlock() has already been called, and there is nothing preventing ct_ft from being freed before reaching refcount_inc_not_zero(&ct_ft->ref) at [2]. This interval becomes the race window, during which ct_ft can be freed.

Free Process:

tcf_ct_flow_table_put() is executed through the path tcf_ct_cleanup() call_rcu() tcf_ct_params_free_rcu() tcf_ct_params_free() tcf_ct_flow_table_put().

static void tcf_ct_flow_table_put(struct tcf_ct_flow_table *ct_ft) { if (refcount_dec_and_test(&ct_ft->ref)) { rhashtable_remove_fast(&zones_ht, &ct_ft->node, zones_params); INIT_RCU_WORK(&ct_ft->rwork, tcf_ct_flow_table_cleanup_work); // [3] queue_rcu_work(act_ct_wq, &ct_ft->rwork); } }

At [3], tcf_ct_flow_table_cleanup_work() is scheduled as RCU work

static void tcf_ct_flow_table_cleanup_work(struct work_struct *work)

{ struct tcf_ct_flow_table *ct_ft; struct flow_block *block;

            ct_ft = container_of(to_rcu_work(work), struct tcf_ct_flow_table,
                                                            rwork);
            nf_flow_table_free(&ct_ft->nf_ft);
            block = &ct_ft->nf_ft.flow_block;
            down_write(&ct_ft->nf_ft.flow_block_lock);
            WARN_ON(!list_empty(&block->cb_list));
            up_write(&ct_ft->nf_ft.flow_block_lock);
            kfree(ct_ft); // [4]

            module_put(THIS_MODULE);

}

tcf_ct_flow_table_cleanup_work() frees ct_ft at [4]. When this function executes between [1] and [2], UAF occurs.

This race condition has a very short race window, making it generally difficult to trigger. Therefore, to trigger the vulnerability an msleep(100) was inserted after[1]

Record
AZL-89681
Updated
2026-11-02
OSVCLSA-2026-1788168285 No score

kernel: Fix of 193 CVEs

  • mac802154: llsec: reject frames shorter than the authentication tag {CVE-2026-68125}
  • KVM: x86/mmu: Fix use-after-free on vendor module reload {CVE-2026-68428}
  • wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper {CVE-2026-68197}
  • bpf: account for current allocated stack depth in widen_imprecise_scalars() {CVE-2025-68208}
  • tun: free page on build_skb failure in tun_xdp_one() {CVE-2026-46322}
  • smb: client: fix potential cfid UAF in smb2_query_info_compound {CVE-2025-40320}
  • net/packet: avoid fanout hook re-registration after unregister {CVE-2026-68338}
  • wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}
  • binfmt_misc: set have_execfd only once the interpreter is opened {CVE-2026-68186}
  • tracing: Fix resource leak on mmiotrace trace_pipe close {CVE-2026-68175}
  • tipc: fix u16 MTU truncation in media and bearer MTU validation {CVE-2026-68297}
  • net: gro: fix double aggregation of flush-marked skbs {CVE-2026-68136}
  • bpf, sockmap: Reject unhashed UDP sockets on sockmap update {CVE-2026-68386}
  • wifi: brcmfmac: fix 802.1X-SHA256 call trace warning {CVE-2026-68304}
  • udf: fix partition descriptor append bookkeeping {CVE-2026-45991}
  • Bluetooth: SCO: fix race conditions in sco_sock_connect() {CVE-2026-43023}
  • smb: client: validate dacloffset before building DACL pointers {CVE-2026-46195}
  • smb/client: fix out-of-bounds read in symlink_data() {CVE-2026-46185}
  • net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo {CVE-2026-46132}
  • Bluetooth: hci_event: fix potential UAF in SSP passkey handlers {CVE-2026-46056}
  • RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send {CVE-2026-45856}
  • RDMA/mana: Validate rx_hash_key_len {CVE-2026-46145}
  • scsi: qla2xxx: Completely fix fcport double free {CVE-2026-43414}
  • bpf: Fix bpf_xdp_store_bytes proto for read-only arg {CVE-2026-45886}
  • libceph: Fix slab-out-of-bounds access in auth message processing {CVE-2026-46119}
  • wifi: mac80211: use safe list iteration in radar detect work {CVE-2026-46166}
  • RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads {CVE-2026-46114}
  • nfsd: never defer requests during idmap lookup {CVE-2026-45983}
  • drop_monitor: fix size calculations for 64-bit attributes {CVE-2026-68287}
  • openvswitch: cap upcall PID array size and pre-size vport replies {CVE-2026-45840}
  • procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}
  • wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() {CVE-2026-46069}
  • dm mirror: fix integer overflow in create_dirty_log() {CVE-2026-46023}
  • netfilter: nft_inner: Fix IPv6 inner_thoff desync {CVE-2026-46244}
  • drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() {CVE-2026-68429}
  • crypto: authencesn - reject short ahash digests during instance creation {CVE-2026-46033}
  • RDMA/rxe: Fix race condition in QP timer handlers {CVE-2026-45910}
  • wifi: mac80211: remove station if connection prep fails {CVE-2026-46125}
  • tcp: call sk_data_ready() after listener migration {CVE-2026-46015}
  • scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk {CVE-2025-38289}
  • net/sched: act_ct: Only release RCU read lock after ct_ft {CVE-2026-46319}
  • dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}
  • io-wq: check that the predecessor is hashed in io_wq_remove_pending() {CVE-2026-46274}
  • wifi: mac80211: drop stray 'static' from fast-RX rx_result {CVE-2026-46152}
  • io_uring/poll: fix signed comparison in io_poll_get_ownership() {CVE-2026-52933}
  • xfrm: espintcp: do not reuse an in-progress partial send {CVE-2026-52935}
  • Bluetooth: btusb: validate Realtek vendor event length {CVE-2026-68339}
  • Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() {CVE-2026-53256}
  • Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}
  • netfilter: nft_exthdr: fix register tracking for F_PRESENT flag {CVE-2026-53218}
  • ipc: limit next_id…
Record
CLSA-2026-1788168285
Updated
2026-11-02
OSVCLSA-2026-1792979985 No score

kernel: Fix of 154 CVEs

  • net: bridge: fix vlan tunnel dst refcnt when egressing {CVE-2021-47222}
  • net: bridge: fix vlan tunnel dst null pointer dereference {CVE-2021-47223}
  • writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() {CVE-2026-64378}
  • writeback, cgroup: increment isw_nr_in_flight before grabbing an inode {CVE-2026-64378}
  • writeback, cgroup: add smp_mb() to cgroup_writeback_umount() {CVE-2026-64378}
  • fs/writeback.c: use rcu_barrier() to wait for inflight wb switches going into workqueue when umount {CVE-2026-64378}
  • libceph: validate banner payload length {CVE-2026-90067}
  • drm/virtio: release the GEM object on virtio_gpu_vram_create() errors {CVE-2026-98606}
  • procfs: fix missing RCU protection when reading real_parent in do_task_stat() {CVE-2026-46259}
  • NFSv4/flexfiles: reject zero filehandle version count {CVE-2026-53392}
  • smb: client: cancel reconnect work in clean_demultiplex_info() {CVE-2026-98175}
  • smb: client: reject userspace cifs.idmap descriptions {CVE-2026-97564}
  • smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 {CVE-2026-89637}
  • smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}
  • net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow {CVE-2026-98025}
  • RDMA/siw: Fix endpoint/socket association handling {CVE-2026-74345}
  • RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs {CVE-2026-74390}
  • nfsd: fix clock domain mismatch in clients_still_reclaiming() {CVE-2026-89685}
  • vdpa_sim_blk: reject out-of-range sector starts {CVE-2026-97991}
  • Drivers: hv: vmbus: use generic driver_override infrastructure {CVE-2026-80676}
  • HID: wacom: Fix OOB write in wacom_hid_set_device_mode() {CVE-2026-63916}
  • nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone {CVE-2026-89482}
  • nvmet-tcp: fix page fragment cache leak in error path {CVE-2026-74386}
  • bpf: mark a NULL call argument precise {CVE-2026-98019}
  • bpf: Don't predict JMP32 pointer vs zero comparisons {CVE-2026-98041}
  • ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get {CVE-2026-72262}
  • ASoC: SOF: ipc3-topology: Move and correct size checks in sof_ipc3_control_load_bytes() {CVE-2026-72262}
  • Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan {CVE-2026-98108}
  • mm/page_reporting: use system_freezable_wq to fix UAF during suspend {CVE-2026-74481}
  • netfilter: synproxy: refresh tcphdr after skb_ensure_writable {CVE-2026-64007}
  • netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() {CVE-2026-74569}
  • reboot: fix cad_pid use-after-free race {CVE-2026-97938}
  • fs/resctrl: Fix UAF from worker threads when domains are removed {CVE-2026-93099}
  • ext4: fix out-of-bounds read in ext4_read_inline_dir() {CVE-2026-89786}
  • ext4: fix dirtyclusters double decrement on fs shutdown {CVE-2026-45920}
  • openvswitch: Fix CT limit teardown use-after-free {CVE-2026-89488}
  • sctp: fix NULL deref on untransmitted RECONF completion {CVE-2026-89477}
  • netfilter: conntrack: remove sprintf usage {CVE-2026-53002}
  • fuse: re-lock request before replacing page cache folio {CVE-2026-53388}
  • fanotify: fix false positive on permission events {CVE-2026-46150}
  • configfs_lookup(): don't leave ->s_dentry dangling on failure {CVE-2026-74359}
  • sctp: add INIT verification after cookie unpacking {CVE-2026-72398}
  • sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}
  • sctp: validate embedded INIT chunk and address list lengths in cookie {CVE-2026-53224}
  • sctp: stream: fully roll back denied add-stream state {CVE-2026-52929}
  • sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing {CVE-2026-53246}
  • sctp: diag: reject stale associations in dump_one path {CVE-2026-52917}
  • sctp: Hold sock lock while iterating over address list {CVE-2026-52917}
  • sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL {CVE-2026-46227}
  • nfsd: gate nfs3…
Record
CLSA-2026-1792979985
Updated
2026-11-02
OSVLSN-0121-1 No score

Kernel Live Patch Security Notice

In the Linux kernel, the following vulnerability has been resolved: ksmbd: ipc: fix use-after-free in ipc_msg_send_request ipc_msg_send_request() waits for a generic netlink reply using an ipc_msg_table_entry on the stack.

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of share_conf in compound request smb2_get_ksmbd_tcon() reuses work->tcon in compound requests without validating tcon->t_state.

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() In DecodeQ931(), the UserUserIE code path reads a 16-bit length from the packet, then decrements it by 1 to skip the protocol discriminator byte before passing it to DecodeH323_UserInformation().

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache The NFSv4.0 replay cache uses a fixed 112-byte inline buffer (rp_ibuf.

In the Linux kernel, the following vulnerability has been resolved: media: dvb-net: fix OOB access in ULE extension header tables The ule_mandatory_ext_handlers.

It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container.)(CVE-2026-31431)

In the Linux kernel, the following vulnerability has been resolved: ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() After this commit (e2b76ab8b5c9 'ksmbd: add support for read compound'), response buffer management was changed to use dynamic iov array.

In the Linux kernel, the following vulnerability has been resolved: usbip: validate number_of_packets in usbip_pack_ret_submit() When a USB/IP client receives a RET_SUBMIT response, usbip_pack_ret_submit() unconditionally overwrites urb->number_of_packets from the network PDU. This value is subsequently used as the loop bound in usbip_recv_iso() and usbip_pad_iso() to iterate over urb->iso_frame_desc.

In the Linux kernel, the following vulnerability has been resolved: rxrpc: reject undecryptable rxkad response tickets rxkad_decrypt_ticket() decrypts the RXKAD response ticket and then parses the buffer as plaintext without checking whether crypto_skcipher_decrypt() succeeded.

In the Linux kernel, the following vulnerability has been resolved: batman-adv: hold claim backbone gateways by reference batadv_bla_add_claim() can replace claim->backbone_gw and drop the old gateway's last reference while readers still follow the pointer.

In the Linux kernel, the following vulnerability has been resolved: batman-adv: reject oversized global TT response buffers batadv_tt_prepare_tvlv_global_data() builds the allocation length for a global TT response in 16-bit temporaries.

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds write in smb2_get_ea() EA alignment smb2_get_ea() applies 4-byte alignment padding via memset() after writing each EA entry.

In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix potential double free of skb When alloc_skb fails in x25_queue_rx_frame it calls kfree_skb(skb) at line 48 and returns 1 (error).

In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb.

In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb.

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix signededness bug in smb_direct_prepare_negotiation() smb_direct_prepare_negotiation() casts an unsigned __u32 value from sp->max_recv_size and req->preferred_send_size to a signed int before computing min_t(int, ...).

In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data() On the receive path, __ioam6_fill_trace_data() uses trace->nodelen to decide…

Record
LSN-0121-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:11014-1 No score

kernel-devel-7.0.12-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.0.12-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11014-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21388-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
  • CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
  • CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
  • CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
  • CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
  • CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
  • CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
  • CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
  • CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
  • CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
  • CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
  • CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
  • CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43035: net:…
Record
openSUSE-SU-2026:21388-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-46319 No score

CVE-2026-46319 in linux - Patched by Root

Root has patched CVE-2026-46319 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-46319
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-46319 No score

CVE-2026-46319 in linux - Patched by Root

Root has patched CVE-2026-46319 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-46319
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2026-46319 No score

CVE-2026-46319 in linux - Patched by Root

Root has patched CVE-2026-46319 in the linux package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2026-46319
Updated
2026-11-03
OSVROOT-OS-UBUNTU-2204-CVE-2026-46319 No score

CVE-2026-46319 in linux - Patched by Root

Root has patched CVE-2026-46319 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2026-46319
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2404-CVE-2026-46319 No score

CVE-2026-46319 in linux - Patched by Root

Root has patched CVE-2026-46319 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2026-46319
Updated
2026-11-02
OSVSUSE-SU-2026:22521-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43079: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).
  • CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).
  • CVE-2026-43081: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241).
  • CVE-2026-43085: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).
  • CVE-2026-43086: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).
  • CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).
  • CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).
  • CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (bsc#1264258).
  • CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).
  • CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).
  • CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).
  • CVE-2026-43238: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).
  • CVE-2026-43303: mm/page_alloc: clear page->private in free_pages_prepare() (bsc#1264974).
  • CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).
  • CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).
  • CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
  • CVE-2026-43472: unshare: fix unshare_fs() handling (bsc#1264748).
  • CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-45838: bpf: fix end-of-list detection in cgroup_storage_get_next_key() (bsc#1266396).
  • CVE-2026-45848: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734).
  • CVE-2026-45891: net: hns3: fix double free issue for tx spare buffer (bsc#1266717).
  • CVE-2026-45912: ext4: don't cache extent during splitting extent (bsc#1266899).
  • CVE-2026-45948: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).
  • CVE-2026-45985: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700).
  • CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
  • CVE-2026-46053: net: rds: fix MR cleanup on copy error (bsc#1267427).
  • CVE-2026-46063: x86/shstk: Prevent deadlock during shstk sigreturn (bsc#1267228).
  • CVE-2026-46065: fbdev: defio: Disconnect deferred I/O from the lifetime of struct (bsc#1267458).
  • CVE-2026-46069: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (bsc#1267437).
  • CVE-2026-46071: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 (bsc#1267591).…
Record
SUSE-SU-2026:22521-1
Updated
2026-11-02
OSVSUSE-SU-2026:22522-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43079: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).
  • CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).
  • CVE-2026-43081: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241).
  • CVE-2026-43085: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).
  • CVE-2026-43086: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).
  • CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).
  • CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).
  • CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (bsc#1264258).
  • CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).
  • CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).
  • CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).
  • CVE-2026-43238: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).
  • CVE-2026-43303: mm/page_alloc: clear page->private in free_pages_prepare() (bsc#1264974).
  • CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).
  • CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).
  • CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
  • CVE-2026-43472: unshare: fix unshare_fs() handling (bsc#1264748).
  • CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-45838: bpf: fix end-of-list detection in cgroup_storage_get_next_key() (bsc#1266396).
  • CVE-2026-45848: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734).
  • CVE-2026-45891: net: hns3: fix double free issue for tx spare buffer (bsc#1266717).
  • CVE-2026-45912: ext4: don't cache extent during splitting extent (bsc#1266899).
  • CVE-2026-45948: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).
  • CVE-2026-45985: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700).
  • CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
  • CVE-2026-46053: net: rds: fix MR cleanup on copy error (bsc#1267427).
  • CVE-2026-46063: x86/shstk: Prevent deadlock during shstk sigreturn (bsc#1267228).
  • CVE-2026-46065: fbdev: defio: Disconnect deferred I/O from the lifetime of struct (bsc#1267458).
  • CVE-2026-46069: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (bsc#1267437).
  • CVE-2026-46071: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12…
Record
SUSE-SU-2026:22522-1
Updated
2026-11-02
OSVSUSE-SU-2026:22665-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43079: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).
  • CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).
  • CVE-2026-43081: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241).
  • CVE-2026-43085: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).
  • CVE-2026-43086: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).
  • CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).
  • CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).
  • CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (bsc#1264258).
  • CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).
  • CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).
  • CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).
  • CVE-2026-43238: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).
  • CVE-2026-43303: mm/page_alloc: clear page->private in free_pages_prepare() (bsc#1264974).
  • CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).
  • CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).
  • CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
  • CVE-2026-43472: unshare: fix unshare_fs() handling (bsc#1264748).
  • CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-45838: bpf: fix end-of-list detection in cgroup_storage_get_next_key() (bsc#1266396).
  • CVE-2026-45848: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734).
  • CVE-2026-45891: net: hns3: fix double free issue for tx spare buffer (bsc#1266717).
  • CVE-2026-45912: ext4: don't cache extent during splitting extent (bsc#1266899).
  • CVE-2026-45948: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).
  • CVE-2026-45985: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700).
  • CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
  • CVE-2026-46053: net: rds: fix MR cleanup on copy error (bsc#1267427).
  • CVE-2026-46063: x86/shstk: Prevent deadlock during shstk sigreturn (bsc#1267228).
  • CVE-2026-46065: fbdev: defio: Disconnect deferred I/O from the lifetime of struct (bsc#1267458).
  • CVE-2026-46069: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (bsc#1267437).
  • CVE-2026-46071: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 (bsc#1267591).…
Record
SUSE-SU-2026:22665-1
Updated
2026-11-02
OSVSUSE-SU-2026:22666-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2025-71294: drm/amdgpu: fix NULL pointer issue buffer funcs (bsc#1264562).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31462: drm/amdgpu: prevent immediate PASID reuse case (bsc#1262655).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31677: crypto: af_alg - limit RX SG extraction by receive buffer budget (bsc#1263560).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43079: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).
  • CVE-2026-43080: l2tp: Drop large packets with UDP encap (bsc#1264236).
  • CVE-2026-43081: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241).
  • CVE-2026-43085: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).
  • CVE-2026-43086: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).
  • CVE-2026-43089: xfrm_user: fix info leak in build_mapping() (bsc#1264261).
  • CVE-2026-43093: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).
  • CVE-2026-43107: xfrm: account XFRMA_IF_ID in aevent size calculation (bsc#1264258).
  • CVE-2026-43128: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).
  • CVE-2026-43139: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).
  • CVE-2026-43233: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).
  • CVE-2026-43238: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).
  • CVE-2026-43303: mm/page_alloc: clear page->private in free_pages_prepare() (bsc#1264974).
  • CVE-2026-43336: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).
  • CVE-2026-43420: ceph: fix i_nlink underrun during async unlink (bsc#1264814).
  • CVE-2026-43456: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).
  • CVE-2026-43472: unshare: fix unshare_fs() handling (bsc#1264748).
  • CVE-2026-43492: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() (bsc#1265629).
  • CVE-2026-43502: net/rds: handle zerocopy send cleanup before the message is queued (bsc#1266008).
  • CVE-2026-45838: bpf: fix end-of-list detection in cgroup_storage_get_next_key() (bsc#1266396).
  • CVE-2026-45848: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734).
  • CVE-2026-45891: net: hns3: fix double free issue for tx spare buffer (bsc#1266717).
  • CVE-2026-45912: ext4: don't cache extent during splitting extent (bsc#1266899).
  • CVE-2026-45948: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).
  • CVE-2026-45985: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700).
  • CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
  • CVE-2026-46053: net: rds: fix MR cleanup on copy error (bsc#1267427).
  • CVE-2026-46063: x86/shstk: Prevent deadlock during shstk sigreturn (bsc#1267228).
  • CVE-2026-46065: fbdev: defio: Disconnect deferred I/O from the lifetime of struct (bsc#1267458).
  • CVE-2026-46069: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (bsc#1267437).
  • CVE-2026-46071: KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12…
Record
SUSE-SU-2026:22666-1
Updated
2026-11-02
OSVSUSE-SU-2026:22742-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
  • CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
  • CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
  • CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
  • CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
  • CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
  • CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
  • CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
  • CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
  • CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
  • CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
  • CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
  • CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43035: net:…
Record
SUSE-SU-2026:22742-1
Updated
2026-11-02
OSVSUSE-SU-2026:22769-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
  • CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
  • CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
  • CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
  • CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
  • CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
  • CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
  • CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
  • CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
  • CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
  • CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
  • CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
  • CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43035: net:…
Record
SUSE-SU-2026:22769-1
Updated
2026-11-02
OSVSUSE-SU-2026:22812-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
  • CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
  • CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
  • CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
  • CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
  • CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
  • CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
  • CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
  • CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
  • CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
  • CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
  • CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
  • CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43035: net:…
Record
SUSE-SU-2026:22812-1
Updated
2026-11-02
OSVSUSE-SU-2026:22835-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues

The following security issues were fixed:

  • CVE-2025-10263: arm64: cputype: Add C1-Premium definitions (bsc#1266290).
  • CVE-2025-39894: netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (bsc#1262430).
  • CVE-2025-40341: futex: Don't leak robust_list pointer on exec race (bsc#1255029).
  • CVE-2026-23248: perf: Make perf_pmu_unregister() useable (bsc#1259800).
  • CVE-2026-23394: Revert: "af_unix: Remove lock dance in unix_peek_fds()." (bsc#1260565).
  • CVE-2026-23451: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).
  • CVE-2026-31414: netfilter: nf_conntrack_expect: use expect->helper (bsc#1262085).
  • CVE-2026-31429: net: skb: fix cross-cache free of KFENCE-allocated skb head (bsc#1262392).
  • CVE-2026-31438: netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators (bsc#1267824).
  • CVE-2026-31450: ext4: publish jinode after initialization (bsc#1262618).
  • CVE-2026-31452: ext4: convert inline data to extents when truncate exceeds inline size (bsc#1262620).
  • CVE-2026-31466: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825).
  • CVE-2026-31469: virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false (bsc#1267816).
  • CVE-2026-31479: drm/xe: always keep track of remap prev/next (bsc#1262765).
  • CVE-2026-31492: RDMA/irdma: Initialize free_qp completion before using it (bsc#1262748).
  • CVE-2026-31495: netfilter: ctnetlink: use netlink policy range checks (bsc#1262798).
  • CVE-2026-31499: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).
  • CVE-2026-31502: team: fix header_ops type confusion with non-Ethernet ports (bsc#1263072).
  • CVE-2026-31555: futex: Clear stale exiting pointer in futex_lock_pi() retry path (bsc#1263178).
  • CVE-2026-31560: spi: spi-dw-dma: fix print error log when wait finish transaction (bsc#1263057).
  • CVE-2026-31596: ocfs2: handle invalid dinode in ocfs2_group_extend (bsc#1263319).
  • CVE-2026-31646: net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() (bsc#1263796).
  • CVE-2026-31647: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).
  • CVE-2026-31663: xfrm: hold device only for the asynchronous decryption (bsc#1263133).
  • CVE-2026-31664: xfrm: clear trailing padding in build_polexpire() (bsc#1263578).
  • CVE-2026-31665: netfilter: nft_ct: fix use-after-free in timeout object destroy (bsc#1263137).
  • CVE-2026-31670: net: rfkill: prevent unlimited numbers of rfkill events from being created (bsc#1263573).
  • CVE-2026-31673: af_unix: read UNIX_DIAG_VFS data under unix_state_lock (bsc#1263143).
  • CVE-2026-31674: netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() (bsc#1263568).
  • CVE-2026-31680: net: ipv6: flowlabel: defer exclusive option free until RCU teardown (bsc#1263563).
  • CVE-2026-31693: cifs: some missing initializations on replay (bsc#1267744).
  • CVE-2026-31743: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).
  • CVE-2026-31752: bridge: br_nd_send: validate ND option lengths (bsc#1264045).
  • CVE-2026-31771: Bluetooth: hci_event: move wake reason storage into validated event handlers (bsc#1264145).
  • CVE-2026-43010: bpf: Reject sleepable kprobe_multi programs at attach time (bsc#1264015).
  • CVE-2026-43014,CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).
  • CVE-2026-43016: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007).
  • CVE-2026-43022: Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (bsc#1264001).
  • CVE-2026-43024: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).
  • CVE-2026-43028: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).
  • CVE-2026-43034: bnxt_en: set backing store type from query type (bsc#1263998).
  • CVE-2026-43035: net:…
Record
SUSE-SU-2026:22835-1
Updated
2026-11-02
OSVSUSE-SU-2026:23258-1 No score

Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.35.1 fixes various security issues.

The following security issues were fixed:

  • CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362).
  • CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300).
  • CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281).
  • CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034).
  • CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139).
  • CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
  • CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023).
  • CVE-2026-53233: netdev: fix double-free in netdev_nl_bind_rx_doit() (bsc#1269803).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1270024).
  • CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867).
  • CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).
Record
SUSE-SU-2026:23258-1
Updated
2026-11-02
OSVSUSE-SU-2026:23259-1 No score

Security update for the Linux Kernel RT (Live Patch 13 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.34.1 fixes various security issues.

The following security issues were fixed:

  • CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282).
  • CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362).
  • CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300).
  • CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281).
  • CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034).
  • CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139).
  • CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
  • CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822).
  • CVE-2026-53182: wifi: nl80211: reject oversized EMA RNR lists (bsc#1269885).
  • CVE-2026-53205: accel/ivpu: Add bounds checks for firmware log indices (bsc#1269903).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023).
  • CVE-2026-53233: netdev: fix double-free in netdev_nl_bind_rx_doit() (bsc#1269803).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1270024).
  • CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867).
  • CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).
Record
SUSE-SU-2026:23259-1
Updated
2026-11-02
OSVSUSE-SU-2026:23260-1 No score

Security update for the Linux Kernel RT (Live Patch 12 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.33.1 fixes various security issues.

The following security issues were fixed:

  • CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282).
  • CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362).
  • CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300).
  • CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281).
  • CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034).
  • CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139).
  • CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
  • CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822).
  • CVE-2026-53182: wifi: nl80211: reject oversized EMA RNR lists (bsc#1269885).
  • CVE-2026-53205: accel/ivpu: Add bounds checks for firmware log indices (bsc#1269903).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023).
  • CVE-2026-53233: netdev: fix double-free in netdev_nl_bind_rx_doit() (bsc#1269803).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1270024).
  • CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867).
  • CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).
Record
SUSE-SU-2026:23260-1
Updated
2026-11-02
OSVSUSE-SU-2026:23261-1 No score

Security update for the Linux Kernel RT (Live Patch 11 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues.

The following security issues were fixed:

  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263791).
  • CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1265306).
  • CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282).
  • CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264483).
  • CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362).
  • CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300).
  • CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281).
  • CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034).
  • CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139).
  • CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
  • CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822).
  • CVE-2026-53182: wifi: nl80211: reject oversized EMA RNR lists (bsc#1269885).
  • CVE-2026-53205: accel/ivpu: Add bounds checks for firmware log indices (bsc#1269903).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023).
  • CVE-2026-53233: netdev: fix double-free in netdev_nl_bind_rx_doit() (bsc#1269803).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1270024).
  • CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867).
  • CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).
Record
SUSE-SU-2026:23261-1
Updated
2026-11-02
OSVSUSE-SU-2026:23262-1 No score

Security update for the Linux Kernel RT (Live Patch 10 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.31.1 fixes various security issues.

The following security issues were fixed:

  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263791).
  • CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1265306).
  • CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282).
  • CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264483).
  • CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362).
  • CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300).
  • CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281).
  • CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034).
  • CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139).
  • CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
  • CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822).
  • CVE-2026-53182: wifi: nl80211: reject oversized EMA RNR lists (bsc#1269885).
  • CVE-2026-53205: accel/ivpu: Add bounds checks for firmware log indices (bsc#1269903).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023).
  • CVE-2026-53233: netdev: fix double-free in netdev_nl_bind_rx_doit() (bsc#1269803).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1270024).
  • CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867).
  • CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).
Record
SUSE-SU-2026:23262-1
Updated
2026-11-02
OSVSUSE-SU-2026:23263-1 No score

Security update for the Linux Kernel RT (Live Patch 9 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.30.1 fixes various security issues.

The following security issues were fixed:

  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263791).
  • CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1265306).
  • CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282).
  • CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264483).
  • CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362).
  • CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300).
  • CVE-2026-46274: io-wq: check that the predecessor is hashed in io_wq_remove_pending() (bsc#1268624).
  • CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281).
  • CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034).
  • CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139).
  • CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
  • CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822).
  • CVE-2026-53182: wifi: nl80211: reject oversized EMA RNR lists (bsc#1269885).
  • CVE-2026-53205: accel/ivpu: Add bounds checks for firmware log indices (bsc#1269903).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023).
  • CVE-2026-53233: netdev: fix double-free in netdev_nl_bind_rx_doit() (bsc#1269803).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1270024).
  • CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867).
  • CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).
Record
SUSE-SU-2026:23263-1
Updated
2026-11-02
OSVSUSE-SU-2026:23264-1 No score

Security update for the Linux Kernel RT (Live Patch 8 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.29.1 fixes various security issues.

The following security issues were fixed:

  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263791).
  • CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1265306).
  • CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282).
  • CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264483).
  • CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362).
  • CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300).
  • CVE-2026-46274: io-wq: check that the predecessor is hashed in io_wq_remove_pending() (bsc#1268624).
  • CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281).
  • CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034).
  • CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139).
  • CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
  • CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822).
  • CVE-2026-53182: wifi: nl80211: reject oversized EMA RNR lists (bsc#1269885).
  • CVE-2026-53205: accel/ivpu: Add bounds checks for firmware log indices (bsc#1269903).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023).
  • CVE-2026-53233: netdev: fix double-free in netdev_nl_bind_rx_doit() (bsc#1269803).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1270024).
  • CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867).
  • CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).
Record
SUSE-SU-2026:23264-1
Updated
2026-11-02
OSVSUSE-SU-2026:23265-1 No score

Security update for the Linux Kernel RT (Live Patch 7 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.28.1 fixes various security issues.

The following security issues were fixed:

  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263791).
  • CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1265306).
  • CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282).
  • CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264483).
  • CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362).
  • CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300).
  • CVE-2026-46274: io-wq: check that the predecessor is hashed in io_wq_remove_pending() (bsc#1268624).
  • CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281).
  • CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034).
  • CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139).
  • CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
  • CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822).
  • CVE-2026-53182: wifi: nl80211: reject oversized EMA RNR lists (bsc#1269885).
  • CVE-2026-53205: accel/ivpu: Add bounds checks for firmware log indices (bsc#1269903).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023).
  • CVE-2026-53233: netdev: fix double-free in netdev_nl_bind_rx_doit() (bsc#1269803).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1270024).
  • CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867).
  • CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).
Record
SUSE-SU-2026:23265-1
Updated
2026-11-02
OSVSUSE-SU-2026:23266-1 No score

Security update for the Linux Kernel RT (Live Patch 6 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.27.1 fixes various security issues.

The following security issues were fixed:

  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263791).
  • CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264078).
  • CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1265306).
  • CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282).
  • CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264483).
  • CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362).
  • CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300).
  • CVE-2026-46274: io-wq: check that the predecessor is hashed in io_wq_remove_pending() (bsc#1268624).
  • CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281).
  • CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034).
  • CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139).
  • CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
  • CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822).
  • CVE-2026-53182: wifi: nl80211: reject oversized EMA RNR lists (bsc#1269885).
  • CVE-2026-53205: accel/ivpu: Add bounds checks for firmware log indices (bsc#1269903).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023).
  • CVE-2026-53233: netdev: fix double-free in netdev_nl_bind_rx_doit() (bsc#1269803).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1270024).
  • CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867).
  • CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).
Record
SUSE-SU-2026:23266-1
Updated
2026-11-02
OSVSUSE-SU-2026:23267-1 No score

Security update for the Linux Kernel RT (Live Patch 5 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.26.1 fixes various security issues.

The following security issues were fixed:

  • CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split (bsc#1259134).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263791).
  • CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264078).
  • CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1265306).
  • CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282).
  • CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264483).
  • CVE-2026-43206: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (bsc#1266668).
  • CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362).
  • CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300).
  • CVE-2026-46274: io-wq: check that the predecessor is hashed in io_wq_remove_pending() (bsc#1268624).
  • CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281).
  • CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034).
  • CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139).
  • CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
  • CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822).
  • CVE-2026-53182: wifi: nl80211: reject oversized EMA RNR lists (bsc#1269885).
  • CVE-2026-53205: accel/ivpu: Add bounds checks for firmware log indices (bsc#1269903).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023).
  • CVE-2026-53233: netdev: fix double-free in netdev_nl_bind_rx_doit() (bsc#1269803).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1270024).
  • CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867).
  • CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).
Record
SUSE-SU-2026:23267-1
Updated
2026-11-02
OSVSUSE-SU-2026:23268-1 No score

Security update for the Linux Kernel RT (Live Patch 4 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.9.1 fixes various security issues.

The following security issues were fixed:

  • CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split (bsc#1259134).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263791).
  • CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264078).
  • CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1265306).
  • CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282).
  • CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264483).
  • CVE-2026-43206: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (bsc#1266668).
  • CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362).
  • CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300).
  • CVE-2026-46274: io-wq: check that the predecessor is hashed in io_wq_remove_pending() (bsc#1268624).
  • CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281).
  • CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034).
  • CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139).
  • CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
  • CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822).
  • CVE-2026-53182: wifi: nl80211: reject oversized EMA RNR lists (bsc#1269885).
  • CVE-2026-53205: accel/ivpu: Add bounds checks for firmware log indices (bsc#1269903).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023).
  • CVE-2026-53233: netdev: fix double-free in netdev_nl_bind_rx_doit() (bsc#1269803).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1270024).
  • CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867).
  • CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).
Record
SUSE-SU-2026:23268-1
Updated
2026-11-02
OSVSUSE-SU-2026:23269-1 No score

Security update for the Linux Kernel RT (Live Patch 3 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.8.1 fixes various security issues.

The following security issues were fixed:

  • CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split (bsc#1259134).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263791).
  • CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264078).
  • CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1265306).
  • CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282).
  • CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264483).
  • CVE-2026-43206: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (bsc#1266668).
  • CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362).
  • CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300).
  • CVE-2026-46274: io-wq: check that the predecessor is hashed in io_wq_remove_pending() (bsc#1268624).
  • CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281).
  • CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034).
  • CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139).
  • CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
  • CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822).
  • CVE-2026-53182: wifi: nl80211: reject oversized EMA RNR lists (bsc#1269885).
  • CVE-2026-53205: accel/ivpu: Add bounds checks for firmware log indices (bsc#1269903).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023).
  • CVE-2026-53233: netdev: fix double-free in netdev_nl_bind_rx_doit() (bsc#1269803).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1270024).
  • CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867).
  • CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).
Record
SUSE-SU-2026:23269-1
Updated
2026-11-02
OSVSUSE-SU-2026:23270-1 No score

Security update for the Linux Kernel RT (Live Patch 2 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.7.1 fixes various security issues.

The following security issues were fixed:

  • CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split (bsc#1259134).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263791).
  • CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264078).
  • CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1265306).
  • CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282).
  • CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264483).
  • CVE-2026-43206: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (bsc#1266668).
  • CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362).
  • CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300).
  • CVE-2026-46274: io-wq: check that the predecessor is hashed in io_wq_remove_pending() (bsc#1268624).
  • CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281).
  • CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034).
  • CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139).
  • CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
  • CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822).
  • CVE-2026-53182: wifi: nl80211: reject oversized EMA RNR lists (bsc#1269885).
  • CVE-2026-53205: accel/ivpu: Add bounds checks for firmware log indices (bsc#1269903).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023).
  • CVE-2026-53233: netdev: fix double-free in netdev_nl_bind_rx_doit() (bsc#1269803).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1270024).
  • CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867).
  • CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).
Record
SUSE-SU-2026:23270-1
Updated
2026-11-02
OSVSUSE-SU-2026:23271-1 No score

Security update for the Linux Kernel RT (Live Patch 1 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.6.1 fixes various security issues.

The following security issues were fixed:

  • CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437).
  • CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split (bsc#1259134).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263791).
  • CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264078).
  • CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1265306).
  • CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282).
  • CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264483).
  • CVE-2026-43206: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (bsc#1266668).
  • CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362).
  • CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300).
  • CVE-2026-46274: io-wq: check that the predecessor is hashed in io_wq_remove_pending() (bsc#1268624).
  • CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281).
  • CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034).
  • CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139).
  • CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
  • CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822).
  • CVE-2026-53182: wifi: nl80211: reject oversized EMA RNR lists (bsc#1269885).
  • CVE-2026-53205: accel/ivpu: Add bounds checks for firmware log indices (bsc#1269903).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023).
  • CVE-2026-53233: netdev: fix double-free in netdev_nl_bind_rx_doit() (bsc#1269803).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1270024).
  • CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867).
  • CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).
Record
SUSE-SU-2026:23271-1
Updated
2026-11-02
OSVSUSE-SU-2026:23272-1 No score

Security update for the Linux Kernel RT (Live Patch 0 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.5.1 fixes various security issues.

The following security issues were fixed:

  • CVE-2025-40204: sctp: Fix MAC comparison to be constant-time (bsc#1253437).
  • CVE-2026-23161: mm/shmem, swap: fix race of truncate and swap entry split (bsc#1259134).
  • CVE-2026-23449: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1262213).
  • CVE-2026-31629: nfc: llcp: add missing return after LLCP_CLOSED checks (bsc#1263791).
  • CVE-2026-31759: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264078).
  • CVE-2026-43077: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1265306).
  • CVE-2026-43109: x86: shadow stacks: proper error handling for mmap lock (bsc#1269282).
  • CVE-2026-43110: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264483).
  • CVE-2026-43206: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (bsc#1266668).
  • CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers (bsc#1267362).
  • CVE-2026-46242: eventpoll: fix ep_remove struct eventpoll / struct file UAF (bsc#1270300).
  • CVE-2026-46274: io-wq: check that the predecessor is hashed in io_wq_remove_pending() (bsc#1268624).
  • CVE-2026-46319: net/sched: act_ct: Only release RCU read lock after ct_ft (bsc#1268281).
  • CVE-2026-52923: ipc: limit next_id allocation to the valid ID range (bsc#1269034).
  • CVE-2026-52956: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1272139).
  • CVE-2026-52972: crypto: af_alg - Cap AEAD AD length to 0x80000000 (bsc#1269196).
  • CVE-2026-53133: RDMA/umem: Fix truncation for block sizes >= 4G (bsc#1269822).
  • CVE-2026-53182: wifi: nl80211: reject oversized EMA RNR lists (bsc#1269885).
  • CVE-2026-53205: accel/ivpu: Add bounds checks for firmware log indices (bsc#1269903).
  • CVE-2026-53224: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1270023).
  • CVE-2026-53233: netdev: fix double-free in netdev_nl_bind_rx_doit() (bsc#1269803).
  • CVE-2026-53246: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing (bsc#1270024).
  • CVE-2026-64530: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_hand (bsc#1271867).
  • CVE-2026-64600: xfs: resample the data fork mapping after cycling ILOCK (RefluXFS) (bsc#1271543).
Record
SUSE-SU-2026:23272-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel-rt
AlmaLinux:8
 before 4.18.0-553.171.1.rt7.512.el8_10
4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-core
AlmaLinux:8
 before 4.18.0-553.171.1.rt7.512.el8_10
4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-debug
AlmaLinux:8
 before 4.18.0-553.171.1.rt7.512.el8_10
4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-debug-core
AlmaLinux:8
 before 4.18.0-553.171.1.rt7.512.el8_10
4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-debug-devel
AlmaLinux:8
 before 4.18.0-553.171.1.rt7.512.el8_10
4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-debug-modules
AlmaLinux:8
 before 4.18.0-553.171.1.rt7.512.el8_10
4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-debug-modules-extra
AlmaLinux:8
 before 4.18.0-553.171.1.rt7.512.el8_10
4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-devel
AlmaLinux:8
 before 4.18.0-553.171.1.rt7.512.el8_10
4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-modules
AlmaLinux:8
 before 4.18.0-553.171.1.rt7.512.el8_10
4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-modules-extra
AlmaLinux:8
 before 4.18.0-553.171.1.rt7.512.el8_10
4.18.0-553.171.1.rt7.512.el8_10
Show 290 moreShow less
Affected packages
PackageAffectedFixed
bpftool
AlmaLinux:8
 before 4.18.0-553.171.1.el8_10
4.18.0-553.171.1.el8_10
kernel
AlmaLinux:8
 before 4.18.0-553.171.1.el8_10
4.18.0-553.171.1.el8_10
kernel-abi-stablelists
AlmaLinux:8
 before 4.18.0-553.171.1.el8_10
4.18.0-553.171.1.el8_10
kernel-core
AlmaLinux:8
 before 4.18.0-553.171.1.el8_10
4.18.0-553.171.1.el8_10
kernel-cross-headers
AlmaLinux:8
 before 4.18.0-553.171.1.el8_10
4.18.0-553.171.1.el8_10
kernel-debug
AlmaLinux:8
 before 4.18.0-553.171.1.el8_10
4.18.0-553.171.1.el8_10
kernel-debug-core
AlmaLinux:8
 before 4.18.0-553.171.1.el8_10
4.18.0-553.171.1.el8_10
kernel-debug-devel
AlmaLinux:8
 before 4.18.0-553.171.1.el8_10
4.18.0-553.171.1.el8_10
kernel-debug-modules
AlmaLinux:8
 before 4.18.0-553.171.1.el8_10
4.18.0-553.171.1.el8_10
kernel-debug-modules-extra
AlmaLinux:8
 before 4.18.0-553.171.1.el8_10
4.18.0-553.171.1.el8_10
kernel-devel
AlmaLinux:8
 before 4.18.0-553.171.1.el8_10
4.18.0-553.171.1.el8_10
kernel-doc
AlmaLinux:8
 before 4.18.0-553.171.1.el8_10
4.18.0-553.171.1.el8_10
kernel-headers
AlmaLinux:8
 before 4.18.0-553.171.1.el8_10
4.18.0-553.171.1.el8_10
kernel-modules
AlmaLinux:8
 before 4.18.0-553.171.1.el8_10
4.18.0-553.171.1.el8_10
kernel-modules-extra
AlmaLinux:8
 before 4.18.0-553.171.1.el8_10
4.18.0-553.171.1.el8_10
kernel-tools
AlmaLinux:8
 before 4.18.0-553.171.1.el8_10
4.18.0-553.171.1.el8_10
kernel-tools-libs
AlmaLinux:8
 before 4.18.0-553.171.1.el8_10
4.18.0-553.171.1.el8_10
kernel-tools-libs-devel
AlmaLinux:8
 before 4.18.0-553.171.1.el8_10
4.18.0-553.171.1.el8_10
kernel-zfcpdump
AlmaLinux:8
 before 4.18.0-553.171.1.el8_10
4.18.0-553.171.1.el8_10
kernel-zfcpdump-core
AlmaLinux:8
 before 4.18.0-553.171.1.el8_10
4.18.0-553.171.1.el8_10
kernel-zfcpdump-devel
AlmaLinux:8
 before 4.18.0-553.171.1.el8_10
4.18.0-553.171.1.el8_10
kernel-zfcpdump-modules
AlmaLinux:8
 before 4.18.0-553.171.1.el8_10
4.18.0-553.171.1.el8_10
kernel-zfcpdump-modules-extra
AlmaLinux:8
 before 4.18.0-553.171.1.el8_10
4.18.0-553.171.1.el8_10
perf
AlmaLinux:8
 before 4.18.0-553.171.1.el8_10
4.18.0-553.171.1.el8_10
python3-perf
AlmaLinux:8
 before 4.18.0-553.171.1.el8_10
4.18.0-553.171.1.el8_10
kernel
AlmaLinux:9
 before 5.14.0-687.58.1.el9_8
5.14.0-687.58.1.el9_8
kernel-64k
AlmaLinux:9
 before 5.14.0-687.58.1.el9_8
5.14.0-687.58.1.el9_8
kernel-64k-core
AlmaLinux:9
 before 5.14.0-687.58.1.el9_8
5.14.0-687.58.1.el9_8
kernel-64k-debug
AlmaLinux:9
 before 5.14.0-687.58.1.el9_8
5.14.0-687.58.1.el9_8
kernel-64k-debug-core
AlmaLinux:9
 before 5.14.0-687.58.1.el9_8
5.14.0-687.58.1.el9_8
kernel-64k-debug-devel
AlmaLinux:9
 before 5.14.0-687.58.1.el9_8
5.14.0-687.58.1.el9_8
kernel-64k-debug-devel-matched
AlmaLinux:9
 before 5.14.0-687.58.1.el9_8
5.14.0-687.58.1.el9_8
kernel-64k-debug-modules
AlmaLinux:9
 before 5.14.0-687.58.1.el9_8
5.14.0-687.58.1.el9_8
kernel-64k-debug-modules-core
AlmaLinux:9
 before 5.14.0-687.58.1.el9_8
5.14.0-687.58.1.el9_8
kernel-64k-debug-modules-extra
AlmaLinux:9
 before 5.14.0-687.58.1.el9_8
5.14.0-687.58.1.el9_8
kernel-64k-devel
AlmaLinux:9
 before 5.14.0-687.58.1.el9_8
5.14.0-687.58.1.el9_8
kernel-64k-devel-matched
AlmaLinux:9
 before 5.14.0-687.58.1.el9_8
5.14.0-687.58.1.el9_8
kernel-64k-modules
AlmaLinux:9
 before 5.14.0-687.58.1.el9_8
5.14.0-687.58.1.el9_8
kernel-64k-modules-core
AlmaLinux:9
 before 5.14.0-687.58.1.el9_8
5.14.0-687.58.1.el9_8
kernel-64k-modules-extra
AlmaLinux:9
 before 5.14.0-687.58.1.el9_8
5.14.0-687.58.1.el9_8
kernel-abi-stablelists
AlmaLinux:9
 before 5.14.0-687.58.1.el9_8
5.14.0-687.58.1.el9_8
kernel-core
AlmaLinux:9
 before 5.14.0-687.58.1.el9_8
5.14.0-687.58.1.el9_8
kernel-cross-headers
AlmaLinux:9
 before 5.14.0-687.58.1.el9_8
5.14.0-687.58.1.el9_8
kernel
Azure Linux:3
 before 6.6.141.1-1
6.6.141.1-1
linux-lts
Alpaquita:23
 6.1.174-r0 up to 6.1.175-r0
6.1.175-r0
linux-lts
Alpaquita:25
 6.12.87-r0 up to 6.12.92-r0
6.12.92-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
kernel
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-core
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-core
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-devel
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-modules
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-modules-core
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-abi-stablelists
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-core
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-cross-headers
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-debug
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-debug-core
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-debug-devel
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-debug-modules
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-debug-modules-core
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-debug-uki-virt-addons
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-devel
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-devel-matched
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-doc
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-headers
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-modules
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-modules-core
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-modules-extra
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-modules-internal
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-modules-partner
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-rt
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-rt-64k
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-rt-64k-core
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-rt-64k-debug
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-rt-64k-debug-core
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-rt-64k-debug-devel
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-rt-64k-debug-devel-matched
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-rt-64k-debug-kvm
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-rt-64k-debug-modules
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
kernel-rt-64k-debug-modules-core
TuxCare:AlmaLinux:9.6
 before 5.14.0-570.62.1.el9_6.tuxcare.5.els13
5.14.0-570.62.1.el9_6.tuxcare.5.els13
Kernel
Linux
 5.7.0 up to 5.10.258, 5.11.0 up to 5.15.209, 5.16.0 up to 6.1.175, 6.2.0 up to 6.6.141, 6.7.0 up to 6.12.91, 6.13.0 up to 6.18.33, 6.19.0 up to 7.0.10
5.10.2585.15.2096.1.1756.6.1416.12.916.18.337.0.10
linux
Debian:12
 before 6.1.176-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 45 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-1
6.1.176-1
linux
Debian:13
 before 6.12.94-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 22 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-1~bpo12+1
6.12.94-1
linux
Debian:14
 before 7.0.10-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
7.0.10-1
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1195.208~16.04.1, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
4.15.0-1195.208~16.04.1
linux-aws
Ubuntu:Pro:16.04:LTS
 before 4.4.0-1195.210, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
4.4.0-1195.210
linux-azure
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1205.220~16.04.1, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
4.15.0-1205.220~16.04.1
linux-gcp
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1188.205~16.04.1, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
4.15.0-1188.205~16.04.1
linux-hwe
Ubuntu:Pro:16.04:LTS
 before 4.15.0-254.266~16.04.1, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
4.15.0-254.266~16.04.1
linux
Ubuntu:Pro:16.04:LTS
 before 4.4.0-284.318, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
4.4.0-284.318
linux-aws
Ubuntu:Pro:18.04:LTS
 before 4.15.0-1195.208, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
4.15.0-1195.208
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
 before 4.15.0-1205.220, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
4.15.0-1205.220
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
 before 4.15.0-1188.205, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
4.15.0-1188.205
linux
Ubuntu:Pro:18.04:LTS
 before 4.15.0-254.266, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
4.15.0-254.266
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
 before 5.4.0-234.254~18.04.1, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
5.4.0-234.254~18.04.1
linux-oracle
Ubuntu:Pro:18.04:LTS
 before 4.15.0-1158.169, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
4.15.0-1158.169
linux
Ubuntu:Pro:20.04:LTS
 before 5.4.0-234.254, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
5.4.0-234.254
linux-aws
Ubuntu:Pro:22.04:LTS
 before 5.15.0-1113.120, plus listed versions
5.13.0-1005.65.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7
Show 45 moreShow less
5.15.0-1008.105.15.0-1009.115.15.0-1011.145.15.0-1013.175.15.0-1014.185.15.0-1015.195.15.0-1017.215.15.0-1019.235.15.0-1020.245.15.0-1021.255.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.325.15.0-1030.345.15.0-1031.355.15.0-1033.375.15.0-1034.385.15.0-1035.395.15.0-1036.405.15.0-1037.415.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1042.475.15.0-1043.485.15.0-1044.495.15.0-1045.505.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1055.605.15.0-1056.615.15.0-1057.635.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.705.15.0-1065.71
5.15.0-1113.120
linux-aws-6.8
Ubuntu:Pro:22.04:LTS
 before 6.8.0-1061.64~22.04.1, plus listed versions
6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1
Show 34 moreShow less
6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.16.8.0-1050.53~22.04.16.8.0-1051.54~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1055.58~22.04.16.8.0-1057.60~22.04.16.8.0-1060.63~22.04.1
6.8.0-1061.64~22.04.1
linux-azure
Ubuntu:Pro:22.04:LTS
 before 5.15.0-1118.127, plus listed versions
5.13.0-1006.75.15.0-1001.25.15.0-1002.35.15.0-1003.45.15.0-1005.6
Show 45 moreShow less
5.15.0-1007.85.15.0-1008.95.15.0-1010.125.15.0-1012.155.15.0-1013.165.15.0-1014.175.15.0-1017.205.15.0-1019.245.15.0-1020.255.15.0-1021.265.15.0-1022.275.15.0-1023.295.15.0-1024.305.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1033.405.15.0-1034.415.15.0-1035.425.15.0-1036.435.15.0-1037.445.15.0-1038.455.15.0-1039.465.15.0-1040.475.15.0-1041.485.15.0-1042.495.15.0-1044.515.15.0-1045.525.15.0-1046.535.15.0-1047.545.15.0-1049.565.15.0-1050.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1056.645.15.0-1057.655.15.0-1058.665.15.0-1059.675.15.0-1060.695.15.0-1061.705.15.0-1063.725.15.0-1064.735.15.0-1066.75
5.15.0-1118.127
linux-gcp
Ubuntu:Pro:22.04:LTS
 before 5.15.0-1114.124, plus listed versions
5.13.0-1005.65.15.0-1001.35.15.0-1002.55.15.0-1003.65.15.0-1004.7
Show 45 moreShow less
5.15.0-1005.85.15.0-1006.95.15.0-1008.125.15.0-1010.155.15.0-1013.185.15.0-1016.215.15.0-1017.235.15.0-1018.245.15.0-1019.255.15.0-1021.285.15.0-1022.295.15.0-1025.325.15.0-1026.335.15.0-1027.345.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1032.405.15.0-1034.425.15.0-1035.435.15.0-1036.445.15.0-1037.455.15.0-1038.465.15.0-1039.475.15.0-1040.485.15.0-1041.495.15.0-1042.505.15.0-1044.525.15.0-1045.535.15.0-1046.545.15.0-1047.555.15.0-1048.565.15.0-1049.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1055.635.15.0-1058.665.15.0-1059.675.15.0-1060.685.15.0-1062.705.15.0-1063.715.15.0-1064.725.15.0-1065.73
5.15.0-1114.124
linux-gcp-6.8
Ubuntu:Pro:22.04:LTS
 before 6.8.0-1064.72~22.04.1, plus listed versions
6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1
Show 35 moreShow less
6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1034.36~22.04.26.8.0-1036.38~22.04.16.8.0-1037.39~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.45~22.04.16.8.0-1043.46~22.04.16.8.0-1044.47~22.04.16.8.0-1045.48~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.26.8.0-1048.51~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1054.57~22.04.16.8.0-1058.61~22.04.16.8.0-1060.63~22.04.16.8.0-1063.69~22.04.1
6.8.0-1064.72~22.04.1
linux
Ubuntu:Pro:22.04:LTS
 before 5.15.0-187.197, plus listed versions
5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23
Show 45 moreShow less
5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.865.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.965.15.0-87.975.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.115
5.15.0-187.197
linux-hwe-6.8
Ubuntu:Pro:22.04:LTS
 before 6.8.0-136.136~22.04.1, plus listed versions
6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1
Show 30 moreShow less
6.8.0-48.48~22.04.16.8.0-49.49~22.04.16.8.0-50.51~22.04.16.8.0-51.52~22.04.16.8.0-52.53~22.04.16.8.0-57.59~22.04.16.8.0-58.60~22.04.16.8.0-59.61~22.04.16.8.0-60.63~22.04.16.8.0-64.67~22.04.16.8.0-65.68~22.04.16.8.0-78.78~22.04.16.8.0-79.79~22.04.16.8.0-83.83~22.04.16.8.0-84.84~22.04.16.8.0-85.85~22.04.16.8.0-86.87~22.04.16.8.0-87.88~22.04.16.8.0-88.89~22.04.26.8.0-90.91~22.04.16.8.0-94.96~22.04.16.8.0-100.100~22.04.16.8.0-101.101~22.04.16.8.0-106.106~22.04.16.8.0-107.107~22.04.16.8.0-110.110~22.04.16.8.0-111.111~22.04.16.8.0-117.117~22.04.16.8.0-124.124~22.04.16.8.0-134.134~22.04.1
6.8.0-136.136~22.04.1
linux-gke
Ubuntu:Pro:22.04:LTS
 before 5.15.0-1110.116, plus listed versions
5.15.0-1002.25.15.0-1003.35.15.0-1004.55.15.0-1005.65.15.0-1006.7
Show 45 moreShow less
5.15.0-1008.105.15.0-1010.135.15.0-1011.145.15.0-1014.175.15.0-1015.185.15.0-1016.195.15.0-1017.205.15.0-1019.235.15.0-1020.255.15.0-1023.285.15.0-1024.295.15.0-1027.325.15.0-1028.335.15.0-1030.355.15.0-1031.365.15.0-1032.375.15.0-1033.385.15.0-1034.395.15.0-1035.405.15.0-1036.415.15.0-1037.425.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1041.465.15.0-1042.475.15.0-1044.495.15.0-1045.505.15.0-1046.515.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1054.595.15.0-1057.625.15.0-1058.635.15.0-1059.645.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.70
5.15.0-1110.116
linux-ibm
Ubuntu:Pro:22.04:LTS
 before 5.15.0-1107.111, plus listed versions
5.15.0-1002.25.15.0-1003.35.15.0-1004.45.15.0-1005.55.15.0-1007.8
Show 45 moreShow less
5.15.0-1009.115.15.0-1010.125.15.0-1012.145.15.0-1013.155.15.0-1015.175.15.0-1017.205.15.0-1018.215.15.0-1021.245.15.0-1022.255.15.0-1023.265.15.0-1025.285.15.0-1026.295.15.0-1027.305.15.0-1028.315.15.0-1029.325.15.0-1030.335.15.0-1031.345.15.0-1032.355.15.0-1033.365.15.0-1034.375.15.0-1035.385.15.0-1036.395.15.0-1037.405.15.0-1038.415.15.0-1040.435.15.0-1041.445.15.0-1042.455.15.0-1043.465.15.0-1044.475.15.0-1045.485.15.0-1046.495.15.0-1047.505.15.0-1048.515.15.0-1049.525.15.0-1050.535.15.0-1053.565.15.0-1054.575.15.0-1055.585.15.0-1056.595.15.0-1057.605.15.0-1058.615.15.0-1059.625.15.0-1060.635.15.0-1061.645.15.0-1062.65
5.15.0-1107.111
linux-ibm-6.8
Ubuntu:Pro:22.04:LTS
 before 6.8.0-1061.62~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.16.8.0-1013.13~22.04.1
Show 32 moreShow less
6.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.16~22.04.16.8.0-1017.17~22.04.16.8.0-1018.18~22.04.16.8.0-1019.19~22.04.16.8.0-1023.23~22.04.16.8.0-1024.24~22.04.16.8.0-1025.25~22.04.16.8.0-1026.26~22.04.16.8.0-1027.27~22.04.16.8.0-1028.28~22.04.16.8.0-1029.29~22.04.16.8.0-1030.30~22.04.16.8.0-1033.33~22.04.16.8.0-1036.36~22.04.16.8.0-1037.37~22.04.16.8.0-1038.38~22.04.16.8.0-1039.39~22.04.16.8.0-1040.40~22.04.16.8.0-1041.41~22.04.16.8.0-1042.42~22.04.16.8.0-1043.43~22.04.16.8.0-1044.44~22.04.16.8.0-1045.45~22.04.16.8.0-1049.49~22.04.16.8.0-1050.50~22.04.16.8.0-1051.51~22.04.16.8.0-1052.52~22.04.16.8.0-1055.56~22.04.16.8.0-1057.58~22.04.16.8.0-1060.61~22.04.1
6.8.0-1061.62~22.04.1
linux-aws
Ubuntu:Pro:24.04:LTS
 before 6.8.0-1061.64, plus listed versions
6.5.0-1008.86.6.0-1001.16.8.0-1001.16.8.0-1006.66.8.0-1008.8
Show 43 moreShow less
6.8.0-1009.96.8.0-1010.106.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.156.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1023.256.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.296.8.0-1028.306.8.0-1029.316.8.0-1030.326.8.0-1031.336.8.0-1032.346.8.0-1033.356.8.0-1035.376.8.0-1036.386.8.0-1038.406.8.0-1039.416.8.0-1040.426.8.0-1041.436.8.0-1042.446.8.0-1043.456.8.0-1044.466.8.0-1045.476.8.0-1046.496.8.0-1047.506.8.0-1050.536.8.0-1051.546.8.0-1052.556.8.0-1053.566.8.0-1055.586.8.0-1057.606.8.0-1060.63
6.8.0-1061.64
linux-azure
Ubuntu:Pro:24.04:LTS
 before 6.8.0-1063.71, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1001.16.8.0-1005.56.8.0-1006.6
Show 34 moreShow less
6.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1012.146.8.0-1013.156.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.206.8.0-1018.216.8.0-1020.236.8.0-1021.256.8.0-1025.306.8.0-1026.316.8.0-1027.326.8.0-1028.336.8.0-1029.346.8.0-1030.356.8.0-1031.366.8.0-1034.396.8.0-1038.446.8.0-1040.466.8.0-1041.476.8.0-1042.486.8.0-1044.506.8.0-1046.526.8.0-1051.576.8.0-1052.586.8.0-1054.606.8.0-1056.626.8.0-1058.646.8.0-1059.656.8.0-1062.69
6.8.0-1063.71
linux-gcp
Ubuntu:Pro:24.04:LTS
 before 6.8.0-1064.72, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1002.26.8.0-1005.56.8.0-1006.6
Show 45 moreShow less
6.8.0-1007.76.8.0-1008.96.8.0-1009.106.8.0-1010.116.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.196.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.296.8.0-1028.306.8.0-1029.316.8.0-1030.326.8.0-1031.336.8.0-1032.346.8.0-1033.356.8.0-1034.366.8.0-1036.386.8.0-1037.396.8.0-1039.416.8.0-1040.426.8.0-1041.436.8.0-1042.456.8.0-1043.466.8.0-1044.476.8.0-1045.486.8.0-1046.496.8.0-1047.506.8.0-1048.516.8.0-1052.556.8.0-1053.566.8.0-1054.576.8.0-1055.586.8.0-1058.616.8.0-1060.636.8.0-1063.69
6.8.0-1064.72
linux
Ubuntu:Pro:24.04:LTS
 before 6.8.0-136.136, plus listed versions
6.5.0-9.96.6.0-14.146.8.0-11.116.8.0-20.206.8.0-22.22
Show 45 moreShow less
6.8.0-28.286.8.0-31.316.8.0-35.356.8.0-36.366.8.0-38.386.8.0-39.396.8.0-40.406.8.0-41.416.8.0-44.446.8.0-45.456.8.0-47.476.8.0-48.486.8.0-49.496.8.0-50.516.8.0-51.526.8.0-52.536.8.0-53.556.8.0-54.566.8.0-55.576.8.0-56.586.8.0-57.596.8.0-58.606.8.0-59.616.8.0-60.636.8.0-62.656.8.0-63.666.8.0-64.676.8.0-71.716.8.0-78.786.8.0-79.796.8.0-83.836.8.0-84.846.8.0-85.856.8.0-86.876.8.0-87.886.8.0-88.896.8.0-90.916.8.0-94.966.8.0-100.1006.8.0-101.1016.8.0-106.1066.8.0-107.1076.8.0-110.1106.8.0-111.1116.8.0-117.117
6.8.0-136.136
linux-gke
Ubuntu:Pro:24.04:LTS
 before 6.8.0-1059.67, plus listed versions
6.8.0-1003.56.8.0-1004.76.8.0-1005.86.8.0-1006.96.8.0-1007.10
Show 40 moreShow less
6.8.0-1008.116.8.0-1009.126.8.0-1010.136.8.0-1011.146.8.0-1012.156.8.0-1013.176.8.0-1014.186.8.0-1015.196.8.0-1016.206.8.0-1017.216.8.0-1019.236.8.0-1020.246.8.0-1021.256.8.0-1022.266.8.0-1023.276.8.0-1024.286.8.0-1025.296.8.0-1026.306.8.0-1027.316.8.0-1028.326.8.0-1029.336.8.0-1032.366.8.0-1033.376.8.0-1035.396.8.0-1036.406.8.0-1037.416.8.0-1038.436.8.0-1039.446.8.0-1040.456.8.0-1041.466.8.0-1042.476.8.0-1043.486.8.0-1044.496.8.0-1048.536.8.0-1049.546.8.0-1050.566.8.0-1051.576.8.0-1054.606.8.0-1055.616.8.0-1058.64
6.8.0-1059.67
linux-ibm
Ubuntu:Pro:24.04:LTS
 before 6.8.0-1061.62, plus listed versions
6.5.0-1009.96.8.0-1001.16.8.0-1003.36.8.0-1004.46.8.0-1005.5
Show 41 moreShow less
6.8.0-1006.66.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.156.8.0-1016.166.8.0-1017.176.8.0-1018.186.8.0-1019.196.8.0-1022.226.8.0-1023.236.8.0-1024.246.8.0-1025.256.8.0-1026.266.8.0-1027.276.8.0-1028.286.8.0-1029.296.8.0-1030.306.8.0-1033.336.8.0-1036.366.8.0-1037.376.8.0-1038.386.8.0-1039.396.8.0-1040.406.8.0-1041.416.8.0-1042.426.8.0-1043.436.8.0-1044.446.8.0-1045.456.8.0-1049.496.8.0-1050.506.8.0-1051.516.8.0-1052.526.8.0-1055.566.8.0-1057.586.8.0-1060.61
6.8.0-1061.62
linux-oracle
Ubuntu:Pro:24.04:LTS
 before 6.8.0-1058.61, plus listed versions
6.5.0-1010.106.6.0-1001.16.8.0-1001.16.8.0-1004.46.8.0-1005.5
Show 40 moreShow less
6.8.0-1006.66.8.0-1008.86.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.196.8.0-1019.206.8.0-1020.216.8.0-1021.226.8.0-1022.236.8.0-1023.246.8.0-1024.256.8.0-1025.266.8.0-1026.276.8.0-1027.286.8.0-1028.296.8.0-1029.306.8.0-1030.316.8.0-1032.336.8.0-1033.346.8.0-1035.366.8.0-1037.386.8.0-1038.396.8.0-1039.406.8.0-1040.416.8.0-1041.426.8.0-1042.436.8.0-1043.446.8.0-1044.456.8.0-1047.486.8.0-1049.506.8.0-1050.516.8.0-1052.536.8.0-1054.556.8.0-1057.58
6.8.0-1058.61
linux-aws
Ubuntu:Pro:26.04:LTS
 before 7.0.0-1009.9, plus listed versions
6.17.0-1002.26.17.0-1003.36.19.0-1002.26.19.0-1003.37.0.0-1001.1
Show 4 moreShow less
7.0.0-1003.37.0.0-1004.47.0.0-1006.67.0.0-1008.8
7.0.0-1009.9
linux-azure
Ubuntu:Pro:26.04:LTS
 before 7.0.0-1010.10, plus listed versions
6.17.0-1003.36.17.0-1004.46.19.0-1001.16.19.0-1002.27.0.0-1001.1
Show 5 moreShow less
7.0.0-1002.27.0.0-1003.37.0.0-1004.47.0.0-1007.77.0.0-1009.9
7.0.0-1010.10
linux-gcp
Ubuntu:Pro:26.04:LTS
 before 7.0.0-1008.8, plus listed versions
6.17.0-1002.26.17.0-1003.36.19.0-1001.17.0.0-1001.17.0.0-1002.27.0.0-1003.37.0.0-1005.57.0.0-1007.7
7.0.0-1008.8
linux
Ubuntu:Pro:26.04:LTS
 before 7.0.0-28.28, plus listed versions
6.17.0-5.56.17.0-6.66.17.0-8.86.18.0-8.86.18.0-9.9
Show 12 moreShow less
6.19.0-3.36.19.0-5.56.19.0-6.66.19.0-9.97.0.0-7.77.0.0-10.107.0.0-12.127.0.0-13.137.0.0-14.147.0.0-15.157.0.0-22.227.0.0-27.27
7.0.0-28.28
kernel-rt
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-core
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-debug
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-debug-core
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-debug-kvm
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-devel
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-kvm
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-modules
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::nfv
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-core
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-debug
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-debug-core
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-devel
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-modules
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::realtime
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
bpftool
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
bpftool-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
kernel
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
kernel-abi-stablelists
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
kernel-core
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
kernel-debug
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
kernel-debug-core
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
kernel-debug-devel
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
kernel-debug-modules
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
kernel-debug-modules-extra
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
kernel-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
kernel-devel
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
kernel-doc
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
kernel-modules
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
kernel-modules-extra
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
kernel-tools
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
kernel-tools-libs
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
kernel-zfcpdump
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
kernel-zfcpdump-core
Red Hat:enterprise_linux:8::baseos
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
kernel-rt
Rocky Linux:8
 before 0:4.18.0-553.171.1.rt7.512.el8_10
0:4.18.0-553.171.1.rt7.512.el8_10
kernel
Rocky Linux:8
 before 0:4.18.0-553.171.1.el8_10
0:4.18.0-553.171.1.el8_10
kernel
Rocky Linux:9
 before 0:5.14.0-687.58.1.el9_8
0:5.14.0-687.58.1.el9_8
kernel
Rocky Linux:10
 before 0:6.12.0-211.66.1.el10_2
0:6.12.0-211.66.1.el10_2
linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
rootio-linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
linux
Root:Debian:13
 before 6.12.115-2.aikido.164
6.12.115-2.aikido.164
rootio-linux
Root:Debian:13
 before 6.12.115-2.aikido.164
6.12.115-2.aikido.164
linux
Root:Ubuntu:22.04
 before 5.15.0-202.212.aikido.118
5.15.0-202.212.aikido.118
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-202.212.aikido.118
5.15.0-202.212.aikido.118
linux
Root:Ubuntu:24.04
 before 6.8.0-147.147.aikido.90
6.8.0-147.147.aikido.90
rootio-linux
Root:Ubuntu:24.04
 before 6.8.0-147.147.aikido.90
6.8.0-147.147.aikido.90
kernel-default
SUSE:Linux Micro 6.0
 before 6.4.0-49.1
6.4.0-49.1
kernel-kvmsmall
SUSE:Linux Micro 6.0
 before 6.4.0-49.1
6.4.0-49.1
kernel-source
SUSE:Linux Micro 6.0
 before 6.4.0-49.1
6.4.0-49.1
kernel-rt
SUSE:Linux Micro 6.0
 before 6.4.0-49.1
6.4.0-49.1
kernel-source-rt
SUSE:Linux Micro 6.0
 before 6.4.0-49.1
6.4.0-49.1
kernel-default
SUSE:Linux Micro 6.1
 before 6.4.0-49.1
6.4.0-49.1
kernel-kvmsmall
SUSE:Linux Micro 6.1
 before 6.4.0-49.1
6.4.0-49.1
kernel-source
SUSE:Linux Micro 6.1
 before 6.4.0-49.1
6.4.0-49.1
kernel-rt
SUSE:Linux Micro 6.1
 before 6.4.0-49.1
6.4.0-49.1
kernel-source-rt
SUSE:Linux Micro 6.1
 before 6.4.0-49.1
6.4.0-49.1
kernel-obs-build
SUSE:Linux Micro Extras 6.2
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-syms
SUSE:Linux Micro Extras 6.2
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-64kb
SUSE:Linux Micro 6.2
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default
SUSE:Linux Micro 6.2
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default-base
SUSE:Linux Micro 6.2
 before 6.12.0-160000.36.1.160000.2.17
6.12.0-160000.36.1.160000.2.17
kernel-rt
SUSE:Linux Micro 6.2
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-source
SUSE:Linux Micro 6.2
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-azure
SUSE:Linux Enterprise Server 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default
SUSE:Linux Enterprise Server 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
 before 6.12.0-160000.36.1.160000.2.17
6.12.0-160000.36.1.160000.2.17
kernel-docs
SUSE:Linux Enterprise Server 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-source
SUSE:Linux Enterprise Server 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-azure
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 6.12.0-160000.36.1.160000.2.17
6.12.0-160000.36.1.160000.2.17
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-livepatch-SLE16-RT_Update_14
SUSE:Linux Micro 6.2
 before 4-160000.1.1
4-160000.1.1
kernel-livepatch-SLE16-RT_Update_13
SUSE:Linux Micro 6.2
 before 4-160000.1.1
4-160000.1.1
kernel-livepatch-SLE16-RT_Update_12
SUSE:Linux Micro 6.2
 before 4-160000.1.1
4-160000.1.1
kernel-livepatch-SLE16-RT_Update_11
SUSE:Linux Micro 6.2
 before 6-160000.1.1
6-160000.1.1
kernel-livepatch-SLE16-RT_Update_10
SUSE:Linux Micro 6.2
 before 6-160000.1.1
6-160000.1.1
kernel-livepatch-SLE16-RT_Update_9
SUSE:Linux Micro 6.2
 before 6-160000.1.1
6-160000.1.1
kernel-livepatch-SLE16-RT_Update_8
SUSE:Linux Micro 6.2
 before 7-160000.1.1
7-160000.1.1
kernel-livepatch-SLE16-RT_Update_7
SUSE:Linux Micro 6.2
 before 8-160000.1.1
8-160000.1.1
kernel-livepatch-SLE16-RT_Update_6
SUSE:Linux Micro 6.2
 before 9-160000.1.1
9-160000.1.1
kernel-livepatch-SLE16-RT_Update_5
SUSE:Linux Micro 6.2
 before 10-160000.1.1
10-160000.1.1
kernel-livepatch-SLE16-RT_Update_4
SUSE:Linux Micro 6.2
 before 11-160000.1.1
11-160000.1.1
kernel-livepatch-SLE16-RT_Update_3
SUSE:Linux Micro 6.2
 before 11-160000.1.1
11-160000.1.1
kernel-livepatch-SLE16-RT_Update_2
SUSE:Linux Micro 6.2
 before 12-160000.1.1
12-160000.1.1
kernel-livepatch-SLE16-RT_Update_1
SUSE:Linux Micro 6.2
 before 14-160000.1.1
14-160000.1.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
Show 7 moreShow less
5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1
 None known
linux-aws-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1
Show 8 moreShow less
5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1
 None known
linux-aws-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1112.119~20.04.1, plus listed versions
5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1
Show 45 moreShow less
5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1
5.15.0-1112.119~20.04.1
kernel-source
openSUSE:Tumbleweed
 before 7.0.12-1.1
7.0.12-1.1
dtb-aarch64
openSUSE:Leap 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-64kb
openSUSE:Leap 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-azure
openSUSE:Leap 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default
openSUSE:Leap 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-default-base
openSUSE:Leap 16.0
 before 6.12.0-160000.36.1.160000.2.17
6.12.0-160000.36.1.160000.2.17
kernel-docs
openSUSE:Leap 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-kvmsmall
openSUSE:Leap 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-obs-build
openSUSE:Leap 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-obs-qa
openSUSE:Leap 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-rt
openSUSE:Leap 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-source
openSUSE:Leap 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-syms
openSUSE:Leap 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1
kernel-zfcpdump
openSUSE:Leap 16.0
 before 6.12.0-160000.36.1
6.12.0-160000.36.1

History

History
RecordedChangedSources
factsOSV
affectedOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-46319 is a high vulnerability (CVSS 7.8) in Linux, published June 9, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.10%, the 1st percentile. Fixed in kernel-rt 4.18.0-553.171.1.rt7.512.el8_10.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 923 package rows, 1,445 versions, 3,918 references and the rest of 12 source descriptions. The JSON record has them. Also not on the record: 131 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 180 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open