CVE-2026-74587

sctp: fix use-after-free of cached ASCONF chunk

9.8 CriticalFix available

In the Linux kernel, the following vulnerability has been resolved:

sctp: fix use-after-free of cached ASCONF chunk

addip_last_asconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the chunk and clears the pointer.

However, sctp_asconf_queue_teardown() releases the cached chunk without clearing addip_last_asconf. During peer restart handling, sctp_sf_do_dupcook_a() queues SCTP_CMD_PURGE_ASCONF_QUEUE, which invokes sctp_asconf_queue_teardown() while the association remains alive and leaves the pointer dangling.

A delayed authenticated ASCONF-ACK can then reach sctp_sf_do_asconf_ack(), which accesses the stale chunk and passes it to sctp_process_asconf_ack(), causing a use-after-free and a second release.

Clearing the pointer exposes a race with T4 expiry. Peer restart handling queues the timer stop before the purge, but SCTP_CMD_TIMER_STOP uses timer_delete(), which does not wait for a callback already running on another CPU. Such a callback can reach sctp_sf_t4_timer_expire() after the purge and dereference NULL.

Clear addip_last_asconf after releasing the cached chunk, and make sctp_sf_t4_timer_expire() consume a stale T4 expiry if no outstanding ASCONF remains.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.50%Up 0.3 points since Aug 23, 2026

What each source reports

CVE List Score used 9.8

sctp: fix use-after-free of cached ASCONF chunk

In the Linux kernel, the following vulnerability has been resolved:

sctp: fix use-after-free of cached ASCONF chunk

addip_last_asconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the chunk and clears the pointer.

A delayed authenticated ASCONF-ACK can then reach sctp_sf_do_asconf_ack(), which accesses the stale chunk and passes it to sctp_process_asconf_ack(), causing a use-after-free and a second release.

Clear addip_last_asconf after releasing the cached chunk, and make sctp_sf_t4_timer_expire() consume a stale T4 expiry if no outstanding ASCONF remains.

Record: CVE-2026-74587
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

EUVDEUVD-2026-64524 9.8

In the Linux kernel, the following vulnerability has been resolved:

sctp: fix use-after-free of cached ASCONF chunk

addip_last_asconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the chunk and clears the pointer.

A delayed authenticated ASCONF-ACK can then reach sctp_sf_do_asconf_ack(), which accesses the stale chunk and passes it to sctp_process_asconf_ack(), causing a use-after-free and a second release.

Clear addip_last_asconf after releasing the cached chunk, and make sctp_sf_t4_timer_expire() consume a stale T4 expiry if no outstanding ASCONF remains.

Record: EUVD-2026-64524
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-5vmc-fx99-r54r 9.8

In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of...

In the Linux kernel, the following vulnerability has been resolved:

sctp: fix use-after-free of cached ASCONF chunk

addip_last_asconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the chunk and clears the pointer.

A delayed authenticated ASCONF-ACK can then reach sctp_sf_do_asconf_ack(), which accesses the stale chunk and passes it to sctp_process_asconf_ack(), causing a use-after-free and a second release.

Clear addip_last_asconf after releasing the cached chunk, and make sctp_sf_t4_timer_expire() consume a stale T4 expiry if no outstanding ASCONF remains.

Record: GHSA-5vmc-fx99-r54r
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

NVD 9.8

In the Linux kernel, the following vulnerability has been resolved:

sctp: fix use-after-free of cached ASCONF chunk

addip_last_asconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the chunk and clears the pointer.

A delayed authenticated ASCONF-ACK can then reach sctp_sf_do_asconf_ack(), which accesses the stale chunk and passes it to sctp_process_asconf_ack(), causing a use-after-free and a second release.

Clear addip_last_asconf after releasing the cached chunk, and make sctp_sf_t4_timer_expire() consume a stale T4 expiry if no outstanding ASCONF remains.

Record: CVE-2026-74587
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVBELL-CVE-2026-74587 9.8

Record: BELL-CVE-2026-74587
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSV 9.8

sctp: fix use-after-free of cached ASCONF chunk

In the Linux kernel, the following vulnerability has been resolved:

sctp: fix use-after-free of cached ASCONF chunk

addip_last_asconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the chunk and clears the pointer.

A delayed authenticated ASCONF-ACK can then reach sctp_sf_do_asconf_ack(), which accesses the stale chunk and passes it to sctp_process_asconf_ack(), causing a use-after-free and a second release.

Clear addip_last_asconf after releasing the cached chunk, and make sctp_sf_t4_timer_expire() consume a stale T4 expiry if no outstanding ASCONF remains.

Record: CVE-2026-74587
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-04

Show 46 moreShow less

OSVDEBIAN-CVE-2026-74587 9.8

In the Linux kernel, the following vulnerability has been resolved: sctp: fix use-after-free of cached ASCONF chunk addip_last_asconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the chunk and clears the pointer. However, sctp_asconf_queue_teardown() releases the cached chunk without clearing addip_last_asconf. During peer restart handling, sctp_sf_do_dupcook_a() queues SCTP_CMD_PURGE_ASCONF_QUEUE, which invokes sctp_asconf_queue_teardown() while the association remains alive and leaves the pointer dangling. A delayed authenticated ASCONF-ACK can then reach sctp_sf_do_asconf_ack(), which accesses the stale chunk and passes it to sctp_process_asconf_ack(), causing a use-after-free and a second release. Clearing the pointer exposes a race with T4 expiry. Peer restart handling queues the timer stop before the purge, but SCTP_CMD_TIMER_STOP uses timer_delete(), which does not wait for a callback already running on another CPU. Such a callback can reach sctp_sf_t4_timer_expire() after the purge and dereference NULL. Clear addip_last_asconf after releasing the cached chunk, and make sctp_sf_t4_timer_expire() consume a stale T4 expiry if no outstanding ASCONF remains.

Record: DEBIAN-CVE-2026-74587
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-3706 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:net: af_can: do not leave a dangling sk pointer in can_create()On error can_create() frees the allocated sk object, but sock_init_data()has already attached it to the provided sock object. This will leave adangling sk pointer in the sock object and may cause use-after-free later.(CVE-2024-56603)

In the Linux kernel, the following vulnerability has been resolved:

hdlc_ppp: sync per-proto timers before freeing hdlc state

Each PPP control protocol (LCP/IPCP/IPV6CP) embedded in struct ppp registers a timer via timer_setup(). That struct ppp is the hdlc->state allocation, which detach_hdlc_protocol() frees with kfree() in both teardown paths: unregister_hdlc_device() and the re-attach inside attach_hdlc_protocol().

The ppp proto never registered a .detach callback, so detach_hdlc_protocol() performs no timer synchronization before the kfree(). The only cancel, timer_delete(&proto->timer) in ppp_cp_event(), is partial (it does not wait for a running callback) and only runs on the ->CLOSED transition; ppp_stop()/ppp_close() do not sync either. A ppp_timer callback already executing (blocked on ppp->lock) survives the kfree and then dereferences proto->state / ppp->lock in freed memory, leading to a use-after-free.

Fix this by adding a .detach helper that calls timer_shutdown_sync() on every per-proto timer. detach_hdlc_protocol() invokes proto->detach(dev) before kfree(hdlc->state), so timer_shutdown_sync() now runs on both free paths. timer_shutdown_sync() is used instead of timer_delete_sync() because the keepalive path re-arms the timer through add_timer()/mod_timer() and shutdown blocks any re-activation during teardown.

Initialize the per-protocol timers in ppp_ioctl() when the protocol is attached, and remove the now-redundant timer_setup() from ppp_start(), so that the timers are initialized exactly once at attach time and ppp_timer_release() never operates on uninitialized timer_list structures. attach_hdlc_protocol() uses kmalloc() (not kzalloc), so struct ppp's protos[i].timer is uninitialized garbage until the first timer_setup(); without this init-at-attach, attaching the PPP protocol without ever bringing the device up would leave timer_shutdown_sync() operating on uninitialized memory in .detach. Moving the init out of ppp_start() (which only runs on NETDEV_UP) into the attach path makes the initialization unconditional and avoids initializing the same timer_list twice.

This bug was found by static analysis.(CVE-2026-63803)

In the Linux kernel, the following vulnerability has been resolved:

parport: Fix race between port and client registration

The parport subsystem registers port devices before they are fully initialised, resulting in a race condition where client drivers such as lp can attach to ports that are not completely initialised or even being torn down.

When the port and client drivers are built as modules and loaded around the same time during boot, this occasionally results in a crash. I was able to make this happen reliably in a VM with a PC-style parallel port by patching parport_pc to fail probing:

> --- a/drivers/parport/parport_pc.c > +++ b/drivers/parport/parport_pc.c > @@ -2069,7 +2069,7 @@ static struct parport *__parport_pc_probe_port(unsigned long int base, > if (!p) > goto out3; > > - base_res = request_region(base, 3, p->name); > + base_res = NULL; > if (!base_res) > goto out4; >

and then running:

while true; do
    modprobe lp &amp; modprobe parport_pc
wait
rmmod lp parport_pc
done

for a few seconds.

In the long term I think port registration should be changed to put the call to device_add() inside parport_announce_port(), but since the latter currently cannot fail this will require changing all port drivers.

For now, add a flag to indicate…

Record: OESA-2026-3706
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2026-3707 10.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

seg6: separate dst_cache for input and output paths in seg6 lwtunnel

The seg6 lwtunnel uses a single dst_cache per encap route, shared between seg6_input_core() and seg6_output_core(). These two paths can perform the post-encap SID lookup in different routing contexts (e.g., ip rules matching on the ingress interface, or VRF table separation). Whichever path runs first populates the cache, and the other reuses it blindly, bypassing its own lookup.

Fix this by splitting the cache into cache_input and cache_output, so each path maintains its own cached dst independently.(CVE-2026-31668)

In the Linux kernel, the following vulnerability has been resolved:

RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE

The current implementation incorrectly handles memory regions (MRs) with page sizes different from the system PAGE_SIZE. The core issue is that rxe_set_page() is called with mr->page_size step increments, but the page_list stores individual struct page pointers, each representing PAGE_SIZE of memory.

ib_sg_to_page() has ensured that when i>=1 either a) SG[i-1].dma_end and SG[i].dma_addr are contiguous or b) SG[i-1].dma_end and SG[i].dma_addr are mr->page_size aligned.

This leads to incorrect iova-to-va conversion in scenarios:

page_size < PAGE_SIZE (e.g., MR: 4K, system: 64K): ibmr->iova = 0x181800 sg[0]: dma_addr=0x181800, len=0x800 sg[1]: dma_addr=0x173000, len=0x1000

Access iova = 0x181800 + 0x810 = 0x182010 Expected VA: 0x173010 (second SG, offset 0x10) Before fix:
- index = (0x182010 >> 12) - (0x181800 >> 12) = 1
- page_offset = 0x182010 & 0xFFF = 0x10
- xarray[1] stores system page base 0x170000
- Resulting VA: 0x170000 + 0x10 = 0x170010 (wrong)
page_size > PAGE_SIZE (e.g., MR: 64K, system: 4K): ibmr->iova = 0x18f800 sg[0]: dma_addr=0x18f800, len=0x800 sg[1]: dma_addr=0x170000, len=0x1000

Access iova = 0x18f800 + 0x810 = 0x190010 Expected VA: 0x170010 (second SG, offset 0x10) Before fix:
- index = (0x190010 >> 16) - (0x18f800 >> 16) = 1
- page_offset = 0x190010 & 0xFFFF = 0x10
- xarray[1] stores system page for dma_addr 0x170000
- Resulting VA: system page of 0x170000 + 0x10 = 0x170010 (wrong)

Yi Zhang reported a kernel panic[1] years ago related to this defect.

Solution:

Replace xarray with pre-allocated rxe_mr_page array for sequential indexing (all MR page indices are contiguous)
Each rxe_mr_page stores both struct page* and offset within the system page
Handle MR page_size != PAGE_SIZE relationships:
- page_size > PAGE_SIZE: Split MR pages into multiple system pages
- page_size <= PAGE_SIZE: Store offset within system page
Add boundary checks and compatibility validation

This ensures correct iova-to-va conversion regardless of MR page size and system PAGE_SIZE relationship, while improving performance through array-based sequential access.

Tests on 4K and 64K PAGE_SIZE hosts:

rdma-core/pytests $ ./build/bin/run_tests.py --dev eth0_rxe
blktest: $ TIMEOUT=30 QUICK_RUN=1 USE_RXE=1 NVMET_TRTYPES=rdma ./check nvme srp rnbd

[1] https://lore.kernel.org/all/CAHj4cs9XRqE25jyVw9rj9YugffLn5+f=1znaBEnu1usLOciD+g@mail.gmail.com/T/(CVE-2026-46325)

In the Linux kernel, compat_riscv_gpr_set() calls cregs_to_regs() unconditionally, even when user_regset_copyin() fails. Since cregs is an uninitialized stack variable, a copyin failure causes uninitialized stack data to be written into the target task's pt_regs, corrupting its register state and potentially leaking kernel stack contents. compat_restore_sigcontext() has the same issue: it calls cregs_to_regs() even when __copy_from_user() fails, leading to the same corruption of the signal-returning task's register state on…

Record: OESA-2026-3707
CVSS 3.1: 10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
Updated: 2026-11-02

OSVOESA-2026-3708 10.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

seg6: separate dst_cache for input and output paths in seg6 lwtunnel

Fix this by splitting the cache into cache_input and cache_output, so each path maintains its own cached dst independently.(CVE-2026-31668)

In the Linux kernel, the following vulnerability has been resolved:

RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE

ib_sg_to_page() has ensured that when i>=1 either a) SG[i-1].dma_end and SG[i].dma_addr are contiguous or b) SG[i-1].dma_end and SG[i].dma_addr are mr->page_size aligned.

This leads to incorrect iova-to-va conversion in scenarios:

page_size < PAGE_SIZE (e.g., MR: 4K, system: 64K): ibmr->iova = 0x181800 sg[0]: dma_addr=0x181800, len=0x800 sg[1]: dma_addr=0x173000, len=0x1000

Access iova = 0x181800 + 0x810 = 0x182010 Expected VA: 0x173010 (second SG, offset 0x10) Before fix:
- index = (0x182010 >> 12) - (0x181800 >> 12) = 1
- page_offset = 0x182010 & 0xFFF = 0x10
- xarray[1] stores system page base 0x170000
- Resulting VA: 0x170000 + 0x10 = 0x170010 (wrong)
page_size > PAGE_SIZE (e.g., MR: 64K, system: 4K): ibmr->iova = 0x18f800 sg[0]: dma_addr=0x18f800, len=0x800 sg[1]: dma_addr=0x170000, len=0x1000

Access iova = 0x18f800 + 0x810 = 0x190010 Expected VA: 0x170010 (second SG, offset 0x10) Before fix:
- index = (0x190010 >> 16) - (0x18f800 >> 16) = 1
- page_offset = 0x190010 & 0xFFFF = 0x10
- xarray[1] stores system page for dma_addr 0x170000
- Resulting VA: system page of 0x170000 + 0x10 = 0x170010 (wrong)

Yi Zhang reported a kernel panic[1] years ago related to this defect.

Solution:

Replace xarray with pre-allocated rxe_mr_page array for sequential indexing (all MR page indices are contiguous)
Each rxe_mr_page stores both struct page* and offset within the system page
Handle MR page_size != PAGE_SIZE relationships:
- page_size > PAGE_SIZE: Split MR pages into multiple system pages
- page_size <= PAGE_SIZE: Store offset within system page
Add boundary checks and compatibility validation

This ensures correct iova-to-va conversion regardless of MR page size and system PAGE_SIZE relationship, while improving performance through array-based sequential access.

Tests on 4K and 64K PAGE_SIZE hosts:

rdma-core/pytests $ ./build/bin/run_tests.py --dev eth0_rxe
blktest: $ TIMEOUT=30 QUICK_RUN=1 USE_RXE=1 NVMET_TRTYPES=rdma ./check nvme srp rnbd

[1] https://lore.kernel.org/all/CAHj4cs9XRqE25jyVw9rj9YugffLn5+f=1znaBEnu1usLOciD+g@mail.gmail.com/T/(CVE-2026-46325)

Record: OESA-2026-3708
CVSS 3.1: 10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
Updated: 2026-11-02

OSVUBUNTU-CVE-2026-74587 9.8

Record: UBUNTU-CVE-2026-74587
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-06

OSVAZL-97136 No score

CVE-2026-74587 affecting package kernel for versions less than 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved:

sctp: fix use-after-free of cached ASCONF chunk

addip_last_asconf caches the outstanding outbound ASCONF chunk. The normal ASCONF-ACK completion path releases the chunk and clears the pointer.

A delayed authenticated ASCONF-ACK can then reach sctp_sf_do_asconf_ack(), which accesses the stale chunk and passes it to sctp_process_asconf_ack(), causing a use-after-free and a second release.

Clear addip_last_asconf after releasing the cached chunk, and make sctp_sf_t4_timer_expire() consume a stale T4 expiry if no outstanding ASCONF remains.

Record: AZL-97136
Updated: 2026-11-02

OSVCLSA-2026-1789037015 No score

kernel: Fix of 51 CVEs

net: openvswitch: fix skb leak on flow key update failure during ct {CVE-2026-74464}
can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error {CVE-2026-74456}
wifi: mwifiex: fix permanently busy scans after multiple roam iterations {CVE-2026-68469}
drm/amdgpu/gfx8: drop unecessary BUG_ON() {CVE-2026-68430}
sctp: auth: verify auth requirement when auth_chunk is NULL {CVE-2026-68300}
cdrom: fix stack out-of-bounds read in CDROMVOLCTRL {CVE-2026-68184}
wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read {CVE-2026-68351}
wifi: carl9170: fix buffer overflow in rx_stream failover path {CVE-2026-68349}
wifi: carl9170: fix OOB read from off-by-two in TX status handler {CVE-2026-68350}
net: sit: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72061}
net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72055}
net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72054}
net: ipip: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72053}
net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72051}
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
usb: free iso schedules on failed submit {CVE-2026-64348}
smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
netfilter: ebtables: terminate table name before find_table_lock() {CVE-2026-64411}
netfilter: ebtables: zero chainstack array {CVE-2026-64413}
USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
can: bcm: track a single source interface for ANYDEV timeout/throttle ops {CVE-2026-72115}
can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() {CVE-2026-72117}
can: bcm: fix stale rx/tx ops after device removal {CVE-2026-72116}
can: bcm: add missing device refcount for CAN filter removal {CVE-2026-72113}
scsi: libiscsi: Move ehwait initialization to iscsi_session_setup() {CVE-2021-47328}
sctp: validate cookie AUTH state before use {CVE-2026-74752}
drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
can: bcm: restore op->flags assignment lost in the bcm_tx_lock backport {CVE-2025-38004}
can: bcm: fix CAN frame rx/tx statistics {CVE-2026-72118}
can: bcm: add locking when updating filter and timer values {CVE-2026-72121}
can: bcm: fix out-of-bounds frame read introduced by the bcm_tx_lock backport {CVE-2025-38004}
mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() {CVE-2026-72308}
can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure {CVE-2026-72122}
can: bcm: fix warning in bcm_connect/proc_register {CVE-2026-72113}
ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}
perf/core: Fix group leader use-after-free after sibling detach {CVE-2026-74637}
sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
sctp: clear control chunk transport if it is being removed {CVE-2026-74688}
ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}
ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
enic: fix tx_hang_reset use-after-free on device removal {CVE-2026-74725}
udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580} -…

Record: CLSA-2026-1789037015
Updated: 2026-11-02

OSVCLSA-2026-1789039259 No score

kernel: Fix of 51 CVEs

net: openvswitch: fix skb leak on flow key update failure during ct {CVE-2026-74464}
can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error {CVE-2026-74456}
wifi: mwifiex: fix permanently busy scans after multiple roam iterations {CVE-2026-68469}
drm/amdgpu/gfx8: drop unecessary BUG_ON() {CVE-2026-68430}
sctp: auth: verify auth requirement when auth_chunk is NULL {CVE-2026-68300}
cdrom: fix stack out-of-bounds read in CDROMVOLCTRL {CVE-2026-68184}
wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read {CVE-2026-68351}
wifi: carl9170: fix buffer overflow in rx_stream failover path {CVE-2026-68349}
wifi: carl9170: fix OOB read from off-by-two in TX status handler {CVE-2026-68350}
net: sit: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72061}
net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72055}
net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72054}
net: ipip: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72053}
net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72051}
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
usb: free iso schedules on failed submit {CVE-2026-64348}
smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
netfilter: ebtables: terminate table name before find_table_lock() {CVE-2026-64411}
netfilter: ebtables: zero chainstack array {CVE-2026-64413}
USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
can: bcm: track a single source interface for ANYDEV timeout/throttle ops {CVE-2026-72115}
can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() {CVE-2026-72117}
can: bcm: fix stale rx/tx ops after device removal {CVE-2026-72116}
can: bcm: add missing device refcount for CAN filter removal {CVE-2026-72113}
scsi: libiscsi: Move ehwait initialization to iscsi_session_setup() {CVE-2021-47328}
sctp: validate cookie AUTH state before use {CVE-2026-74752}
drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
can: bcm: restore op->flags assignment lost in the bcm_tx_lock backport {CVE-2025-38004}
can: bcm: fix CAN frame rx/tx statistics {CVE-2026-72118}
can: bcm: add locking when updating filter and timer values {CVE-2026-72121}
can: bcm: fix out-of-bounds frame read introduced by the bcm_tx_lock backport {CVE-2025-38004}
mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() {CVE-2026-72308}
can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure {CVE-2026-72122}
can: bcm: fix warning in bcm_connect/proc_register {CVE-2026-72113}
ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}
perf/core: Fix group leader use-after-free after sibling detach {CVE-2026-74637}
sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
sctp: clear control chunk transport if it is being removed {CVE-2026-74688}
ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}
ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
enic: fix tx_hang_reset use-after-free on device removal {CVE-2026-74725}
udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580} -…

Record: CLSA-2026-1789039259
Updated: 2026-11-02

OSVCLSA-2026-1789039867 No score

kernel: Fix of 51 CVEs

net: openvswitch: fix skb leak on flow key update failure during ct {CVE-2026-74464}
can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error {CVE-2026-74456}
wifi: mwifiex: fix permanently busy scans after multiple roam iterations {CVE-2026-68469}
drm/amdgpu/gfx8: drop unecessary BUG_ON() {CVE-2026-68430}
sctp: auth: verify auth requirement when auth_chunk is NULL {CVE-2026-68300}
cdrom: fix stack out-of-bounds read in CDROMVOLCTRL {CVE-2026-68184}
wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read {CVE-2026-68351}
wifi: carl9170: fix buffer overflow in rx_stream failover path {CVE-2026-68349}
wifi: carl9170: fix OOB read from off-by-two in TX status handler {CVE-2026-68350}
net: sit: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72061}
net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72055}
net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72054}
net: ipip: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72053}
net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72051}
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
usb: free iso schedules on failed submit {CVE-2026-64348}
smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
netfilter: ebtables: terminate table name before find_table_lock() {CVE-2026-64411}
netfilter: ebtables: zero chainstack array {CVE-2026-64413}
USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
can: bcm: track a single source interface for ANYDEV timeout/throttle ops {CVE-2026-72115}
can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() {CVE-2026-72117}
can: bcm: fix stale rx/tx ops after device removal {CVE-2026-72116}
can: bcm: add missing device refcount for CAN filter removal {CVE-2026-72113}
scsi: libiscsi: Move ehwait initialization to iscsi_session_setup() {CVE-2021-47328}
sctp: validate cookie AUTH state before use {CVE-2026-74752}
drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
can: bcm: restore op->flags assignment lost in the bcm_tx_lock backport {CVE-2025-38004}
can: bcm: fix CAN frame rx/tx statistics {CVE-2026-72118}
can: bcm: add locking when updating filter and timer values {CVE-2026-72121}
can: bcm: fix out-of-bounds frame read introduced by the bcm_tx_lock backport {CVE-2025-38004}
mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() {CVE-2026-72308}
can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure {CVE-2026-72122}
can: bcm: fix warning in bcm_connect/proc_register {CVE-2026-72113}
ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}
perf/core: Fix group leader use-after-free after sibling detach {CVE-2026-74637}
sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
sctp: clear control chunk transport if it is being removed {CVE-2026-74688}
ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}
ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
enic: fix tx_hang_reset use-after-free on device removal {CVE-2026-74725}
udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580} -…

Record: CLSA-2026-1789039867
Updated: 2026-11-02

OSVCLSA-2026-1789141176 No score

kernel: Fix of 131 CVEs

net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}
USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
ipv4: igmp: remove multicast group from hash table on device destruction {CVE-2026-64423}
USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers {CVE-2026-74700}
ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}
netfilter: ebt_nflog: pin the NFLOG backend {CVE-2026-74660}
ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}
ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}
ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
tipc: read le->link under the node lock in tipc_node_link_down() {CVE-2026-74609}
ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
bpf, sockmap: Fix sk_redir use-after-free in send verdict {CVE-2026-74589}
sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
netfilter: nf_tables: make nft_object rhltable per table {CVE-2026-74565}
scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write {CVE-2026-74470}
nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
geneve: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-68142}
sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
net/packet: reset the MAC header on the packet-socket transmit path {CVE-2026-74667}
ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}
sctp: clear control chunk transport if it is being removed {CVE-2026-74688}
udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
bpf: Preserve pointer state for commuted arithmetic {CVE-2026-74720}
RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
drm/i915: Fix potential UAF in TTM object purge {CVE-2026-63884}
wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request {CVE-2026-68363}
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
libceph: Reject monmaps advertising zero monitors {CVE-2026-68155}
sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
Bluetooth: hci_sync: Protect UUID list traversal {CVE-2026-68189}
net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
libceph: remove debugfs files before client teardown {CVE-2026-68153}
media: rtl2832: fix use-after-free in rtl2832_remove() {CVE-2026-68214}
sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async {CVE-2026-64219}
pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
fbdev: Fix invalid page access after closing deferred I/O devices {CVE-2023-52731}
Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync {CVE-2023-53252}
net_sched: red: fix a race in __red_change() {CVE-2025-38108}
iio: event: Fix event FIFO reset race {CVE-2026-64496}
netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}
NFSv4: include MAY_WRITE in open permission mask for O_TRUNC {CVE-2026-64298}
openvswitch: fix GSO userspace truncation underflow {CVE-2026-68123}
media: cx23885: add ioremap return check and cleanup {CVE-2026-68226}
tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev {CVE-2026-68176} -…

Record: CLSA-2026-1789141176
Updated: 2026-11-02

OSVCLSA-2026-1789898700 No score

kernel: Fix of 163 CVEs

drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() {CVE-2026-68251}
amd/amdkfd: sync all devices to wait all processes being evicted {CVE-2024-36949}
Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted {CVE-2024-36909}
Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl {CVE-2024-36912}
xfs: save ailp before dropping the AIL lock in push callbacks {CVE-2026-31454}
net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak {CVE-2026-43041}
netfilter: nf_conntrack: destroy stale expectfn expectations on unregister {CVE-2026-53349}
cifs: avoid NULL pointer dereference in dbg call {CVE-2025-37844}
fs/notify: call exportfs_encode_fid with s_umount {CVE-2025-40237}
cifs: fix potential oops in cifs_oplock_break {CVE-2023-54258}
pstore/ram: fix buffer overflow in persistent_ram_save_old() {CVE-2026-46253}
Bluetooth: ISO: fix iso_conn related locking and validity issues {CVE-2023-54164}
netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets {CVE-2026-45873}
ext4: always drain queued discard work in ext4_mb_release() {CVE-2026-43065}
ipvs: Defer ip_vs_ftp unregister during netns cleanup {CVE-2025-40018}
Bluetooth: MGMT: Fix memory leak in set_ssp_complete {CVE-2026-23151}
sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto {CVE-2025-40281}
fscache: Use wait_on_bit() to wait for the freeing of relinquished volume {CVE-2023-52982}
libceph: prevent potential out-of-bounds reads in process_message_header() {CVE-2026-43406}
netfilter: nf_tables: reject immediate NF_QUEUE verdict {CVE-2026-43024}
ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() {CVE-2025-68261}
bpf, sockmap: Fix af_unix iter deadlock {CVE-2026-53035}
sctp: stream: fully roll back denied add-stream state {CVE-2026-52929}
netfilter: xt_CT: drop pending enqueued packets on template removal {CVE-2026-23391}
netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() {CVE-2026-23457}
libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() {CVE-2026-43407}
af_unix: read UNIX_DIAG_VFS data under unix_state_lock {CVE-2026-31673}
jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted {CVE-2025-68337}
Bluetooth: Fix NULL pointer deference on eir_get_service_data {CVE-2025-38304}
net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption {CVE-2026-31533}
fsnotify: do not generate ACCESS/MODIFY events on child for special files {CVE-2025-68788}
isofs: validate Rock Ridge CE continuation extent against volume size {CVE-2026-46303}
net: strparser: fix skb_head leak in strp_abort_strp() {CVE-2026-46102}
sctp: fix uninit-value in __sctp_rcv_asconf_lookup() {CVE-2026-53225}
xfs: don't swallow dquot recovery verification errors {CVE-2026-80529}
xfs: dquot recovery does not validate the recovered dquot {CVE-2026-80529}
bpf: tcp: fix double sock release on batch realloc {CVE-2026-64575}
bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch() {CVE-2026-74714}
bpf: tcp: Avoid socket skips and repeats during iteration {CVE-2026-74714}
bpf: tcp: Use bpf_tcp_iter_batch_item for bpf_tcp_iter_state batch items {CVE-2026-74714}
bpf: tcp: Get rid of st_bucket_done {CVE-2026-74714}
bpf: tcp: Make sure iter->batch always contains a full bucket snapshot {CVE-2026-64575}
bpf: tcp: Make mem flags configurable through bpf_iter_tcp_realloc_batch {CVE-2026-74714}
USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
NFS: Decrement refcounts if allocating nfs_free_stateid_data fails {CVE-2026-74730}
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}
net: Make copy_safe_from_sockptr() match documentation {CVE-2026-74689}
net: add copy_safe_from_sockptr() helper {CVE-2026-74689}
xfs: close crash window in attr dabtree…

Record: CLSA-2026-1789898700
Updated: 2026-11-02

OSVCLSA-2026-1791132071 No score

Fix of 159 CVEs

CVE-2026-64375
- proc: protect ptrace_may_access() with exec_update_lock (FD links) {CVE-2026-64375}
- exec: Add exec_update_mutex to replace cred_guard_mutex {CVE-2026-64375}
CVE-2026-53266
- netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
CVE-2025-39964
- crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
CVE-2026-90413
- IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
CVE-2026-53062
- dm cache policy smq: test e->allocated under the policy lock {CVE-2026-53062}
- dm cache policy smq: fix missing locks in invalidating cache blocks {CVE-2026-53062}
CVE-2026-64237
- Input: elan_i2c - release the firmware on the short-file path {CVE-2026-64237}
- Input: elan_i2c - validate firmware size before use {CVE-2026-64237}
CVE-2026-64109
- af_unix: fix the UAF read of tail->len without losing the wakeup condition {CVE-2026-64109}
- af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109}
CVE-2025-38512
- wifi: prevent A-MSDU attacks in mesh networks {CVE-2025-38512}
CVE-2025-38117
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock {CVE-2025-38117}
CVE-2026-22980
- nfsd: provide locking for v4_end_grace {CVE-2026-22980}
CVE-2023-53254
- cacheinfo: Fix shared_cpu_map to handle shared caches at different levels {CVE-2023-53254}
CVE-2025-37885
- KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
CVE-2026-23191
- ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191}
CVE-2025-37879
- 9p/net: fix improper handling of bogus negative read/write replies {CVE-2025-37879}
CVE-2023-53039
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039}
CVE-2019-12456
- scsi: mpt3sas_ctl: fix double-fetch bug in _ctl_ioctl_main() {CVE-2019-12456}
CVE-2024-46812
- drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration {CVE-2024-46812}
CVE-2026-31761
- iio: gyro: mpu3050: Move iio_device_register() to correct location {CVE-2026-31761}
CVE-2026-53120
- PCI: RCU-protect driver_override against pci_match_device() UAF {CVE-2026-53120}
CVE-2026-31598
- ocfs2: fix possible deadlock between unlink and dio_end_io_write {CVE-2026-31598}
CVE-2026-43075
- ocfs2: fix out-of-bounds write in ocfs2_write_end_inline {CVE-2026-43075}
CVE-2024-41013
- xfs: don't walk off the end of a directory data block {CVE-2024-41013}
CVE-2026-31527
- driver core: platform: RCU-protect driver_override against match() UAF {CVE-2026-31527}
CVE-2022-48744
- net/mlx5e: Avoid field-overflowing memcpy() {CVE-2022-48744}
CVE-2023-53510
- scsi: ufs: core: Fix handling of lrbp->cmd {CVE-2023-53510}
CVE-2026-23268
- apparmor: fix unprivileged local user can do privileged policy management {CVE-2026-23268}
CVE-2026-23269
- apparmor: validate DFA start states are in bounds in unpack_pdb {CVE-2026-23269}
CVE-2025-21812
- ax25: rcu protect dev->ax25_ptr {CVE-2025-21812}
CVE-2026-46266
- inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
CVE-2026-53228
- ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
CVE-2026-53355
- net: rds: clear i_sends on setup unwind {CVE-2026-53355}
CVE-2026-45970
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}
CVE-2023-52922
- can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922}
CVE-2026-52920
- netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920} *…

Record: CLSA-2026-1791132071
Updated: 2026-11-02

OSVCLSA-2026-1791132078 No score

Fix of 160 CVEs

CVE-2026-64375
- proc: protect ptrace_may_access() with exec_update_lock (FD links) {CVE-2026-64375}
- exec: Add exec_update_mutex to replace cred_guard_mutex {CVE-2026-64375}
CVE-2026-53266
- netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
CVE-2025-39964
- crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
CVE-2026-90413
- IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
CVE-2026-53062
- dm cache policy smq: test e->allocated under the policy lock {CVE-2026-53062}
- dm cache policy smq: fix missing locks in invalidating cache blocks {CVE-2026-53062}
CVE-2026-64237
- Input: elan_i2c - release the firmware on the short-file path {CVE-2026-64237}
- Input: elan_i2c - validate firmware size before use {CVE-2026-64237}
CVE-2026-64109
- af_unix: fix the UAF read of tail->len without losing the wakeup condition {CVE-2026-64109}
- af_unix: Fix UAF read of tail->len in unix_stream_data_wait() {CVE-2026-64109}
CVE-2025-38512
- wifi: prevent A-MSDU attacks in mesh networks {CVE-2025-38512}
CVE-2025-38117
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock {CVE-2025-38117}
CVE-2026-22980
- nfsd: provide locking for v4_end_grace {CVE-2026-22980}
CVE-2023-53254
- cacheinfo: Fix shared_cpu_map to handle shared caches at different levels {CVE-2023-53254}
CVE-2025-37885
- KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
CVE-2026-23191
- ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191}
CVE-2025-37879
- 9p/net: fix improper handling of bogus negative read/write replies {CVE-2025-37879}
CVE-2023-53039
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039}
CVE-2019-12456
- scsi: mpt3sas_ctl: fix double-fetch bug in _ctl_ioctl_main() {CVE-2019-12456}
CVE-2024-46812
- drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration {CVE-2024-46812}
CVE-2026-31761
- iio: gyro: mpu3050: Move iio_device_register() to correct location {CVE-2026-31761}
CVE-2026-53120
- PCI: RCU-protect driver_override against pci_match_device() UAF {CVE-2026-53120}
CVE-2026-31598
- ocfs2: fix possible deadlock between unlink and dio_end_io_write {CVE-2026-31598}
CVE-2026-43075
- ocfs2: fix out-of-bounds write in ocfs2_write_end_inline {CVE-2026-43075}
CVE-2024-41013
- xfs: don't walk off the end of a directory data block {CVE-2024-41013}
CVE-2026-31527
- driver core: platform: RCU-protect driver_override against match() UAF {CVE-2026-31527}
CVE-2022-48744
- net/mlx5e: Avoid field-overflowing memcpy() {CVE-2022-48744}
CVE-2023-53510
- scsi: ufs: core: Fix handling of lrbp->cmd {CVE-2023-53510}
CVE-2026-23268
- apparmor: fix unprivileged local user can do privileged policy management {CVE-2026-23268}
CVE-2026-23269
- apparmor: validate DFA start states are in bounds in unpack_pdb {CVE-2026-23269}
CVE-2025-21812
- ax25: rcu protect dev->ax25_ptr {CVE-2025-21812}
CVE-2026-46266
- inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP {CVE-2026-46266}
CVE-2026-53228
- ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}
CVE-2026-53355
- net: rds: clear i_sends on setup unwind {CVE-2026-53355}
CVE-2026-45970
- bonding: alb: fix UAF in rlb_arp_recv during bond up/down {CVE-2026-45970}
CVE-2023-52922
- can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922}
CVE-2026-52920
- netfilter: xt_policy: fix strict mode inbound policy matching {CVE-2026-52920} *…

Record: CLSA-2026-1791132078
Updated: 2026-11-02

OSVCLSA-2026-1791132991 No score

Fix of 400 CVEs

CVE-2026-53266
- netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
CVE-2025-39964
- crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
CVE-2025-39827
- net: rose: include node references in rose_neigh refcount {CVE-2025-39827}
CVE-2026-93140
- udf: Mark LVID buffer as uptodate before marking it dirty {CVE-2026-93140}
CVE-2026-90112
- net: qlcnic: validate unified ROM sections before loading {CVE-2026-90112}
CVE-2026-90237
- netfilter: nft_ct: move custom expectation support to helper {CVE-2026-90237}
CVE-2026-93051
- misc: ad525x_dpot: use driver core groups for sysfs files {CVE-2026-93051}
CVE-2026-90379
- wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash {CVE-2026-90379}
CVE-2026-90302
- ocfs2: synchronize heartbeat callbacks with o2net teardown {CVE-2026-90302}
CVE-2026-90383
- misc: sgi-gru: remove interrupt-context page-table walks {CVE-2026-90383}
CVE-2026-90320
- ocfs2: validate external xattr entries when reading metadata {CVE-2026-90320}
CVE-2026-93047
- drm/v3d: Associate BOs with every job that accesses them {CVE-2026-93047}
CVE-2026-93192
- drm/v3d: Clear queue->active_job when v3d_fence_create() fails {CVE-2026-93192}
CVE-2026-93050
- ipack: ipoctal: fix UAF, null-ptr-deref, and use-after-free in cleanup on remove {CVE-2026-93050}
CVE-2026-90311
- thermal: hwmon: Remove hwmon class device along with its parent {CVE-2026-90311}
CVE-2026-93191
- smack: fix incorrect task context in smack_msg_queue_msgrcv {CVE-2026-93191}
CVE-2026-93042
- dmaengine: dw-edma: Terminate all descriptors without callbacks {CVE-2026-93042}
CVE-2026-93056
- usb: gadget: f_uac1_legacy: remove broken string configfs attributes {CVE-2026-93056}
CVE-2026-93203
- batman-adv: bla: avoid CRC corruption due to parallel claim add {CVE-2026-93203}
CVE-2026-93204
- batman-adv: dat: atomically update mac addresses {CVE-2026-93204}
CVE-2026-90000
- HID: rmi: fix OOB access with undersized RMI reports {CVE-2026-90000}
CVE-2026-90431
- remoteproc: Prevent crash handling to race with rproc_del() {CVE-2026-90431}
CVE-2026-93202
- i3c: master: Fix recursive locking during device registration {CVE-2026-93202}
CVE-2026-90347
- arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry {CVE-2026-90347}
CVE-2026-90267
- scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails {CVE-2026-90267}
CVE-2026-92500
- ext4: use fsdata to track inline data write state and fix race {CVE-2026-92500}
CVE-2026-93196
- nvdimm: virtio_pmem: refcount requests for token lifetime {CVE-2026-93196}
CVE-2026-90207
- ALSA: seq: midi: Serialize input teardown with event_input {CVE-2026-90207}
CVE-2026-90307
- RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ {CVE-2026-90307}
CVE-2026-90110
- inetpeer: randomize RB-tree node comparison using SipHash {CVE-2026-90110}
CVE-2026-90293
- IB/isert: post the full-feature receive buffers after session registration {CVE-2026-90293}
CVE-2026-89838
- f2fs: limit recovery filename logging to stored length {CVE-2026-89838}
CVE-2026-93177
- drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup {CVE-2026-93177}
CVE-2026-89823
- drm: fix race between partial drm_dev_register() failure and ioctl {CVE-2026-89823}
CVE-2026-90041
- HID: sony: clean up device list on probe failure {CVE-2026-90041}
CVE-2026-90015
- xhci: fix lost bounce buffers on TDs spanning several ring segments {CVE-2026-90015}
CVE-2026-93095 -…

Record: CLSA-2026-1791132991
Updated: 2026-11-02

OSVCLSA-2026-1791800936 No score

kernel: Fix of 191 CVEs

drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check {CVE-2026-89818}
drm/amdgpu/vcn4: Avoid overflow on msg bound check {CVE-2026-46199}
drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg {CVE-2026-46199}
drm/amdgpu/vcn3: Avoid overflow on msg bound check {CVE-2026-46230}
drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg {CVE-2026-46230}
openvswitch: vport: fix self-deadlock on release of tunnel ports {CVE-2026-46165}
openvswitch: defer tunnel netdev_put to RCU release {CVE-2026-31678}
ALSA: usb: Fix UAF at delayed release of MIDI2 EPs {CVE-2026-74642}
ALSA: usb-audio: fix use-after-free in ump_to_endpoint() {CVE-2026-74501}
NFS: Decrement refcounts if allocating nfs_free_stateid_data fails {CVE-2026-74730}
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call {CVE-2026-74730}
exec: do_close_on_exec() before taking exec_update_lock {CVE-2026-64371}
proc: Fix broken error paths for namespace links {CVE-2026-64371}
proc: protect ptrace_may_access() with exec_update_lock (part 1) {CVE-2026-64371}
ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes {CVE-2026-74503}
ALSA: timer: Forcibly close timer instances at closing {CVE-2026-53193}
usb: typec: ucsi: Fix race condition and ordering in port unregistration {CVE-2026-74441}
arp: do not assume dev_hard_header() does not change skb->head {CVE-2026-22988}
netfilter: nft_ct: fix use-after-free in timeout object destroy {CVE-2026-31665}
md/raid10: fix writes_pending and barrier reference leaks on discard failures {CVE-2026-72438}
md/raid10: fix deadlock with check operation and nowait requests {CVE-2026-46050}
mm: introduce and use {pgd,p4d}_populate_kernel() {CVE-2025-39844}
vsock/virtio: fix zerocopy completion for multi-skb sends {CVE-2026-53365}
vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting {CVE-2026-52994}
mm: do file ownership checks with the proper mount idmap {CVE-2026-64294}
udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths {CVE-2026-45870}
Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig {CVE-2026-53208}
slip: bound decode() reads against the compressed packet length {CVE-2026-45843}
net: tls: fix strparser anchor skb leak on offload RX setup failure {CVE-2026-52974}
netfilter: nf_tables: unconditionally bump set->nelems before insertion {CVE-2026-23272}
rbd: Reset positive result codes to zero in object map update path {CVE-2026-68131}
netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() {CVE-2026-23458}
mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr {CVE-2025-21938}
bpf: Fix NULL deref in map_kptr_match_type for scalar regs {CVE-2026-53032}
bpf: Explicitly check accesses to bpf_sock_addr {CVE-2025-40078}
nexthop: Forbid FDB status change while nexthop is in a group {CVE-2025-39980}
bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN {CVE-2026-31525}
x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() {CVE-2025-21913}
ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() {CVE-2024-57994}
drm/i915/vrr: require valid min/max vfreq for VRR {CVE-2026-68254}
libceph: handle rbtree insertion error in decode_choose_args() {CVE-2026-52954}
gfs2: prevent NULL pointer dereference during unmount {CVE-2026-53048}
smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path {CVE-2026-31708}
ext4: reject mount if bigalloc with s_first_data_block != 0 {CVE-2026-31447}
NFSD: Fix crash in nfsd4_read_release() {CVE-2025-40324}
netfilter: x_tables: guard option walkers against 1-byte tail reads {CVE-2026-43452}
smb: client: Fix refcount leak for cifs_sb_tlink {CVE-2025-40103}
smb: client: harden POSIX SID length parsing {CVE-2026-64380}
crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() {CVE-2026-64438}
bpf: Allow LPM map access from sleepable…

Record: CLSA-2026-1791800936
Updated: 2026-11-02

OSVCLSA-2026-1791852988 No score

kernel: Fix of 107 CVEs

netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414}
RDMA/mlx5: Fix integer overflow of user QP buffer size {CVE-2026-90435}
sctp: validate embedded address parameter length {CVE-2026-74287}
IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
xfrm: ah6: validate routing header segments_left {CVE-2026-80844}
drm/amd/display: set new_stream to NULL after release {CVE-2026-68236}
RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters {CVE-2026-100075}
nvmet-rdma: handle inline data with a nonzero offset {CVE-2026-72129}
netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() {CVE-2026-97417}
sctp: validate cookie AUTH state before use {CVE-2026-74752}
ipvlan: inherit needed_headroom and needed_tailroom from phy_dev {CVE-2026-74744}
enic: fix tx_hang_reset use-after-free on device removal {CVE-2026-74725}
net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}
drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}
nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page {CVE-2026-64320}
smb: client: reject overlapping data areas in SMB2 responses {CVE-2026-64257}
smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() {CVE-2026-64438}
crypto: qat - protect interrupt mask CSRs with a spinlock {CVE-2026-64438}
crypto: qat - remove intermediate tasklet for vf2pf {CVE-2026-64438}
usb: free iso schedules on failed submit {CVE-2026-64348}
USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
crypto: qat - protect service table iterations with service_lock {CVE-2026-64305}
crypto: qat - validate RSA CRT component lengths {CVE-2026-64304}
net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
crypto: algif_aead - fix uninitialized ctx->init {CVE-2025-39964}
sctp: fix race between sctp_wait_for_connect and peeloff {CVE-2026-63971}
mpls: reload header after pskb_may_pull() {CVE-2026-89555}
net: tun: bound receive headroom {CVE-2026-81000}
bridge: stp: Fix a potential use-after-free when deleting a bridge {CVE-2026-72389}
scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
rhashtable: clear stale iter->p on table restart {CVE-2026-64563}
vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580}
net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
ipv4: igmp: remove multicast group from hash table on device destruction {CVE-2026-64423}
USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
netfilter: ebt_nflog: pin the NFLOG backend {CVE-2026-74660}
libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
wifi: ath9k: hif_usb: don't dereference hif_dev after…

Record: CLSA-2026-1791852988
Updated: 2026-11-02

OSVCLSA-2026-1791858083 No score

kernel: Fix of 94 CVEs

netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414}
RDMA/mlx5: Fix integer overflow of user QP buffer size {CVE-2026-90435}
IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}
xfrm: ah6: validate routing header segments_left {CVE-2026-80844}
drm/amd/display: set new_stream to NULL after release {CVE-2026-68236}
RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters {CVE-2026-100075}
nvmet-rdma: handle inline data with a nonzero offset {CVE-2026-72129}
netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() {CVE-2026-97417}
smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}
usb: free iso schedules on failed submit {CVE-2026-64348}
USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}
USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
crypto: qat - protect service table iterations with service_lock {CVE-2026-64305}
crypto: qat - validate RSA CRT component lengths {CVE-2026-64304}
net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
udf: validate VAT header length against the VAT inode size {CVE-2026-64323}
crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
net: tun: bound receive headroom {CVE-2026-81000}
bridge: stp: Fix a potential use-after-free when deleting a bridge {CVE-2026-72389}
scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}
rhashtable: clear stale iter->p on table restart {CVE-2026-64563}
mpls: reload header after pskb_may_pull() {CVE-2026-89555}
vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580}
net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
sctp: keep chunk->transport in step with the list it is queued on {CVE-2026-74588}
USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}
ipv4: igmp: remove multicast group from hash table on device destruction {CVE-2026-64423}
USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}
RDMA/siw: bound Read Response placement to the RREAD length {CVE-2026-64268}
sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}
ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}
ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}
netfilter: ebt_nflog: pin the NFLOG backend {CVE-2026-74660}
netfilter: flowtable: publish GC-visible tuple last {CVE-2026-74746}
libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}
udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}
Bluetooth: RFCOMM: Fix session UAF in set_termios {CVE-2026-68188}
wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request {CVE-2026-68363}
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() {CVE-2026-68160}
libceph: Reject monmaps advertising zero monitors {CVE-2026-68155}
sctp: fix auth_hmacs array size in struct sctp_cookie {CVE-2026-68376}
net: slip: serialize receive against buffer reallocation {CVE-2026-68143}
libceph: remove debugfs files before client teardown {CVE-2026-68153}
libceph: refresh auth->authorizer_buf{,_len} after authorizer update {CVE-2026-68156}
media: rtl2832: fix use-after-free in rtl2832_remove() {CVE-2026-68214}
sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}
pppoe: reload header pointer after dev_hard_header() {CVE-2026-68121}
libceph: Fix multiplication overflow in decode_new_up_state_weight() {CVE-2026-68158}
ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() {CVE-2026-74499}
can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet…

Record: CLSA-2026-1791858083
Updated: 2026-11-02

OSVCLSA-2026-1791946572 No score

Fix of 198 CVEs

CVE-2024-36894
- usb: gadget: f_fs: drop the duplicate usb_ep_free_request() in ffs_user_copy_worker() {CVE-2024-36894}
CVE-2026-97447
- ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() {CVE-2026-97447}
CVE-2026-93822
- PCI: iproc: Protect root bus removal with rescan lock {CVE-2026-93822}
CVE-2026-93826
- HID: hidpp: fix potential UAF in hidpp_connect_event() {CVE-2026-93826}
CVE-2026-97954
- net/rds: fix tcp stream corruption with large pages {CVE-2026-97954}
CVE-2026-97949
- configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}
CVE-2026-97931
- ALSA: us122l: Prevent write upgrades for read mappings {CVE-2026-97931}
CVE-2026-97940
- ipv6: fix fib6 walker UAF on seq stop {CVE-2026-97940}
CVE-2026-97539
- usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}
CVE-2026-74510
- Bluetooth: mgmt: fix UAF in pair command cancellation {CVE-2026-74510}
CVE-2026-72084
- scsi: target: Bound PR-OUT TransportID parsing to the received buffer {CVE-2026-72084}
CVE-2026-90302
- ocfs2: synchronize heartbeat callbacks with o2net teardown {CVE-2026-90302}
CVE-2026-90320
- ocfs2: validate external xattr entries when reading metadata {CVE-2026-90320}
CVE-2026-90321
- ocfs2: validate inline xattrs during inode block validation {CVE-2026-90321}
CVE-2026-90431
- remoteproc: Prevent crash handling to race with rproc_del() {CVE-2026-90431}
CVE-2026-74637
- perf/core: Fix group leader use-after-free after sibling detach {CVE-2026-74637}
CVE-2026-74752
- sctp: validate cookie AUTH state before use {CVE-2026-74752}
CVE-2026-74387
- ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}
CVE-2026-80536
- xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}
CVE-2026-89659
- NFSD: Prevent client use-after-free during delegation revoke {CVE-2026-89659}
CVE-2026-80576
- drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}
CVE-2026-90223
- nfc: llcp: bound SNL TLV parsing to the skb and add length checks {CVE-2026-90223}
CVE-2026-80994
- net: openvswitch: fix flow mask use-after-free on flow deletion {CVE-2026-80994}
CVE-2026-72398
- sctp: add INIT verification after cookie unpacking {CVE-2026-72398}
CVE-2026-74583
- net/sched: cls_route: fix fastmap use-after-free on filter {CVE-2026-74583}
CVE-2026-72322
- ipv6: mcast: Fix potential UAF in MLD delayed work {CVE-2026-72322}
CVE-2026-93095
- hfsplus: validate thread record before delete key rebuild {CVE-2026-93095}
CVE-2026-72472
- nfs: use nfsi->rwsem to protect traversal of the file lock list {CVE-2026-72472}
CVE-2026-90045
- USB: gadget: ffs: fix mm lifetime handling {CVE-2026-90045}
CVE-2026-90421
- PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421}
CVE-2026-64583
- usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown {CVE-2026-64583}
CVE-2026-68329
- iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() {CVE-2026-68329}
CVE-2026-89448
- iommu/vt-d: Force requesting ACS when tboot is enabled {CVE-2026-89448}
CVE-2026-64001
- ALSA: pcm: oss: Fix setup list UAF on proc write error {CVE-2026-64001}
CVE-2026-64305
- crypto: qat - protect service table iterations with service_lock {CVE-2026-64305}
CVE-2026-64348
- usb: free iso schedules on failed submit {CVE-2026-64348}
CVE-2026-64422
- net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}
CVE-2026-90180
- block:…

Record: CLSA-2026-1791946572
Updated: 2026-11-02

OSVMGASA-2026-0506 No score

Updated kernel, drakx-installer-images, kmod-nvidia-current-wopengpu, kmod-xtables-addons & kmod-virtualbox packages fix Security Vulnerabilities

Upstream kernel 6.18.55 version fixes bugs and vulnerabilities. The kmod-xtables-addons, kmod-virtualbox, kmod-nvidia-current-wopengpu & drakx-installer-images packages have been updated to work with this new kernel.

Record: MGASA-2026-0506
Updated: 2026-11-02

OSVMGASA-2026-0542 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.18.55 fixes vulnerabilities. For information about the vulnerabilities see the links.

Record: MGASA-2026-0542
Updated: 2026-11-02

OSVopenSUSE-SU-2026:22167-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042).
CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178).
CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898).
CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901).
CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952).
CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955).
CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956).
CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509).
CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695).
CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330).
CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907).
CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal…

Record: openSUSE-SU-2026:22167-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24371-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008).
CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804).
CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931).
CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562).
CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode…

Record: SUSE-SU-2026:24371-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24379-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008).
CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804).
CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931).
CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562).
CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode…

Record: SUSE-SU-2026:24379-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24386-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042).
CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178).
CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898).
CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901).
CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952).
CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955).
CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956).
CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509).
CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695).
CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330).
CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907).
CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal…

Record: SUSE-SU-2026:24386-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24422-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042).
CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178).
CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898).
CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901).
CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952).
CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955).
CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956).
CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509).
CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695).
CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330).
CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907).
CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal…

Record: SUSE-SU-2026:24422-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24437-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042).
CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178).
CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898).
CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901).
CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952).
CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955).
CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956).
CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509).
CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695).
CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330).
CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907).
CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal…

Record: SUSE-SU-2026:24437-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24446-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-31731: thermal: core: Address thermal zone removal races with resume (bsc#1264042).
CVE-2026-46028: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).
CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
CVE-2026-63830: net: skmsg: preserve sg.copy across SG transforms (bsc#1272178).
CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898).
CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling (bsc#1272901).
CVE-2026-64062: netfs: Fix potential deadlock in write-through mode (bsc#1272952).
CVE-2026-64063: netfs: Fix streaming write being overwritten (bsc#1272955).
CVE-2026-64064: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956).
CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509).
CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
CVE-2026-64435: audit: Fix data races of skb_queue_len() readers on audit_queue (bsc#1274080).
CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
CVE-2026-72174: fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() (bsc#1277695).
CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
CVE-2026-72250: netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag (bsc#1277663).
CVE-2026-72253: netfilter: nf_conntrack_sip: validate skb_dst() before accessing it (bsc#1277665).
CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
CVE-2026-72355: netfs: Fix barriering when walking subrequest list (bsc#1276330).
CVE-2026-72405: net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync (bsc#1278033).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74306: vfio/qat: fix f_pos race in qat_vf_resume_write() (bsc#1276907).
CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
CVE-2026-74368: wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() (bsc#1277103).
CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal…

Record: SUSE-SU-2026:24446-1
Updated: 2026-11-02

OSVSUSE-SU-2026:24473-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 RT kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
CVE-2026-64568: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure (bsc#1274008).
CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804).
CVE-2026-74614: vsock/virtio: read virtqueues under worker locks (bsc#1277931).
CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
CVE-2026-74723: btrfs: lzo: reject inline extents without valid headers (bsc#1276562).
CVE-2026-80579: fbdev: clear fb_info->mode before deleting a videomode…

Record: SUSE-SU-2026:24473-1
Updated: 2026-11-04

OSVSUSE-SU-2026:4892-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2023-54158: btrfs: don't free qgroup space unless specified (bsc#1256076).
CVE-2023-54180: btrfs: handle case when repair happens with dev-replace (bsc#1255995).
CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
CVE-2026-63948: Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn (bsc#1272670).
CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
CVE-2026-64456: hwrng: virtio: clamp device-reported used.len at copy_data() (bsc#1273288).
CVE-2026-64593: btrfs: do not trim a device which is not writeable (bsc#1274497).
CVE-2026-68106: drm/amdgpu: fix division by zero with invalid uvd dimensions (bsc#1274853).
CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
CVE-2026-68236: drm/amd/display: set new_stream to NULL after release (bsc#1275659).
CVE-2026-68303: drm/vc4: hvs/v3d: Fix null dereference in unbind (bsc#1275080).
CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
CVE-2026-68430: drm/amdgpu/gfx8: drop unecessary BUG_ON() (bsc#1276273).
CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
CVE-2026-72319: ipvs: ensure inner headers in ICMP errors are in headroom (bsc#1275964).
CVE-2026-72476: dmaengine: Fix possible use after free (bsc#1276844).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74408: wifi: ath9k: fix OOB access from firmware tx status queue ID (bsc#1276387).
CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
CVE-2026-74653: serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx (bsc#1277310).
CVE-2026-74675: vt: stabilize tty reference in kbd_keycode with tty_port_tty_get (bsc#1278313).
CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
CVE-2026-89726: lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() (bsc#1281058).
CVE-2026-89778: isofs: fix out-of-bounds page array access on empty zisofs block (bsc#1280966).
CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819).
CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
CVE-2026-90283: hugetlbfs: release subpool on fill_super failure (bsc#1281771).
CVE-2026-93252: ocfs2: make ocfs2_set_acl() static (bsc#1282784).
CVE-2026-93287: i2c: smbus: reject oversized block transfers in the common path (bsc#1282744).
CVE-2026-93800: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() (bsc#1282808).
CVE-2026-93820: PCI: rockchip: Protect root bus removal with rescan lock (bsc#1282755).
CVE-2026-93822: PCI: iproc: Protect root bus removal with rescan lock (bsc#1282762).
CVE-2026-97416: btrfs: balance: fix potential…

Record: SUSE-SU-2026:4892-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4933-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

The following non security issues were fixed:

ACPI, APEI, EINJ: Subtract any matching Register Region from Trigger resources (git-fixes).
ACPI: sysfs: Fix a buffer overrun problem with description_show() (git-fixes).
PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
PCI: PM: Fix pci_power_up() (git-fixes).

Record: SUSE-SU-2026:4933-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4934-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-71183: btrfs: always detect conflicting inodes when logging inode refs (bsc#1257631).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
CVE-2026-74611: tls: rx: restore msg_iter before TLS 1.3 optimistic retry (bsc#1277804).
CVE-2026-74624: netfilter: nf_conntrack: defer invalid log until after unlock (bsc#1277599).
CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743).
CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251).
CVE-2026-89987: mm/huge_memory: transfer the pmd dirty bit to the folio on zap (bsc#1281819).
CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
CVE-2026-93787: smb: client: bound dirent name against end of SMB response in cifs_filldir (bsc#1282932).
CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851).
CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946).
CVE-2026-97945: replace with mainline version and update References (bsc#1283144).
CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963).
CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894).
CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).
CVE-2026-98173: smb: client: fix use-after-free of iface in cifs_try_adding_channels() (bsc#1284415).
CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790).
CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408).
CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713).
CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).
CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).
CVE-2026-98366: RDMA/rxe: validate access flags before swapping the MR's PD (bsc#1284655).
CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).
CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

The following non security issues were fixed:

Drivers: hv: Avoid infinite retry loop in init_vp_index() (git-fixes).
Drivers: hv: Don't reset VMBus connection state on error/exit paths (git-fixes).
Drivers: hv: vmbus: fix typo 'substract' in comment (git-fixes).
net: mana: reserve RX buffer headroom to fix forwarding performance (git-fixes).
netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).
PCI: hv: Probe vPCI buses asynchronously (git-fixes).
PCI: hv: Warn when wait_for_response() waits indefinitely (git-fixes).
tools/hv: fix typo 'retrive' in comment (git-fixes).

Record: SUSE-SU-2026:4934-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4935-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
CVE-2026-43132: dm-verity: correctly handle dm_bufio_client_create() failure (bsc#1264614).
CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622).
CVE-2026-43283: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle (bsc#1264295).
CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
CVE-2026-43457: mctp: i2c: fix skb memory leak in receive path (bsc#1265000).
CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
CVE-2026-46034: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path (bsc#1266757).
CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889).
CVE-2026-74587:…

Record: SUSE-SU-2026:4935-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4936-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599).
CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743).
CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251).
CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).
CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851).
CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946).
CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963).
CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894).
CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064).
CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).
CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518).
CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790).
CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408).
CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713).
CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).
CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).
CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).
CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

The following non security issues were fixed:

kernel-binary.spec.in: Emulate kabi.pl error when suse-kabi-tools is used.
netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).

Record: SUSE-SU-2026:4936-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4937-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2024-39468: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103 bsc#1280176).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599).
CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743).
CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251).
CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).
CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851).
CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946).
CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963).
CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894).
CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064).
CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).
CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518).
CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790).
CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408).
CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713).
CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).
CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).
CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).
CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

Record: SUSE-SU-2026:4937-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4938-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599).
CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743).
CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251).
CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).
CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851).
CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946).
CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963).
CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894).
CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064).
CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).
CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518).
CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790).
CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408).
CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713).
CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).
CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).
CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).
CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

The following non security issue was fixed:

netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).

Record: SUSE-SU-2026:4938-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4939-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2024-39468: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103, bsc#1280176).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72110: bpf,fork: wipe ->bpf_storage before bailouts that access it (bsc#1277357).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74587: sctp: fix use-after-free of cached ASCONF chunk (bsc#1277821).
CVE-2026-74624: netfilter: conntrack: work around exceeded receive window (bsc#1277599).
CVE-2026-80977: net: skbuff: don't touch shared zerocopy state in skb_tx_error() (bsc#1280259).
CVE-2026-89528: svcrdma: Reject Read lists that exceed the page budget (bsc#1280743).
CVE-2026-89542: SUNRPC: harden gss_krb5_unwrap_v2 against short tokens (bsc#1280387).
CVE-2026-89669: nfsd: fix cpntf publish race in nfs4_init_cp_state (bsc#1280251).
CVE-2026-90011: scsi: target: iscsi: Reserve a terminator byte for the login payload (bsc#1281280).
CVE-2026-90088: Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop (bsc#1281397).
CVE-2026-97555: smb: client: fix heap overflow in DACL owner/group rewrite (bsc#1283851).
CVE-2026-97564: smb: client: reject userspace cifs.idmap descriptions (bsc#1283946).
CVE-2026-98015: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put (bsc#1283963).
CVE-2026-98016: net/mlx5e: Fix use-after-free race in sample_restore_put() (bsc#1283894).
CVE-2026-98041: bpf: Don't predict JMP32 pointer vs zero comparisons (bsc#1284064).
CVE-2026-98130: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START (bsc#1283835).
CVE-2026-98248: arm64: Use load LSE atomics for the non-return per-CPU atomic operations (bsc#1284518).
CVE-2026-98253: RDMA/ucma: Serialize join and leave on copy_to_user failure (bsc#1284790).
CVE-2026-98260: exec: Cleanup POSIX timers right after de_thread() (bsc#1284408).
CVE-2026-98323: RDMA/siw: Bound fragmented header copies by the remaining length (bsc#1284713).
CVE-2026-98357: IB/isert: wait for deferred control PDU completions before releasing the connection (bsc#1284791).
CVE-2026-98359: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed (bsc#1284746).
CVE-2026-98432: ipv4: free inet_opt and ireq_opt after an RCU grace period (bsc#1285685).
CVE-2026-99999: ipv4: validate checksum_start before completing checksum (bsc#1285684).

The following non security issue was fixed:

netfilter: nfnetlink_queue: unbreak SCTP traffic (bsc#1285684).

Record: SUSE-SU-2026:4939-1
Updated: 2026-11-02

OSVSUSE-SU-2026:4940-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues:

The following security issues were fixed:

CVE-2025-68358: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() (bsc#1255531).
CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
CVE-2026-43132: dm-verity: correctly handle dm_bufio_client_create() failure (bsc#1264614).
CVE-2026-43184: rnbd-srv: Zero the rsp buffer before using it (bsc#1264622).
CVE-2026-43283: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle (bsc#1264295).
CVE-2026-43299: btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() (bsc#1264851).
CVE-2026-43457: mctp: i2c: fix skb memory leak in receive path (bsc#1265000).
CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
CVE-2026-46034: vfio/cdx: Fix NULL pointer dereference in interrupt trigger path (bsc#1266757).
CVE-2026-53108: powerpc/64s: Fix unmap race with PMD migration entries (bsc#1269561).
CVE-2026-63830: bpf, sockmap: Several fixes to bpf_msg_push_data (bsc#1272178).
CVE-2026-63983: net: Introduce skb tc depth field to track packet loops (bsc#1273040).
CVE-2026-64012: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).
CVE-2026-64070: powerpc/hv-gpci: fix preempt count leak in sysfs show paths (bsc#1273116).
CVE-2026-64116: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).
CVE-2026-64280: fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() (bsc#1273599).
CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290).
CVE-2026-64424: netpoll: fix a use-after-free on shutdown path (bsc#1274256).
CVE-2026-64428: gpio: sch: use raw_spinlock_t in the irq startup path (bsc#1274039).
CVE-2026-64461: PCI: mediatek: Fix IRQ domain leak when port fails to enable (bsc#1273865).
CVE-2026-68233: drm/vc4: Shut down BO cache timer before teardown (bsc#1275644).
CVE-2026-68241: drm/i915/mst: limit DP MST ESI service loop (bsc#1275785).
CVE-2026-68242: drm/i915/gt: Fix NULL deref on sched_engine alloc failure (bsc#1275786).
CVE-2026-68323: tipc: serialize udp bearer replicast list updates (bsc#1274653).
CVE-2026-72015: fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list (bsc#1276791).
CVE-2026-72040: ipmi: fix refcount leak in i_ipmi_request() (bsc#1276836).
CVE-2026-72041: espintcp: use sk_msg_free_partial to fix partial send (bsc#1275510).
CVE-2026-72081: scsi: elx: efct: Fix I/O leak on unsupported additional CDB (bsc#1277174).
CVE-2026-72172: mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE (bsc#1277691).
CVE-2026-72212: mm/memory_hotplug: fix incorrect altmap passing in error path (bsc#1277602).
CVE-2026-72213: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (bsc#1277603).
CVE-2026-72236: s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() (bsc#1277614).
CVE-2026-72301: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get (bsc#1277742).
CVE-2026-72305: VDUSE: avoid leaking information to userspace (bsc#1277747).
CVE-2026-72319: ipvs: fix PMTU for GUE/GRE tunnel ICMP errors (bsc#1275964).
CVE-2026-72493: net: serialize netif_running() check in enqueue_to_backlog() (bsc#1276951).
CVE-2026-74312: vhost/vdpa: validate virtqueue index in mmap and fault paths (bsc#1276873).
CVE-2026-74379: dax/kmem: account for partial discontiguous resource upon removal (bsc#1278232).
CVE-2026-74544: net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds (bsc#1277894).
CVE-2026-74578: crypto: algif_skcipher - force synchronous processing on trees without ctx->state (bsc#1275564).
CVE-2026-74583: net/sched: cls_route: fix fastmap use-after-free on filter (bsc#1277889). -…

Record: SUSE-SU-2026:4940-1
Updated: 2026-11-02

OSVUSN-8875-1 No score

linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-5.15, linux-azure-fde-5.15, linux-azure-fips, linux-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle, linux-realtime, linux-xilinx-zynqmp vulnerabilities

It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-3114)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

User-space API (UAPI);
ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Android drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Bluetooth drivers;
Cdrom driver;
Character device driver;
Hardware random number generator core;
TPM device driver;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DAX dirext access to differentiated memory framework;
DMA engine subsystem;
FireWire subsystem;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
Intel Stratix 10 firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
Intel Trace Hub HW tracing drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
IIO Magnetometer sensors drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Multiple devices driver;
Media drivers;
MemoryStick subsystem;
Multifunction device drivers;
Fastrpc Driver;
MMC subsystem;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Texas Instruments network drivers;
MediaTek network drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
Generic PM domains;
System reset/shutdown drivers;
Power supply drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Reset controller framework;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
SPI subsystem;
Media staging drivers;
Media Oriented Systems Transport (MOST) driver;
NVIDIA Tegra embedded controller (NVEC) staging driver;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thermal drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
USB DSL drivers;
Cadence USB3 driver;
USB Device Class drivers;
ULPI bus;
DesignWare USB2 driver;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB Tower driver;
USS720 USB parallel port adapter driver;
MediaTek USB3 DRD driver;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
vDPA drivers;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Watchdog drivers;
Xen hypervisor drivers;
AFS file system;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
exFAT file system;
Ext4 file system;
F2FS file system;
FUSE (File system in Userspace);
HFS file system;
HFS+ file system;
Journaling layer for block devices (JBD2); …

Record: USN-8875-1
Updated: 2026-11-06

OSVUSN-8875-2 No score

linux-nvidia vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

User-space API (UAPI);
ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Android drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Bluetooth drivers;
Cdrom driver;
Character device driver;
Hardware random number generator core;
TPM device driver;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DAX dirext access to differentiated memory framework;
DMA engine subsystem;
FireWire subsystem;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
Intel Stratix 10 firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
Intel Trace Hub HW tracing drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
IIO Magnetometer sensors drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Multiple devices driver;
Media drivers;
MemoryStick subsystem;
Multifunction device drivers;
Fastrpc Driver;
MMC subsystem;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Texas Instruments network drivers;
MediaTek network drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
Generic PM domains;
System reset/shutdown drivers;
Power supply drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Reset controller framework;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
SPI subsystem;
Media staging drivers;
Media Oriented Systems Transport (MOST) driver;
NVIDIA Tegra embedded controller (NVEC) staging driver;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thermal drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
USB DSL drivers;
Cadence USB3 driver;
USB Device Class drivers;
ULPI bus;
DesignWare USB2 driver;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB Tower driver;
USS720 USB parallel port adapter driver;
MediaTek USB3 DRD driver;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
vDPA drivers;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Watchdog drivers;
Xen hypervisor drivers;
AFS file system;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
exFAT file system;
Ext4 file system;
F2FS file system;
FUSE (File system in Userspace);
HFS file system;
HFS+ file system;
Journaling layer for block devices (JBD2); …

Record: USN-8875-2
Updated: 2026-11-06

OSVUSN-8877-1 No score

linux-gcp, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

User-space API (UAPI);
ARM32 architecture;
ARM64 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Android drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Bluetooth drivers;
Cdrom driver;
Character device driver;
Hardware random number generator core;
TPM device driver;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DAX dirext access to differentiated memory framework;
DMA engine subsystem;
FireWire subsystem;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
Intel Stratix 10 firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
Intel Trace Hub HW tracing drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
IIO Magnetometer sensors drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Multiple devices driver;
Media drivers;
MemoryStick subsystem;
Multifunction device drivers;
Fastrpc Driver;
MMC subsystem;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Texas Instruments network drivers;
MediaTek network drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
Generic PM domains;
System reset/shutdown drivers;
Power supply drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Reset controller framework;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
SPI subsystem;
Media staging drivers;
Media Oriented Systems Transport (MOST) driver;
NVIDIA Tegra embedded controller (NVEC) staging driver;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thermal drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
USB DSL drivers;
Cadence USB3 driver;
USB Device Class drivers;
ULPI bus;
DesignWare USB2 driver;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB Tower driver;
USS720 USB parallel port adapter driver;
MediaTek USB3 DRD driver;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
vDPA drivers;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Watchdog drivers;
Xen hypervisor drivers;
AFS file system;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
exFAT file system;
Ext4 file system;
F2FS file system;
FUSE (File system in Userspace);
HFS file system;
HFS+ file system;
Journaling layer for block devices (JBD2); …

Record: USN-8877-1
Updated: 2026-11-06

OSVUSN-8878-1 No score

linux-gcp-5.15 vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
User-space API (UAPI);
ARM32 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Android drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Bluetooth drivers;
Cdrom driver;
Character device driver;
Hardware random number generator core;
TPM device driver;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DAX dirext access to differentiated memory framework;
DMA engine subsystem;
FireWire subsystem;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
Intel Stratix 10 firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
Intel Trace Hub HW tracing drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
IIO Magnetometer sensors drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Multiple devices driver;
Media drivers;
MemoryStick subsystem;
Multifunction device drivers;
Fastrpc Driver;
MMC subsystem;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Texas Instruments network drivers;
MediaTek network drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
Generic PM domains;
System reset/shutdown drivers;
Power supply drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Reset controller framework;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
SPI subsystem;
Media staging drivers;
Media Oriented Systems Transport (MOST) driver;
NVIDIA Tegra embedded controller (NVEC) staging driver;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thermal drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
USB DSL drivers;
Cadence USB3 driver;
USB Device Class drivers;
ULPI bus;
DesignWare USB2 driver;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB Tower driver;
USS720 USB parallel port adapter driver;
MediaTek USB3 DRD driver;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
vDPA drivers;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Framebuffer…

Record: USN-8878-1
Updated: 2026-11-06

OSVUSN-8879-1 No score

linux-oracle-5.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

ARM64 architecture;
User-space API (UAPI);
ARM32 architecture;
MIPS architecture;
PowerPC architecture;
RISC-V architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
ACPI drivers;
Android drivers;
Serial ATA and Parallel ATA drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Bluetooth drivers;
Cdrom driver;
Character device driver;
Hardware random number generator core;
TPM device driver;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DAX dirext access to differentiated memory framework;
DMA engine subsystem;
FireWire subsystem;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
Intel Stratix 10 firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
Intel Trace Hub HW tracing drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
IIO Magnetometer sensors drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Multiple devices driver;
Media drivers;
MemoryStick subsystem;
Multifunction device drivers;
Fastrpc Driver;
MMC subsystem;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
Texas Instruments network drivers;
MediaTek network drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Parport drivers;
PCI subsystem;
Pin controllers subsystem;
Generic PM domains;
System reset/shutdown drivers;
Power supply drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Reset controller framework;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
SPI subsystem;
Media staging drivers;
Media Oriented Systems Transport (MOST) driver;
NVIDIA Tegra embedded controller (NVEC) staging driver;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thermal drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
USB DSL drivers;
Cadence USB3 driver;
USB Device Class drivers;
ULPI bus;
DesignWare USB2 driver;
DesignWare USB3 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB ChaosKey driver;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB Tower driver;
USS720 USB parallel port adapter driver;
MediaTek USB3 DRD driver;
USB Serial drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
USB Type-C Connector System Software Interface driver;
USB over IP driver;
vDPA drivers;
VFIO drivers;
Virtio Host (VHOST) subsystem;
Framebuffer…

Record: USN-8879-1
Updated: 2026-11-06

OSVUSN-8886-1 No score

linux-nvidia-tegra vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

NVDIMM (Non-Volatile Memory Device) drivers;
Handshake API;
ARM32 architecture;
ARM64 architecture;
MIPS architecture;
OpenRISC architecture;
PowerPC architecture;
S390 architecture;
x86 architecture;
Block layer subsystem;
Cryptographic API;
Intel NPU Driver;
Android drivers;
Rados block device (RBD) driver;
Bluetooth drivers;
Hardware random number generator core;
TPM device driver;
CPU frequency scaling framework;
Hardware crypto device drivers;
DMA engine subsystem;
FireWire subsystem;
Arm Firmware Framework for ARMv8-A(FFA);
GPIO subsystem;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
I2C subsystem;
IIO ADC drivers;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
Multifunction device drivers;
Fastrpc Driver;
Amazon Nitro Secure Module driver;
MMC subsystem;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Texas Instruments network drivers;
NTB driver;
NVME drivers;
NVMEM (Non Volatile Memory) drivers;
Parport drivers;
Pin controllers subsystem;
x86 platform drivers;
i.MX PM domains;
System reset/shutdown drivers;
PTP clock framework;
Voltage and Current Regulator drivers;
S/390 drivers;
SCSI subsystem;
SPI subsystem;
Realtek RTL8723BS SDIO drivers;
VME bus staging drivers;
Thermal drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
DesignWare USB2 driver;
USB Gadget drivers;
USB Host Controller drivers;
USB Dual Role (OTG-ready) Controller drivers;
USB Serial drivers;
USB Type-C Port Controller Manager driver;
vDPA drivers;
Virtio Host (VHOST) subsystem;
Framebuffer layer;
Watchdog drivers;
9P distributed file system;
AFS file system;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
EROFS file system;
exFAT file system;
F2FS file system;
FUSE (File system in Userspace);
Journaling layer for block devices (JBD2);
Network file system (NFS) client;
Network file system (NFS) server daemon;
NTFS3 file system;
OCFS2 file system;
Proc file system;
SMB network file system;
Tracing file system;
UDF file system;
XFS file system;
Key management;
BPF subsystem;
Control group (cgroup);
Glob pattern matching library;
MAC80211 subsystem;
Mellanox drivers;
Networking core;
Network sockets;
IPv6 networking;
Bluetooth subsystem;
Wireless networking;
IPv4 networking;
Netfilter;
Network traffic control;
SCTP protocol;
TCP network protocol;
XFRM subsystem;
RDMA verbs API;
io_uring subsystem;
IPC subsystem;
Audit subsystem;
Kernel CPU control infrastructure;
Perf events;
Kernel exit() syscall;
Kernel fork() syscall;
Scheduler infrastructure;
Signal handling mechanism;
Timer subsystem;
Tracing infrastructure;
Resizable hashtable library;
Memory management;
6LoWPAN network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
B.A.T.M.A.N. meshing protocol;
Ethernet bridge;
CAN network layer;
Ceph Core library;
Ethtool driver;
HSR network protocol;
IEEE802154.4 network protocol;
IUCV driver;
KCM (Kernel Connection Multiplexor) sockets driver;
IEEE 802.15.4 subsystem;
Multipath TCP;
Open vSwitch;
Packet sockets;
Phonet protocol;
Qualcomm IPC Router (QRTR);
RDS protocol;
RxRPC session sockets;
SMC…

Record: USN-8886-1
Updated: 2026-11-06

OSVUSN-8959-1 No score

linux, linux-aws, linux-gcp, linux-hwe-7.0, linux-ibm, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

USB Gadget drivers;
Memory management;
Multiple devices driver;
ARM64 architecture;
EROFS file system;
Networking core;
eXpress Data Path;
ARM32 architecture;
M68K architecture;
MIPS architecture;
OpenRISC architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
Intel NPU Driver;
Speakup Console Speech Driver;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
Auxiliary display drivers;
Drivers core;
Micron PCIe SSD driver;
Null block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
AMD CDX bus driver;
Hardware random number generator core;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU frequency scaling framework;
CPU idle management framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DAX dirext access to differentiated memory framework;
DIBS (Direct Internal Buffer Sharing) drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
FireWire subsystem;
ARM SCMI message protocol;
ARM SCPI message protocol;
Google firmware drivers;
Qualcomm firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
HSI subsystem;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Mouse) drivers;
On-Chip Interconnect management framework;
IOMMU subsystem;
Industry Pack bus drivers;
IRQ chip drivers;
Mailbox framework;
Media drivers;
MemoryStick subsystem;
Multifunction device drivers;
Analog Devices digital potentiometer driver;
Broadcom VK accelerator driver;
Fastrpc Driver;
Amazon Nitro Secure Module driver;
SGI GRU driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
Operating Performance Points (OPP) driver;
PA-RISC drivers;
PCI subsystem;
Performance monitor drivers;
PHY drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
Mellanox platform drivers;
Microsoft Surface platform drivers;
x86 platform drivers;
MediaTek PM domains;
Power sequencing drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
MPAM driver;
RPMSG subsystem;
Real Time Clock drivers;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thermal drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Userspace I/O drivers;
USB DSL drivers;
Cypress C67X00 USB…

Record: USN-8959-1
Updated: 2026-11-05

OSVUSN-8960-1 No score

linux-oem-7.0 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

USB Gadget drivers;
Memory management;
Multiple devices driver;
ARM64 architecture;
EROFS file system;
Networking core;
eXpress Data Path;
ARM32 architecture;
M68K architecture;
MIPS architecture;
OpenRISC architecture;
PA-RISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Compute Acceleration Framework;
Intel NPU Driver;
Speakup Console Speech Driver;
ACPI drivers;
Serial ATA and Parallel ATA drivers;
Auxiliary display drivers;
Drivers core;
Micron PCIe SSD driver;
Null block device driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Bluetooth drivers;
Bus devices;
AMD CDX bus driver;
Hardware random number generator core;
Character device driver;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
CPU frequency scaling framework;
CPU idle management framework;
Hardware crypto device drivers;
CXL (Compute Express Link) drivers;
DAX dirext access to differentiated memory framework;
DIBS (Direct Internal Buffer Sharing) drivers;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
FireWire subsystem;
ARM SCMI message protocol;
ARM SCPI message protocol;
Google firmware drivers;
Qualcomm firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
HSI subsystem;
Microsoft Hyper-V drivers;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Mouse) drivers;
On-Chip Interconnect management framework;
IOMMU subsystem;
Industry Pack bus drivers;
IRQ chip drivers;
Mailbox framework;
Media drivers;
MemoryStick subsystem;
Multifunction device drivers;
Analog Devices digital potentiometer driver;
Broadcom VK accelerator driver;
Fastrpc Driver;
Amazon Nitro Secure Module driver;
SGI GRU driver;
MMC subsystem;
MTD block device drivers;
Network drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
Operating Performance Points (OPP) driver;
PA-RISC drivers;
PCI subsystem;
Performance monitor drivers;
PHY drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
Mellanox platform drivers;
Microsoft Surface platform drivers;
x86 platform drivers;
MediaTek PM domains;
Power sequencing drivers;
Power supply drivers;
Powercap sysfs driver;
PTP clock framework;
PWM drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
MPAM driver;
RPMSG subsystem;
Real Time Clock drivers;
S/390 drivers;
SCSI subsystem;
ASPEED SoC drivers;
Samsung SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
TCM subsystem;
Trusted Execution Environment drivers;
Thermal drivers;
Thunderbolt and USB4 drivers;
TTY drivers;
UFS subsystem;
Userspace I/O drivers;
USB DSL drivers;
Cypress C67X00 USB…

Record: USN-8960-1
Updated: 2026-11-05

OSVUSN-8963-1 No score

linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx vulnerabilities

Duoming Zhou discovered race conditions in the AX.25 amateur radio protocol implementation in the Linux kernel, leading to use-after-free vulnerabilities. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2022-1205)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

USB Gadget drivers;
Networking core;
User-space API (UAPI);
ARM32 architecture;
ARM64 architecture;
MIPS architecture;
OpenRISC architecture;
PowerPC architecture;
RISC-V architecture;
S390 architecture;
User-Mode Linux (UML);
x86 architecture;
Block layer subsystem;
Cryptographic API;
Speakup Console Speech Driver;
ACPI drivers;
Android drivers;
Serial ATA and Parallel ATA drivers;
Auxiliary display drivers;
Drivers core;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Bluetooth drivers;
Cdrom driver;
Character device driver;
Hardware random number generator core;
TPM device driver;
Clock framework and drivers;
Clocksource drivers;
Data acquisition framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
DAX dirext access to differentiated memory framework;
Buffer Sharing and Synchronization framework;
DMA engine subsystem;
EDAC drivers;
FireWire subsystem;
Arm Firmware Framework for ARMv8-A(FFA);
ARM SCMI message protocol;
ARM SCPI message protocol;
Google firmware drivers;
Intel Stratix 10 firmware drivers;
FPGA Framework;
GPIO subsystem;
GPU drivers;
HID subsystem;
HSI subsystem;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
Intel Trace Hub HW tracing drivers;
I2C subsystem;
I3C subsystem;
IIO subsystem;
IIO ADC drivers;
IIO Magnetometer sensors drivers;
InfiniBand drivers;
Input Device core drivers;
Input Device (Miscellaneous) drivers;
Input Device (Mouse) drivers;
On-Chip Interconnect management framework;
IOMMU subsystem;
IRQ chip drivers;
LED subsystem;
Multiple devices driver;
Media drivers;
MemoryStick subsystem;
Multifunction device drivers;
Analog Devices digital potentiometer driver;
Broadcom VK accelerator driver;
Fastrpc Driver;
MMC subsystem;
MTD block device drivers;
Ethernet bonding driver;
Network drivers;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
Near Field Communication (NFC) drivers;
NTB driver;
NVDIMM (Non-Volatile Memory Device) drivers;
NVME drivers;
Device tree and open firmware driver;
PA-RISC drivers;
Parport drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
Mellanox platform drivers;
Microsoft Surface platform drivers;
x86 platform drivers;
Generic PM domains;
System reset/shutdown drivers;
Power supply drivers;
RapidIO drivers;
Voltage and Current Regulator drivers;
Remote Processor subsystem;
Reset controller framework;
RPMSG subsystem;
Real Time Clock drivers;
S/390 drivers;
SCSI subsystem;
SLIMbus drivers;
SPI subsystem;
small TFT LCD display modules;
Greybus lights staging drivers;
Media staging drivers;
Media Oriented Systems Transport (MOST) driver;
NVIDIA Tegra embedded controller (NVEC)…

Record: USN-8963-1
Updated: 2026-11-06

Affected products

linux

Affected packages

Affected packages
Package	Affected	Fixed
`kernel` Azure Linux:3	before 6.6.152.1-1	6.6.152.1-1
`linux-lts` Alpaquita:23	6.1.182-r0 up to 6.1.189-r0	6.1.189-r0
`linux-lts` Alpaquita:25	6.12.103-r0 up to 6.12.111-r0	6.12.111-r0
`linux-lts` Alpaquita:stream	6.18.43-r0 up to 6.18.46-r0	6.18.46-r0
`bpftool` TuxCare:CentOS:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel` TuxCare:CentOS:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel-debug` TuxCare:CentOS:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel-debug-devel` TuxCare:CentOS:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel-devel` TuxCare:CentOS:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel-doc` TuxCare:CentOS:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-headers` TuxCare:CentOS:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel-tools` TuxCare:CentOS:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel-tools-libs` TuxCare:CentOS:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel-tools-libs-devel` TuxCare:CentOS:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`perf` TuxCare:CentOS:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`python-perf` TuxCare:CentOS:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`bpftool` TuxCare:OracleLinux:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel` TuxCare:OracleLinux:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel-debug` TuxCare:OracleLinux:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel-debug-devel` TuxCare:OracleLinux:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel-devel` TuxCare:OracleLinux:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel-doc` TuxCare:OracleLinux:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel-headers` TuxCare:OracleLinux:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel-tools` TuxCare:OracleLinux:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel-tools-libs` TuxCare:OracleLinux:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel-tools-libs-devel` TuxCare:OracleLinux:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`perf` TuxCare:OracleLinux:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`python-perf` TuxCare:OracleLinux:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`bpftool` TuxCare:RHEL:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel` TuxCare:RHEL:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel-debug` TuxCare:RHEL:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel-debug-devel` TuxCare:RHEL:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel-devel` TuxCare:RHEL:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel-doc` TuxCare:RHEL:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel-headers` TuxCare:RHEL:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel-tools` TuxCare:RHEL:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel-tools-libs` TuxCare:RHEL:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`kernel-tools-libs-devel` TuxCare:RHEL:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`perf` TuxCare:RHEL:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`python-perf` TuxCare:RHEL:7 From an advisory covering 53 CVEs	before 3.10.0-1160.156.1.el7.tuxcare.els4	3.10.0-1160.156.1.el7.tuxcare.els4
`bpftool` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-core` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-cross-headers` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-debug` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-debug-core` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-debug-devel` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-debug-modules` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-debug-modules-extra` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-debug-modules-internal` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-devel` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-headers` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-ipaclones-internal` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-modules` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-modules-extra` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-modules-internal` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-selftests-internal` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-tools` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-tools-libs` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`kernel-tools-libs-devel` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`perf` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`python3-perf` TuxCare:CentOS-Stream:8 From an advisory covering 129 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els30	4.18.0-553.6.1.el8_10.tuxcare.els30
`bpftool` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 7.0.0-284.1101.el9_2.tuxcare.11.els14	7.0.0-284.1101.el9_2.tuxcare.11.els14
`kernel` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-abi-stablelists` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-core` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-cross-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-debug` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-debug-core` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-debug-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-debug-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-debug-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-debug-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-debug-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-debug-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-debug-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-debug-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-devel-matched` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-doc` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-headers` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-ipaclones-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-modules` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-modules-core` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-modules-extra` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-modules-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-modules-partner` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-selftests-internal` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-tools` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-tools-libs` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-tools-libs-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`kernel-uki-virt` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 5.14.0-284.1101.el9_2.tuxcare.11.els14	5.14.0-284.1101.el9_2.tuxcare.11.els14
`libbpf` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 2:1.0.0-2.el9_2.tuxcare.11.els14	2:1.0.0-2.el9_2.tuxcare.11.els14
`libbpf-devel` TuxCare:AlmaLinux:9.2 From an advisory covering 170 CVEs	before 2:1.0.0-2.el9_2.tuxcare.11.els14	2:1.0.0-2.el9_2.tuxcare.11.els14
`Kernel` Linux	3.0.0 up to 5.10.265, 5.11.0 up to 5.15.216, 5.16.0 up to 6.1.183, 6.2.0 up to 6.6.152, 6.7.0 up to 6.12.104, 6.13.0 up to 6.18.45, 6.19.0 up to 7.1.9	5.10.2655.15.2166.1.1836.6.1526.12.1046.18.457.1.9
`linux` Debian:12	before 6.1.187-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 45 moreShow less 6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.176-16.1.177-16.1.180-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-1	6.1.187-1
`linux` Debian:13	before 6.12.105-1, plus listed versions 6.12.100-16.12.101-16.12.38-16.12.41-16.12.43-1 Show 28 moreShow less 6.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-1	6.12.105-1
`linux` Debian:14	before 7.1.9-1, plus listed versions 6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1 Show 45 moreShow less 6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1	7.1.9-1
`linux-6.12` Debian:12	before 6.12.107-1~deb12u1, plus listed versions 6.12.100-1~deb12u16.12.101-1~deb12u1	6.12.107-1~deb12u1
`kernel` Mageia:10 From an advisory covering 1146 CVEs	before 6.18.55-1.mga10	6.18.55-1.mga10
`kmod-xtables-addons` Mageia:10 From an advisory covering 1146 CVEs	before 3.30-5.mga10	3.30-5.mga10
`kmod-virtualbox` Mageia:10 From an advisory covering 1146 CVEs	before 7.2.14-31.mga10	7.2.14-31.mga10
`drakx-installer-images` Mageia:10 From an advisory covering 1146 CVEs	before 2.94-56.mga10	2.94-56.mga10
`drakx-installer-images` Mageia:10 From an advisory covering 1146 CVEs	before 2.94-56.mga10.nonfree	2.94-56.mga10.nonfree
`kmod-nvidia-current-wopengpu` Mageia:10 From an advisory covering 1146 CVEs	before 580.173.02-40.mga10.nonfree	580.173.02-40.mga10.nonfree
`kernel-linus` Mageia:10 From an advisory covering 1146 CVEs	before 6.18.55-1.mga10	6.18.55-1.mga10
`kernel` openEuler:22.03-LTS-SP4 From an advisory covering 35 CVEs	before 5.10.0-332.0.0.233.oe2203sp4	5.10.0-332.0.0.233.oe2203sp4
`kernel` openEuler:24.03-LTS-SP1 From an advisory covering 111 CVEs	before 6.6.0-145.1.25.162.oe2403sp1	6.6.0-145.1.25.162.oe2403sp1
`kernel` openEuler:24.03-LTS-SP3 From an advisory covering 80 CVEs	before 6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3	6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3
`kernel-default` SUSE:Linux Micro 6.0 From an advisory covering 98 CVEs	before 6.4.0-159998.54.1	6.4.0-159998.54.1
`kernel-default-base` SUSE:Linux Micro 6.0 From an advisory covering 98 CVEs	before 6.4.0-159998.54.1.159998.21.40	6.4.0-159998.54.1.159998.21.40
`kernel-kvmsmall` SUSE:Linux Micro 6.0 From an advisory covering 98 CVEs	before 6.4.0-159998.54.1	6.4.0-159998.54.1
`kernel-source` SUSE:Linux Micro 6.0 From an advisory covering 98 CVEs	before 6.4.0-159998.54.1	6.4.0-159998.54.1
`kernel-default` SUSE:Linux Micro 6.1 From an advisory covering 98 CVEs	before 6.4.0-159998.54.1	6.4.0-159998.54.1
`kernel-default-base` SUSE:Linux Micro 6.1 From an advisory covering 98 CVEs	before 6.4.0-159998.54.1.159998.21.39	6.4.0-159998.54.1.159998.21.39
`kernel-kvmsmall` SUSE:Linux Micro 6.1 From an advisory covering 98 CVEs	before 6.4.0-159998.54.1	6.4.0-159998.54.1
`kernel-source` SUSE:Linux Micro 6.1 From an advisory covering 98 CVEs	before 6.4.0-159998.54.1	6.4.0-159998.54.1
`kernel-obs-build` SUSE:Linux Micro Extras 6.2 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-syms` SUSE:Linux Micro Extras 6.2 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-64kb` SUSE:Linux Micro 6.2 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-default` SUSE:Linux Micro 6.2 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-default-base` SUSE:Linux Micro 6.2 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1.160000.2.29	6.12.0-160000.40.1.160000.2.29
`kernel-rt` SUSE:Linux Micro 6.2 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-source` SUSE:Linux Micro 6.2 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-64kb` SUSE:Linux Enterprise Server 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-azure` SUSE:Linux Enterprise Server 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-default` SUSE:Linux Enterprise Server 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-default-base` SUSE:Linux Enterprise Server 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1.160000.2.29	6.12.0-160000.40.1.160000.2.29
`kernel-docs` SUSE:Linux Enterprise Server 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-obs-qa` SUSE:Linux Enterprise Server 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-source` SUSE:Linux Enterprise Server 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-syms` SUSE:Linux Enterprise Server 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-64kb` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-azure` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-default` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1.160000.2.29	6.12.0-160000.40.1.160000.2.29
`kernel-docs` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-kvmsmall` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-obs-qa` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-source` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server for SAP applications 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 98 CVEs	before 6.4.0-159998.54.1	6.4.0-159998.54.1
`kernel-source-rt` SUSE:Linux Micro 6.0 From an advisory covering 98 CVEs	before 6.4.0-159998.54.1	6.4.0-159998.54.1
`kernel-default` SUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 56 CVEs	before 4.12.14-122.336.1	4.12.14-122.336.1
`kgraft-patch-SLE12-SP5_Update_89` SUSE:Linux Enterprise Live Patching 12 SP5 From an advisory covering 56 CVEs	before 1-8.3.1	1-8.3.1
`kernel-default` SUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 56 CVEs	before 4.12.14-122.336.1	4.12.14-122.336.1
`kernel-source` SUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 56 CVEs	before 4.12.14-122.336.1	4.12.14-122.336.1
`kernel-syms` SUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 56 CVEs	before 4.12.14-122.336.1	4.12.14-122.336.1
`kernel-default` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 56 CVEs	before 4.12.14-122.336.1	4.12.14-122.336.1
`kernel-source` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 56 CVEs	before 4.12.14-122.336.1	4.12.14-122.336.1
`kernel-syms` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 56 CVEs	before 4.12.14-122.336.1	4.12.14-122.336.1
`kernel-default` SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE From an advisory covering 4 CVEs	before 3.0.101-108.226.1	3.0.101-108.226.1
`kernel-docs` SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE From an advisory covering 4 CVEs	before 3.0.101-108.226.1	3.0.101-108.226.1
`kernel-ec2` SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE From an advisory covering 4 CVEs	before 3.0.101-108.226.1	3.0.101-108.226.1
`kernel-source` SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE From an advisory covering 4 CVEs	before 3.0.101-108.226.1	3.0.101-108.226.1
`kernel-syms` SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE From an advisory covering 4 CVEs	before 3.0.101-108.226.1	3.0.101-108.226.1
`kernel-trace` SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE From an advisory covering 4 CVEs	before 3.0.101-108.226.1	3.0.101-108.226.1
`kernel-xen` SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE From an advisory covering 4 CVEs	before 3.0.101-108.226.1	3.0.101-108.226.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`kernel-livepatch-SLE15-SP6_Update_33` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 29 CVEs	before 1-150600.13.5.1	1-150600.13.5.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1.150600.12.66.3	6.4.0-150600.23.143.1.150600.12.66.3
`kernel-docs` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1.150600.12.66.3	6.4.0-150600.23.143.1.150600.12.66.3
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 29 CVEs	before 6.4.0-150600.23.143.1	6.4.0-150600.23.143.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 108 CVEs	before 6.4.0-150700.53.87.3	6.4.0-150700.53.87.3
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 108 CVEs	before 6.4.0-150700.53.87.3	6.4.0-150700.53.87.3
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 108 CVEs	before 6.4.0-150700.53.87.3.150700.17.49.2	6.4.0-150700.53.87.3.150700.17.49.2
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 108 CVEs	before 6.4.0-150700.53.87.3	6.4.0-150700.53.87.3
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 108 CVEs	before 6.4.0-150700.53.87.3	6.4.0-150700.53.87.3
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 108 CVEs	before 6.4.0-150700.53.87.3	6.4.0-150700.53.87.3
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 108 CVEs	before 6.4.0-150700.53.87.2	6.4.0-150700.53.87.2
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 108 CVEs	before 6.4.0-150700.53.87.3	6.4.0-150700.53.87.3
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 108 CVEs	before 6.4.0-150700.53.87.1	6.4.0-150700.53.87.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP7 From an advisory covering 108 CVEs	before 6.4.0-150700.53.87.3	6.4.0-150700.53.87.3
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 108 CVEs	before 6.4.0-150700.53.87.3	6.4.0-150700.53.87.3
`kernel-livepatch-SLE15-SP7_Update_23` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 108 CVEs	before 1-150700.15.3.2	1-150700.15.3.2
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 108 CVEs	before 6.4.0-150700.53.87.3	6.4.0-150700.53.87.3
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP7 From an advisory covering 108 CVEs	before 6.4.0-150700.53.87.3	6.4.0-150700.53.87.3
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP7 From an advisory covering 108 CVEs	before 6.4.0-150700.53.87.3	6.4.0-150700.53.87.3
`kernel-default` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 27 CVEs	before 5.14.21-150500.55.195.1	5.14.21-150500.55.195.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 27 CVEs	before 5.14.21-150500.55.195.1.150500.6.91.1	5.14.21-150500.55.195.1.150500.6.91.1
`kernel-source` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 27 CVEs	before 5.14.21-150500.55.195.1	5.14.21-150500.55.195.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 27 CVEs	before 5.14.21-150500.55.195.1	5.14.21-150500.55.195.1
`linux` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8 Show 45 moreShow less 3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70	None known
`linux-aws` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9 Show 45 moreShow less 4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80	None known
`linux-azure` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2 Show 45 moreShow less 4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1	None known
`linux-lts-xenial` Ubuntu:Pro:14.04:LTS	All versions, plus listed versions 4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1 Show 45 moreShow less 4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1	None known
`linux` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11 Show 45 moreShow less 4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96	None known
`linux-aws` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18 Show 45 moreShow less 4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93	None known
`linux-aws-hwe` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1 Show 45 moreShow less 4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1	None known
`linux-azure` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15 Show 45 moreShow less 4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71	None known
`linux-gcp` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9 Show 45 moreShow less 4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1	None known
`linux-hwe` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1 Show 45 moreShow less 4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1	None known
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-kvm` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15 Show 45 moreShow less 4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84	None known
`linux-oracle` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1 Show 45 moreShow less 4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:16.04:LTS	All versions, plus listed versions 4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13 Show 45 moreShow less 4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78	None known
`linux-fips` Ubuntu:Pro:FIPS:16.04:LTS	All versions, plus listed versions 4.4.0-1001.14.4.0-1002.2	None known
`linux` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11 Show 45 moreShow less 4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107	None known
`linux-aws` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7 Show 45 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-4.15` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102 Show 45 moreShow less 4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-4.15` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92 Show 45 moreShow less 4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gcp-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-ibm-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 45 moreShow less 5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1	None known
`linux-kvm` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8 Show 45 moreShow less 4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13 Show 45 moreShow less 4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-oracle-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1	None known
`linux-raspi-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1	None known
`linux-aws-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24 Show 45 moreShow less 4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.464.15.0-2045.474.15.0-2048.504.15.0-2051.534.15.0-2052.544.15.0-2053.554.15.0-2054.564.15.0-2055.574.15.0-2056.584.15.0-2057.594.15.0-2059.614.15.0-2060.624.15.0-2061.634.15.0-2063.664.15.0-2064.674.15.0-2065.684.15.0-2066.694.15.0-2067.704.15.0-2069.724.15.0-2072.764.15.0-2075.804.15.0-2076.814.15.0-2078.834.15.0-2079.844.15.0-2080.854.15.0-2081.874.15.0-2082.884.15.0-2083.894.15.0-2085.914.15.0-2087.93	None known
`linux-azure-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10 Show 45 moreShow less 4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.294.15.0-2027.304.15.0-2030.334.15.0-2033.374.15.0-2034.384.15.0-2035.394.15.0-2036.404.15.0-2037.414.15.0-2038.424.15.0-2039.434.15.0-2041.454.15.0-2042.464.15.0-2043.474.15.0-2045.494.15.0-2046.504.15.0-2047.514.15.0-2048.524.15.0-2049.534.15.0-2050.544.15.0-2053.584.15.0-2056.624.15.0-2057.634.15.0-2059.654.15.0-2060.664.15.0-2062.684.15.0-2066.724.15.0-2067.734.15.0-2068.744.15.0-2070.764.15.0-2071.774.15.0-2072.784.15.0-2073.794.15.0-2074.80	None known
`linux-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42 Show 45 moreShow less 4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.674.15.0-1060.684.15.0-1063.714.15.0-1066.754.15.0-1067.764.15.0-1068.774.15.0-1069.784.15.0-1070.794.15.0-1071.804.15.0-1072.814.15.0-1073.824.15.0-1075.844.15.0-1076.854.15.0-1078.874.15.0-1080.894.15.0-1081.904.15.0-1083.924.15.0-1084.934.15.0-1085.944.15.0-1087.964.15.0-1090.1004.15.0-1093.1044.15.0-1094.1054.15.0-1096.1074.15.0-1097.1084.15.0-1098.1094.15.0-1099.110	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS-updates:18.04:LTS	All versions, plus listed versions 4.15.0-2013.144.15.0-2016.184.15.0-2017.194.15.0-2018.204.15.0-2019.21 Show 45 moreShow less 4.15.0-2020.224.15.0-2021.234.15.0-2022.244.15.0-2024.264.15.0-2025.274.15.0-2026.284.15.0-2028.314.15.0-2029.324.15.0-2030.334.15.0-2031.344.15.0-2032.354.15.0-2034.374.15.0-2037.414.15.0-2040.454.15.0-2041.464.15.0-2043.484.15.0-2044.494.15.0-2045.504.15.0-2047.524.15.0-2050.554.15.0-2052.574.15.0-2054.594.15.0-2055.604.15.0-2056.614.15.0-2057.624.15.0-2058.634.15.0-2059.644.15.0-2060.654.15.0-2061.664.15.0-2062.674.15.0-2063.684.15.0-2064.694.15.0-2065.704.15.0-2066.714.15.0-2067.724.15.0-2068.734.15.0-2069.744.15.0-2070.754.15.0-2071.764.15.0-2072.774.15.0-2073.784.15.0-2074.794.15.0-2075.804.15.0-2076.814.15.0-2077.83	None known
`linux-aws-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-2000.4	None known
`linux-azure-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1002.2	None known
`linux-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1011.12	None known
`linux-gcp-fips` Ubuntu:Pro:FIPS:18.04:LTS	All versions, plus listed versions 4.15.0-1001.1	None known
`linux` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less 5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110	None known
`linux-aws` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1117.124~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 45 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1	5.15.0-1117.124~20.04.1
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8 Show 45 moreShow less 5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1123.132~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 45 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1	5.15.0-1123.132~20.04.1
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-azure-fde-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1122.131~20.04.1, plus listed versions 5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1 Show 45 moreShow less 5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.15.15.0-1068.77~20.04.1.15.15.0-1070.79~20.04.1.15.15.0-1071.80~20.04.1.15.15.0-1072.81~20.04.1.15.15.0-1073.82~20.04.1.15.15.0-1074.83~20.04.1.15.15.0-1076.85~20.04.1.15.15.0-1078.87~20.04.1.15.15.0-1081.90~20.04.1.15.15.0-1082.91~20.04.1.15.15.0-1086.95~20.04.1.15.15.0-1087.96~20.04.1.15.15.0-1088.97~20.04.1.15.15.0-1089.98~20.04.1.15.15.0-1091.100~20.04.1.1	5.15.0-1122.131~20.04.1
`linux-bluefield` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19 Show 45 moreShow less 5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92	None known
`linux-gcp` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7 Show 45 moreShow less 5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1118.128~20.04.1, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 45 moreShow less 5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1	5.15.0-1118.128~20.04.1
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-198.208~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1	5.15.0-198.208~20.04.1
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-ibm` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.4.0-1003.45.4.0-1004.55.4.0-1005.65.4.0-1006.75.4.0-1007.8 Show 45 moreShow less 5.4.0-1008.95.4.0-1010.115.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1017.195.4.0-1018.205.4.0-1019.215.4.0-1020.225.4.0-1021.235.4.0-1023.255.4.0-1026.295.4.0-1028.325.4.0-1029.335.4.0-1031.355.4.0-1032.365.4.0-1033.375.4.0-1034.385.4.0-1036.415.4.0-1037.425.4.0-1040.455.4.0-1041.465.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1048.535.4.0-1049.545.4.0-1050.555.4.0-1051.565.4.0-1052.575.4.0-1053.585.4.0-1054.595.4.0-1056.615.4.0-1057.625.4.0-1058.635.4.0-1059.645.4.0-1060.655.4.0-1061.665.4.0-1063.685.4.0-1064.695.4.0-1065.705.4.0-1066.71	None known
`linux-ibm-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1111.115~20.04.1, plus listed versions 5.15.0-1033.36~20.04.15.15.0-1034.37~20.04.15.15.0-1035.38~20.04.15.15.0-1036.39~20.04.15.15.0-1037.40~20.04.1 Show 45 moreShow less 5.15.0-1038.41~20.04.15.15.0-1040.43~20.04.15.15.0-1041.44~20.04.15.15.0-1042.45~20.04.15.15.0-1043.46~20.04.15.15.0-1044.47~20.04.15.15.0-1045.48~20.04.15.15.0-1046.49~20.04.15.15.0-1047.50~20.04.15.15.0-1048.51~20.04.15.15.0-1049.52~20.04.15.15.0-1050.53~20.04.15.15.0-1053.56~20.04.15.15.0-1054.57~20.04.15.15.0-1055.58~20.04.15.15.0-1057.60~20.04.15.15.0-1058.61~20.04.15.15.0-1059.62~20.04.15.15.0-1060.63~20.04.15.15.0-1061.64~20.04.15.15.0-1062.65~20.04.15.15.0-1063.66~20.04.15.15.0-1064.67~20.04.15.15.0-1065.68~20.04.15.15.0-1066.69~20.04.15.15.0-1067.70~20.04.15.15.0-1068.71~20.04.15.15.0-1069.72~20.04.15.15.0-1074.77~20.04.15.15.0-1075.78~20.04.15.15.0-1076.79~20.04.15.15.0-1078.81~20.04.15.15.0-1079.82~20.04.15.15.0-1080.83~20.04.15.15.0-1081.84~20.04.15.15.0-1083.86~20.04.15.15.0-1085.88~20.04.15.15.0-1086.89~20.04.15.15.0-1087.90~20.04.15.15.0-1089.92~20.04.15.15.0-1090.93~20.04.15.15.0-1091.94~20.04.15.15.0-1092.95~20.04.15.15.0-1093.96~20.04.15.15.0-1094.97~20.04.1	5.15.0-1111.115~20.04.1
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-intel-iotg-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1112.118~20.04.1, plus listed versions 5.15.0-1003.5~20.04.15.15.0-1008.11~20.04.15.15.0-1010.14~20.04.15.15.0-1015.20~20.04.25.15.0-1016.21~20.04.1 Show 45 moreShow less 5.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1021.26~20.04.15.15.0-1023.28~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1030.35~20.04.15.15.0-1031.36~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1040.46~20.04.15.15.0-1043.49~20.04.15.15.0-1045.51~20.04.15.15.0-1046.52~20.04.15.15.0-1048.54~20.04.15.15.0-1049.55~20.04.15.15.0-1050.56~20.04.15.15.0-1051.57~20.04.15.15.0-1052.58~20.04.15.15.0-1055.61~20.04.15.15.0-1058.64~20.04.15.15.0-1059.65~20.04.15.15.0-1060.66~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.25.15.0-1074.80~20.04.15.15.0-1077.83~20.04.15.15.0-1078.84~20.04.15.15.0-1079.85~20.04.15.15.0-1083.89~20.04.15.15.0-1084.90~20.04.15.15.0-1085.91~20.04.15.15.0-1086.92~20.04.1	5.15.0-1112.118~20.04.1
`linux-iot` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.4.0-1001.35.4.0-1004.65.4.0-1005.75.4.0-1006.85.4.0-1009.11 Show 45 moreShow less 5.4.0-1010.125.4.0-1011.135.4.0-1012.145.4.0-1013.155.4.0-1014.165.4.0-1017.185.4.0-1018.195.4.0-1019.205.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1035.365.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1042.435.4.0-1043.445.4.0-1044.455.4.0-1045.465.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1060.635.4.0-1061.645.4.0-1062.65	None known
`linux-kvm` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1004.45.4.0-1006.6 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1023.235.4.0-1024.245.4.0-1026.275.4.0-1028.295.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1041.425.4.0-1044.465.4.0-1045.475.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1050.525.4.0-1051.535.4.0-1053.555.4.0-1054.565.4.0-1055.575.4.0-1056.585.4.0-1058.615.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1068.725.4.0-1070.755.4.0-1071.765.4.0-1073.78	None known
`linux-lowlatency-hwe-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-195.205~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-42.45~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.88~20.04.15.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.95~20.04.15.15.0-87.96~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-110.120~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1	5.15.0-195.205~20.04.1
`linux-nvidia-tegra-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1070.72~20.04.1, plus listed versions 5.15.0-1009.9~20.04.15.15.0-1010.10~20.04.15.15.0-1012.12~20.04.15.15.0-1014.14~20.04.15.15.0-1015.15~20.04.1 Show 36 moreShow less 5.15.0-1016.16~20.04.15.15.0-1017.17~20.04.15.15.0-1018.18~20.04.15.15.0-1019.19~20.04.15.15.0-1020.20~20.04.15.15.0-1022.22~20.04.15.15.0-1025.25~20.04.15.15.0-1027.27~20.04.15.15.0-1030.30~20.04.15.15.0-1032.32~20.04.15.15.0-1039.39~20.04.15.15.0-1040.40~20.04.15.15.0-1041.41~20.04.15.15.0-1042.42~20.04.15.15.0-1043.43~20.04.15.15.0-1044.44~20.04.15.15.0-1045.45~20.04.15.15.0-1046.46~20.04.15.15.0-1047.47~20.04.15.15.0-1048.48~20.04.15.15.0-1049.49~20.04.15.15.0-1050.50~20.04.15.15.0-1051.51~20.04.15.15.0-1052.52~20.04.25.15.0-1053.53~20.04.15.15.0-1055.55~20.04.15.15.0-1057.57~20.04.15.15.0-1058.58~20.04.15.15.0-1060.60~20.04.15.15.0-1061.61~20.04.15.15.0-1063.63~20.04.15.15.0-1064.66~20.04.15.15.0-1065.67~20.04.15.15.0-1066.68~20.04.15.15.0-1067.69~20.04.15.15.0-1068.70~20.04.1	5.15.0-1070.72~20.04.1
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`dtb-aarch64` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-64kb` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-azure` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-default` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-default-base` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1.160000.2.29	6.12.0-160000.40.1.160000.2.29
`kernel-docs` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-kvmsmall` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-obs-build` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-obs-qa` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-rt` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-source` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-syms` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1
`kernel-zfcpdump` openSUSE:Leap 16.0 From an advisory covering 129 CVEs	before 6.12.0-160000.40.1	6.12.0-160000.40.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 5, 2026	affected, aliases, references	OSV
Nov 4, 2026	affected, aliases, references	OSV
Nov 4, 2026	affected, aliases, references	OSV
Nov 3, 2026	affected, aliases, references	OSV
Nov 3, 2026	affected, facts, references	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-74587 is a critical vulnerability (CVSS 9.8) in Linux, published August 22, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.50%, the 42nd percentile. Fixed in kernel 6.6.152.1-1.