CVE-2025-38159

wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds

7.1 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds

Set the size to 6 instead of 2, since 'para' array is passed to 'rtw_fw_bt_wifi_control(rtwdev, para[0], &para[1])', which reads 5 bytes:

void rtw_fw_bt_wifi_control(struct rtw_dev *rtwdev, u8 op_code, u8 *data) { ... SET_BT_WIFI_CONTROL_DATA1(h2c_pkt, *data); SET_BT_WIFI_CONTROL_DATA2(h2c_pkt, *(data + 1)); ... SET_BT_WIFI_CONTROL_DATA5(h2c_pkt, *(data + 4));

Detected using the static analysis tool - Svace.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: High

Exploit likelihood

0.19%Up 0.2 points since Jul 3, 2025

What each source reports

NVD Score used 7.1

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds

Set the size to 6 instead of 2, since 'para' array is passed to 'rtw_fw_bt_wifi_control(rtwdev, para[0], &para[1])', which reads 5 bytes:

Detected using the static analysis tool - Svace.

Record: CVE-2025-38159
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness: CWE-125
Updated: 2026-11-05

CVE List No score

wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds

Set the size to 6 instead of 2, since 'para' array is passed to 'rtw_fw_bt_wifi_control(rtwdev, para[0], &para[1])', which reads 5 bytes:

Detected using the static analysis tool - Svace.

Record: CVE-2025-38159
Updated: 2026-11-05

EUVDEUVD-2025-19785 No score

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds

Set the size to 6 instead of 2, since 'para' array is passed to 'rtw_fw_bt_wifi_control(rtwdev, para[0], &para[1])', which reads 5 bytes:

Detected using the static analysis tool - Svace.

Record: EUVD-2025-19785
Updated: 2026-11-05

GitHub AdvisoriesGHSA-92p5-rr34-c98q 7.1

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix the 'para'...

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds

Set the size to 6 instead of 2, since 'para' array is passed to 'rtw_fw_bt_wifi_control(rtwdev, para[0], &para[1])', which reads 5 bytes:

Detected using the static analysis tool - Svace.

Record: GHSA-92p5-rr34-c98q
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness: CWE-125
Updated: 2026-11-02

OSVBELL-CVE-2025-38159 7.1

Record: BELL-CVE-2025-38159
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2025-38159 7.1

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds Set the size to 6 instead of 2, since 'para' array is passed to 'rtw_fw_bt_wifi_control(rtwdev, para[0], &para[1])', which reads 5 bytes: void rtw_fw_bt_wifi_control(struct rtw_dev *rtwdev, u8 op_code, u8 *data) { ... SET_BT_WIFI_CONTROL_DATA1(h2c_pkt, *data); SET_BT_WIFI_CONTROL_DATA2(h2c_pkt, *(data + 1)); ... SET_BT_WIFI_CONTROL_DATA5(h2c_pkt, *(data + 4)); Detected using the static analysis tool - Svace.

Record: DEBIAN-CVE-2025-38159
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

Show 46 moreShow less

OSVOESA-2025-1823 7.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

arm64: Don't call NULL in do_compat_alignment_fixup()

do_alignment_t32_to_handler() only fixes up alignment faults for specific instructions; it returns NULL otherwise (e.g. LDREX). When that's the case, signal to the caller that it needs to proceed with the regular alignment fault handling (i.e. SIGBUS). Without this patch, the kernel panics:

Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 Mem abort info: ESR = 0x0000000086000006 EC = 0x21: IABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x06: level 2 translation fault user pgtable: 4k pages, 48-bit VAs, pgdp=00000800164aa000 [0000000000000000] pgd=0800081fdbd22003, p4d=0800081fdbd22003, pud=08000815d51c6003, pmd=0000000000000000 Internal error: Oops: 0000000086000006 [#1] SMP Modules linked in: cfg80211 rfkill xt_nat xt_tcpudp xt_conntrack nft_chain_nat xt_MASQUERADE nf_nat nf_conntrack_netlink nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 xfrm_user xfrm_algo xt_addrtype nft_compat br_netfilter veth nvme_fa> libcrc32c crc32c_generic raid0 multipath linear dm_mod dax raid1 md_mod xhci_pci nvme xhci_hcd nvme_core t10_pi usbcore igb crc64_rocksoft crc64 crc_t10dif crct10dif_generic crct10dif_ce crct10dif_common usb_common i2c_algo_bit i2c> CPU: 2 PID: 3932954 Comm: WPEWebProcess Not tainted 6.1.0-31-arm64 #1 Debian 6.1.128-1 Hardware name: GIGABYTE MP32-AR1-00/MP32-AR1-00, BIOS F18v (SCP: 1.08.20211002) 12/01/2021 pstate: 80400009 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : 0x0 lr : do_compat_alignment_fixup+0xd8/0x3dc sp : ffff80000f973dd0 x29: ffff80000f973dd0 x28: ffff081b42526180 x27: 0000000000000000 x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000000 x23: 0000000000000004 x22: 0000000000000000 x21: 0000000000000001 x20: 00000000e8551f00 x19: ffff80000f973eb0 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000000000 x10: 0000000000000000 x9 : ffffaebc949bc488 x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : 0000000000400000 x4 : 0000fffffffffffe x3 : 0000000000000000 x2 : ffff80000f973eb0 x1 : 00000000e8551f00 x0 : 0000000000000001 Call trace: 0x0 do_alignment_fault+0x40/0x50 do_mem_abort+0x4c/0xa0 el0_da+0x48/0xf0 el0t_32_sync_handler+0x110/0x140 el0t_32_sync+0x190/0x194 Code: bad PC value ---[ end trace 0000000000000000 ]---(CVE-2025-22033)

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses

Acquire a lock on kvm->srcu when userspace is getting MP state to handle a rather extreme edge case where "accepting" APIC events, i.e. processing pending INIT or SIPI, can trigger accesses to guest memory. If the vCPU is in L2 with INIT and a TRIPLE_FAULT request pending, then getting MP state will trigger a nested VM-Exit by way of ->check_nested_events(), and emuating the nested VM-Exit can access guest memory.

The splat was originally hit by syzkaller on a Google-internal kernel, and reproduced on an upstream kernel by hacking the triple_fault_event_test selftest to stuff a pending INIT, store an MSR on VM-Exit (to generate a memory access on VMX), and do vcpu_mp_state_get() to trigger the scenario.

============================= WARNING: suspicious RCU usage 6.14.0-rc3-b112d356288b-vmx/pi_lockdep_false_pos-lock #3 Not tainted

include/linux/kvm_host.h:1058 suspicious rcu_dereference_check() usage!

other info that might help us debug this:

rcu_scheduler_active = 2, debug_locks = 1 1 lock held by triple_fault_ev/1256: #0: ffff88810df5a330…

Record: OESA-2025-1823
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-1824 7.0

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

arm64: Don't call NULL in do_compat_alignment_fixup()

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses

============================= WARNING: suspicious RCU usage 6.14.0-rc3-b112d356288b-vmx/pi_lockdep_false_pos-lock #3 Not tainted

include/linux/kvm_host.h:1058 suspicious rcu_dereference_check() usage!

other info that might help us debug this:

rcu_scheduler_active = 2, debug_locks = 1 1 lock held by triple_fault_ev/1256: #0: ffff88810df5a330…

Record: OESA-2025-1824
CVSS 3.1: 7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVOESA-2025-1870 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

crypto: iaa - Fix potential use after free bug

The free_device_compression_mode(iaa_device, device_mode) function frees "device_mode" but it iss passed to iaa_compression_modes[i]->free() a few lines later resulting in a use after free.

The good news is that, so far as I can tell, nothing implements the ->free() function and the use after free happens in dead code. But, with this fix, when something does implement it, we'll be ready. :)(CVE-2024-47732)

In the Linux kernel, the following vulnerability has been resolved:

mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()

If migration succeeded, we called folio_migrate_flags()->mem_cgroup_migrate() to migrate the memcg from the old to the new folio. This will set memcg_data of the old folio to 0.

Similarly, if migration failed, memcg_data of the dst folio is left unset.

If we call folio_putback_lru() on such folios (memcg_data == 0), we will add the folio to be freed to the LRU, making memcg code unhappy. Running the hmm selftests:

./hmm-tests

...

RUN hmm.hmm_device_private.migrate ...

[ 102.078007][T14893] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x7ff27d200 pfn:0x13cc00 [ 102.079974][T14893] anon flags: 0x17ff00000020018(uptodate|dirty|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 102.082037][T14893] raw: 017ff00000020018 dead000000000100 dead000000000122 ffff8881353896c9 [ 102.083687][T14893] raw: 00000007ff27d200 0000000000000000 00000001ffffffff 0000000000000000 [ 102.085331][T14893] page dumped because: VM_WARN_ON_ONCE_FOLIO(!memcg && !mem_cgroup_disabled()) [ 102.087230][T14893] ------------[ cut here ]------------ [ 102.088279][T14893] WARNING: CPU: 0 PID: 14893 at ./include/linux/memcontrol.h:726 folio_lruvec_lock_irqsave+0x10e/0x170 [ 102.090478][T14893] Modules linked in: [ 102.091244][T14893] CPU: 0 UID: 0 PID: 14893 Comm: hmm-tests Not tainted 6.13.0-09623-g6c216bc522fd #151 [ 102.093089][T14893] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40 04/01/2014 [ 102.094848][T14893] RIP: 0010:folio_lruvec_lock_irqsave+0x10e/0x170 [ 102.096104][T14893] Code: ... [ 102.099908][T14893] RSP: 0018:ffffc900236c37b0 EFLAGS: 00010293 [ 102.101152][T14893] RAX: 0000000000000000 RBX: ffffea0004f30000 RCX: ffffffff8183f426 [ 102.102684][T14893] RDX: ffff8881063cb880 RSI: ffffffff81b8117f RDI: ffff8881063cb880 [ 102.104227][T14893] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 102.105757][T14893] R10: 0000000000000001 R11: 0000000000000002 R12: ffffc900236c37d8 [ 102.107296][T14893] R13: ffff888277a2bcb0 R14: 000000000000001f R15: 0000000000000000 [ 102.108830][T14893] FS: 00007ff27dbdd740(0000) GS:ffff888277a00000(0000) knlGS:0000000000000000 [ 102.110643][T14893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.111924][T14893] CR2: 00007ff27d400000 CR3: 000000010866e000 CR4: 0000000000750ef0 [ 102.113478][T14893] PKRU: 55555554 [ 102.114172][T14893] Call Trace: [ 102.114805][T14893] <TASK> [ 102.115397][T14893] ? folio_lruvec_lock_irqsave+0x10e/0x170 [ 102.116547][T14893] ? __warn.cold+0x110/0x210 [ 102.117461][T14893] ? folio_lruvec_lock_irqsave+0x10e/0x170 [ 102.118667][T14893] ? report_bug+0x1b9/0x320 [ 102.119571][T14893] ? handle_bug+0x54/0x90 [ 102.120494][T14893] ? exc_invalid_op+0x17/0x50 [ 102.121433][T14893] ? asm_exc_invalid_op+0x1a/0x20 [ 102.122435][T14893] ? __wake_up_klogd.part.0+0x76/0xd0 [ 102.123506][T14893] ? dump_page+0x4f/0x60 [ 102.124352][T14893] ? folio_lruvec_lock_irqsave+0x10e/0x170 [ 102.125500][T14893] folio_batch_move_lru+0xd4/0x200 [ 102.126577][T14893] ? __pfx_lru_add+0x10/0x10 [ 102.127505][T14893] …

Record: OESA-2025-1870
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:13589 7.1

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:13589
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2025:13590 7.1

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2025:13590
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2025:13598 7.3

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:13598
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2025:13962 7.4

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:13962
CVSS 3.1: 7.4 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2025:15224 7.3

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2025:15224
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

OSVRHSA-2025:15227 7.3

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:15227
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

OSVRHSA-2025:15647 7.3

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:15647
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

OSVRHSA-2025:15649 7.1

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:15649
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2025:15658 7.3

Red Hat Security Advisory: kernel-rt security update

Record: RHSA-2025:15658
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

OSVRHSA-2025:15660 7.3

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:15660
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

OSVRHSA-2025:15668 7.3

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:15668
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

OSVRHSA-2025:15670 7.3

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:15670
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

OSVRHSA-2025:21667 7.5

Red Hat Security Advisory: kernel security update

Record: RHSA-2025:21667
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRLSA-2025:13589 7.1

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)
kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)
kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)
kernel: can: peak_usb: fix use after free bugs (CVE-2021-47670)

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)
kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)
kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)
kernel: can: peak_usb: fix use…

Record: RLSA-2025:13589
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVRLSA-2025:13590 7.1

Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)
kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)
kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)
kernel: can: peak_usb: fix use after free bugs (CVE-2021-47670)

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning…

Record: RLSA-2025:13590
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVRLSA-2025:13598 7.3

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: x86/CPU/AMD: Terminate the erratum_1386_microcode array (CVE-2024-56721)

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: x86/CPU/AMD: Terminate the erratum_1386_microcode array (CVE-2024-56721)
kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: x86/CPU/AMD: Terminate the erratum_1386_microcode array (CVE-2024-56721)

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: x86/CPU/AMD: Terminate the erratum_1386_microcode array (CVE-2024-56721)
kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)
kernel: mm/hugetlb: unshare page tables during VMA split, not before (CVE-2025-38084)

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: x86/CPU/AMD: Terminate the erratum_1386_microcode array (CVE-2024-56721)

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: x86/CPU/AMD: Terminate the erratum_1386_microcode array (CVE-2024-56721)
kernel: crypto: algif_hash - fix double free in hash_accept (CVE-2025-38079)

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: x86/CPU/AMD: Terminate the erratum_1386_microcode array (CVE-2024-56721)

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security…

Record: RLSA-2025:13598
CVSS 3.1: 7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-11-CVE-2025-38159 7.1

CVE-2025-38159 in linux - Patched by Root

Root has patched CVE-2025-38159 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-11-CVE-2025-38159
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-12-CVE-2025-38159 7.1

CVE-2025-38159 in linux - Patched by Root

Root has patched CVE-2025-38159 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-12-CVE-2025-38159
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2204-CVE-2025-38159 7.1

CVE-2025-38159 in linux - Patched by Root

Root has patched CVE-2025-38159 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2204-CVE-2025-38159
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-06

OSVROOT-OS-UBUNTU-2404-CVE-2025-38159 7.1

CVE-2025-38159 in linux - Patched by Root

Root has patched CVE-2025-38159 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2404-CVE-2025-38159
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-06

OSVUBUNTU-CVE-2025-38159 7.1

Record: UBUNTU-CVE-2025-38159
CVSS 3.1: 7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated: 2026-11-06

OSVALSA-2025:13589 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)
kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)
kernel: can: peak_usb: fix use after free bugs (CVE-2021-47670)
kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (CVE-2025-38085)
kernel: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CVE-2025-38159)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2025:13589
Updated: 2026-11-02

OSVALSA-2025:13590 No score

Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

kernel: padata: fix UAF in padata_reorder (CVE-2025-21727)
kernel: ipv6: mcast: extend RCU protection in igmp6_send() (CVE-2025-21759)
kernel: can: peak_usb: fix use after free bugs (CVE-2021-47670)
kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (CVE-2025-38085)
kernel: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CVE-2025-38159)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2025:13590
Updated: 2026-11-02

OSVALSA-2025:13962 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

kernel: bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (CVE-2025-21867)
microcode_ctl: From CVEorg collector (CVE-2024-28956)
kernel: mm/hugetlb: unshare page tables during VMA split, not before (CVE-2025-38084)
kernel: mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (CVE-2025-38085)
kernel: net: fix udp gso skb_segment after pull from frag_list (CVE-2025-38124)
kernel: wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CVE-2025-38159)
kernel: Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CVE-2025-38250)
kernel: i2c/designware: Fix an initialization issue (CVE-2025-38380)
kernel: tls: always refresh the queue when reading sock (CVE-2025-38471)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: ALSA-2025:13962
Updated: 2026-11-02

OSVAZL-64532 No score

CVE-2025-38159 affecting package kernel for versions less than 6.6.96.1-1

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds

Set the size to 6 instead of 2, since 'para' array is passed to 'rtw_fw_bt_wifi_control(rtwdev, para[0], &para[1])', which reads 5 bytes:

Detected using the static analysis tool - Svace.

Record: AZL-64532
Updated: 2026-11-02

OSVCLSA-2025-1757961506 No score

kernel: Fix of 28 CVEs

posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
xfrm: state: fix out-of-bounds read during lookup {CVE-2024-57982}
nfsd: fix race between laundromat and free_stateid {CVE-2024-50106}
nfsd: split sc_status out of sc_type {CVE-2024-50106}
nfsd: avoid race after unhash_delegation_locked() {CVE-2024-50106}
nfsd: don't call functions with side-effecting inside WARN_ON() {CVE-2024-50106}
can: peak_usb: fix use after free bugs {CVE-2021-47670}
wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds {CVE-2025-38159}
i2c/designware: Fix an initialization issue {CVE-2025-38380}
RDMA/rxe: Fix error unwind in rxe_create_qp() {CVE-2022-50127}
i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
udp: Fix memory accounting leak. {CVE-2025-22058}
Bluetooth: hci_core: Fix use-after-free in vhci_flush() {CVE-2025-38250}
net_sched: ets: Fix double list add in class with netem as child qdisc {CVE-2025-38085}
mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085}
mm/khugepaged: fix GUP-fast interaction by sending IPI {CVE-2025-38085}
padata: fix UAF in padata_reorder {CVE-2025-21727}
net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350}
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-38177}
sch_ets: make est_qlen_notify() idempotent {CVE-2025-38177}
sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38177}
sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177}
sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38177}
sch_htb: make htb_qlen_notify() idempotent {CVE-2025-38177}
sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000}
net/sched: sch_qfq: Fix race condition on qfq_aggregate {CVE-2025-38477}
tipc: Fix use-after-free in tipc_conn_close(). {CVE-2025-38464}
RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211}
scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
netfilter: xtables: avoid NFPROTO_UNSPEC where needed {CVE-2024-50038}
netfilter: xtables: Add snapshot of hardidletimer target {CVE-2024-50038}
crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079}
ext4: avoid resizing to a partial cluster size {CVE-2022-50020}
net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc {CVE-2025-37890}
net: tipc: fix refcount warning in tipc_aead_encrypt {CVE-2025-38273}
net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done {CVE-2025-38052}
memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove {CVE-2025-22020}

Record: CLSA-2025-1757961506
Updated: 2026-11-02

OSVCLSA-2025-1757961864 No score

kernel: Fix of 34 CVEs

inet: fully convert sk->sk_rx_dst to RCU rules {CVE-2021-47103}
ALSA: usb-audio: Fix out of bounds reads when finding clock sources {CVE-2024-53150}
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
can: peak_usb: fix use after free bugs {CVE-2021-47670}
wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds {CVE-2025-38159}
RDMA/rxe: Fix error unwind in rxe_create_qp() {CVE-2022-50127}
i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
udp: Fix memory accounting leak. {CVE-2025-22058}
ALSA: bcd2000: Fix a UAF bug on the error path of probing {CVE-2022-50083}
ext4: correct the misjudgment in ext4_iget_extra_inode {CVE-2022-50083}
ext4: correct max_inline_xattr_value_size computing {CVE-2022-50083}
ext4: fix use-after-free in ext4_xattr_set_entry {CVE-2022-50083}
ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h {CVE-2022-50083}
Bluetooth: hci_core: Fix use-after-free in vhci_flush() {CVE-2025-38250}
net_sched: ets: Fix double list add in class with netem as child qdisc {CVE-2025-38085}
mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085}
padata: fix UAF in padata_reorder {CVE-2025-21727}
net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350}
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-38177}
sch_ets: make est_qlen_notify() idempotent {CVE-2025-38177}
sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38177}
sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177}
sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38177}
sch_htb: make htb_qlen_notify() idempotent {CVE-2025-38177}
sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000}
mptcp: do not queue data on closed subflows {CVE-2022-50070}
mptcp: export mptcp_subflow_active {CVE-2022-50070}
net/sched: sch_qfq: Fix race condition on qfq_aggregate {CVE-2025-38477}
tipc: Fix use-after-free in tipc_conn_close(). {CVE-2025-38464}
RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211}
scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079}
net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc {CVE-2025-37890}
ext4: avoid resizing to a partial cluster size {CVE-2022-50020}
net: tipc: fix refcount warning in tipc_aead_encrypt {CVE-2025-38273}
ice: xsk: prohibit usage of non-balanced queue id {CVE-2022-50003}
net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done {CVE-2025-38052}
virtio-gpu: fix a missing check to avoid NULL dereference {CVE-2022-50181}
usb: xhci_plat_remove: avoid NULL dereference {CVE-2022-50133}
ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot {CVE-2022-50015}
netfilter: nft_tproxy: restrict to prerouting hook {CVE-2022-50001}
scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq {CVE-2022-49986}
ath11k: fix netdev open race {CVE-2022-50187}

Record: CLSA-2025-1757961864
Updated: 2026-11-02

OSVCLSA-2025-1757962453 No score

kernel: Fix of 34 CVEs

inet: fully convert sk->sk_rx_dst to RCU rules {CVE-2021-47103}
ALSA: usb-audio: Fix out of bounds reads when finding clock sources {CVE-2024-53150}
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
can: peak_usb: fix use after free bugs {CVE-2021-47670}
wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds {CVE-2025-38159}
RDMA/rxe: Fix error unwind in rxe_create_qp() {CVE-2022-50127}
i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
udp: Fix memory accounting leak. {CVE-2025-22058}
ALSA: bcd2000: Fix a UAF bug on the error path of probing {CVE-2022-50083}
ext4: correct the misjudgment in ext4_iget_extra_inode {CVE-2022-50083}
ext4: correct max_inline_xattr_value_size computing {CVE-2022-50083}
ext4: fix use-after-free in ext4_xattr_set_entry {CVE-2022-50083}
ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h {CVE-2022-50083}
Bluetooth: hci_core: Fix use-after-free in vhci_flush() {CVE-2025-38250}
net_sched: ets: Fix double list add in class with netem as child qdisc {CVE-2025-38085}
mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085}
padata: fix UAF in padata_reorder {CVE-2025-21727}
net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350}
codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-38177}
sch_ets: make est_qlen_notify() idempotent {CVE-2025-38177}
sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38177}
sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177}
sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38177}
sch_htb: make htb_qlen_notify() idempotent {CVE-2025-38177}
sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000}
mptcp: do not queue data on closed subflows {CVE-2022-50070}
mptcp: export mptcp_subflow_active {CVE-2022-50070}
net/sched: sch_qfq: Fix race condition on qfq_aggregate {CVE-2025-38477}
tipc: Fix use-after-free in tipc_conn_close(). {CVE-2025-38464}
RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211}
scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079}
ext4: avoid resizing to a partial cluster size {CVE-2022-50020}
net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc {CVE-2025-37890}
net: tipc: fix refcount warning in tipc_aead_encrypt {CVE-2025-38273}
ice: xsk: prohibit usage of non-balanced queue id {CVE-2022-50003}
net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done {CVE-2025-38052}
virtio-gpu: fix a missing check to avoid NULL dereference {CVE-2022-50181}
usb: xhci_plat_remove: avoid NULL dereference {CVE-2022-50133}
ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot {CVE-2022-50015}
netfilter: nft_tproxy: restrict to prerouting hook {CVE-2022-50001}
scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq {CVE-2022-49986}
ath11k: fix netdev open race {CVE-2022-50187}

Record: CLSA-2025-1757962453
Updated: 2026-11-02

OSVCLSA-2025-1758034087 No score

kernel: Fix of 24 CVEs

tls: always refresh the queue when reading sock {CVE-2025-38471}
Bluetooth: hci_core: Fix use-after-free in vhci_flush() {CVE-2025-38250}
i2c/designware: Fix an initialization issue {CVE-2025-38380}
wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds {CVE-2025-38159}
mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085}
mm/khugepaged: fix GUP-fast interaction by sending IPI
bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() {CVE-2025-21867}
crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079}
ext4: avoid journaling sb update on error if journal is destroying {CVE-2025-22113}
ext4: define ext4_journal_destroy wrapper
Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() {CVE-2024-36013}
Bluetooth: Remove BT_HS {CVE-2024-38620}
block, bfq: fix bfqq uaf in bfq_limit_depth() {CVE-2024-53166}
dm-crypt: don't modify the data when using authenticated encryption {CVE-2024-26763}
bpf: Fix helper writes to read-only maps (alt version) {CVE-2024-49861}
bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers {CVE-2023-52621}
netfilter: xtables: avoid NFPROTO_UNSPEC where needed {CVE-2024-50038}
xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014}
scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901}
net/mlx5: Add a timeout to acquire the command queue semaphore {CVE-2024-38556}
net: tipc: fix refcount warning in tipc_aead_encrypt {CVE-2025-38273}
net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc {CVE-2025-37890}
net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done {CVE-2025-38052}
misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() {CVE-2022-49788}
padata: fix UAF in padata_reorder {CVE-2025-21727}
RDMA/mlx5: Fix page_size variable overflow {CVE-2025-22091}

Record: CLSA-2025-1758034087
Updated: 2026-11-02

OSVCLSA-2026-1775224807 No score

Fix of 95 CVEs

CVE-2025-39683
- tracing: Remove unneeded goto out logic {CVE-2025-39683}
- tracing: Limit access to parser->buffer when trace_get_user failed {CVE-2025-39683}
CVE-2025-38079
- crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079}
CVE-2025-38159
- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds {CVE-2025-38159}
CVE-2025-38211
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211}
CVE-2025-38024
- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug {CVE-2025-38024}
CVE-2025-38103
- HID: hyperv: Correctly access fields declared as __le16 {CVE-2025-38103}
- HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}
CVE-2025-38157
- wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157}
CVE-2025-38230
- jfs: add sanity check for agwidth in dbMount {CVE-2025-38230}
- fs/jfs: consolidate sanity checking in dbMount {CVE-2025-38230}
- jfs: validate AG parameters in dbMount() to prevent crashes {CVE-2025-38230}
CVE-2025-39955
- tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-39955}
CVE-2025-38680
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() {CVE-2025-38680}
CVE-2025-38708
- drbd: add missing kref_get in handle_write_conflicts {CVE-2025-38708}
CVE-2025-39759
- btrfs: qgroup: introduce quota mode {CVE-2025-39759}
- btrfs: qgroup: fix race between quota disable and quota rescan ioctl {CVE-2025-39759}
CVE-2025-38666
- net: appletalk: Fix use-after-free in AARP proxy probe {CVE-2025-38666}
CVE-2025-40269
- ALSA: usb-audio: Improve frames size computation {CVE-2025-40269}
- ALSA: usb-audio: Replace s/frame/packet/ where appropriate {CVE-2025-40269}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer {CVE-2025-40269}
CVE-2025-40149
- net: netdevice: Add operation ndo_sk_get_lower_dev {CVE-2025-40149}
- net/tls: Device offload to use lowest netdevice in chain {CVE-2025-40149}
- tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). {CVE-2025-40149}
CVE-2025-71089
- iommu: disable SVA when CONFIG_X86 is set {CVE-2025-71089}
CVE-2026-23234
- f2fs: fix to avoid UAF in f2fs_write_end_io() {CVE-2026-23234}
CVE-2026-23089
- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089}
CVE-2026-23074
- net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074}
CVE-2026-23061
- can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak {CVE-2026-23061}
CVE-2026-23060
- crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-23060}
CVE-2026-22997
- net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts {CVE-2026-22997}
CVE-2026-22991
- libceph: make free_choose_arg_map() resilient to partial allocation {CVE-2026-22991}
CVE-2026-22990
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() {CVE-2026-22990}
CVE-2026-22978
- wifi: avoid kernel-infoleak from struct iw_point {CVE-2026-22978}
CVE-2026-22977
- net: sock: fix hardened usercopy panic in sock_recv_errqueue {CVE-2026-22977}
CVE-2025-71154
- net: usb: rtl8150: fix memory leak on usb_submit_urb() failure {CVE-2025-71154}
CVE-2025-71085
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() {CVE-2025-71085}
CVE-2025-68734
- isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() {CVE-2025-68734}
CVE-2025-68349
- NFSv4/pNFS: Clear…

Record: CLSA-2026-1775224807
Updated: 2026-11-02

OSV No score

wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds

In the Linux kernel, the following vulnerability has been resolved:

wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds

Set the size to 6 instead of 2, since 'para' array is passed to 'rtw_fw_bt_wifi_control(rtwdev, para[0], &para[1])', which reads 5 bytes:

Detected using the static analysis tool - Svace.

Record: CVE-2025-38159
Updated: 2026-11-07

OSVMGASA-2025-0218 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.101 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record: MGASA-2025-0218
Updated: 2026-11-02

OSVMGASA-2025-0219 No score

Updated kernel, kmod-virtualbox, kmod-xtables-addons & wireless-regdb packages fix security vulnerabilities

Upstream kernel version 6.6.101 fixes bugs and vulnerabilities. The kmod-virtualbox, kmod-xtables-addons & wireless-regdb packages have been updated to work with this new kernel. For information about the vulnerabilities see the links.

Record: MGASA-2025-0219
Updated: 2026-11-02

OSVopenSUSE-SU-2025:20081-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…

Record: openSUSE-SU-2025:20081-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02853-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-42134: virtio-pci: Check if is_avq is NULL (bsc#1228664 bsc#1247831).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38047: x86/fred: Fix system hang during S4 resume with FRED enabled (bsc#1245084).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in…

Record: SUSE-SU-2025:02853-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02923-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-11135: TSX Asynchronous Abort condition (bsc#1139073).
CVE-2023-52888: media: mediatek: vcodec: Only free buffer VA that is not NULL (bsc#1228557).
CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-49568: net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (bsc#1235728).
CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
CVE-2024-57982: xfrm: state: fix out-of-bounds read during lookup (bsc#1237913).
CVE-2024-58053: rxrpc: Fix handling of received connection abort (bsc#1238982).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
CVE-2025-38244: smb: client: fix potential deadlock when reconnecting channels (bsc#1246183).
CVE-2025-38352: posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (bsc#1246911).
CVE-2025-38371: drm/v3d: Disable interrupts before resetting the GPU (bsc#1247178).
CVE-2025-38392: idpf: convert control queue mutex to a spinlock (bsc#1247169).
CVE-2025-38399: scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() (bsc#1247097).
CVE-2025-38426: drm/amdgpu: Add basic validation for RAS header (bsc#1247252).
CVE-2025-38457: net/sched: Abort __tc_modify_qdisc if parent class does not exist (bsc#1247098).
CVE-2025-38460: atm: clip: Fix potential null-ptr-deref in to_atmarpd() (bsc#1247143).
CVE-2025-38465: netlink: make sure we allow at least one dump skb (bsc#1247118).
CVE-2025-38470: kABI fix for net: vlan: fix VLAN 0 refcount imbalance of toggling (bsc#1247288).
CVE-2025-38471: tls: always refresh the queue when reading sock (bsc#1247450).
CVE-2025-38490: net: libwx: remove duplicate page_pool_put_full_page() (bsc#1247243).
CVE-2025-38498: do_change_type(): refuse to operate on unmounted/not ours mounts (bsc#1247374).
CVE-2025-21720: xfrm: delete intermediate secpath entry in packet offload mode (bsc#1238859).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
CVE-2025-21868: kABI workaround for adding an header (bsc#1240180).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-21898: ftrace: Avoid potential division by zero in function_stat_show() (bsc#1240610).
CVE-2025-21899: tracing: Fix bad hist from corrupting named_triggers list (bsc#1240577).
CVE-2025-21920: vlan: enforce underlying device type (bsc#1240686).
CVE-2025-21938: mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (bsc#1240723).
CVE-2025-21959: netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (bsc#1240814).
CVE-2025-21997: xsk: fix an integer overflow in xp_create_and_assign_umem() (bsc#1240823).
CVE-2025-22035: tracing: Fix use-after-free in print_graph_function_flags during tracer switching (bsc#1241544).
CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
CVE-2025-22111: kABI fix for net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF (bsc#1241572).
CVE-2025-22113: ext4: define ext4_journal_destroy wrapper (bsc#1241617).
CVE-2025-23155: net: stmmac: Fix accessing freed irq affinity_hint (bsc#1242573).
CVE-2025-23163: net:…

Record: SUSE-SU-2025:02923-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02969-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in…

Record: SUSE-SU-2025:02969-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02996-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (1230216).
CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in…

Record: SUSE-SU-2025:02996-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02997-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-11135: enabled CONFIG_X86_INTEL_TSX_MODE_AUTO (bsc#1139073, bsc#1246695)
CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-39298:mm/memory-failure: fix handling of dissolved but not taken off from buddy pages (bsc#1227082).
CVE-2024-42134: virtio-pci: Check if is_avq is NULL (bsc#1228664).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38047: x86/fred: Fix system hang during S4 resume with FRED enabled (bsc#1245084).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma…

Record: SUSE-SU-2025:02997-1
Updated: 2026-11-02

OSVSUSE-SU-2025:03011-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-11135: enabled CONFIG_X86_INTEL_TSX_MODE_AUTO (bsc#1139073, bsc#1246695).
CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-39298:mm/memory-failure: fix handling of dissolved but not taken off from buddy pages (bsc#1227082).
CVE-2024-42134: virtio-pci: Check if is_avq is NULL (bsc#1228664 bsc#1247831).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-49861: net: clear the dst when changing skb protocol (bsc#1245954).
CVE-2024-49996: cifs: Fix buffer overflow when parsing NFS reparse points (bsc#1232089).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21854: selftest/bpf: Add vsock test for sockmap rejecting unconnected (bsc#1239470).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-22090: mm: (un)track_pfn_copy() fix + doc improvements (bsc#1241537).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38047: x86/fred: Fix system hang during S4 resume with FRED enabled (bsc#1245084).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147:…

Record: SUSE-SU-2025:03011-1
Updated: 2026-11-02

OSVSUSE-SU-2025:03023-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may (bsc#1139073)
CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
CVE-2025-38188:…

Record: SUSE-SU-2025:03023-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20577-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
CVE-2025-38188:…

Record: SUSE-SU-2025:20577-1
Updated: 2026-11-02

OSVSUSE-SU-2025:20586-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2019-11135: TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may
CVE-2024-36028: mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (bsc#1225707).
CVE-2024-36348, CVE-2024-36349, CVE-2024-36350, CVE-2024-36357: x86/process: Move the buffer clearing before MONITOR (bsc#1238896).
CVE-2024-44963: btrfs: do not BUG_ON() when freeing tree block after error (bsc#1230216).
CVE-2024-56742: vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages() (bsc#1235613).
CVE-2025-21839: KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (bsc#1239061).
CVE-2025-21872: efi/mokvar-table: Avoid repeated map/unmap of the same page (bsc#1240323).
CVE-2025-23163: net: vlan: do not propagate flags on open (bsc#1242837).
CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
CVE-2025-37920: kABI workaround for xsk: Fix race condition in AF_XDP generic RX path (bsc#1243479).
CVE-2025-37984: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (bsc#1243669).
CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
CVE-2025-38035: nvmet-tcp: do not restore null sk_state_change (bsc#1244801).
CVE-2025-38051: smb: client: Fix use-after-free in cifs_fill_dirent (bsc#1244750).
CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
CVE-2025-38061: net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (bsc#1245440).
CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
CVE-2025-38063: dm: fix unconditional IO throttle caused by REQ_PREFLUSH (bsc#1245202).
CVE-2025-38064: virtio: break and reset virtio devices on device_shutdown() (bsc#1245201).
CVE-2025-38074: vhost-scsi: protect vq->log_used with vq->mutex (bsc#1244735).
CVE-2025-38094: net: cadence: macb: Fix a possible deadlock in macb_halt_tx (bsc#1245649).
CVE-2025-38097: kabi: restore encap_sk in struct xfrm_state (bsc#1245660).
CVE-2025-38098: drm/amd/display: Do not treat wb connector as physical in (bsc#1245654).
CVE-2025-38099: Bluetooth: btusb: Fix regression in the initialization of fake Bluetooth controllers (bsc#1245671).
CVE-2025-38100: x86/iopl: Cure TIF_IO_BITMAP inconsistencies (bsc#1245650).
CVE-2025-38105: ALSA: usb-audio: Kill timer properly at removal (bsc#1245682).
CVE-2025-38115: net_sched: sch_sfq: fix a potential crash on gso_skb handling (bsc#1245689).
CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
CVE-2025-38126: net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (bsc#1245708).
CVE-2025-38131: coresight: prevent deactivate active config while enabling the config (bsc#1245677).
CVE-2025-38132: coresight: holding cscfg_csdev_lock while removing cscfg from csdev (bsc#1245679).
CVE-2025-38147: calipso: unlock rcu before returning -EAFNOSUPPORT (bsc#1245768).
CVE-2025-38158: hisi_acc_vfio_pci: fix XQE dma address error (bsc#1245750).
CVE-2025-38162: netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (bsc#1245752).
CVE-2025-38166: bpf: fix ktls panic with sockmap (bsc#1245758).
CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
CVE-2025-38183: net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (bsc#1246006).
CVE-2025-38187: drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() (bsc#1245951).
CVE-2025-38188:…

Record: SUSE-SU-2025:20586-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`bpftool` AlmaLinux:8 From an advisory covering 6 CVEs	before 4.18.0-553.69.1.el8_10	4.18.0-553.69.1.el8_10
`kernel` AlmaLinux:8 From an advisory covering 6 CVEs	before 4.18.0-553.69.1.el8_10	4.18.0-553.69.1.el8_10
`kernel-abi-stablelists` AlmaLinux:8 From an advisory covering 6 CVEs	before 4.18.0-553.69.1.el8_10	4.18.0-553.69.1.el8_10
`kernel-core` AlmaLinux:8 From an advisory covering 6 CVEs	before 4.18.0-553.69.1.el8_10	4.18.0-553.69.1.el8_10
`kernel-cross-headers` AlmaLinux:8 From an advisory covering 6 CVEs	before 4.18.0-553.69.1.el8_10	4.18.0-553.69.1.el8_10
`kernel-debug` AlmaLinux:8 From an advisory covering 6 CVEs	before 4.18.0-553.69.1.el8_10	4.18.0-553.69.1.el8_10
`kernel-debug-core` AlmaLinux:8 From an advisory covering 6 CVEs	before 4.18.0-553.69.1.el8_10	4.18.0-553.69.1.el8_10
`kernel-debug-devel` AlmaLinux:8 From an advisory covering 6 CVEs	before 4.18.0-553.69.1.el8_10	4.18.0-553.69.1.el8_10
`kernel-debug-modules` AlmaLinux:8 From an advisory covering 6 CVEs	before 4.18.0-553.69.1.el8_10	4.18.0-553.69.1.el8_10
`kernel-debug-modules-extra` AlmaLinux:8 From an advisory covering 6 CVEs	before 4.18.0-553.69.1.el8_10	4.18.0-553.69.1.el8_10

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-devel` AlmaLinux:8 From an advisory covering 6 CVEs	before 4.18.0-553.69.1.el8_10	4.18.0-553.69.1.el8_10
`kernel-doc` AlmaLinux:8 From an advisory covering 6 CVEs	before 4.18.0-553.69.1.el8_10	4.18.0-553.69.1.el8_10
`kernel-headers` AlmaLinux:8 From an advisory covering 6 CVEs	before 4.18.0-553.69.1.el8_10	4.18.0-553.69.1.el8_10
`kernel-modules` AlmaLinux:8 From an advisory covering 6 CVEs	before 4.18.0-553.69.1.el8_10	4.18.0-553.69.1.el8_10
`kernel-modules-extra` AlmaLinux:8 From an advisory covering 6 CVEs	before 4.18.0-553.69.1.el8_10	4.18.0-553.69.1.el8_10
`kernel-tools` AlmaLinux:8 From an advisory covering 6 CVEs	before 4.18.0-553.69.1.el8_10	4.18.0-553.69.1.el8_10
`kernel-tools-libs` AlmaLinux:8 From an advisory covering 6 CVEs	before 4.18.0-553.69.1.el8_10	4.18.0-553.69.1.el8_10
`kernel-tools-libs-devel` AlmaLinux:8 From an advisory covering 6 CVEs	before 4.18.0-553.69.1.el8_10	4.18.0-553.69.1.el8_10
`kernel-zfcpdump` AlmaLinux:8 From an advisory covering 6 CVEs	before 4.18.0-553.69.1.el8_10	4.18.0-553.69.1.el8_10
`kernel-zfcpdump-core` AlmaLinux:8 From an advisory covering 6 CVEs	before 4.18.0-553.69.1.el8_10	4.18.0-553.69.1.el8_10
`kernel-zfcpdump-devel` AlmaLinux:8 From an advisory covering 6 CVEs	before 4.18.0-553.69.1.el8_10	4.18.0-553.69.1.el8_10
`kernel-zfcpdump-modules` AlmaLinux:8 From an advisory covering 6 CVEs	before 4.18.0-553.69.1.el8_10	4.18.0-553.69.1.el8_10
`kernel-zfcpdump-modules-extra` AlmaLinux:8 From an advisory covering 6 CVEs	before 4.18.0-553.69.1.el8_10	4.18.0-553.69.1.el8_10
`perf` AlmaLinux:8 From an advisory covering 6 CVEs	before 4.18.0-553.69.1.el8_10	4.18.0-553.69.1.el8_10
`python3-perf` AlmaLinux:8 From an advisory covering 6 CVEs	before 4.18.0-553.69.1.el8_10	4.18.0-553.69.1.el8_10
`kernel-rt` AlmaLinux:8 From an advisory covering 5 CVEs	before 4.18.0-553.69.1.rt7.410.el8_10	4.18.0-553.69.1.rt7.410.el8_10
`kernel-rt-core` AlmaLinux:8 From an advisory covering 5 CVEs	before 4.18.0-553.69.1.rt7.410.el8_10	4.18.0-553.69.1.rt7.410.el8_10
`kernel-rt-debug` AlmaLinux:8 From an advisory covering 5 CVEs	before 4.18.0-553.69.1.rt7.410.el8_10	4.18.0-553.69.1.rt7.410.el8_10
`kernel-rt-debug-core` AlmaLinux:8 From an advisory covering 5 CVEs	before 4.18.0-553.69.1.rt7.410.el8_10	4.18.0-553.69.1.rt7.410.el8_10
`kernel-rt-debug-devel` AlmaLinux:8 From an advisory covering 5 CVEs	before 4.18.0-553.69.1.rt7.410.el8_10	4.18.0-553.69.1.rt7.410.el8_10
`kernel-rt-debug-modules` AlmaLinux:8 From an advisory covering 5 CVEs	before 4.18.0-553.69.1.rt7.410.el8_10	4.18.0-553.69.1.rt7.410.el8_10
`kernel-rt-debug-modules-extra` AlmaLinux:8 From an advisory covering 5 CVEs	before 4.18.0-553.69.1.rt7.410.el8_10	4.18.0-553.69.1.rt7.410.el8_10
`kernel-rt-devel` AlmaLinux:8 From an advisory covering 5 CVEs	before 4.18.0-553.69.1.rt7.410.el8_10	4.18.0-553.69.1.rt7.410.el8_10
`kernel-rt-modules` AlmaLinux:8 From an advisory covering 5 CVEs	before 4.18.0-553.69.1.rt7.410.el8_10	4.18.0-553.69.1.rt7.410.el8_10
`kernel-rt-modules-extra` AlmaLinux:8 From an advisory covering 5 CVEs	before 4.18.0-553.69.1.rt7.410.el8_10	4.18.0-553.69.1.rt7.410.el8_10
`kernel` AlmaLinux:9 From an advisory covering 9 CVEs	before 5.14.0-570.35.1.el9_6	5.14.0-570.35.1.el9_6
`kernel-64k` AlmaLinux:9 From an advisory covering 9 CVEs	before 5.14.0-570.35.1.el9_6	5.14.0-570.35.1.el9_6
`kernel-64k-core` AlmaLinux:9 From an advisory covering 9 CVEs	before 5.14.0-570.35.1.el9_6	5.14.0-570.35.1.el9_6
`kernel-64k-debug` AlmaLinux:9 From an advisory covering 9 CVEs	before 5.14.0-570.35.1.el9_6	5.14.0-570.35.1.el9_6
`kernel-64k-debug-core` AlmaLinux:9 From an advisory covering 9 CVEs	before 5.14.0-570.35.1.el9_6	5.14.0-570.35.1.el9_6
`kernel-64k-debug-devel` AlmaLinux:9 From an advisory covering 9 CVEs	before 5.14.0-570.35.1.el9_6	5.14.0-570.35.1.el9_6
`kernel-64k-debug-devel-matched` AlmaLinux:9 From an advisory covering 9 CVEs	before 5.14.0-570.35.1.el9_6	5.14.0-570.35.1.el9_6
`kernel-64k-debug-modules` AlmaLinux:9 From an advisory covering 9 CVEs	before 5.14.0-570.35.1.el9_6	5.14.0-570.35.1.el9_6
`kernel-64k-debug-modules-core` AlmaLinux:9 From an advisory covering 9 CVEs	before 5.14.0-570.35.1.el9_6	5.14.0-570.35.1.el9_6
`kernel-64k-debug-modules-extra` AlmaLinux:9 From an advisory covering 9 CVEs	before 5.14.0-570.35.1.el9_6	5.14.0-570.35.1.el9_6
`kernel-64k-devel` AlmaLinux:9 From an advisory covering 9 CVEs	before 5.14.0-570.35.1.el9_6	5.14.0-570.35.1.el9_6
`kernel-64k-devel-matched` AlmaLinux:9 From an advisory covering 9 CVEs	before 5.14.0-570.35.1.el9_6	5.14.0-570.35.1.el9_6
`kernel-64k-modules` AlmaLinux:9 From an advisory covering 9 CVEs	before 5.14.0-570.35.1.el9_6	5.14.0-570.35.1.el9_6
`kernel` Azure Linux:3	before 6.6.96.1-1	6.6.96.1-1
`linux-lts` Alpaquita:23	6.1.141-r0 up to 6.1.143-r1	6.1.143-r1
`linux-lts` Alpaquita:25	6.6.89-r0 up to 6.12.41-r0	6.12.41-r0
`linux-lts` Alpaquita:stream	6.12.92-r1 up to 6.18.35-r1	6.18.35-r1
`bpftool` TuxCare:CentOS-Stream:8 From an advisory covering 26 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel` TuxCare:CentOS-Stream:8 From an advisory covering 26 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-core` TuxCare:CentOS-Stream:8 From an advisory covering 26 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-cross-headers` TuxCare:CentOS-Stream:8 From an advisory covering 26 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-debug` TuxCare:CentOS-Stream:8 From an advisory covering 26 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-debug-core` TuxCare:CentOS-Stream:8 From an advisory covering 26 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-debug-devel` TuxCare:CentOS-Stream:8 From an advisory covering 26 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-debug-modules` TuxCare:CentOS-Stream:8 From an advisory covering 26 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-debug-modules-extra` TuxCare:CentOS-Stream:8 From an advisory covering 26 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-debug-modules-internal` TuxCare:CentOS-Stream:8 From an advisory covering 26 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-devel` TuxCare:CentOS-Stream:8 From an advisory covering 26 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-headers` TuxCare:CentOS-Stream:8 From an advisory covering 26 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-ipaclones-internal` TuxCare:CentOS-Stream:8 From an advisory covering 26 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-modules` TuxCare:CentOS-Stream:8 From an advisory covering 26 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-modules-extra` TuxCare:CentOS-Stream:8 From an advisory covering 26 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-modules-internal` TuxCare:CentOS-Stream:8 From an advisory covering 26 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-selftests-internal` TuxCare:CentOS-Stream:8 From an advisory covering 26 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-tools` TuxCare:CentOS-Stream:8 From an advisory covering 26 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-tools-libs` TuxCare:CentOS-Stream:8 From an advisory covering 26 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`kernel-tools-libs-devel` TuxCare:CentOS-Stream:8 From an advisory covering 26 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`perf` TuxCare:CentOS-Stream:8 From an advisory covering 26 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`python3-perf` TuxCare:CentOS-Stream:8 From an advisory covering 26 CVEs	before 4.18.0-553.6.1.el8_10.tuxcare.els13	4.18.0-553.6.1.el8_10.tuxcare.els13
`bpftool` TuxCare:CentOS:8.4 From an advisory covering 32 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els31	4.18.0-305.25.1.el8_4.tuxcare.els31
`kernel` TuxCare:CentOS:8.4 From an advisory covering 32 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els31	4.18.0-305.25.1.el8_4.tuxcare.els31
`kernel-core` TuxCare:CentOS:8.4 From an advisory covering 32 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els31	4.18.0-305.25.1.el8_4.tuxcare.els31
`kernel-cross-headers` TuxCare:CentOS:8.4 From an advisory covering 32 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els31	4.18.0-305.25.1.el8_4.tuxcare.els31
`kernel-debug` TuxCare:CentOS:8.4 From an advisory covering 32 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els31	4.18.0-305.25.1.el8_4.tuxcare.els31
`kernel-debug-core` TuxCare:CentOS:8.4 From an advisory covering 32 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els31	4.18.0-305.25.1.el8_4.tuxcare.els31
`kernel-debug-devel` TuxCare:CentOS:8.4 From an advisory covering 32 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els31	4.18.0-305.25.1.el8_4.tuxcare.els31
`kernel-debug-modules` TuxCare:CentOS:8.4 From an advisory covering 32 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els31	4.18.0-305.25.1.el8_4.tuxcare.els31
`kernel-debug-modules-extra` TuxCare:CentOS:8.4 From an advisory covering 32 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els31	4.18.0-305.25.1.el8_4.tuxcare.els31
`kernel-debug-modules-internal` TuxCare:CentOS:8.4 From an advisory covering 32 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els31	4.18.0-305.25.1.el8_4.tuxcare.els31
`kernel-devel` TuxCare:CentOS:8.4 From an advisory covering 32 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els31	4.18.0-305.25.1.el8_4.tuxcare.els31
`kernel-headers` TuxCare:CentOS:8.4 From an advisory covering 32 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els31	4.18.0-305.25.1.el8_4.tuxcare.els31
`kernel-ipaclones-internal` TuxCare:CentOS:8.4 From an advisory covering 32 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els31	4.18.0-305.25.1.el8_4.tuxcare.els31
`kernel-modules` TuxCare:CentOS:8.4 From an advisory covering 32 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els31	4.18.0-305.25.1.el8_4.tuxcare.els31
`kernel-modules-extra` TuxCare:CentOS:8.4 From an advisory covering 32 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els31	4.18.0-305.25.1.el8_4.tuxcare.els31
`kernel-modules-internal` TuxCare:CentOS:8.4 From an advisory covering 32 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els31	4.18.0-305.25.1.el8_4.tuxcare.els31
`kernel-selftests-internal` TuxCare:CentOS:8.4 From an advisory covering 32 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els31	4.18.0-305.25.1.el8_4.tuxcare.els31
`kernel-tools` TuxCare:CentOS:8.4 From an advisory covering 32 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els31	4.18.0-305.25.1.el8_4.tuxcare.els31
`kernel-tools-libs` TuxCare:CentOS:8.4 From an advisory covering 32 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els31	4.18.0-305.25.1.el8_4.tuxcare.els31
`kernel-tools-libs-devel` TuxCare:CentOS:8.4 From an advisory covering 32 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els31	4.18.0-305.25.1.el8_4.tuxcare.els31
`perf` TuxCare:CentOS:8.4 From an advisory covering 32 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els31	4.18.0-305.25.1.el8_4.tuxcare.els31
`python3-perf` TuxCare:CentOS:8.4 From an advisory covering 32 CVEs	before 4.18.0-305.25.1.el8_4.tuxcare.els31	4.18.0-305.25.1.el8_4.tuxcare.els31
`bpftool` TuxCare:CentOS:8.5 From an advisory covering 32 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els31	4.18.0-348.7.1.el8_5.tuxcare.els31
`kernel` TuxCare:CentOS:8.5 From an advisory covering 32 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els31	4.18.0-348.7.1.el8_5.tuxcare.els31
`kernel-core` TuxCare:CentOS:8.5 From an advisory covering 32 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els31	4.18.0-348.7.1.el8_5.tuxcare.els31
`kernel-cross-headers` TuxCare:CentOS:8.5 From an advisory covering 32 CVEs	before 4.18.0-348.7.1.el8_5.tuxcare.els31	4.18.0-348.7.1.el8_5.tuxcare.els31
`Kernel` Linux	5.4.0 up to 5.15.186, 5.16.0 up to 6.1.142, 6.2.0 up to 6.6.94, 6.7.0 up to 6.12.34, 6.13.0 up to 6.15.3	5.15.1866.1.1426.6.946.12.346.15.3
`linux` Debian:12	before 6.1.147-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 36 moreShow less 6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1	6.1.147-1
`linux` Debian:13	before 6.12.35-1	6.12.35-1
`linux` Debian:14	before 6.12.35-1	6.12.35-1
`linux-6.1` Debian:11 From an advisory covering 465 CVEs	before 6.1.153-1~deb11u1, plus listed versions 6.1.106-3~deb11u16.1.106-3~deb11u26.1.106-3~deb11u36.1.112-1~deb11u16.1.119-1~deb11u1 Show 6 moreShow less 6.1.128-1~deb11u16.1.129-1~deb11u16.1.137-1~deb11u16.1.140-1~deb11u16.1.147-1~deb11u16.1.148-1~deb11u1	6.1.153-1~deb11u1
`linux` Debian:12 From an advisory covering 233 CVEs	before 6.1.147-1, plus listed versions 6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1 Show 36 moreShow less 6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-16.1.94-1~bpo11+16.1.98-16.1.99-1	6.1.147-1
`kernel-linus` Mageia:9 From an advisory covering 237 CVEs	before 6.6.101-1.mga9	6.6.101-1.mga9
`kernel` Mageia:9 From an advisory covering 237 CVEs	before 6.6.101-1.mga9	6.6.101-1.mga9
`kmod-virtualbox` Mageia:9 From an advisory covering 237 CVEs	before 7.1.10-7.mga9	7.1.10-7.mga9
`kmod-xtables-addons` Mageia:9 From an advisory covering 237 CVEs	before 3.24-83.mga9	3.24-83.mga9
`wireless-regdb` Mageia:9 From an advisory covering 237 CVEs	before 20250710-1.mga9	20250710-1.mga9
`kernel` openEuler:24.03-LTS From an advisory covering 32 CVEs	before 6.6.0-100.0.0.92.oe2403	6.6.0-100.0.0.92.oe2403
`kernel` openEuler:24.03-LTS-SP1 From an advisory covering 32 CVEs	before 6.6.0-100.0.0.103.oe2403sp1	6.6.0-100.0.0.103.oe2403sp1
`kernel` openEuler:24.03-LTS-SP2 From an advisory covering 60 CVEs	before 6.6.0-101.0.0.107.oe2403sp2	6.6.0-101.0.0.107.oe2403sp2
`bpftool` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`bpftool-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-abi-stablelists` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-debug` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-debug-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-debug-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-debug-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-debug-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-debug-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-debuginfo-common-s390x` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-doc` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-tools` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-tools-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-tools-libs` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-zfcpdump` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-zfcpdump-core` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-zfcpdump-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-zfcpdump-devel` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-zfcpdump-modules` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-zfcpdump-modules-extra` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`perf` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`perf-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`python3-perf` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`python3-perf-debuginfo` Red Hat:enterprise_linux:8::baseos From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`bpftool-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-debug-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-debuginfo-common-aarch64` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-debuginfo-common-ppc64le` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-debuginfo-common-x86_64` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-tools-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-tools-libs-devel` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`perf-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`python3-perf-debuginfo` Red Hat:enterprise_linux:8::crb From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-rt` Red Hat:enterprise_linux:8::nfv From an advisory covering 5 CVEs	before 0:4.18.0-553.69.1.rt7.410.el8_10	0:4.18.0-553.69.1.rt7.410.el8_10
`kernel-rt-core` Red Hat:enterprise_linux:8::nfv From an advisory covering 5 CVEs	before 0:4.18.0-553.69.1.rt7.410.el8_10	0:4.18.0-553.69.1.rt7.410.el8_10
`kernel-rt-debug` Red Hat:enterprise_linux:8::nfv From an advisory covering 5 CVEs	before 0:4.18.0-553.69.1.rt7.410.el8_10	0:4.18.0-553.69.1.rt7.410.el8_10
`kernel-rt-debug-core` Red Hat:enterprise_linux:8::nfv From an advisory covering 5 CVEs	before 0:4.18.0-553.69.1.rt7.410.el8_10	0:4.18.0-553.69.1.rt7.410.el8_10
`kernel-rt-debug-debuginfo` Red Hat:enterprise_linux:8::nfv From an advisory covering 5 CVEs	before 0:4.18.0-553.69.1.rt7.410.el8_10	0:4.18.0-553.69.1.rt7.410.el8_10
`kernel` Rocky Linux:8 From an advisory covering 6 CVEs	before 0:4.18.0-553.69.1.el8_10	0:4.18.0-553.69.1.el8_10
`kernel-rt` Rocky Linux:8 From an advisory covering 5 CVEs	before 0:4.18.0-553.69.1.rt7.410.el8_10	0:4.18.0-553.69.1.rt7.410.el8_10
`kernel` Rocky Linux:10 From an advisory covering 7 CVEs	before 0:6.12.0-55.27.1.el10_0	0:6.12.0-55.27.1.el10_0
`linux` Root:Debian:11	before 5.10.262-1.aikido.113	5.10.262-1.aikido.1135.10.262-1.aikido.114
`rootio-linux` Root:Debian:11	before 5.10.262-1.aikido.113	5.10.262-1.aikido.1135.10.262-1.aikido.114
`linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`rootio-linux` Root:Debian:12	before 6.1.190-1.aikido.167	6.1.190-1.aikido.167
`linux` Root:Ubuntu:22.04	before 5.15.0-203.213.aikido.119	5.15.0-203.213.aikido.119
`rootio-linux` Root:Ubuntu:22.04	before 5.15.0-203.213.aikido.119	5.15.0-203.213.aikido.119
`linux` Root:Ubuntu:24.04	before 6.8.0-149.149.aikido.91	6.8.0-149.149.aikido.91
`rootio-linux` Root:Ubuntu:24.04	before 6.8.0-149.149.aikido.91	6.8.0-149.149.aikido.91
`kernel-livepatch-SLE15-SP7-RT_Update_3` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 260 CVEs	before 1-150700.1.5.1	1-150700.1.5.1
`kernel-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 260 CVEs	before 6.4.0-150700.7.13.1	6.4.0-150700.7.13.1
`kernel-source-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 260 CVEs	before 6.4.0-150700.7.13.1	6.4.0-150700.7.13.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP7 From an advisory covering 260 CVEs	before 6.4.0-150700.7.13.1	6.4.0-150700.7.13.1
`kernel-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 447 CVEs	before 6.4.0-15061.28.coco15sp6.1	6.4.0-15061.28.coco15sp6.1
`kernel-coco_debug` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 447 CVEs	before 6.4.0-15061.28.coco15sp6.1	6.4.0-15061.28.coco15sp6.1
`kernel-source-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 447 CVEs	before 6.4.0-15061.28.coco15sp6.1	6.4.0-15061.28.coco15sp6.1
`kernel-syms-coco` SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 From an advisory covering 447 CVEs	before 6.4.0-15061.28.coco15sp6.1	6.4.0-15061.28.coco15sp6.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.8.48.1	6.4.0-150600.8.48.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.8.48.1	6.4.0-150600.8.48.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.8.48.1	6.4.0-150600.8.48.1
`kernel-azure` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.8.48.1	6.4.0-150600.8.48.1
`kernel-source-azure` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.8.48.1	6.4.0-150600.8.48.1
`kernel-syms-azure` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.8.48.1	6.4.0-150600.8.48.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1.150600.12.28.4	6.4.0-150600.23.65.1.150600.12.28.4
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-livepatch-SLE15-SP6_Update_14` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 238 CVEs	before 1-150600.13.3.4	1-150600.13.3.4
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`dtb-aarch64` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-64kb` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-debug` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-default` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-default-base` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1.150600.12.28.4	6.4.0-150600.23.65.1.150600.12.28.4
`kernel-docs` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-kvmsmall` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-obs-build` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-obs-qa` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-source` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-syms` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-zfcpdump` openSUSE:Leap 15.6 From an advisory covering 238 CVEs	before 6.4.0-150600.23.65.1	6.4.0-150600.23.65.1
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1.150700.17.9.4	6.4.0-150700.53.11.1.150700.17.9.4
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.3	6.4.0-150700.53.11.3
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-livepatch-SLE15-SP7_Update_3` SUSE:Linux Enterprise Live Patching 15 SP7 From an advisory covering 264 CVEs	before 1-150700.15.3.4	1-150700.15.3.4
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP7 From an advisory covering 264 CVEs	before 6.4.0-150700.53.11.1	6.4.0-150700.53.11.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 265 CVEs	before 6.4.0-150700.20.11.1	6.4.0-150700.20.11.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 265 CVEs	before 6.4.0-150700.20.11.1	6.4.0-150700.20.11.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP7 From an advisory covering 265 CVEs	before 6.4.0-150700.20.11.1	6.4.0-150700.20.11.1
`kernel-livepatch-SLE15-SP6-RT_Update_14` SUSE:Linux Enterprise Live Patching 15 SP6 From an advisory covering 235 CVEs	before 1-150600.1.5.1	1-150600.1.5.1
`kernel-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 235 CVEs	before 6.4.0-150600.10.49.1	6.4.0-150600.10.49.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP6 From an advisory covering 235 CVEs	before 6.4.0-150600.10.49.1	6.4.0-150600.10.49.1
`kernel-source-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 235 CVEs	before 6.4.0-150600.10.49.1	6.4.0-150600.10.49.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP6 From an advisory covering 235 CVEs	before 6.4.0-150600.10.49.1	6.4.0-150600.10.49.1
`kernel-rt` openSUSE:Leap 15.6 From an advisory covering 235 CVEs	before 6.4.0-150600.10.49.1	6.4.0-150600.10.49.1
`kernel-rt_debug` openSUSE:Leap 15.6 From an advisory covering 235 CVEs	before 6.4.0-150600.10.49.1	6.4.0-150600.10.49.1
`kernel-source-rt` openSUSE:Leap 15.6 From an advisory covering 235 CVEs	before 6.4.0-150600.10.49.1	6.4.0-150600.10.49.1
`kernel-syms-rt` openSUSE:Leap 15.6 From an advisory covering 235 CVEs	before 6.4.0-150600.10.49.1	6.4.0-150600.10.49.1
`kernel-rt` SUSE:Linux Micro 6.0 From an advisory covering 235 CVEs	before 6.4.0-35.1	6.4.0-35.1
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-aws-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1058.61~18.04.35.4.0-1059.62~18.04.15.4.0-1060.63~18.04.15.4.0-1061.64~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1081.88~18.04.15.4.0-1083.90~18.04.15.4.0-1084.91~18.04.15.4.0-1085.92~18.04.15.4.0-1086.93~18.04.15.4.0-1088.96~18.04.15.4.0-1089.97~18.04.15.4.0-1090.98~18.04.15.4.0-1092.100~18.04.25.4.0-1093.102~18.04.2	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1 Show 45 moreShow less 5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.15.4.0-1049.51~18.04.15.4.0-1051.53~18.04.15.4.0-1055.57~18.04.15.4.0-1056.58~18.04.15.4.0-1058.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1064.67~18.04.15.4.0-1065.68~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1069.72~18.04.15.4.0-1070.73~18.04.15.4.0-1072.75~18.04.15.4.0-1073.76~18.04.15.4.0-1074.77~18.04.15.4.0-1077.80~18.04.15.4.0-1078.81~18.04.15.4.0-1080.83~18.04.25.4.0-1083.87~18.04.15.4.0-1085.90~18.04.15.4.0-1086.91~18.04.15.4.0-1089.94~18.04.15.4.0-1090.95~18.04.15.4.0-1091.96~18.04.15.4.0-1094.100~18.04.15.4.0-1095.101~18.04.15.4.0-1098.104~18.04.25.4.0-1100.106~18.04.15.4.0-1101.107~18.04.1	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gcp-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.25.4.0-1046.49~18.04.15.4.0-1049.53~18.04.15.4.0-1051.55~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1060.64~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1065.69~18.04.15.4.0-1067.71~18.04.15.4.0-1068.72~18.04.15.4.0-1069.73~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.15.4.0-1075.80~18.04.15.4.0-1078.84~18.04.15.4.0-1080.87~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.94~18.04.15.4.0-1087.95~18.04.15.4.0-1089.97~18.04.15.4.0-1092.101~18.04.15.4.0-1093.102~18.04.15.4.0-1096.105~18.04.2	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2 Show 45 moreShow less 5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-ibm-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1010.11~18.04.25.4.0-1012.13~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1017.19~18.04.1 Show 45 moreShow less 5.4.0-1018.20~18.04.15.4.0-1019.21~18.04.15.4.0-1020.22~18.04.15.4.0-1021.23~18.04.15.4.0-1023.25~18.04.15.4.0-1026.29~18.04.15.4.0-1028.32~18.04.15.4.0-1029.33~18.04.15.4.0-1031.35~18.04.15.4.0-1032.36~18.04.15.4.0-1033.37~18.04.15.4.0-1034.38~18.04.15.4.0-1036.41~18.04.15.4.0-1037.42~18.04.15.4.0-1040.45~18.04.25.4.0-1041.46~18.04.15.4.0-1042.47~18.04.15.4.0-1044.49~18.04.15.4.0-1045.50~18.04.15.4.0-1046.51~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1049.54~18.04.15.4.0-1050.55~18.04.15.4.0-1051.56~18.04.15.4.0-1052.57~18.04.15.4.0-1053.58~18.04.15.4.0-1054.59~18.04.15.4.0-1056.61~18.04.15.4.0-1057.62~18.04.15.4.0-1058.63~18.04.15.4.0-1059.64~18.04.15.4.0-1060.65~18.04.15.4.0-1061.66~18.04.15.4.0-1063.68~18.04.15.4.0-1064.69~18.04.15.4.0-1065.70~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1068.73~18.04.15.4.0-1069.74~18.04.15.4.0-1070.75~18.04.15.4.0-1071.76~18.04.15.4.0-1072.77~18.04.15.4.0-1073.78~18.04.1	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-oracle-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1 Show 45 moreShow less 5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.15.4.0-1046.50~18.04.25.4.0-1048.52~18.04.15.4.0-1049.53~18.04.15.4.0-1052.56~18.04.15.4.0-1053.57~18.04.15.4.0-1054.58~18.04.15.4.0-1055.59~18.04.15.4.0-1056.60~18.04.15.4.0-1057.61~18.04.15.4.0-1058.62~18.04.15.4.0-1059.63~18.04.15.4.0-1061.65~18.04.15.4.0-1062.66~18.04.15.4.0-1063.67~18.04.15.4.0-1064.68~18.04.15.4.0-1066.71~18.04.15.4.0-1067.72~18.04.15.4.0-1069.75~18.04.15.4.0-1070.76~18.04.15.4.0-1071.77~18.04.15.4.0-1073.79~18.04.15.4.0-1076.83~18.04.15.4.0-1078.86~18.04.15.4.0-1079.87~18.04.15.4.0-1081.89~18.04.15.4.0-1082.90~18.04.15.4.0-1083.91~18.04.15.4.0-1084.92~18.04.15.4.0-1086.95~18.04.15.4.0-1087.96~18.04.15.4.0-1090.99~18.04.25.4.0-1091.100~18.04.1	None known
`linux-raspi-5.4` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1 Show 45 moreShow less 5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.15.4.0-1036.39~18.04.15.4.0-1038.41~18.04.15.4.0-1041.45~18.04.15.4.0-1042.46~18.04.35.4.0-1043.47~18.04.15.4.0-1044.48~18.04.15.4.0-1045.49~18.04.15.4.0-1046.50~18.04.15.4.0-1047.52~18.04.15.4.0-1048.53~18.04.15.4.0-1050.56~18.04.15.4.0-1052.58~18.04.15.4.0-1053.60~18.04.15.4.0-1055.62~18.04.15.4.0-1056.63~18.04.15.4.0-1058.65~18.04.15.4.0-1059.66~18.04.15.4.0-1060.68~18.04.15.4.0-1062.70~18.04.15.4.0-1065.75~18.04.15.4.0-1066.76~18.04.15.4.0-1068.78~18.04.15.4.0-1069.79~18.04.15.4.0-1070.80~18.04.15.4.0-1071.81~18.04.15.4.0-1073.84~18.04.15.4.0-1074.85~18.04.15.4.0-1077.88~18.04.25.4.0-1078.89~18.04.15.4.0-1079.90~18.04.15.4.0-1080.91~18.04.15.4.0-1081.92~18.04.15.4.0-1082.93~18.04.1	None known
`linux` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25 Show 45 moreShow less 5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110	None known
`linux-aws` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5 Show 45 moreShow less 5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1058.615.4.0-1059.625.4.0-1060.635.4.0-1061.645.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1066.695.4.0-1068.725.4.0-1069.735.4.0-1071.765.4.0-1072.775.4.0-1073.78	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1092.99~20.04.1, plus listed versions 5.15.0-1014.18~20.04.15.15.0-1015.19~20.04.15.15.0-1017.21~20.04.15.15.0-1019.23~20.04.15.15.0-1020.24~20.04.1 Show 45 moreShow less 5.15.0-1021.25~20.04.15.15.0-1022.26~20.04.15.15.0-1023.27~20.04.15.15.0-1026.30~20.04.25.15.0-1027.31~20.04.15.15.0-1028.32~20.04.15.15.0-1030.34~20.04.15.15.0-1031.35~20.04.15.15.0-1033.37~20.04.15.15.0-1034.38~20.04.15.15.0-1035.39~20.04.15.15.0-1036.40~20.04.15.15.0-1037.41~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.15.15.0-1040.45~20.04.15.15.0-1041.46~20.04.15.15.0-1043.48~20.04.15.15.0-1044.49~20.04.15.15.0-1045.50~20.04.15.15.0-1047.52~20.04.15.15.0-1048.53~20.04.15.15.0-1049.54~20.04.15.15.0-1050.55~20.04.15.15.0-1051.56~20.04.15.15.0-1052.57~20.04.15.15.0-1053.58~20.04.15.15.0-1055.60~20.04.15.15.0-1056.61~20.04.15.15.0-1057.63~20.04.15.15.0-1058.64~20.04.15.15.0-1061.67~20.04.15.15.0-1062.68~20.04.15.15.0-1063.69~20.04.15.15.0-1064.70~20.04.15.15.0-1065.71~20.04.15.15.0-1066.72~20.04.15.15.0-1067.73~20.04.15.15.0-1068.74~20.04.15.15.0-1069.75~20.04.15.15.0-1070.76~20.04.15.15.0-1071.77~20.04.15.15.0-1072.78~20.04.15.15.0-1073.79~20.04.15.15.0-1075.82~20.04.1	5.15.0-1092.99~20.04.1
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8 Show 45 moreShow less 5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.495.4.0-1048.505.4.0-1049.515.4.0-1051.535.4.0-1055.575.4.0-1056.585.4.0-1058.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1064.675.4.0-1065.685.4.0-1067.705.4.0-1068.715.4.0-1069.725.4.0-1070.735.4.0-1072.755.4.0-1073.765.4.0-1074.775.4.0-1077.805.4.0-1078.815.4.0-1080.835.4.0-1083.87	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1096.105~20.04.1, plus listed versions 5.15.0-1007.8~20.04.15.15.0-1008.9~20.04.15.15.0-1013.16~20.04.15.15.0-1014.17~20.04.15.15.0-1017.20~20.04.1 Show 45 moreShow less 5.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.29~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1033.40~20.04.15.15.0-1034.41~20.04.15.15.0-1035.42~20.04.15.15.0-1036.43~20.04.15.15.0-1037.44~20.04.15.15.0-1038.45~20.04.15.15.0-1039.46~20.04.15.15.0-1040.47~20.04.15.15.0-1041.48~20.04.15.15.0-1042.49~20.04.15.15.0-1043.50~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1056.64~20.04.15.15.0-1057.65~20.04.15.15.0-1058.66~20.04.25.15.0-1059.67~20.04.15.15.0-1060.69~20.04.15.15.0-1061.70~20.04.15.15.0-1063.72~20.04.15.15.0-1064.73~20.04.15.15.0-1065.74~20.04.15.15.0-1067.76~20.04.15.15.0-1068.77~20.04.15.15.0-1070.79~20.04.15.15.0-1071.80~20.04.15.15.0-1072.81~20.04.15.15.0-1073.82~20.04.15.15.0-1074.83~20.04.15.15.0-1075.84~20.04.1	5.15.0-1096.105~20.04.1
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-bluefield` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.4.0-1007.105.4.0-1011.145.4.0-1012.155.4.0-1013.165.4.0-1016.19 Show 45 moreShow less 5.4.0-1019.225.4.0-1020.235.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1030.335.4.0-1032.355.4.0-1035.385.4.0-1036.395.4.0-1040.445.4.0-1042.475.4.0-1044.495.4.0-1045.505.4.0-1046.515.4.0-1047.525.4.0-1049.555.4.0-1050.565.4.0-1054.605.4.0-1058.645.4.0-1059.655.4.0-1060.665.4.0-1062.685.4.0-1064.705.4.0-1065.715.4.0-1066.725.4.0-1068.745.4.0-1070.765.4.0-1071.775.4.0-1072.785.4.0-1073.795.4.0-1074.805.4.0-1075.815.4.0-1076.825.4.0-1077.835.4.0-1078.845.4.0-1079.855.4.0-1080.875.4.0-1081.885.4.0-1082.895.4.0-1083.905.4.0-1084.915.4.0-1085.92	None known
`linux-gcp` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7 Show 45 moreShow less 5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1044.475.4.0-1046.495.4.0-1049.535.4.0-1051.555.4.0-1052.565.4.0-1053.575.4.0-1055.595.4.0-1056.605.4.0-1057.615.4.0-1058.625.4.0-1059.635.4.0-1060.645.4.0-1062.665.4.0-1063.675.4.0-1064.685.4.0-1065.695.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1072.775.4.0-1073.785.4.0-1075.80	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-1092.101~20.04.1, plus listed versions 5.15.0-1006.9~20.04.15.15.0-1012.17~20.04.15.15.0-1013.18~20.04.15.15.0-1016.21~20.04.15.15.0-1017.23~20.04.2 Show 45 moreShow less 5.15.0-1018.24~20.04.15.15.0-1021.28~20.04.15.15.0-1022.29~20.04.15.15.0-1025.32~20.04.25.15.0-1026.33~20.04.15.15.0-1027.34~20.04.15.15.0-1029.36~20.04.15.15.0-1030.37~20.04.15.15.0-1031.38~20.04.15.15.0-1032.40~20.04.15.15.0-1033.41~20.04.15.15.0-1034.42~20.04.15.15.0-1035.43~20.04.15.15.0-1036.44~20.04.15.15.0-1037.45~20.04.15.15.0-1038.46~20.04.15.15.0-1039.47~20.04.15.15.0-1040.48~20.04.15.15.0-1041.49~20.04.15.15.0-1042.50~20.04.15.15.0-1044.52~20.04.15.15.0-1045.53~20.04.25.15.0-1046.54~20.04.15.15.0-1047.55~20.04.15.15.0-1048.56~20.04.15.15.0-1049.57~20.04.15.15.0-1051.59~20.04.15.15.0-1052.60~20.04.15.15.0-1053.61~20.04.15.15.0-1054.62~20.04.15.15.0-1055.63~20.04.15.15.0-1058.66~20.04.15.15.0-1059.67~20.04.15.15.0-1060.68~20.04.15.15.0-1062.70~20.04.15.15.0-1065.73~20.04.15.15.0-1066.74~20.04.15.15.0-1067.75~20.04.15.15.0-1068.76~20.04.15.15.0-1069.77~20.04.15.15.0-1070.78~20.04.15.15.0-1071.79~20.04.15.15.0-1072.80~20.04.15.15.0-1073.81~20.04.15.15.0-1074.83~20.04.1	5.15.0-1092.101~20.04.1
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-gkeop` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.13 Show 45 moreShow less 5.4.0-1013.145.4.0-1014.155.4.0-1015.165.4.0-1016.175.4.0-1018.195.4.0-1021.225.4.0-1022.235.4.0-1023.245.4.0-1024.255.4.0-1025.265.4.0-1026.275.4.0-1027.285.4.0-1029.305.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.405.4.0-1040.415.4.0-1043.445.4.0-1046.485.4.0-1048.515.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1056.605.4.0-1057.615.4.0-1060.645.4.0-1061.655.4.0-1062.665.4.0-1064.685.4.0-1065.695.4.0-1066.705.4.0-1067.715.4.0-1068.725.4.0-1069.735.4.0-1070.745.4.0-1071.755.4.0-1072.765.4.0-1073.77	None known
`linux-gkeop-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1003.5~20.04.25.15.0-1005.7~20.04.15.15.0-1007.10~20.04.15.15.0-1008.12~20.04.15.15.0-1011.15~20.04.2 Show 40 moreShow less 5.15.0-1012.16~20.04.15.15.0-1013.17~20.04.15.15.0-1015.19~20.04.15.15.0-1016.21~20.04.15.15.0-1017.22~20.04.15.15.0-1018.23~20.04.15.15.0-1019.24~20.04.15.15.0-1020.25~20.04.15.15.0-1021.26~20.04.15.15.0-1022.27~20.04.15.15.0-1023.28~20.04.15.15.0-1024.29~20.04.15.15.0-1025.30~20.04.15.15.0-1026.31~20.04.15.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1030.35~20.04.15.15.0-1031.37~20.04.15.15.0-1032.38~20.04.15.15.0-1033.39~20.04.15.15.0-1034.40~20.04.15.15.0-1035.41~20.04.15.15.0-1036.42~20.04.15.15.0-1037.43~20.04.15.15.0-1038.44~20.04.15.15.0-1039.45~20.04.15.15.0-1040.46~20.04.15.15.0-1043.50~20.04.15.15.0-1044.51~20.04.15.15.0-1045.52~20.04.15.15.0-1046.53~20.04.15.15.0-1047.54~20.04.15.15.0-1048.55~20.04.15.15.0-1049.56~20.04.15.15.0-1050.57~20.04.15.15.0-1051.58~20.04.15.15.0-1052.59~20.04.15.15.0-1053.60~20.04.15.15.0-1054.61~20.04.15.15.0-1055.62~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.15` Ubuntu:Pro:20.04:LTS	before 5.15.0-156.166~20.04.1, plus listed versions 5.15.0-33.34~20.04.15.15.0-41.44~20.04.15.15.0-43.46~20.04.15.15.0-46.49~20.04.15.15.0-48.54~20.04.1 Show 45 moreShow less 5.15.0-50.56~20.04.15.15.0-52.58~20.04.15.15.0-53.59~20.04.15.15.0-56.62~20.04.15.15.0-57.63~20.04.15.15.0-58.64~20.04.15.15.0-60.66~20.04.15.15.0-67.74~20.04.15.15.0-69.76~20.04.15.15.0-70.77~20.04.15.15.0-71.78~20.04.15.15.0-72.79~20.04.15.15.0-73.80~20.04.15.15.0-75.82~20.04.15.15.0-76.83~20.04.15.15.0-78.85~20.04.15.15.0-79.86~20.04.25.15.0-82.91~20.04.15.15.0-83.92~20.04.15.15.0-84.93~20.04.15.15.0-86.96~20.04.15.15.0-87.97~20.04.15.15.0-88.98~20.04.15.15.0-89.99~20.04.15.15.0-91.101~20.04.15.15.0-92.102~20.04.15.15.0-94.104~20.04.15.15.0-97.107~20.04.15.15.0-100.110~20.04.15.15.0-101.111~20.04.15.15.0-102.112~20.04.15.15.0-105.115~20.04.15.15.0-106.116~20.04.15.15.0-107.117~20.04.15.15.0-113.123~20.04.15.15.0-116.126~20.04.15.15.0-117.127~20.04.15.15.0-118.128~20.04.15.15.0-119.129~20.04.15.15.0-121.131~20.04.15.15.0-122.132~20.04.15.15.0-124.134~20.04.15.15.0-125.135~20.04.15.15.0-126.136~20.04.15.15.0-127.137~20.04.1	5.15.0-156.166~20.04.1
`dtb-aarch64` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-64kb` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-default` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-default-base` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1.160000.2.4	6.12.0-160000.6.1.160000.2.4
`kernel-docs` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-kvmsmall` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-obs-build` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-obs-qa` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-rt` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-source` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-syms` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1
`kernel-zfcpdump` openSUSE:Leap 16.0 From an advisory covering 573 CVEs	before 6.12.0-160000.6.1	6.12.0-160000.6.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 6, 2026	affected	CVE List, EUVD, NVD
Nov 3, 2026	facts	OSV
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-38159 is a high vulnerability (CVSS 7.1) in Debian Linux, published July 3, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.19%, the 8th percentile. Fixed in kernel 6.6.96.1-1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 1,264 package rows, 843 versions, 4,190 references and the rest of 17 source descriptions. The JSON record has them. Also not on the record: 25 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 74 source records.