Every CVE Search/ Get API key

CVE-2025-38730

io_uring/net: commit partial buffers on retry

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

io_uring/net: commit partial buffers on retry

Ring provided buffers are potentially only valid within the single execution context in which they were acquired. io_uring deals with this and invalidates them on retry. But on the networking side, if MSG_WAITALL is set, or if the socket is of the streaming type and too little was processed, then it will hang on to the buffer rather than recycle or commit it. This is problematic for two reasons:

  1. If someone unregisters the provided buffer ring before a later retry, then the req->buf_list will no longer be valid.

  2. If multiple sockers are using the same buffer group, then multiple receives can consume the same memory. This can cause data corruption in the application, as either receive could land in the same userspace buffer.

Fix this by disallowing partial retries from pinning a provided buffer across multiple executions, if ring provided buffers are used.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.17%Up 0.2 points since Sep 5, 2025
90%50%10%1%

What each source reports

CVE List Score used 7.8

io_uring/net: commit partial buffers on retry

In the Linux kernel, the following vulnerability has been resolved:

io_uring/net: commit partial buffers on retry

Ring provided buffers are potentially only valid within the single execution context in which they were acquired. io_uring deals with this and invalidates them on retry. But on the networking side, if MSG_WAITALL is set, or if the socket is of the streaming type and too little was processed, then it will hang on to the buffer rather than recycle or commit it. This is problematic for two reasons:

  1. If someone unregisters the provided buffer ring before a later retry, then the req->buf_list will no longer be valid.

  2. If multiple sockers are using the same buffer group, then multiple receives can consume the same memory. This can cause data corruption in the application, as either receive could land in the same userspace buffer.

Fix this by disallowing partial retries from pinning a provided buffer across multiple executions, if ring provided buffers are used.

Record
CVE-2025-38730
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
EUVDEUVD-2025-26739 7.8

In the Linux kernel, the following vulnerability has been resolved:

io_uring/net: commit partial buffers on retry

Ring provided buffers are potentially only valid within the single execution context in which they were acquired. io_uring deals with this and invalidates them on retry. But on the networking side, if MSG_WAITALL is set, or if the socket is of the streaming type and too little was processed, then it will hang on to the buffer rather than recycle or commit it. This is problematic for two reasons:

  1. If someone unregisters the provided buffer ring before a later retry, then the req->buf_list will no longer be valid.

  2. If multiple sockers are using the same buffer group, then multiple receives can consume the same memory. This can cause data corruption in the application, as either receive could land in the same userspace buffer.

Fix this by disallowing partial retries from pinning a provided buffer across multiple executions, if ring provided buffers are used.

Record
EUVD-2025-26739
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-g87f-g973-9jmq 7.8

In the Linux kernel, the following vulnerability has been resolved: io_uring/net: commit partial...

In the Linux kernel, the following vulnerability has been resolved:

io_uring/net: commit partial buffers on retry

Ring provided buffers are potentially only valid within the single execution context in which they were acquired. io_uring deals with this and invalidates them on retry. But on the networking side, if MSG_WAITALL is set, or if the socket is of the streaming type and too little was processed, then it will hang on to the buffer rather than recycle or commit it. This is problematic for two reasons:

  1. If someone unregisters the provided buffer ring before a later retry, then the req->buf_list will no longer be valid.

  2. If multiple sockers are using the same buffer group, then multiple receives can consume the same memory. This can cause data corruption in the application, as either receive could land in the same userspace buffer.

Fix this by disallowing partial retries from pinning a provided buffer across multiple executions, if ring provided buffers are used.

Record
GHSA-g87f-g973-9jmq
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

io_uring/net: commit partial buffers on retry

Ring provided buffers are potentially only valid within the single execution context in which they were acquired. io_uring deals with this and invalidates them on retry. But on the networking side, if MSG_WAITALL is set, or if the socket is of the streaming type and too little was processed, then it will hang on to the buffer rather than recycle or commit it. This is problematic for two reasons:

  1. If someone unregisters the provided buffer ring before a later retry, then the req->buf_list will no longer be valid.

  2. If multiple sockers are using the same buffer group, then multiple receives can consume the same memory. This can cause data corruption in the application, as either receive could land in the same userspace buffer.

Fix this by disallowing partial retries from pinning a provided buffer across multiple executions, if ring provided buffers are used.

Record
CVE-2025-38730
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
OSVBELL-CVE-2025-38730 7.8
Record
BELL-CVE-2025-38730
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

io_uring/net: commit partial buffers on retry

In the Linux kernel, the following vulnerability has been resolved:

io_uring/net: commit partial buffers on retry

Ring provided buffers are potentially only valid within the single execution context in which they were acquired. io_uring deals with this and invalidates them on retry. But on the networking side, if MSG_WAITALL is set, or if the socket is of the streaming type and too little was processed, then it will hang on to the buffer rather than recycle or commit it. This is problematic for two reasons:

  1. If someone unregisters the provided buffer ring before a later retry, then the req->buf_list will no longer be valid.

  2. If multiple sockers are using the same buffer group, then multiple receives can consume the same memory. This can cause data corruption in the application, as either receive could land in the same userspace buffer.

Fix this by disallowing partial retries from pinning a provided buffer across multiple executions, if ring provided buffers are used.

Record
CVE-2025-38730
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 47 moreShow less
OSVDEBIAN-CVE-2025-38730 7.8

In the Linux kernel, the following vulnerability has been resolved: io_uring/net: commit partial buffers on retry Ring provided buffers are potentially only valid within the single execution context in which they were acquired. io_uring deals with this and invalidates them on retry. But on the networking side, if MSG_WAITALL is set, or if the socket is of the streaming type and too little was processed, then it will hang on to the buffer rather than recycle or commit it. This is problematic for two reasons: 1) If someone unregisters the provided buffer ring before a later retry, then the req->buf_list will no longer be valid. 2) If multiple sockers are using the same buffer group, then multiple receives can consume the same memory. This can cause data corruption in the application, as either receive could land in the same userspace buffer. Fix this by disallowing partial retries from pinning a provided buffer across multiple executions, if ring provided buffers are used.

Record
DEBIAN-CVE-2025-38730
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1759 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

iommu/s390: Implement blocking domain

This fixes a crash when surprise hot-unplugging a PCI device. This crash happens because during hot-unplug __iommu_group_set_domain_nofail() attaching the default domain fails when the platform no longer recognizes the device as it has already been removed and we end up with a NULL domain pointer and UAF. This is exactly the case referred to in the second comment in __iommu_device_set_domain() and just as stated there if we can instead attach the blocking domain the UAF is prevented as this can handle the already removed device. Implement the blocking domain to use this handling. With this change, the crash is fixed but we still hit a warning attempting to change DMA ownership on a blocked device.(CVE-2024-53232)

In the Linux kernel, the following vulnerability has been resolved:

iommu: Fix two issues in iommu_copy_struct_from_user()

In the review for iommu_copy_struct_to_user() helper, Matt pointed out that a NULL pointer should be rejected prior to dereferencing it: https://lore.kernel.org/all/(CVE-2025-37900)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: Avoid race in open_cached_dir with lease breaks

A pre-existing valid cfid returned from find_or_create_cached_dir might race with a lease break, meaning open_cached_dir doesn't consider it valid, and thinks it's newly-constructed. This leaks a dentry reference if the allocation occurs before the queued lease break work runs.

Avoid the race by extending holding the cfid_list_lock across find_or_create_cached_dir and when the result is checked.(CVE-2025-37954)

In the Linux kernel, the following vulnerability has been resolved:

net_sched: prio: fix a race in prio_tune()

Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer fires at the wrong time.

The race is as follows:

CPU 0 CPU 1 [1]: lock root [2]: qdisc_tree_flush_backlog() [3]: unlock root | | [5]: lock root | [6]: rehash | [7]: qdisc_tree_reduce_backlog() | [4]: qdisc_put()

This can be abused to underflow a parent's qlen.

Calling qdisc_purge_queue() instead of qdisc_tree_flush_backlog() should fix the race, because all packets will be purged from the qdisc before releasing the lock.(CVE-2025-38083)

In the Linux kernel, the following vulnerability has been resolved:

IB/mlx5: Fix potential deadlock in MR deregistration

The issue arises when kzalloc() is invoked while holding umem_mutex or any other lock acquired under umem_mutex. This is problematic because kzalloc() can trigger fs_reclaim_aqcuire(), which may, in turn, invoke mmu_notifier_invalidate_range_start(). This function can lead to mlx5_ib_invalidate_range(), which attempts to acquire umem_mutex again, resulting in a deadlock.

The problematic flow: CPU0 | CPU1 ---------------------------------------|------------------------------------------------ mlx5_ib_dereg_mr() | → revoke_mr() | → mutex_lock(&umem_odp->umem_mutex) | | mlx5_mkey_cache_init() | → mutex_lock(&dev->cache.rb_lock) | → mlx5r_cache_create_ent_locked() | → kzalloc(GFP_KERNEL) | → fs_reclaim() | → mmu_notifier_invalidate_range_start() | → mlx5_ib_invalidate_range() | → mutex_lock(&umem_odp->umem_mutex) →…

Record
OESA-2026-1759
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1760 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

iommu/s390: Implement blocking domain

This fixes a crash when surprise hot-unplugging a PCI device. This crash happens because during hot-unplug __iommu_group_set_domain_nofail() attaching the default domain fails when the platform no longer recognizes the device as it has already been removed and we end up with a NULL domain pointer and UAF. This is exactly the case referred to in the second comment in __iommu_device_set_domain() and just as stated there if we can instead attach the blocking domain the UAF is prevented as this can handle the already removed device. Implement the blocking domain to use this handling. With this change, the crash is fixed but we still hit a warning attempting to change DMA ownership on a blocked device.(CVE-2024-53232)

In the Linux kernel, the following vulnerability has been resolved:

iommu: Fix two issues in iommu_copy_struct_from_user()

In the review for iommu_copy_struct_to_user() helper, Matt pointed out that a NULL pointer should be rejected prior to dereferencing it: https://lore.kernel.org/all/(CVE-2025-37900)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: Avoid race in open_cached_dir with lease breaks

A pre-existing valid cfid returned from find_or_create_cached_dir might race with a lease break, meaning open_cached_dir doesn't consider it valid, and thinks it's newly-constructed. This leaks a dentry reference if the allocation occurs before the queued lease break work runs.

Avoid the race by extending holding the cfid_list_lock across find_or_create_cached_dir and when the result is checked.(CVE-2025-37954)

In the Linux kernel, the following vulnerability has been resolved:

net_sched: prio: fix a race in prio_tune()

Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer fires at the wrong time.

The race is as follows:

CPU 0 CPU 1 [1]: lock root [2]: qdisc_tree_flush_backlog() [3]: unlock root | | [5]: lock root | [6]: rehash | [7]: qdisc_tree_reduce_backlog() | [4]: qdisc_put()

This can be abused to underflow a parent's qlen.

Calling qdisc_purge_queue() instead of qdisc_tree_flush_backlog() should fix the race, because all packets will be purged from the qdisc before releasing the lock.(CVE-2025-38083)

In the Linux kernel, the following vulnerability has been resolved:

IB/mlx5: Fix potential deadlock in MR deregistration

The issue arises when kzalloc() is invoked while holding umem_mutex or any other lock acquired under umem_mutex. This is problematic because kzalloc() can trigger fs_reclaim_aqcuire(), which may, in turn, invoke mmu_notifier_invalidate_range_start(). This function can lead to mlx5_ib_invalidate_range(), which attempts to acquire umem_mutex again, resulting in a deadlock.

The problematic flow: CPU0 | CPU1 ---------------------------------------|------------------------------------------------ mlx5_ib_dereg_mr() | → revoke_mr() | → mutex_lock(&umem_odp->umem_mutex) | | mlx5_mkey_cache_init() | → mutex_lock(&dev->cache.rb_lock) | → mlx5r_cache_create_ent_locked() | → kzalloc(GFP_KERNEL) | → fs_reclaim() | → mmu_notifier_invalidate_range_start() | → mlx5_ib_invalidate_range() | → mutex_lock(&umem_odp->umem_mutex) →…

Record
OESA-2026-1760
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-1761 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

iommu/s390: Implement blocking domain

This fixes a crash when surprise hot-unplugging a PCI device. This crash happens because during hot-unplug __iommu_group_set_domain_nofail() attaching the default domain fails when the platform no longer recognizes the device as it has already been removed and we end up with a NULL domain pointer and UAF. This is exactly the case referred to in the second comment in __iommu_device_set_domain() and just as stated there if we can instead attach the blocking domain the UAF is prevented as this can handle the already removed device. Implement the blocking domain to use this handling. With this change, the crash is fixed but we still hit a warning attempting to change DMA ownership on a blocked device.(CVE-2024-53232)

In the Linux kernel, the following vulnerability has been resolved:

iommu: Fix two issues in iommu_copy_struct_from_user()

In the review for iommu_copy_struct_to_user() helper, Matt pointed out that a NULL pointer should be rejected prior to dereferencing it: https://lore.kernel.org/all/(CVE-2025-37900)

In the Linux kernel, the following vulnerability has been resolved:

smb: client: Avoid race in open_cached_dir with lease breaks

A pre-existing valid cfid returned from find_or_create_cached_dir might race with a lease break, meaning open_cached_dir doesn't consider it valid, and thinks it's newly-constructed. This leaks a dentry reference if the allocation occurs before the queued lease break work runs.

Avoid the race by extending holding the cfid_list_lock across find_or_create_cached_dir and when the result is checked.(CVE-2025-37954)

In the Linux kernel, the following vulnerability has been resolved:

net_sched: prio: fix a race in prio_tune()

Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer fires at the wrong time.

The race is as follows:

CPU 0 CPU 1 [1]: lock root [2]: qdisc_tree_flush_backlog() [3]: unlock root | | [5]: lock root | [6]: rehash | [7]: qdisc_tree_reduce_backlog() | [4]: qdisc_put()

This can be abused to underflow a parent's qlen.

Calling qdisc_purge_queue() instead of qdisc_tree_flush_backlog() should fix the race, because all packets will be purged from the qdisc before releasing the lock.(CVE-2025-38083)

In the Linux kernel, the following vulnerability has been resolved:

IB/mlx5: Fix potential deadlock in MR deregistration

The issue arises when kzalloc() is invoked while holding umem_mutex or any other lock acquired under umem_mutex. This is problematic because kzalloc() can trigger fs_reclaim_aqcuire(), which may, in turn, invoke mmu_notifier_invalidate_range_start(). This function can lead to mlx5_ib_invalidate_range(), which attempts to acquire umem_mutex again, resulting in a deadlock.

The problematic flow: CPU0 | CPU1 ---------------------------------------|------------------------------------------------ mlx5_ib_dereg_mr() | → revoke_mr() | → mutex_lock(&umem_odp->umem_mutex) | | mlx5_mkey_cache_init() | → mutex_lock(&dev->cache.rb_lock) | → mlx5r_cache_create_ent_locked() | → kzalloc(GFP_KERNEL) | → fs_reclaim() | → mmu_notifier_invalidate_range_start() | → mlx5_ib_invalidate_range() | → mutex_lock(&umem_odp->umem_mutex) →…

Record
OESA-2026-1761
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:2212 7.4

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:2212
CVSS 3.1
7.4 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:2282 7.3

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:2282
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:2759 7.3

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:2759
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:2766 7.5

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:2766
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:3124 7.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:3124
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:2212 7.4

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: net: openvswitch: fix nested key length validation in the set() action (CVE-2025-37789)

  • kernel: Linux kernel: irqchip/gic-v2m use-after-free vulnerability (CVE-2025-37819)

  • kernel: RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CVE-2025-38022)

  • kernel: Linux kernel: RDMA/rxe use-after-free vulnerability leading to potential arbitrary code execution (CVE-2025-38024)

  • kernel: Linux kernel: Memory corruption in Squashfs due to incorrect block size calculation (CVE-2025-38415)

  • kernel: vsock/vmci: Clear the vmci transport packet properly when initializing it (CVE-2025-38403)

  • kernel: Linux kernel: Denial of Service in ATM CLIP module via infinite recursion (CVE-2025-38459)

  • kernel: Linux kernel: Data corruption and system instability due to improper io_uring/net buffer handling (CVE-2025-38730)

  • kernel: Linux kernel: Denial of Service via out-of-bounds read in USB configuration parsing (CVE-2025-39760)

  • kernel: net: use dst_dev_rcu() in sk_setup_caps() (CVE-2025-40170)

  • kernel: ipv6: use RCU in ip6_xmit() (CVE-2025-40135)

  • kernel: Bluetooth: ISO: Fix possible UAF on iso_conn_free (CVE-2025-40141)

  • kernel: ipv6: use RCU in ip6_output() (CVE-2025-40158)

  • kernel: Linux kernel: Use-after-free in proc_readdir_de() can lead to privilege escalation or denial of service. (CVE-2025-40271)

  • kernel: Linux kernel ALSA USB audio driver: Buffer overflow leading to information disclosure and denial of service (CVE-2025-40269)

  • kernel: Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CVE-2025-40318)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:2212
CVSS 3.1
7.4 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:2282 7.3

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Linux kernel: Memory corruption in Squashfs due to incorrect block size calculation (CVE-2025-38415)

  • kernel: vsock/vmci: Clear the vmci transport packet properly when initializing it (CVE-2025-38403)

  • kernel: Linux kernel: Data corruption and system instability due to improper io_uring/net buffer handling (CVE-2025-38730)

  • kernel: smb: client: let recv_done verify data_offset, data_length and remaining_data_length (CVE-2025-39933)

  • kernel: mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable() (CVE-2025-40133)

  • kernel: Linux kernel: Out-of-bounds write in fbdev can lead to privilege escalation, information disclosure, or denial of service. (CVE-2025-40304)

  • kernel: Linux kernel: Information disclosure and denial of service via out-of-bounds read in font glyph handling (CVE-2025-40322)

  • kernel: svcrdma: use rc_pageoff for memcpy byte offset (CVE-2025-68811)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:2282
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-02
OSVROOT-OS-UBUNTU-2404-CVE-2025-38730 7.8

CVE-2025-38730 in linux - Patched by Root

Root has patched CVE-2025-38730 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2025-38730
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVUBUNTU-CVE-2025-38730 8.5

In the Linux kernel, the following vulnerability has been resolved: io_uring/net: commit partial buffers on retry Ring provided buffers are potentially only valid within the single execution context in which they were acquired. io_uring deals with this and invalidates them on retry. But on the networking side, if MSG_WAITALL is set, or if the socket is of the streaming type and too little was processed, then it will hang on to the buffer rather than recycle or commit it. This is problematic for two reasons: 1) If someone unregisters the provided buffer ring before a later retry, then the req->buf_list will no longer be valid. 2) If multiple sockers are using the same buffer group, then multiple receives can consume the same memory. This can cause data corruption in the application, as either receive could land in the same userspace buffer. Fix this by disallowing partial retries from pinning a provided buffer across multiple executions, if ring provided buffers are used.

Record
UBUNTU-CVE-2025-38730
CVSS 4.0
8.5 HighCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:2212 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: net: openvswitch: fix nested key length validation in the set() action (CVE-2025-37789)
  • kernel: Linux kernel: irqchip/gic-v2m use-after-free vulnerability (CVE-2025-37819)
  • kernel: RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CVE-2025-38022)
  • kernel: Linux kernel: RDMA/rxe use-after-free vulnerability leading to potential arbitrary code execution (CVE-2025-38024)
  • kernel: Linux kernel: Memory corruption in Squashfs due to incorrect block size calculation (CVE-2025-38415)
  • kernel: vsock/vmci: Clear the vmci transport packet properly when initializing it (CVE-2025-38403)
  • kernel: Linux kernel: Denial of Service in ATM CLIP module via infinite recursion (CVE-2025-38459)
  • kernel: Linux kernel: Data corruption and system instability due to improper io_uring/net buffer handling (CVE-2025-38730)
  • kernel: Linux kernel: Denial of Service via out-of-bounds read in USB configuration parsing (CVE-2025-39760)
  • kernel: net: use dst_dev_rcu() in sk_setup_caps() (CVE-2025-40170)
  • kernel: ipv6: use RCU in ip6_xmit() (CVE-2025-40135)
  • kernel: Bluetooth: ISO: Fix possible UAF on iso_conn_free (CVE-2025-40141)
  • kernel: ipv6: use RCU in ip6_output() (CVE-2025-40158)
  • kernel: Linux kernel: Use-after-free in proc_readdir_de() can lead to privilege escalation or denial of service. (CVE-2025-40271)
  • kernel: Linux kernel ALSA USB audio driver: Buffer overflow leading to information disclosure and denial of service (CVE-2025-40269)
  • kernel: Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CVE-2025-40318)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:2212
Updated
2026-11-02
OSVALSA-2026:2282 No score

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Linux kernel: Memory corruption in Squashfs due to incorrect block size calculation (CVE-2025-38415)
  • kernel: vsock/vmci: Clear the vmci transport packet properly when initializing it (CVE-2025-38403)
  • kernel: Linux kernel: Data corruption and system instability due to improper io_uring/net buffer handling (CVE-2025-38730)
  • kernel: smb: client: let recv_done verify data_offset, data_length and remaining_data_length (CVE-2025-39933)
  • kernel: mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable() (CVE-2025-40133)
  • kernel: Linux kernel: Out-of-bounds write in fbdev can lead to privilege escalation, information disclosure, or denial of service. (CVE-2025-40304)
  • kernel: Linux kernel: Information disclosure and denial of service via out-of-bounds read in font glyph handling (CVE-2025-40322)
  • kernel: svcrdma: use rc_pageoff for memcpy byte offset (CVE-2025-68811)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:2282
Updated
2026-11-02
OSVAZL-66830 No score

CVE-2025-38730 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved:

io_uring/net: commit partial buffers on retry

Ring provided buffers are potentially only valid within the single execution context in which they were acquired. io_uring deals with this and invalidates them on retry. But on the networking side, if MSG_WAITALL is set, or if the socket is of the streaming type and too little was processed, then it will hang on to the buffer rather than recycle or commit it. This is problematic for two reasons:

  1. If someone unregisters the provided buffer ring before a later retry, then the req->buf_list will no longer be valid.

  2. If multiple sockers are using the same buffer group, then multiple receives can consume the same memory. This can cause data corruption in the application, as either receive could land in the same userspace buffer.

Fix this by disallowing partial retries from pinning a provided buffer across multiple executions, if ring provided buffers are used.

Record
AZL-66830
Updated
2026-11-02
OSVCLSA-2026-1777633439 No score

kernel: Fix of 144 CVEs

  • crypto: algif_aead - Fix minimum RX size check for decryption {CVE-2026-31431}
  • crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl {CVE-2026-31431}
  • crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-31431}
  • crypto: authencesn - Fix src offset when decrypting in-place {CVE-2026-31431}
  • crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption {CVE-2026-31431}
  • crypto: authenc - use memcpy_sglist() instead of null skcipher {CVE-2026-31431}
  • crypto: algif_aead - snapshot IV for async AEAD requests {CVE-2026-31431}
  • crypto: algif_aead - Revert to operating out-of-place {CVE-2026-31431}
  • crypto: algif_aead - use memcpy_sglist() instead of null skcipher {CVE-2026-31431}
  • crypto: scatterwalk - Backport memcpy_sglist() {CVE-2026-31431}
  • scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() {CVE-2026-23216}
  • VMCI: Fix use-after-free when removing resource in vmci_resource_remove() {CVE-2024-46738}
  • ptp: fix integer overflow in max_vclocks_store {CVE-2024-40994}
  • xsk: Fix xsk_diag use-after-free error during socket cleanup {CVE-2023-53426}
  • net: hns3: add VLAN id validation before using {CVE-2025-71112}
  • scsi: qla2xxx: Fix improper freeing of purex item {CVE-2025-68741}
  • tracing: Consider the NULL character when validating the event length {CVE-2024-50131}
  • capabilities: fix undefined behavior in bit shift for CAP_TO_MASK {CVE-2022-49870}
  • scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422}
  • netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() {CVE-2026-23111}
  • team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091}
  • i2c: piix4: Fix adapter not be removed in piix4_remove() {CVE-2022-49900}
  • libceph: replace overzealous BUG_ON in osdmap_apply_incremental() {CVE-2026-22990}
  • RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert {CVE-2025-38387}
  • ACPICA: Refuse to evaluate a method if arguments are missing {CVE-2025-38386}
  • drm/tegra: Fix a possible null pointer dereference {CVE-2025-38363}
  • ACPICA: fix acpi operand cache leak in dswstate.c {CVE-2025-38345}
  • ACPICA: fix acpi parse and parseext cache leaks {CVE-2025-38344}
  • jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() {CVE-2025-38337}
  • x86/sgx: Prevent attempts to reclaim poisoned pages {CVE-2025-38334}
  • mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). {CVE-2025-38324}
  • drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table {CVE-2025-38319}
  • fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() {CVE-2025-38312}
  • seg6: Fix validation of nexthop addresses {CVE-2025-38310}
  • bpf: Fix WARN() in get_bpf_raw_tp_regs {CVE-2025-38285}
  • atm: clip: prevent NULL deref in clip_push() {CVE-2025-38251}
  • nfsd: Initialize ssc before laundromat_work to prevent NULL dereference {CVE-2025-38231}
  • ext4: inline: fix len overflow in ext4_prepare_inline_data {CVE-2025-38222}
  • fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var {CVE-2025-38215}
  • fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var {CVE-2025-38214}
  • atm: Revert atm_account_tx() if copy_from_iter_full() fails. {CVE-2025-38190}
  • tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer {CVE-2025-38184}
  • calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). {CVE-2025-38181}
  • thunderbolt: Do not double dequeue a configuration request {CVE-2025-38174}
  • bpf: fix ktls panic with sockmap {CVE-2025-38166}
  • gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO {CVE-2025-38122}
  • net_sched: sch_sfq: fix a potential crash on gso_skb handling {CVE-2025-38115}
  • x86/iopl: Cure TIF_IO_BITMAP inconsistencies {CVE-2025-38100}
  • dma-buf: insert memory barrier before updating num_fences {CVE-2025-38095}
  • net_sched: prio: fix a race in prio_tune() {CVE-2025-38083} -…
Record
CLSA-2026-1777633439
Updated
2026-11-02
OSVLSN-0122-1 No score

Kernel Live Patch Security Notice

In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix use after free in midcomms commit While working on processing dlm message in softirq context I experienced the following KASAN use-after-free warning: .

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() This patch fixes a NULL pointer dereference bug in brcmfmac that occurs when a high 'sd_sgentry_align' value applies (e.g. 512) and a lot of queued SKBs are sent from the pkt queue.

In the Linux kernel, the following vulnerability has been resolved: padata: fix UAF in padata_reorder A bug was found when run ltp test: BUG: KASAN: slab-use-after-free in padata_find_next+0x29/0x1a0 Read of size 4 at addr ffff88bbfe003524 by task kworker/u113:2/3039206 CPU: 0 PID: 3039206 Comm: kworker/u113:2 Kdump: loaded Not tainted 6.6.0+ Workqueue: pdecrypt_parallel padata_parallel_worker Call Trace: <TASK> dump_stack_lvl+0x32/0x50 print_address_description.constprop.0+0x6b/0x3d0 print_report+0xdd/0x2c0 kasan_report+0xa5/0xd0 padata_find_next+0x29/0x1a0 padata_reorder+0x131/0x220 padata_parallel_worker+0x3d/0xc0 process_one_work+0x2ec/0x5a0 If 'mdelay(10)' is added before calling 'padata_find_next' in the 'padata_reorder' function, this issue could be reproduced easily with ltp test (pcrypt_aead01).

In the Linux kernel, the following vulnerability has been resolved: geneve: Fix use-after-free in geneve_find_dev().

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_sessions_deregister() In multichannel mode, UAF issue can occur in session_deregister when the second channel sets up a session through the connection of the first channel.

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_tunnel: fix geneve_opt type confusion addition When handling multiple NFTA_TUNNEL_KEY_OPTS_GENEVE attributes, the parsing logic should place every geneve_opt structure one by one compactly.

In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4_xattr_inode_dec_ref_all' we should ignore xattrs entries past the 'end' entry.

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in __smb2_lease_break_noti() Move tcp_transport free to ksmbd_conn_free.

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix dangling pointer in krb_authenticate krb_authenticate frees sess->user and does not set the pointer to NULL.

In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too Similarly to the previous patch, we need to safe guard hfsc_dequeue() too. But for this one, we don't have a reliable reproducer.)(CVE-2025-37823).

In the Linux kernel, the following vulnerability has been resolved: jbd2: remove wrong sb->s_sequence check Journal emptiness is not determined by sb->s_sequence .

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix mode1 reset crash issue If HW scheduler hangs and mode1 reset is used to recover GPU, KFD signal user space to abort the processes.

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Use local fence in error path of xe_migrate_clear The intent of the error path in xe_migrate_clear is to wait on locally generated fence and then return.

In the Linux kernel, the following vulnerability has been resolved: net_sched: qfq: Fix double list add in class with netem as child qdisc As described in Gerrard's report .

In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: Fix double list add in class with netem as child qdisc As described in Gerrard's report .

In the Linux kernel, the following vulnerability has been resolved: vxlan: vnifilter: Fix unlocked deletion of default FDB entry When a VNI is deleted…

Record
LSN-0122-1
Updated
2026-11-03
OSVMGASA-2025-0234 No score

Updated kernel-linus packages fix security vulnerabilities

Vanilla upstream kernel version 6.6.105 fixes bugs and vulnerabilities. For information about the vulnerabilities see the links.

Record
MGASA-2025-0234
Updated
2026-11-02
OSVMGASA-2025-0235 No score

Updated kernel, kmod-virtualbox & kmod-xtables-addons packages fix security vulnerabilities

Upstream kernel version 6.6.105 fixes bugs and vulnerabilities. The kmod-virtualbox & kmod-xtables-addons packages have been updated to work with this new kernel. The newer meta-task and mageia-repos packages are required to simplify the correct installation of the kernel-stable-userspace-headers (for backport kernel-stable) and back to kernel-userspace-headers (for 6.6 kernels) packages see https://bugs.mageia.org/show_bug.cgi?id=34545. For information about the vulnerabilities see the links.

Record
MGASA-2025-0235
Updated
2026-11-02
OSVopenSUSE-SU-2025:20081-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
  • CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
  • CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
  • CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
  • CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
  • CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
  • CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
  • CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
  • CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
  • CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
  • CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
  • CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
  • CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
  • CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
  • CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
  • CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
  • CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
  • CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
  • CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
  • CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
  • CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…
Record
openSUSE-SU-2025:20081-1
Updated
2026-11-02
OSVSUSE-SU-2025:03600-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
  • CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
  • CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
  • CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
  • CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
  • CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
  • CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
  • CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
  • CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
  • CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
  • CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
  • CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
  • CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
  • CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
  • CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
  • CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
  • CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
  • CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
  • CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
  • CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
  • CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
  • CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
  • CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
  • CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
  • CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
  • CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
  • CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
  • CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
  • CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
  • CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
  • CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
  • CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
  • CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
  • CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
  • CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
  • CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
  • CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
  • CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
  • CVE-2025-38701: ext4: do not BUG…
Record
SUSE-SU-2025:03600-1
Updated
2026-11-02
OSVSUSE-SU-2025:03601-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
  • CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
  • CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
  • CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
  • CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
  • CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
  • CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
  • CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
  • CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
  • CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
  • CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
  • CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
  • CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
  • CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
  • CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
  • CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
  • CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
  • CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
  • CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
  • CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
  • CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
  • CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
  • CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
  • CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
  • CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
  • CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
  • CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
  • CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
  • CVE-2025-38628: vdpa/mlx5: Fix release of uninitialized resources on error path (bsc#1248616).
  • CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
  • CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
  • CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
  • CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
  • CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
  • CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
  • CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
  • CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
  • CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
  • CVE-2025-38679: media:…
Record
SUSE-SU-2025:03601-1
Updated
2026-11-02
OSVSUSE-SU-2025:03602-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2025-39782: jbd2: prevent softlockup in jbd2_log_do_checkpoint() (bsc#1249526).
  • CVE-2025-39773: net: bridge: fix soft lockup in br_multicast_query_expired() (bsc#1249504).
  • CVE-2025-39746: wifi: ath10k: shutdown driver when hardware is unreliable (bsc#1249516).
  • CVE-2025-39718: vsock/virtio: Validate length in packet header before skb_put() (bsc#1249305).
  • CVE-2025-39705: drm/amd/display: fix a Null pointer dereference vulnerability (bsc#1249295).
  • CVE-2025-39703: net, hsr: reject HSR frame if skb can't hold tag (bsc#1249315).
  • CVE-2025-39691: fs/buffer: fix use-after-free when call bh_read() helper (bsc#1249374).
  • CVE-2025-39682: tls: fix handling of zero-length records on the rx_list (bsc#1249284).
  • CVE-2025-39678: platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL (bsc#1249290).
  • CVE-2025-38732: netfilter: nf_reject: do not leak dst refcount for loopback packets (bsc#1249262).
  • CVE-2025-38730: io_uring/net: commit partial buffers on retry (bsc#1249172).
  • CVE-2025-38722: habanalabs: fix UAF in export_dmabuf() (bsc#1249163).
  • CVE-2025-38721: netfilter: ctnetlink: fix refcount leak on table dump (bsc#1249176).
  • CVE-2025-38709: loop: Avoid updating block size under exclusive owner (bsc#1249199).
  • CVE-2025-38705: drm/amd/pm: fix null pointer access (bsc#1249334).
  • CVE-2025-38701: ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (bsc#1249258).
  • CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
  • CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
  • CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
  • CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
  • CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
  • CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
  • CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
  • CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
  • CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
  • CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
  • CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
  • CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
  • CVE-2025-38618: vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1248511).
  • CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
  • CVE-2025-38608: bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (bsc#1248338).
  • CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
  • CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
  • CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
  • CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
  • CVE-2025-38591: bpf: Reject narrower access to pointer ctx fields (bsc#1248363).
  • CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
  • CVE-2025-38585: staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int() (bsc#1248355).
  • CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
  • CVE-2025-38560: x86/sev: Evict cache lines during SNP memory validation (bsc#1248312).
  • CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
  • CVE-2025-38546: atm: clip: Fix memory leak of struct clip_vcc (bsc#1248223).
  • CVE-2025-38544: rxrpc:…
Record
SUSE-SU-2025:03602-1
Updated
2026-11-02
OSVSUSE-SU-2025:03633-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
  • CVE-2024-46733: btrfs: fix qgroup reserve leaks in cow_file_range (bsc#1230708).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
  • CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
  • CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
  • CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
  • CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
  • CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
  • CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
  • CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
  • CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
  • CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
  • CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
  • CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
  • CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
  • CVE-2025-38245: atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister() (bsc#1246193).
  • CVE-2025-38251: atm: clip: prevent NULL deref in clip_push() (bsc#1246181).
  • CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
  • CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
  • CVE-2025-38360: drm/amd/display: Add more checks for DSC / HUBP ONO guarantees (bsc#1247078).
  • CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
  • CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
  • CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
  • CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
  • CVE-2025-38439: bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT (bsc#1247155).
  • CVE-2025-38440: net/mlx5e: Fix race between DIM disable and net_dim() (bsc#1247290).
  • CVE-2025-38441: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (bsc#1247167).
  • CVE-2025-38444: raid10: cleanup memleak at raid10_make_request (bsc#1247162).
  • CVE-2025-38445: md/raid1: Fix stack memory use after return in raid1_reshape (bsc#1247229).
  • CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
  • CVE-2025-38458: atm: clip: Fix NULL pointer dereference in vcc_sendmsg() (bsc#1247116).
  • CVE-2025-38459: atm: clip: Fix infinite recursive call of clip_push() (bsc#1247119).
  • CVE-2025-38464: tipc: Fix use-after-free in tipc_conn_close() (bsc#1247112).
  • CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
  • CVE-2025-38472: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (bsc#1247313).
  • CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
  • CVE-2025-38490: net: libwx: remove duplicate…
Record
SUSE-SU-2025:03633-1
Updated
2026-11-02
OSVSUSE-SU-2025:03634-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
  • CVE-2024-46733: btrfs: fix qgroup reserve leaks in cow_file_range (bsc#1230708).
  • CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
  • CVE-2025-37885: KVM: x86: Reset IRTE to host control if new route isn't postable (bsc#1242960).
  • CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
  • CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
  • CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
  • CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
  • CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
  • CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
  • CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
  • CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
  • CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
  • CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
  • CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
  • CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
  • CVE-2025-38245: atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister() (bsc#1246193).
  • CVE-2025-38251: atm: clip: prevent NULL deref in clip_push() (bsc#1246181).
  • CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
  • CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
  • CVE-2025-38360: drm/amd/display: Add more checks for DSC / HUBP ONO guarantees (bsc#1247078).
  • CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
  • CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
  • CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
  • CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
  • CVE-2025-38439: bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT (bsc#1247155).
  • CVE-2025-38441: netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (bsc#1247167).
  • CVE-2025-38444: raid10: cleanup memleak at raid10_make_request (bsc#1247162).
  • CVE-2025-38445: md/raid1: Fix stack memory use after return in raid1_reshape (bsc#1247229).
  • CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
  • CVE-2025-38458: atm: clip: Fix NULL pointer dereference in vcc_sendmsg() (bsc#1247116).
  • CVE-2025-38459: atm: clip: Fix infinite recursive call of clip_push() (bsc#1247119).
  • CVE-2025-38464: tipc: Fix use-after-free in tipc_conn_close() (bsc#1247112).
  • CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
  • CVE-2025-38472: netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (bsc#1247313).
  • CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
  • CVE-2025-38490: net: libwx: remove duplicate page_pool_put_full_page() (bsc#1247243).
  • CVE-2025-38491: mptcp: make fallback action and fallback decision…
Record
SUSE-SU-2025:03634-1
Updated
2026-11-02
OSVSUSE-SU-2025:20851-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
  • CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
  • CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
  • CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
  • CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
  • CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
  • CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
  • CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
  • CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
  • CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
  • CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
  • CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
  • CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
  • CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
  • CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
  • CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
  • CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
  • CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
  • CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
  • CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
  • CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
  • CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
  • CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
  • CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
  • CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
  • CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
  • CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
  • CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
  • CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
  • CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
  • CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
  • CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
  • CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
  • CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
  • CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
  • CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
  • CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
  • CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
  • CVE-2025-38701: ext4: do…
Record
SUSE-SU-2025:20851-1
Updated
2026-11-02
OSVSUSE-SU-2025:20861-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
  • CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
  • CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
  • CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
  • CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
  • CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
  • CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
  • CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
  • CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
  • CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
  • CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
  • CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
  • CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
  • CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
  • CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
  • CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
  • CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
  • CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
  • CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
  • CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
  • CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
  • CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
  • CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
  • CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
  • CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
  • CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
  • CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
  • CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
  • CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
  • CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
  • CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
  • CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
  • CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
  • CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
  • CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
  • CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
  • CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
  • CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
  • CVE-2025-38701: ext4: do…
Record
SUSE-SU-2025:20861-1
Updated
2026-11-02
OSVSUSE-SU-2025:20870-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
  • CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
  • CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
  • CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
  • CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
  • CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
  • CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
  • CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
  • CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
  • CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
  • CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
  • CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
  • CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
  • CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
  • CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
  • CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
  • CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
  • CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
  • CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
  • CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
  • CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
  • CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
  • CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
  • CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
  • CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
  • CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
  • CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
  • CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
  • CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
  • CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
  • CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
  • CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
  • CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
  • CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
  • CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
  • CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
  • CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
  • CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
  • CVE-2025-38701: ext4:…
Record
SUSE-SU-2025:20870-1
Updated
2026-11-02
OSVSUSE-SU-2025:20898-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
  • CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
  • CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
  • CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
  • CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
  • CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
  • CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
  • CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
  • CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
  • CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
  • CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
  • CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
  • CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
  • CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
  • CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
  • CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
  • CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
  • CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
  • CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
  • CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
  • CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
  • CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
  • CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
  • CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
  • CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
  • CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
  • CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
  • CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
  • CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
  • CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
  • CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
  • CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
  • CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
  • CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
  • CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
  • CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
  • CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
  • CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
  • CVE-2025-38701: ext4:…
Record
SUSE-SU-2025:20898-1
Updated
2026-11-02
OSVSUSE-SU-2025:21074-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
  • CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
  • CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
  • CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
  • CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
  • CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
  • CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
  • CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
  • CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
  • CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
  • CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
  • CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
  • CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
  • CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
  • CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
  • CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
  • CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
  • CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
  • CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
  • CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
  • CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…
Record
SUSE-SU-2025:21074-1
Updated
2026-11-02
OSVSUSE-SU-2025:21139-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
  • CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
  • CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
  • CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
  • CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
  • CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
  • CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
  • CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
  • CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
  • CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
  • CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
  • CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
  • CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
  • CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
  • CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
  • CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
  • CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
  • CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
  • CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
  • CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
  • CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…
Record
SUSE-SU-2025:21139-1
Updated
2026-11-02
OSVSUSE-SU-2025:21179-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
  • CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
  • CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
  • CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
  • CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
  • CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
  • CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
  • CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
  • CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
  • CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
  • CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
  • CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
  • CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
  • CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
  • CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
  • CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
  • CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
  • CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
  • CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
  • CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
  • CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…
Record
SUSE-SU-2025:21179-1
Updated
2026-11-02
OSVSUSE-SU-2025:3725-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
  • CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
  • CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
  • CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
  • CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
  • CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
  • CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
  • CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
  • CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
  • CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
  • CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
  • CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
  • CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
  • CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
  • CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
  • CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
  • CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
  • CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
  • CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
  • CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
  • CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
  • CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
  • CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
  • CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
  • CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
  • CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
  • CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
  • CVE-2025-38628: vdpa/mlx5: Fix release of uninitialized resources on error path (bsc#1248616).
  • CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
  • CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
  • CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
  • CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
  • CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
  • CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
  • CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
  • CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
  • CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
  • CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
  • CVE-2025-38701: ext4: do not BUG when…
Record
SUSE-SU-2025:3725-1
Updated
2026-11-02
OSVSUSE-SU-2025:3751-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP6 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2023-53261: coresight: Fix memory leak in acpi_buffer->pointer (bsc#1249770).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22022: usb: xhci: Apply the link chain quirk on NEC isoc endpoints (bsc#1241292).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38234: sched/rt: Fix race in push_rt_task (bsc#1246057).
  • CVE-2025-38263: bcache: fix NULL pointer in cache_set_flush() (bsc#1246248).
  • CVE-2025-38351: KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (bsc#1246782).
  • CVE-2025-38402: idpf: return 0 size for RSS key if not supported (bsc#1247262).
  • CVE-2025-38408: genirq/irq_sim: Initialize work context pointers properly (bsc#1247126).
  • CVE-2025-38418: remoteproc: core: Release rproc->clean_table after rproc_attach() fails (bsc#1247137).
  • CVE-2025-38419: remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (bsc#1247136).
  • CVE-2025-38456: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (bsc#1247099).
  • CVE-2025-38466: perf: Revert to requiring CAP_SYS_ADMIN for uprobes (bsc#1247442).
  • CVE-2025-38488: smb: client: fix use-after-free in crypt_message when using async crypto (bsc#1247239).
  • CVE-2025-38514: rxrpc: Fix oops due to non-existence of prealloc backlog struct (bsc#1248202).
  • CVE-2025-38526: ice: add NULL check in eswitch lag check (bsc#1248192).
  • CVE-2025-38527: smb: client: fix use-after-free in cifs_oplock_break (bsc#1248199).
  • CVE-2025-38533: net: libwx: fix the using of Rx buffer DMA (bsc#1248200).
  • CVE-2025-38544: rxrpc: Fix bug due to prealloc collision (bsc#1248225).
  • CVE-2025-38556: HID: core: Harden s32ton() against conversion to 0 bits (bsc#1248296).
  • CVE-2025-38574: pptp: ensure minimal skb length in pptp_xmit() (bsc#1248365).
  • CVE-2025-38584: padata: Fix pd UAF once and for all (bsc1248343).
  • CVE-2025-38590: net/mlx5e: Remove skb secpath if xfrm state is not found (bsc#1248360).
  • CVE-2025-38593: kABI workaround for bluetooth discovery_state change (bsc#1248357).
  • CVE-2025-38595: xen: fix UAF in dmabuf_exp_from_pages() (bsc#1248380).
  • CVE-2025-38597: drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port (bsc#1248378).
  • CVE-2025-38605: wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (bsc#1248334).
  • CVE-2025-38614: eventpoll: Fix semi-unbounded recursion (bsc#1248392).
  • CVE-2025-38616: tls: handle data disappearing from under the TLS ULP (bsc#1248512).
  • CVE-2025-38622: net: drop UFO packets in udp_rcv_segment() (bsc#1248619).
  • CVE-2025-38623: PCI: pnv_php: Fix surprise plug detection and recovery (bsc#1248610).
  • CVE-2025-38639: netfilter: xt_nfacct: do not assume acct name is null-terminated (bsc#1248674).
  • CVE-2025-38640: bpf: Disable migration in nf_hook_run_bpf() (bsc#1248622).
  • CVE-2025-38643: wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (bsc#1248681).
  • CVE-2025-38645: net/mlx5: Check device memory pointer before usage (bsc#1248626).
  • CVE-2025-38659: gfs2: No more self recovery (bsc#1248639).
  • CVE-2025-38660: [ceph] parse_longname(): strrchr() expects NUL-terminated string (bsc#1248634).
  • CVE-2025-38664: ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (bsc#1248628).
  • CVE-2025-38668: regulator: core: fix NULL dereference on unbind due to stale coupling data (bsc#1248647).
  • CVE-2025-38676: iommu/amd: Avoid stack buffer overflow from kernel cmdline (bsc#1248775).
  • CVE-2025-38678: netfilter: nf_tables: reject duplicate device on updates (bsc#1249126).
  • CVE-2025-38679: media: venus: Fix OOB read due to missing payload bound check (bsc#1249202).
  • CVE-2025-38684: net/sched: ets: use old 'nbands' while purging unused classes (bsc#1249156).
  • CVE-2025-38701: ext4: do not…
Record
SUSE-SU-2025:3751-1
Updated
2026-11-02
OSVSUSE-SU-2026:20560-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise Server 16.0 and SUSE Linux Micro 6.2 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-53164: net: sched: fix ordering of qlen adjustment (bsc#1234863).
  • CVE-2024-57891: sched_ext: Fix invalid irq restore in scx_ops_bypass() (bsc#1235953).
  • CVE-2024-57951: hrtimers: Handle CPU state correctly on hotplug (bsc#1237108).
  • CVE-2024-57952: Revert "libfs: fix infinite directory reads for offset dir" (bsc#1237131).
  • CVE-2024-58090: sched/core: Prevent rescheduling when interrupts are disabled (bsc#1240324).
  • CVE-2025-22034: mm/rmap: avoid -EBUSY from make_device_exclusive() (bsc#1241435).
  • CVE-2025-22077: Revert "smb: client: fix TCP timers deadlock after rmmod" (bsc#1241403).
  • CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
  • CVE-2025-37821: sched/eevdf: Fix se->slice being set to U64_MAX and resulting (bsc#1242864).
  • CVE-2025-37849: KVM: arm64: Tear down vGIC on failed vCPU creation (bsc#1243000).
  • CVE-2025-37856: btrfs: harden block_group::bg_list against list_del() races (bsc#1243068).
  • CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
  • CVE-2025-37864: net: dsa: clean up FDB, MDB, VLAN entries on unbind (bsc#1242965).
  • CVE-2025-38006: net: mctp: Do not access ifa_index when missing (bsc#1244930).
  • CVE-2025-38008: mm/page_alloc: fix race condition in unaccepted memory handling (bsc#1244939).
  • CVE-2025-38019: mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (bsc#1245000).
  • CVE-2025-38034: btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (bsc#1244792).
  • CVE-2025-38038: cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (bsc#1244812).
  • CVE-2025-38058: __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (bsc#1245151).
  • CVE-2025-38062: kABI: restore layout of struct msi_desc (bsc#1245216).
  • CVE-2025-38075: scsi: target: iscsi: Fix timeout on deleted connection (bsc#1244734).
  • CVE-2025-38101: ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (bsc#1245659).
  • CVE-2025-38103: HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (bsc#1245663).
  • CVE-2025-38106: io_uring/sqpoll: do not put task_struct on tctx setup failure (bsc#1245664).
  • CVE-2025-38117: hci_dev centralize extra lock (bsc#1245695).
  • CVE-2025-38119: scsi: core: ufs: Fix a hang in the error handler (bsc#1245700).
  • CVE-2025-38125: net: stmmac: make sure that ptp_rate is not 0 before configuring EST (bsc#1245710).
  • CVE-2025-38146: net: openvswitch: Fix the dead loop of MPLS parse (bsc#1245767).
  • CVE-2025-38160: clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (bsc#1245780).
  • CVE-2025-38168: perf: arm-ni: Unregister PMUs on probe failure (bsc#1245763).
  • CVE-2025-38180: net: atm: fix /proc/net/atm/lec handling (bsc#1245970).
  • CVE-2025-38182: ublk: santizize the arguments from userspace when adding a device (bsc#1245937).
  • CVE-2025-38184: tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (bsc#1245956).
  • CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send() (bsc#1246012).
  • CVE-2025-38190: atm: Revert atm_account_tx() if copy_from_iter_full() fails (bsc#1245973).
  • CVE-2025-38201: netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (bsc#1245977).
  • CVE-2025-38205: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (bsc#1246005).
  • CVE-2025-38208: smb: client: add NULL check in automount_fullpath (bsc#1245815).
  • CVE-2025-38216: iommu/vt-d: Restore context entry setup order for aliased devices (bsc#1245963).
  • CVE-2025-38220: ext4: only dirty folios when data journaling regular files (bsc#1245966).
  • CVE-2025-38222: ext4: inline: fix len overflow in ext4_prepare_inline_data (bsc#1245976).
  • CVE-2025-38242: mm: userfaultfd: fix race of userfaultfd_move and swap…
Record
SUSE-SU-2026:20560-1
Updated
2026-11-02
OSVUSN-8028-1 No score

linux, linux-raspi vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Network block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • HW tracing;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Microchip PCI driver;
  • Intel Management Engine Interface driver;
  • PCI Endpoint Test driver;
  • TI TPS6594 PFSM driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Amlogic Meson DDR PMU;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • QCOM SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Backlight driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system;…
Record
USN-8028-1
Updated
2026-11-03
OSVUSN-8028-2 No score

linux-realtime-6.8 vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Network block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • HW tracing;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Microchip PCI driver;
  • Intel Management Engine Interface driver;
  • PCI Endpoint Test driver;
  • TI TPS6594 PFSM driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Amlogic Meson DDR PMU;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • QCOM SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Backlight driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system; …
Record
USN-8028-2
Updated
2026-11-03
OSVUSN-8028-3 No score

linux-realtime, linux-raspi-realtime vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Network block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • HW tracing;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Microchip PCI driver;
  • Intel Management Engine Interface driver;
  • PCI Endpoint Test driver;
  • TI TPS6594 PFSM driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Amlogic Meson DDR PMU;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • QCOM SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Backlight driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system; …
Record
USN-8028-3
Updated
2026-11-03
OSVUSN-8028-4 No score

linux-aws-fips, linux-fips vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Network block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • HW tracing;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Microchip PCI driver;
  • Intel Management Engine Interface driver;
  • PCI Endpoint Test driver;
  • TI TPS6594 PFSM driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Amlogic Meson DDR PMU;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • QCOM SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Backlight driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system; …
Record
USN-8028-4
Updated
2026-11-03
OSVUSN-8028-5 No score

linux-aws, linux-aws-6.8, linux-gkeop, linux-nvidia, linux-nvidia-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Network block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • HW tracing;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Microchip PCI driver;
  • Intel Management Engine Interface driver;
  • PCI Endpoint Test driver;
  • TI TPS6594 PFSM driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Amlogic Meson DDR PMU;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • QCOM SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Backlight driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system; …
Record
USN-8028-5
Updated
2026-11-03
OSVUSN-8028-6 No score

linux-hwe-6.8, linux-lowlatency-hwe-6.8 vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Network block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • HW tracing;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Microchip PCI driver;
  • Intel Management Engine Interface driver;
  • PCI Endpoint Test driver;
  • TI TPS6594 PFSM driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Amlogic Meson DDR PMU;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • QCOM SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Backlight driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system; …
Record
USN-8028-6
Updated
2026-11-03
OSVUSN-8028-7 No score

linux-nvidia-lowlatency vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Network block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • HW tracing;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Microchip PCI driver;
  • Intel Management Engine Interface driver;
  • PCI Endpoint Test driver;
  • TI TPS6594 PFSM driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Amlogic Meson DDR PMU;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • QCOM SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Backlight driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system; …
Record
USN-8028-7
Updated
2026-11-03
OSVUSN-8028-8 No score

linux-ibm, linux-ibm-6.8 vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Network block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • HW tracing;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Microchip PCI driver;
  • Intel Management Engine Interface driver;
  • PCI Endpoint Test driver;
  • TI TPS6594 PFSM driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Amlogic Meson DDR PMU;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • QCOM SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Backlight driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system; …
Record
USN-8028-8
Updated
2026-11-03
OSVUSN-8031-1 No score

linux-gcp-6.8 vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Network block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • HW tracing;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Microchip PCI driver;
  • Intel Management Engine Interface driver;
  • PCI Endpoint Test driver;
  • TI TPS6594 PFSM driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Amlogic Meson DDR PMU;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • QCOM SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Backlight driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system; …
Record
USN-8031-1
Updated
2026-11-03
OSVUSN-8031-2 No score

linux-gcp-fips vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Network block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • HW tracing;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Microchip PCI driver;
  • Intel Management Engine Interface driver;
  • PCI Endpoint Test driver;
  • TI TPS6594 PFSM driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Amlogic Meson DDR PMU;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • QCOM SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Backlight driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system; …
Record
USN-8031-2
Updated
2026-11-03
OSVUSN-8031-3 No score

linux-gcp, linux-gke vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. (CVE-2024-36331)

Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information. A local attacker could possibly use this to expose sensitive information. (CVE-2024-36350, CVE-2024-36357)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • PA-RISC architecture;
  • PowerPC architecture;
  • RISC-V architecture;
  • S390 architecture;
  • x86 architecture;
  • Block layer subsystem;
  • Cryptographic API;
  • Compute Acceleration Framework;
  • ACPI drivers;
  • Serial ATA and Parallel ATA drivers;
  • ATM drivers;
  • Drivers core;
  • ATA over ethernet (AOE) driver;
  • DRBD Distributed Replicated Block Device drivers;
  • Network block device driver;
  • Ublk userspace block driver;
  • Bluetooth drivers;
  • Bus devices;
  • Character device driver;
  • TPM device driver;
  • Clock framework and drivers;
  • Data acquisition framework and drivers;
  • CPU frequency scaling framework;
  • Hardware crypto device drivers;
  • Device frequency scaling framework;
  • Buffer Sharing and Synchronization framework;
  • DMA engine subsystem;
  • EDAC drivers;
  • Arm Firmware Framework for ARMv8-A(FFA);
  • ARM SCMI message protocol;
  • FPGA Framework;
  • GPU drivers;
  • HID subsystem;
  • Hardware monitoring drivers;
  • HW tracing;
  • I2C subsystem;
  • I3C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Miscellaneous) drivers;
  • IOMMU subsystem;
  • IRQ chip drivers;
  • MCB driver;
  • Multiple devices driver;
  • Media drivers;
  • Multifunction device drivers;
  • Microchip PCI driver;
  • Intel Management Engine Interface driver;
  • PCI Endpoint Test driver;
  • TI TPS6594 PFSM driver;
  • VMware VMCI Driver;
  • MMC subsystem;
  • MTD block device drivers;
  • Network drivers;
  • Mellanox network drivers;
  • STMicroelectronics network drivers;
  • NVDIMM (Non-Volatile Memory Device) drivers;
  • NVME drivers;
  • PCI subsystem;
  • Amlogic Meson DDR PMU;
  • PHY drivers;
  • Pin controllers subsystem;
  • x86 platform drivers;
  • Power supply drivers;
  • Powercap sysfs driver;
  • PTP clock framework;
  • PWM drivers;
  • RapidIO drivers;
  • Voltage and Current Regulator drivers;
  • Remote Processor subsystem;
  • S/390 drivers;
  • SCSI subsystem;
  • ASPEED SoC drivers;
  • QCOM SoC drivers;
  • Samsung SoC drivers;
  • SPI subsystem;
  • small TFT LCD display modules;
  • Media staging drivers;
  • TCM subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • UFS subsystem;
  • Cadence USB3 driver;
  • ChipIdea USB driver;
  • USB Device Class drivers;
  • USB core drivers;
  • DesignWare USB3 driver;
  • USB Gadget drivers;
  • USB Host Controller drivers;
  • Renesas USBHS Controller drivers;
  • USB Type-C support driver;
  • USB Type-C Connector System Software Interface driver;
  • VFIO drivers;
  • Virtio Host (VHOST) subsystem;
  • Backlight driver;
  • Framebuffer layer;
  • TSM Common Guest driver;
  • Virtio drivers;
  • Xen hypervisor drivers;
  • File systems infrastructure;
  • BTRFS file system;
  • Ceph distributed file system;
  • EFI Variable file system;
  • Ext4 file system;
  • F2FS file system;
  • GFS2 file system;
  • JFFS2 file system;
  • JFS file system;
  • Network file system (NFS) client;
  • Network file system (NFS) server daemon;
  • NILFS2 file system;
  • NTFS3 file system;
  • Overlay file system; …
Record
USN-8031-3
Updated
2026-11-03

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-64k
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-64k-core
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-64k-debug
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-64k-debug-core
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-64k-debug-devel
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-64k-debug-devel-matched
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-64k-debug-modules
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-devel
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-64k-devel-matched
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-64k-modules
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-64k-modules-core
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-64k-modules-extra
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-abi-stablelists
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-core
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-cross-headers
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-debug
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-debug-core
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-debug-devel
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-debug-devel-matched
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-debug-modules
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-debug-modules-core
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-debug-modules-extra
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-debug-uki-virt
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-devel
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-devel-matched
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-doc
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-headers
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-modules
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-modules-core
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-modules-extra
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-rt
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-rt-64k
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-rt-64k-core
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-rt-64k-debug
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-rt-64k-debug-core
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-rt-64k-debug-devel
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-rt-64k-debug-modules
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-rt-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-rt-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-rt-64k-devel
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-rt-64k-modules
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-rt-64k-modules-core
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-rt-64k-modules-extra
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-rt-core
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-rt-debug
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-rt-debug-core
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel-rt-debug-devel
AlmaLinux:9
From an advisory covering 16 CVEs
 before 5.14.0-611.30.1.el9_7
5.14.0-611.30.1.el9_7
kernel
Azure Linux:3
 before 6.6.104.2-1
6.6.104.2-1
linux-lts
Alpaquita:25
 6.12.41-r0 up to 6.12.44-r0
6.12.44-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
kernel
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-core
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-abi-stablelists
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-core
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-cross-headers
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-debug-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-debug-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-debug-uki-virt-addons
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-doc
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-headers
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-modules
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-modules-core
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-modules-extra
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-modules-internal
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-modules-partner
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-rt
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-rt-64k
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-rt-64k-core
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-rt-64k-debug
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-rt-64k-debug-core
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-rt-64k-debug-devel
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
kernel-rt-64k-debug-devel-matched
TuxCare:AlmaLinux:9.6
From an advisory covering 142 CVEs
 before 5.14.0-570.62.1.el9_6.tuxcare.1.els4
5.14.0-570.62.1.el9_6.tuxcare.1.els4
Kernel
Linux
 6.4.0 up to 6.6.103, 6.7.0 up to 6.12.44, 6.13.0 up to 6.15.11, 6.16.0 up to 6.16.2
6.6.1036.12.446.15.116.16.2
linux
Debian:13
 before 6.12.48-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+1
6.12.48-1
linux
Debian:14
 before 6.16.3-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
6.16.3-1
linux
Debian:13
From an advisory covering 126 CVEs
 before 6.12.48-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+1
6.12.48-1
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-1197.210~16.04.1, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
4.15.0-1197.210~16.04.1
linux-aws
Ubuntu:Pro:16.04:LTS
From an advisory covering 150 CVEs
 before 4.4.0-1197.212, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
4.4.0-1197.212
linux-azure
Ubuntu:Pro:16.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-1208.223~16.04.1, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
4.15.0-1208.223~16.04.1
linux-gcp
Ubuntu:Pro:16.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-1190.207~16.04.1, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
4.15.0-1190.207~16.04.1
linux-hwe
Ubuntu:Pro:16.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-260.272~16.04.2, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
4.15.0-260.272~16.04.2
linux
Ubuntu:Pro:16.04:LTS
From an advisory covering 150 CVEs
 before 4.4.0-288.322, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
4.4.0-288.322
linux-aws
Ubuntu:Pro:18.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-1197.210, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
4.15.0-1197.210
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-1207.222, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
4.15.0-1207.222
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-1190.207, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
4.15.0-1190.207
linux
Ubuntu:Pro:18.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-260.272, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
4.15.0-260.272
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
From an advisory covering 150 CVEs
 before 5.4.0-244.264~18.04.1, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
5.4.0-244.264~18.04.1
linux-oracle
Ubuntu:Pro:18.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-1160.171, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
4.15.0-1160.171
linux
Ubuntu:Pro:20.04:LTS
From an advisory covering 150 CVEs
 before 5.4.0-244.264, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
5.4.0-244.264
linux-aws
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 5.15.0-1119.126, plus listed versions
5.13.0-1005.65.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7
Show 45 moreShow less
5.15.0-1008.105.15.0-1009.115.15.0-1011.145.15.0-1013.175.15.0-1014.185.15.0-1015.195.15.0-1017.215.15.0-1019.235.15.0-1020.245.15.0-1021.255.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.325.15.0-1030.345.15.0-1031.355.15.0-1033.375.15.0-1034.385.15.0-1035.395.15.0-1036.405.15.0-1037.415.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1042.475.15.0-1043.485.15.0-1044.495.15.0-1045.505.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1055.605.15.0-1056.615.15.0-1057.635.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.705.15.0-1065.71
5.15.0-1119.126
linux-aws-6.8
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1065.68~22.04.1, plus listed versions
6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1
Show 38 moreShow less
6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.16.8.0-1050.53~22.04.16.8.0-1051.54~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1055.58~22.04.16.8.0-1057.60~22.04.16.8.0-1060.63~22.04.16.8.0-1061.64~22.04.16.8.0-1062.65~22.04.26.8.0-1063.66~22.04.16.8.0-1064.67~22.04.1
6.8.0-1065.68~22.04.1
linux-azure
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 5.15.0-1125.134, plus listed versions
5.13.0-1006.75.15.0-1001.25.15.0-1002.35.15.0-1003.45.15.0-1005.6
Show 45 moreShow less
5.15.0-1007.85.15.0-1008.95.15.0-1010.125.15.0-1012.155.15.0-1013.165.15.0-1014.175.15.0-1017.205.15.0-1019.245.15.0-1020.255.15.0-1021.265.15.0-1022.275.15.0-1023.295.15.0-1024.305.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1033.405.15.0-1034.415.15.0-1035.425.15.0-1036.435.15.0-1037.445.15.0-1038.455.15.0-1039.465.15.0-1040.475.15.0-1041.485.15.0-1042.495.15.0-1044.515.15.0-1045.525.15.0-1046.535.15.0-1047.545.15.0-1049.565.15.0-1050.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1056.645.15.0-1057.655.15.0-1058.665.15.0-1059.675.15.0-1060.695.15.0-1061.705.15.0-1063.725.15.0-1064.735.15.0-1066.75
5.15.0-1125.134
linux-gcp
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 5.15.0-1120.130, plus listed versions
5.13.0-1005.65.15.0-1001.35.15.0-1002.55.15.0-1003.65.15.0-1004.7
Show 45 moreShow less
5.15.0-1005.85.15.0-1006.95.15.0-1008.125.15.0-1010.155.15.0-1013.185.15.0-1016.215.15.0-1017.235.15.0-1018.245.15.0-1019.255.15.0-1021.285.15.0-1022.295.15.0-1025.325.15.0-1026.335.15.0-1027.345.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1032.405.15.0-1034.425.15.0-1035.435.15.0-1036.445.15.0-1037.455.15.0-1038.465.15.0-1039.475.15.0-1040.485.15.0-1041.495.15.0-1042.505.15.0-1044.525.15.0-1045.535.15.0-1046.545.15.0-1047.555.15.0-1048.565.15.0-1049.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1055.635.15.0-1058.665.15.0-1059.675.15.0-1060.685.15.0-1062.705.15.0-1063.715.15.0-1064.725.15.0-1065.73
5.15.0-1120.130
linux-gcp-6.8
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1069.77~22.04.1, plus listed versions
6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1
Show 39 moreShow less
6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1034.36~22.04.26.8.0-1036.38~22.04.16.8.0-1037.39~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.45~22.04.16.8.0-1043.46~22.04.16.8.0-1044.47~22.04.16.8.0-1045.48~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.26.8.0-1048.51~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1054.57~22.04.16.8.0-1058.61~22.04.16.8.0-1060.63~22.04.16.8.0-1063.69~22.04.16.8.0-1064.72~22.04.16.8.0-1065.73~22.04.16.8.0-1066.74~22.04.16.8.0-1067.75~22.04.1
6.8.0-1069.77~22.04.1
linux
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 5.15.0-202.212, plus listed versions
5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23
Show 45 moreShow less
5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.865.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.965.15.0-87.975.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.115
5.15.0-202.212
linux-hwe-6.8
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-138.138~22.04.1, plus listed versions
6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1
Show 31 moreShow less
6.8.0-48.48~22.04.16.8.0-49.49~22.04.16.8.0-50.51~22.04.16.8.0-51.52~22.04.16.8.0-52.53~22.04.16.8.0-57.59~22.04.16.8.0-58.60~22.04.16.8.0-59.61~22.04.16.8.0-60.63~22.04.16.8.0-64.67~22.04.16.8.0-65.68~22.04.16.8.0-78.78~22.04.16.8.0-79.79~22.04.16.8.0-83.83~22.04.16.8.0-84.84~22.04.16.8.0-85.85~22.04.16.8.0-86.87~22.04.16.8.0-87.88~22.04.16.8.0-88.89~22.04.26.8.0-90.91~22.04.16.8.0-94.96~22.04.16.8.0-100.100~22.04.16.8.0-101.101~22.04.16.8.0-106.106~22.04.16.8.0-107.107~22.04.16.8.0-110.110~22.04.16.8.0-111.111~22.04.16.8.0-117.117~22.04.16.8.0-124.124~22.04.16.8.0-134.134~22.04.16.8.0-136.136~22.04.1
6.8.0-138.138~22.04.1
linux-gke
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 5.15.0-1115.121, plus listed versions
5.15.0-1002.25.15.0-1003.35.15.0-1004.55.15.0-1005.65.15.0-1006.7
Show 45 moreShow less
5.15.0-1008.105.15.0-1010.135.15.0-1011.145.15.0-1014.175.15.0-1015.185.15.0-1016.195.15.0-1017.205.15.0-1019.235.15.0-1020.255.15.0-1023.285.15.0-1024.295.15.0-1027.325.15.0-1028.335.15.0-1030.355.15.0-1031.365.15.0-1032.375.15.0-1033.385.15.0-1034.395.15.0-1035.405.15.0-1036.415.15.0-1037.425.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1041.465.15.0-1042.475.15.0-1044.495.15.0-1045.505.15.0-1046.515.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1054.595.15.0-1057.625.15.0-1058.635.15.0-1059.645.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.70
5.15.0-1115.121
linux-ibm
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 5.15.0-1113.117, plus listed versions
5.15.0-1002.25.15.0-1003.35.15.0-1004.45.15.0-1005.55.15.0-1007.8
Show 45 moreShow less
5.15.0-1009.115.15.0-1010.125.15.0-1012.145.15.0-1013.155.15.0-1015.175.15.0-1017.205.15.0-1018.215.15.0-1021.245.15.0-1022.255.15.0-1023.265.15.0-1025.285.15.0-1026.295.15.0-1027.305.15.0-1028.315.15.0-1029.325.15.0-1030.335.15.0-1031.345.15.0-1032.355.15.0-1033.365.15.0-1034.375.15.0-1035.385.15.0-1036.395.15.0-1037.405.15.0-1038.415.15.0-1040.435.15.0-1041.445.15.0-1042.455.15.0-1043.465.15.0-1044.475.15.0-1045.485.15.0-1046.495.15.0-1047.505.15.0-1048.515.15.0-1049.525.15.0-1050.535.15.0-1053.565.15.0-1054.575.15.0-1055.585.15.0-1056.595.15.0-1057.605.15.0-1058.615.15.0-1059.625.15.0-1060.635.15.0-1061.645.15.0-1062.65
5.15.0-1113.117
linux-ibm-6.8
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1066.67~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.16.8.0-1013.13~22.04.1
Show 35 moreShow less
6.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.16~22.04.16.8.0-1017.17~22.04.16.8.0-1018.18~22.04.16.8.0-1019.19~22.04.16.8.0-1023.23~22.04.16.8.0-1024.24~22.04.16.8.0-1025.25~22.04.16.8.0-1026.26~22.04.16.8.0-1027.27~22.04.16.8.0-1028.28~22.04.16.8.0-1029.29~22.04.16.8.0-1030.30~22.04.16.8.0-1033.33~22.04.16.8.0-1036.36~22.04.16.8.0-1037.37~22.04.16.8.0-1038.38~22.04.16.8.0-1039.39~22.04.16.8.0-1040.40~22.04.16.8.0-1041.41~22.04.16.8.0-1042.42~22.04.16.8.0-1043.43~22.04.16.8.0-1044.44~22.04.16.8.0-1045.45~22.04.16.8.0-1049.49~22.04.16.8.0-1050.50~22.04.16.8.0-1051.51~22.04.16.8.0-1052.52~22.04.16.8.0-1055.56~22.04.16.8.0-1057.58~22.04.16.8.0-1060.61~22.04.16.8.0-1061.62~22.04.16.8.0-1062.63~22.04.16.8.0-1063.64~22.04.1
6.8.0-1066.67~22.04.1
linux-lowlatency
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 5.15.0-197.207, plus listed versions
5.15.0-22.225.15.0-23.235.15.0-24.245.15.0-27.285.15.0-30.31
Show 45 moreShow less
5.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.535.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.885.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.955.15.0-87.965.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.1155.15.0-106.1165.15.0-107.1175.15.0-110.120
5.15.0-197.207
linux-aws
Ubuntu:Pro:24.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1065.68, plus listed versions
6.5.0-1008.86.6.0-1001.16.8.0-1001.16.8.0-1006.66.8.0-1008.8
Show 45 moreShow less
6.8.0-1009.96.8.0-1010.106.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.156.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1023.256.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.296.8.0-1028.306.8.0-1029.316.8.0-1030.326.8.0-1031.336.8.0-1032.346.8.0-1033.356.8.0-1035.376.8.0-1036.386.8.0-1038.406.8.0-1039.416.8.0-1040.426.8.0-1041.436.8.0-1042.446.8.0-1043.456.8.0-1044.466.8.0-1045.476.8.0-1046.496.8.0-1047.506.8.0-1050.536.8.0-1051.546.8.0-1052.556.8.0-1053.566.8.0-1055.586.8.0-1057.606.8.0-1060.636.8.0-1061.646.8.0-1062.65
6.8.0-1065.68
linux-azure
Ubuntu:Pro:24.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1068.76, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1001.16.8.0-1005.56.8.0-1006.6
Show 38 moreShow less
6.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1012.146.8.0-1013.156.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.206.8.0-1018.216.8.0-1020.236.8.0-1021.256.8.0-1025.306.8.0-1026.316.8.0-1027.326.8.0-1028.336.8.0-1029.346.8.0-1030.356.8.0-1031.366.8.0-1034.396.8.0-1038.446.8.0-1040.466.8.0-1041.476.8.0-1042.486.8.0-1044.506.8.0-1046.526.8.0-1051.576.8.0-1052.586.8.0-1054.606.8.0-1056.626.8.0-1058.646.8.0-1059.656.8.0-1062.696.8.0-1063.716.8.0-1064.726.8.0-1065.736.8.0-1067.75
6.8.0-1068.76
linux-gcp
Ubuntu:Pro:24.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1069.77, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1002.26.8.0-1005.56.8.0-1006.6
Show 45 moreShow less
6.8.0-1007.76.8.0-1008.96.8.0-1009.106.8.0-1010.116.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.196.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.296.8.0-1028.306.8.0-1029.316.8.0-1030.326.8.0-1031.336.8.0-1032.346.8.0-1033.356.8.0-1034.366.8.0-1036.386.8.0-1037.396.8.0-1039.416.8.0-1040.426.8.0-1041.436.8.0-1042.456.8.0-1043.466.8.0-1044.476.8.0-1045.486.8.0-1046.496.8.0-1047.506.8.0-1048.516.8.0-1052.556.8.0-1053.566.8.0-1054.576.8.0-1055.586.8.0-1058.616.8.0-1060.636.8.0-1063.69
6.8.0-1069.77
linux
Ubuntu:Pro:24.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-142.142, plus listed versions
6.5.0-9.96.6.0-14.146.8.0-11.116.8.0-20.206.8.0-22.22
Show 45 moreShow less
6.8.0-28.286.8.0-31.316.8.0-35.356.8.0-36.366.8.0-38.386.8.0-39.396.8.0-40.406.8.0-41.416.8.0-44.446.8.0-45.456.8.0-47.476.8.0-48.486.8.0-49.496.8.0-50.516.8.0-51.526.8.0-52.536.8.0-53.556.8.0-54.566.8.0-55.576.8.0-56.586.8.0-57.596.8.0-58.606.8.0-59.616.8.0-60.636.8.0-62.656.8.0-63.666.8.0-64.676.8.0-71.716.8.0-78.786.8.0-79.796.8.0-83.836.8.0-84.846.8.0-85.856.8.0-86.876.8.0-87.886.8.0-88.896.8.0-90.916.8.0-94.966.8.0-100.1006.8.0-101.1016.8.0-106.1066.8.0-107.1076.8.0-110.1106.8.0-111.1116.8.0-117.117
6.8.0-142.142
linux-gke
Ubuntu:Pro:24.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1064.72, plus listed versions
6.8.0-1003.56.8.0-1004.76.8.0-1005.86.8.0-1006.96.8.0-1007.10
Show 44 moreShow less
6.8.0-1008.116.8.0-1009.126.8.0-1010.136.8.0-1011.146.8.0-1012.156.8.0-1013.176.8.0-1014.186.8.0-1015.196.8.0-1016.206.8.0-1017.216.8.0-1019.236.8.0-1020.246.8.0-1021.256.8.0-1022.266.8.0-1023.276.8.0-1024.286.8.0-1025.296.8.0-1026.306.8.0-1027.316.8.0-1028.326.8.0-1029.336.8.0-1032.366.8.0-1033.376.8.0-1035.396.8.0-1036.406.8.0-1037.416.8.0-1038.436.8.0-1039.446.8.0-1040.456.8.0-1041.466.8.0-1042.476.8.0-1043.486.8.0-1044.496.8.0-1048.536.8.0-1049.546.8.0-1050.566.8.0-1051.576.8.0-1054.606.8.0-1055.616.8.0-1058.646.8.0-1059.676.8.0-1060.686.8.0-1061.696.8.0-1062.70
6.8.0-1064.72
linux-ibm
Ubuntu:Pro:24.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1065.66, plus listed versions
6.5.0-1009.96.8.0-1001.16.8.0-1003.36.8.0-1004.46.8.0-1005.5
Show 45 moreShow less
6.8.0-1006.66.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.156.8.0-1016.166.8.0-1017.176.8.0-1018.186.8.0-1019.196.8.0-1022.226.8.0-1023.236.8.0-1024.246.8.0-1025.256.8.0-1026.266.8.0-1027.276.8.0-1028.286.8.0-1029.296.8.0-1030.306.8.0-1033.336.8.0-1036.366.8.0-1037.376.8.0-1038.386.8.0-1039.396.8.0-1040.406.8.0-1041.416.8.0-1042.426.8.0-1043.436.8.0-1044.446.8.0-1045.456.8.0-1049.496.8.0-1050.506.8.0-1051.516.8.0-1052.526.8.0-1055.566.8.0-1057.586.8.0-1060.616.8.0-1061.626.8.0-1062.636.8.0-1063.646.8.0-1064.65
6.8.0-1065.66
linux-oracle
Ubuntu:Pro:24.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1062.65, plus listed versions
6.5.0-1010.106.6.0-1001.16.8.0-1001.16.8.0-1004.46.8.0-1005.5
Show 44 moreShow less
6.8.0-1006.66.8.0-1008.86.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.196.8.0-1019.206.8.0-1020.216.8.0-1021.226.8.0-1022.236.8.0-1023.246.8.0-1024.256.8.0-1025.266.8.0-1026.276.8.0-1027.286.8.0-1028.296.8.0-1029.306.8.0-1030.316.8.0-1032.336.8.0-1033.346.8.0-1035.366.8.0-1037.386.8.0-1038.396.8.0-1039.406.8.0-1040.416.8.0-1041.426.8.0-1042.436.8.0-1043.446.8.0-1044.456.8.0-1047.486.8.0-1049.506.8.0-1050.516.8.0-1052.536.8.0-1054.556.8.0-1057.586.8.0-1058.616.8.0-1059.626.8.0-1060.636.8.0-1061.64
6.8.0-1062.65
linux-aws
Ubuntu:Pro:26.04:LTS
From an advisory covering 150 CVEs
 before 7.0.0-1011.11, plus listed versions
6.17.0-1002.26.17.0-1003.36.19.0-1002.26.19.0-1003.37.0.0-1001.1
Show 6 moreShow less
7.0.0-1003.37.0.0-1004.47.0.0-1006.67.0.0-1008.87.0.0-1009.97.0.0-1010.10
7.0.0-1011.11
linux-azure
Ubuntu:Pro:26.04:LTS
From an advisory covering 150 CVEs
 before 7.0.0-1012.12, plus listed versions
6.17.0-1003.36.17.0-1004.46.19.0-1001.16.19.0-1002.27.0.0-1001.1
Show 7 moreShow less
7.0.0-1002.27.0.0-1003.37.0.0-1004.47.0.0-1007.77.0.0-1009.97.0.0-1010.107.0.0-1011.11
7.0.0-1012.12
linux-gcp
Ubuntu:Pro:26.04:LTS
From an advisory covering 150 CVEs
 before 7.0.0-1010.10, plus listed versions
6.17.0-1002.26.17.0-1003.36.19.0-1001.17.0.0-1001.17.0.0-1002.2
Show 4 moreShow less
7.0.0-1003.37.0.0-1005.57.0.0-1007.77.0.0-1008.8
7.0.0-1010.10
linux
Ubuntu:Pro:26.04:LTS
From an advisory covering 150 CVEs
 before 7.0.0-30.30, plus listed versions
6.17.0-5.56.17.0-6.66.17.0-8.86.18.0-8.86.18.0-9.9
Show 14 moreShow less
6.19.0-3.36.19.0-5.56.19.0-6.66.19.0-9.97.0.0-7.77.0.0-10.107.0.0-12.127.0.0-13.137.0.0-14.147.0.0-15.157.0.0-22.227.0.0-27.277.0.0-28.287.0.0-29.29
7.0.0-30.30
kernel-linus
Mageia:9
From an advisory covering 132 CVEs
 before 6.6.105-1.mga9
6.6.105-1.mga9
kernel
Mageia:9
From an advisory covering 132 CVEs
 before 6.6.105-1.mga9
6.6.105-1.mga9
kmod-virtualbox
Mageia:9
From an advisory covering 132 CVEs
 before 7.1.10-10.mga9
7.1.10-10.mga9
kmod-xtables-addons
Mageia:9
From an advisory covering 132 CVEs
 before 3.24-86.mga9
3.24-86.mga9
mageia-repos
Mageia:9
From an advisory covering 132 CVEs
 before 9-4.mga9
9-4.mga9
meta-task
Mageia:9
From an advisory covering 132 CVEs
 before 9-4.mga9
9-4.mga9
kernel
openEuler:24.03-LTS
From an advisory covering 85 CVEs
 before 6.6.0-144.0.0.127.oe2403
6.6.0-144.0.0.127.oe2403
kernel
openEuler:24.03-LTS-SP1
From an advisory covering 122 CVEs
 before 6.6.0-144.0.0.139.oe2403sp1
6.6.0-144.0.0.139.oe2403sp1
kernel
openEuler:24.03-LTS-SP2
From an advisory covering 85 CVEs
 before 6.6.0-144.0.0.140.oe2403sp2
6.6.0-144.0.0.140.oe2403sp2
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-64k-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-64k-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-64k-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-64k-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-debug-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-debug-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-doc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-rt-64k-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-rt-64k-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-rt-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-tools-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-zfcpdump-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-zfcpdump-devel-matched
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
libperf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
perf
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
python3-perf
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
python3-perf-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
rtla
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
rv
Red Hat:enterprise_linux:9::appstream
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel
Red Hat:enterprise_linux:9::baseos
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-64k
Red Hat:enterprise_linux:9::baseos
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-64k-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-64k-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-64k-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-64k-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-64k-debug-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-64k-debug-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-64k-debug-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-64k-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-64k-modules
Red Hat:enterprise_linux:9::baseos
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-64k-modules-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-64k-modules-extra
Red Hat:enterprise_linux:9::baseos
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-abi-stablelists
Red Hat:enterprise_linux:9::baseos
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-debug
Red Hat:enterprise_linux:9::baseos
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-debug-core
Red Hat:enterprise_linux:9::baseos
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel-debug-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel
Rocky Linux:9
From an advisory covering 16 CVEs
 before 0:5.14.0-611.30.1.el9_7
0:5.14.0-611.30.1.el9_7
kernel
Rocky Linux:10
From an advisory covering 8 CVEs
 before 0:6.12.0-124.35.1.el10_1
0:6.12.0-124.35.1.el10_1
linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 346 CVEs
 before 6.4.0-150600.23.73.1
6.4.0-150600.23.73.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 346 CVEs
 before 6.4.0-150600.23.73.1
6.4.0-150600.23.73.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 346 CVEs
 before 6.4.0-150600.23.73.1.150600.12.32.1
6.4.0-150600.23.73.1.150600.12.32.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 346 CVEs
 before 6.4.0-150600.23.73.1
6.4.0-150600.23.73.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 346 CVEs
 before 6.4.0-150600.23.73.1
6.4.0-150600.23.73.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 346 CVEs
 before 6.4.0-150600.23.73.1
6.4.0-150600.23.73.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 346 CVEs
 before 6.4.0-150600.23.73.1
6.4.0-150600.23.73.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 346 CVEs
 before 6.4.0-150600.23.73.1
6.4.0-150600.23.73.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP6
From an advisory covering 346 CVEs
 before 6.4.0-150600.23.73.1
6.4.0-150600.23.73.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP6
From an advisory covering 346 CVEs
 before 6.4.0-150600.23.73.1
6.4.0-150600.23.73.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 346 CVEs
 before 6.4.0-150600.23.73.1
6.4.0-150600.23.73.1
kernel-livepatch-SLE15-SP6_Update_16
SUSE:Linux Enterprise Live Patching 15 SP6
From an advisory covering 346 CVEs
 before 1-150600.13.3.1
1-150600.13.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 346 CVEs
 before 6.4.0-150600.23.73.1
6.4.0-150600.23.73.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP6
From an advisory covering 346 CVEs
 before 6.4.0-150600.23.73.1
6.4.0-150600.23.73.1
dtb-aarch64
openSUSE:Leap 15.6
From an advisory covering 346 CVEs
 before 6.4.0-150600.23.73.1
6.4.0-150600.23.73.1
kernel-64kb
openSUSE:Leap 15.6
From an advisory covering 346 CVEs
 before 6.4.0-150600.23.73.1
6.4.0-150600.23.73.1
kernel-debug
openSUSE:Leap 15.6
From an advisory covering 346 CVEs
 before 6.4.0-150600.23.73.1
6.4.0-150600.23.73.1
kernel-default
openSUSE:Leap 15.6
From an advisory covering 346 CVEs
 before 6.4.0-150600.23.73.1
6.4.0-150600.23.73.1
kernel-default-base
openSUSE:Leap 15.6
From an advisory covering 346 CVEs
 before 6.4.0-150600.23.73.1.150600.12.32.1
6.4.0-150600.23.73.1.150600.12.32.1
kernel-docs
openSUSE:Leap 15.6
From an advisory covering 346 CVEs
 before 6.4.0-150600.23.73.1
6.4.0-150600.23.73.1
kernel-kvmsmall
openSUSE:Leap 15.6
From an advisory covering 346 CVEs
 before 6.4.0-150600.23.73.1
6.4.0-150600.23.73.1
kernel-obs-build
openSUSE:Leap 15.6
From an advisory covering 346 CVEs
 before 6.4.0-150600.23.73.1
6.4.0-150600.23.73.1
kernel-obs-qa
openSUSE:Leap 15.6
From an advisory covering 346 CVEs
 before 6.4.0-150600.23.73.1
6.4.0-150600.23.73.1
kernel-source
openSUSE:Leap 15.6
From an advisory covering 346 CVEs
 before 6.4.0-150600.23.73.1
6.4.0-150600.23.73.1
kernel-syms
openSUSE:Leap 15.6
From an advisory covering 346 CVEs
 before 6.4.0-150600.23.73.1
6.4.0-150600.23.73.1
kernel-zfcpdump
openSUSE:Leap 15.6
From an advisory covering 346 CVEs
 before 6.4.0-150600.23.73.1
6.4.0-150600.23.73.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 96 CVEs
 before 6.4.0-150700.53.19.1
6.4.0-150700.53.19.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 96 CVEs
 before 6.4.0-150700.53.19.1
6.4.0-150700.53.19.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 96 CVEs
 before 6.4.0-150700.53.19.1.150700.17.13.1
6.4.0-150700.53.19.1.150700.17.13.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 96 CVEs
 before 6.4.0-150700.53.19.1
6.4.0-150700.53.19.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 96 CVEs
 before 6.4.0-150700.53.19.1
6.4.0-150700.53.19.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 96 CVEs
 before 6.4.0-150700.53.19.1
6.4.0-150700.53.19.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 96 CVEs
 before 6.4.0-150700.53.19.1
6.4.0-150700.53.19.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 96 CVEs
 before 6.4.0-150700.53.19.1
6.4.0-150700.53.19.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP7
From an advisory covering 96 CVEs
 before 6.4.0-150700.53.19.1
6.4.0-150700.53.19.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP7
From an advisory covering 96 CVEs
 before 6.4.0-150700.53.19.1
6.4.0-150700.53.19.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 96 CVEs
 before 6.4.0-150700.53.19.1
6.4.0-150700.53.19.1
kernel-livepatch-SLE15-SP7_Update_5
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 96 CVEs
 before 1-150700.15.3.1
1-150700.15.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP7
From an advisory covering 96 CVEs
 before 6.4.0-150700.53.19.1
6.4.0-150700.53.19.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP7
From an advisory covering 96 CVEs
 before 6.4.0-150700.53.19.1
6.4.0-150700.53.19.1
kernel-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 149 CVEs
 before 6.4.0-15061.32.coco15sp6.1
6.4.0-15061.32.coco15sp6.1
kernel-coco_debug
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 149 CVEs
 before 6.4.0-15061.32.coco15sp6.1
6.4.0-15061.32.coco15sp6.1
kernel-source-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 149 CVEs
 before 6.4.0-15061.32.coco15sp6.1
6.4.0-15061.32.coco15sp6.1
kernel-syms-coco
SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6
From an advisory covering 149 CVEs
 before 6.4.0-15061.32.coco15sp6.1
6.4.0-15061.32.coco15sp6.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 196 CVEs
 before 6.4.0-150700.20.15.2
6.4.0-150700.20.15.2
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 196 CVEs
 before 6.4.0-150700.20.15.2
6.4.0-150700.20.15.2
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP7
From an advisory covering 196 CVEs
 before 6.4.0-150700.20.15.1
6.4.0-150700.20.15.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 445 CVEs
 before 6.4.0-150600.8.52.1
6.4.0-150600.8.52.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 445 CVEs
 before 6.4.0-150600.8.52.1
6.4.0-150600.8.52.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP6
From an advisory covering 445 CVEs
 before 6.4.0-150600.8.52.1
6.4.0-150600.8.52.1
kernel-azure
openSUSE:Leap 15.6
From an advisory covering 445 CVEs
 before 6.4.0-150600.8.52.1
6.4.0-150600.8.52.1
kernel-source-azure
openSUSE:Leap 15.6
From an advisory covering 445 CVEs
 before 6.4.0-150600.8.52.1
6.4.0-150600.8.52.1
kernel-syms-azure
openSUSE:Leap 15.6
From an advisory covering 445 CVEs
 before 6.4.0-150600.8.52.1
6.4.0-150600.8.52.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 346 CVEs
 before 6.4.0-35.1
6.4.0-35.1
kernel-default-base
SUSE:Linux Micro 6.0
From an advisory covering 346 CVEs
 before 6.4.0-35.1.21.12
6.4.0-35.1.21.12
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 346 CVEs
 before 6.4.0-35.1
6.4.0-35.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 346 CVEs
 before 6.4.0-35.1
6.4.0-35.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 346 CVEs
 before 6.4.0-35.1
6.4.0-35.1
kernel-default-base
SUSE:Linux Micro 6.1
From an advisory covering 346 CVEs
 before 6.4.0-35.1.21.12
6.4.0-35.1.21.12
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 346 CVEs
 before 6.4.0-35.1
6.4.0-35.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 346 CVEs
 before 6.4.0-35.1
6.4.0-35.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 346 CVEs
 before 6.4.0-37.1
6.4.0-37.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 346 CVEs
 before 6.4.0-37.1
6.4.0-37.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 346 CVEs
 before 6.4.0-37.1
6.4.0-37.1
kernel-rt
openSUSE:Leap 15.6
From an advisory covering 346 CVEs
 before 6.4.0-150600.10.55.1
6.4.0-150600.10.55.1
kernel-rt_debug
openSUSE:Leap 15.6
From an advisory covering 346 CVEs
 before 6.4.0-150600.10.55.1
6.4.0-150600.10.55.1
kernel-source-rt
openSUSE:Leap 15.6
From an advisory covering 346 CVEs
 before 6.4.0-150600.10.55.1
6.4.0-150600.10.55.1
kernel-syms-rt
openSUSE:Leap 15.6
From an advisory covering 346 CVEs
 before 6.4.0-150600.10.55.1
6.4.0-150600.10.55.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-gke-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 32 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1
 None known
linux-gkeop-5.4
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 32 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1.160000.2.4
6.12.0-160000.6.1.160000.2.4
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 573 CVEs
 before 6.12.0-160000.6.1
6.12.0-160000.6.1

History

History
RecordedChangedSources
affectedOSV
affected
affected, factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-38730 is a high vulnerability (CVSS 7.8) in Linux, published September 4, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.17%, the 6th percentile. Fixed in kernel 6.6.104.2-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 845 package rows, 1,453 versions, 3,253 references and the rest of 32 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 5 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open