Every CVE Search/ Get API key

CVE-2026-31532

can: raw: fix ro->uniq use-after-free in raw_rcv()

7.8 HighFix available

In the Linux kernel, the following vulnerability has been resolved:

can: raw: fix ro->uniq use-after-free in raw_rcv()

raw_release() unregisters raw CAN receive filters via can_rx_unregister(), but receiver deletion is deferred with call_rcu(). This leaves a window where raw_rcv() may still be running in an RCU read-side critical section after raw_release() frees ro->uniq, leading to a use-after-free of the percpu uniq storage.

Move free_percpu(ro->uniq) out of raw_release() and into a raw-specific socket destructor. can_rx_unregister() takes an extra reference to the socket and only drops it from the RCU callback, so freeing uniq from sk_destruct ensures the percpu area is not released until the relevant callbacks have drained.

[mkl: applied manually]

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.17%Up 0.1 points since Apr 23, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.8

can: raw: fix ro->uniq use-after-free in raw_rcv()

In the Linux kernel, the following vulnerability has been resolved:

can: raw: fix ro->uniq use-after-free in raw_rcv()

raw_release() unregisters raw CAN receive filters via can_rx_unregister(), but receiver deletion is deferred with call_rcu(). This leaves a window where raw_rcv() may still be running in an RCU read-side critical section after raw_release() frees ro->uniq, leading to a use-after-free of the percpu uniq storage.

Move free_percpu(ro->uniq) out of raw_release() and into a raw-specific socket destructor. can_rx_unregister() takes an extra reference to the socket and only drops it from the RCU callback, so freeing uniq from sk_destruct ensures the percpu area is not released until the relevant callbacks have drained.

[mkl: applied manually]

Record
CVE-2026-31532
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
EUVDEUVD-2026-25219 7.8

In the Linux kernel, the following vulnerability has been resolved:

can: raw: fix ro->uniq use-after-free in raw_rcv()

raw_release() unregisters raw CAN receive filters via can_rx_unregister(), but receiver deletion is deferred with call_rcu(). This leaves a window where raw_rcv() may still be running in an RCU read-side critical section after raw_release() frees ro->uniq, leading to a use-after-free of the percpu uniq storage.

Move free_percpu(ro->uniq) out of raw_release() and into a raw-specific socket destructor. can_rx_unregister() takes an extra reference to the socket and only drops it from the RCU callback, so freeing uniq from sk_destruct ensures the percpu area is not released until the relevant callbacks have drained.

[mkl: applied manually]

Record
EUVD-2026-25219
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-7w6x-pfmg-76xx 7.8

In the Linux kernel, the following vulnerability has been resolved: can: raw: fix ro->uniq use...

In the Linux kernel, the following vulnerability has been resolved:

can: raw: fix ro->uniq use-after-free in raw_rcv()

raw_release() unregisters raw CAN receive filters via can_rx_unregister(), but receiver deletion is deferred with call_rcu(). This leaves a window where raw_rcv() may still be running in an RCU read-side critical section after raw_release() frees ro->uniq, leading to a use-after-free of the percpu uniq storage.

Move free_percpu(ro->uniq) out of raw_release() and into a raw-specific socket destructor. can_rx_unregister() takes an extra reference to the socket and only drops it from the RCU callback, so freeing uniq from sk_destruct ensures the percpu area is not released until the relevant callbacks have drained.

[mkl: applied manually]

Record
GHSA-7w6x-pfmg-76xx
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
NVD 7.8

In the Linux kernel, the following vulnerability has been resolved:

can: raw: fix ro->uniq use-after-free in raw_rcv()

raw_release() unregisters raw CAN receive filters via can_rx_unregister(), but receiver deletion is deferred with call_rcu(). This leaves a window where raw_rcv() may still be running in an RCU read-side critical section after raw_release() frees ro->uniq, leading to a use-after-free of the percpu uniq storage.

Move free_percpu(ro->uniq) out of raw_release() and into a raw-specific socket destructor. can_rx_unregister() takes an extra reference to the socket and only drops it from the RCU callback, so freeing uniq from sk_destruct ensures the percpu area is not released until the relevant callbacks have drained.

[mkl: applied manually]

Record
CVE-2026-31532
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-416
Updated
2026-11-02
OSVBELL-CVE-2026-31532 7.8
Record
BELL-CVE-2026-31532
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.8

can: raw: fix ro->uniq use-after-free in raw_rcv()

In the Linux kernel, the following vulnerability has been resolved:

can: raw: fix ro->uniq use-after-free in raw_rcv()

raw_release() unregisters raw CAN receive filters via can_rx_unregister(), but receiver deletion is deferred with call_rcu(). This leaves a window where raw_rcv() may still be running in an RCU read-side critical section after raw_release() frees ro->uniq, leading to a use-after-free of the percpu uniq storage.

Move free_percpu(ro->uniq) out of raw_release() and into a raw-specific socket destructor. can_rx_unregister() takes an extra reference to the socket and only drops it from the RCU callback, so freeing uniq from sk_destruct ensures the percpu area is not released until the relevant callbacks have drained.

[mkl: applied manually]

Record
CVE-2026-31532
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2026-31532 7.8

In the Linux kernel, the following vulnerability has been resolved: can: raw: fix ro->uniq use-after-free in raw_rcv() raw_release() unregisters raw CAN receive filters via can_rx_unregister(), but receiver deletion is deferred with call_rcu(). This leaves a window where raw_rcv() may still be running in an RCU read-side critical section after raw_release() frees ro->uniq, leading to a use-after-free of the percpu uniq storage. Move free_percpu(ro->uniq) out of raw_release() and into a raw-specific socket destructor. can_rx_unregister() takes an extra reference to the socket and only drops it from the RCU callback, so freeing uniq from sk_destruct ensures the percpu area is not released until the relevant callbacks have drained. [mkl: applied manually]

Record
DEBIAN-CVE-2026-31532
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2581 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

net: mvpp2: Prevent parser TCAM memory corruption

Protect the parser TCAM/SRAM memory, and the cached (shadow) SRAM information, from concurrent modifications.

Both the TCAM and SRAM tables are indirectly accessed by configuring an index register that selects the row to read or write to. This means that operations must be atomic in order to, e.g., avoid spreading writes across multiple rows. Since the shadow SRAM array is used to find free rows in the hardware table, it must also be protected in order to avoid TOCTOU errors where multiple cores allocate the same row.

This issue was detected in a situation where mvpp2_set_rx_mode() ran concurrently on two CPUs. In this particular case the MVPP2_PE_MAC_UC_PROMISCUOUS entry was corrupted, causing the classifier unit to drop all incoming unicast - indicated by the rx_classifier_drops counter.(CVE-2025-22060)

In the Linux kernel, the following vulnerability has been resolved:

mptcp: fix NULL pointer in can_accept_new_subflow

When testing valkey benchmark tool with MPTCP, the kernel panics in 'mptcp_can_accept_new_subflow' because subflow_req->msk is NULL.

Call trace:

mptcp_can_accept_new_subflow (./net/mptcp/subflow.c:63 (discriminator 4)) (P) subflow_syn_recv_sock (./net/mptcp/subflow.c:854) tcp_check_req (./net/ipv4/tcp_minisocks.c:863) tcp_v4_rcv (./net/ipv4/tcp_ipv4.c:2268) ip_protocol_deliver_rcu (./net/ipv4/ip_input.c:207) ip_local_deliver_finish (./net/ipv4/ip_input.c:234) ip_local_deliver (./net/ipv4/ip_input.c:254) ip_rcv_finish (./net/ipv4/ip_input.c:449) ...

According to the debug log, the same req received two SYN-ACK in a very short time, very likely because the client retransmits the syn ack due to multiple reasons.

Even if the packets are transmitted with a relevant time interval, they can be processed by the server on different CPUs concurrently). The 'subflow_req->msk' ownership is transferred to the subflow the first, and there will be a risk of a null pointer dereference here.

This patch fixes this issue by moving the 'subflow_req->msk' under the own_req == true conditional.

Note that the !msk check in subflow_hmac_valid() can be dropped, because the same check already exists under the own_req mpj branch where the code has been moved to.(CVE-2025-23145)

In the Linux kernel, the following vulnerability has been resolved:

mISDN: hfcpci: Fix warning when deleting uninitialized timer

With CONFIG_DEBUG_OBJECTS_TIMERS unloading hfcpci module leads to the following splat:

[ 250.215892] ODEBUG: assert_init not available (active state 0) object: ffffffffc01a3dc0 object type: timer_list hint: 0x0 [ 250.217520] WARNING: CPU: 0 PID: 233 at lib/debugobjects.c:612 debug_print_object+0x1b6/0x2c0 [ 250.218775] Modules linked in: hfcpci(-) mISDN_core [ 250.219537] CPU: 0 UID: 0 PID: 233 Comm: rmmod Not tainted 6.17.0-rc2-g6f713187ac98 #2 PREEMPT(voluntary) [ 250.220940] Hardware name: QEMU Ubuntu 24.04 PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.222377] RIP: 0010:debug_print_object+0x1b6/0x2c0 [ 250.223131] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 41 56 48 8b 14 dd a0 4e 01 9f 48 89 ee 48 c7 c7 20 46 01 9f e8 cb 84d [ 250.225805] RSP: 0018:ffff888015ea7c08 EFLAGS: 00010286 [ 250.226608] RAX: 0000000000000000 RBX: 0000000000000005 RCX: ffffffff9be93a95 [ 250.227708] RDX: 1ffff1100d945138 RSI: 0000000000000008 RDI: ffff88806ca289c0 [ 250.228993] RBP: ffffffff9f014a00 R08: 0000000000000001 R09: ffffed1002bd4f39 [ 250.230043] R10: ffff888015ea79cf R11: 0000000000000001 R12: 0000000000000001 [ 250.231185] R13: ffffffff9eea0520 R14: 0000000000000000 R15: ffff888015ea7cc8 [ 250.232454] FS: 00007f3208f01540(0000) GS:ffff8880caf5a000(0000) knlGS:0000000000000000 [ 250.233851] CS: 0010 DS: 0000 ES: 0000 CR0:…

Record
OESA-2026-2581
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2582 9.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved:

mISDN: hfcpci: Fix warning when deleting uninitialized timer

With CONFIG_DEBUG_OBJECTS_TIMERS unloading hfcpci module leads to the following splat:

[ 250.215892] ODEBUG: assert_init not available (active state 0) object: ffffffffc01a3dc0 object type: timer_list hint: 0x0 [ 250.217520] WARNING: CPU: 0 PID: 233 at lib/debugobjects.c:612 debug_print_object+0x1b6/0x2c0 [ 250.218775] Modules linked in: hfcpci(-) mISDN_core [ 250.219537] CPU: 0 UID: 0 PID: 233 Comm: rmmod Not tainted 6.17.0-rc2-g6f713187ac98 #2 PREEMPT(voluntary) [ 250.220940] Hardware name: QEMU Ubuntu 24.04 PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.222377] RIP: 0010:debug_print_object+0x1b6/0x2c0 [ 250.223131] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 41 56 48 8b 14 dd a0 4e 01 9f 48 89 ee 48 c7 c7 20 46 01 9f e8 cb 84d [ 250.225805] RSP: 0018:ffff888015ea7c08 EFLAGS: 00010286 [ 250.226608] RAX: 0000000000000000 RBX: 0000000000000005 RCX: ffffffff9be93a95 [ 250.227708] RDX: 1ffff1100d945138 RSI: 0000000000000008 RDI: ffff88806ca289c0 [ 250.228993] RBP: ffffffff9f014a00 R08: 0000000000000001 R09: ffffed1002bd4f39 [ 250.230043] R10: ffff888015ea79cf R11: 0000000000000001 R12: 0000000000000001 [ 250.231185] R13: ffffffff9eea0520 R14: 0000000000000000 R15: ffff888015ea7cc8 [ 250.232454] FS: 00007f3208f01540(0000) GS:ffff8880caf5a000(0000) knlGS:0000000000000000 [ 250.233851] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.234856] CR2: 00007f32090a7421 CR3: 0000000004d63000 CR4: 00000000000006f0 [ 250.236117] Call Trace: [ 250.236599] <TASK> [ 250.236967] ? trace_irq_enable.constprop.0+0xd4/0x130 [ 250.237920] debug_object_assert_init+0x1f6/0x310 [ 250.238762] ? __pfx_debug_object_assert_init+0x10/0x10 [ 250.239658] ? __lock_acquire+0xdea/0x1c70 [ 250.240369] __try_to_del_timer_sync+0x69/0x140 [ 250.241172] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 250.242058] ? __timer_delete_sync+0xc6/0x120 [ 250.242842] ? lock_acquire+0x30/0x80 [ 250.243474] ? __timer_delete_sync+0xc6/0x120 [ 250.244262] __timer_delete_sync+0x98/0x120 [ 250.245015] HFC_cleanup+0x10/0x20 [hfcpci] [ 250.245704] __do_sys_delete_module+0x348/0x510 [ 250.246461] ? __pfx___do_sys_delete_module+0x10/0x10 [ 250.247338] do_syscall_64+0xc1/0x360 [ 250.247924] entry_SYSCALL_64_after_hwframe+0x77/0x7f

Fix this by initializing hfc_tl timer with DEFINE_TIMER macro. Also, use mod_timer instead of manual timeout update.(CVE-2025-39833)

In the Linux kernel, the following vulnerability has been resolved:

platform/x86/amd/pmc: Add support for Van Gogh SoC

The ROG Xbox Ally (non-X) SoC features a similar architecture to the Steam Deck. While the Steam Deck supports S3 (s2idle causes a crash), this support was dropped by the Xbox Ally which only S0ix suspend.

Since the handler is missing here, this causes the device to not suspend and the AMD GPU driver to crash while trying to resume afterwards due to a power hang.(CVE-2025-68334)

In the Linux kernel, the following vulnerability has been resolved:

team: Move team device type change at the end of team_port_add

Attempting to add a port device that is already up will expectedly fail, but not before modifying the team device header_ops.

In the case of the syzbot reproducer the gre0 device is already in state UP when it attempts to add it as a port device of team0, this fails but before that header_ops->create of team0 is changed from eth_header to ipgre_header in the call to team_dev_type_check_change.

Later when we end up in ipgre_header() struct ip_tunnel* points to nonsense as the private data of the device still holds a struct team.

Example sequence of iproute2 commands to reproduce the hang/BUG(): ip link add dev team0 type team ip link add dev gre0 type gre ip link set dev gre0 up ip link set dev gre0…

Record
OESA-2026-2582
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:13932 8.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:13932
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:14339 8.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:14339
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:15883 8.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:15883
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:19521 8.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:19521
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:19568 8.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:19568
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:19705 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:19705
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:19711 7.8

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2026:19711
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:19875 8.1

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2026:19875
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:20130 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:20130
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:20593 8.1

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:20593
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:21706 7.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:21706
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:21745 7.8

Red Hat Security Advisory: kernel-rt security update

Record
RHSA-2026:21745
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:25095 7.3

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:25095
CVSS 3.1
7.3 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
Updated
2026-11-02
OSVRHSA-2026:25191 8.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:25191
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:25533 8.8

Red Hat Security Advisory: kernel security update

Record
RHSA-2026:25533
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:41236 8.8

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Record
RHSA-2026:41236
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:19568 8.1

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766)

  • kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741)

  • kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)

  • kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984)

  • kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990)

  • kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136)

  • kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204)

  • kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)

  • kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401)

  • kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)

  • kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)

  • kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607)

  • kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)

  • kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128)

  • kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284)

  • kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300)

  • kernel: Read root-owned files as an unprivileged user (CVE-2026-46333)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:19568
CVSS 3.1
8.1 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:21706 7.8

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)

  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)

  • kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)

  • kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)

  • kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)

  • kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)

  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)

  • kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)

  • kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)

  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)

  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)

  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)

  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)

  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)

  • kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)

  • kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)

  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)

  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:21706
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:21745 7.8

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)

  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)

  • kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)

  • kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)

  • kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)

  • kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)

  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)

  • kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)

  • kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)

  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)

  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)

  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)

  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)

  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)

  • kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)

  • kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)

  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)

  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:21745
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:25191 8.8

Critical: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419)

  • kernel: Linux kernel: Denial of Service in erofs filesystem (CVE-2026-31467)

  • kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)

  • kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581)

  • kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)

  • kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501)

  • kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:25191
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-11-CVE-2026-31532 7.8

CVE-2026-31532 in linux - Patched by Root

Root has patched CVE-2026-31532 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-11-CVE-2026-31532
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2026-31532 7.8

CVE-2026-31532 in linux - Patched by Root

Root has patched CVE-2026-31532 in the linux package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2026-31532
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2026-31532 7.8

CVE-2026-31532 in linux - Patched by Root

Root has patched CVE-2026-31532 in the linux package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2026-31532
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVROOT-OS-UBUNTU-2204-CVE-2026-31532 7.8

CVE-2026-31532 in linux - Patched by Root

Root has patched CVE-2026-31532 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2204-CVE-2026-31532
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVROOT-OS-UBUNTU-2404-CVE-2026-31532 7.8

CVE-2026-31532 in linux - Patched by Root

Root has patched CVE-2026-31532 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.

Record
ROOT-OS-UBUNTU-2404-CVE-2026-31532
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVUBUNTU-CVE-2026-31532 7.3

In the Linux kernel, the following vulnerability has been resolved: can: raw: fix ro->uniq use-after-free in raw_rcv() raw_release() unregisters raw CAN receive filters via can_rx_unregister(), but receiver deletion is deferred with call_rcu(). This leaves a window where raw_rcv() may still be running in an RCU read-side critical section after raw_release() frees ro->uniq, leading to a use-after-free of the percpu uniq storage. Move free_percpu(ro->uniq) out of raw_release() and into a raw-specific socket destructor. can_rx_unregister() takes an extra reference to the socket and only drops it from the RCU callback, so freeing uniq from sk_destruct ensures the percpu area is not released until the relevant callbacks have drained. [mkl: applied manually]

Record
UBUNTU-CVE-2026-31532
CVSS 4.0
7.3 HighCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVALSA-2026:19568 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766)
  • kernel: scsi: qla2xxx: Fix improper freeing of purex item (CVE-2025-68741)
  • kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
  • kernel: libceph: prevent potential out-of-bounds reads in handle_auth_done() (CVE-2026-22984)
  • kernel: libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CVE-2026-22990)
  • kernel: Linux kernel: Denial of Service in libceph OSD client due to unreset sparse-read state (CVE-2026-23136)
  • kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204)
  • kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
  • kernel: Linux kernel KVM: Privilege escalation or denial of service due to improper shadow page table entry handling (CVE-2026-23401)
  • kernel: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (CVE-2026-31402)
  • kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
  • kernel: usbip: validate number_of_packets in usbip_pack_ret_submit() (CVE-2026-31607)
  • kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
  • kernel: RDMA/umem: Fix double dma_buf_unpin in failure path (CVE-2026-43128)
  • kernel: "Dirty Frag" is a new universal Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-43284)
  • kernel: "Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel (CVE-2026-46300)
  • kernel: Read root-owned files as an unprivileged user (CVE-2026-46333)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:19568
Updated
2026-11-02
OSVALSA-2026:21706 No score

Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
  • kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)
  • kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
  • kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)
  • kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
  • kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
  • kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
  • kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
  • kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:21706
Updated
2026-11-02
OSVALSA-2026:21745 No score

Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

  • kernel: Bluetooth: MGMT: Fix possible UAFs (CVE-2025-39981)
  • kernel: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CVE-2025-68183)
  • kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (CVE-2025-68347)
  • kernel: libceph: make decode_pool() more resilient against corrupted osdmaps (CVE-2025-71116)
  • kernel: Linux kernel: Denial of service and memory corruption in RDMA umad (CVE-2026-23243)
  • kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
  • kernel: netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CVE-2026-23455)
  • kernel: Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CVE-2026-31408)
  • kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
  • kernel: net: sched: act_csum: validate nested VLAN headers (CVE-2026-31684)
  • kernel: netfilter: ip6t_eui64: reject invalid MAC header for all packets (CVE-2026-31685)
  • kernel: netfilter: nf_conntrack_helper: pass helper to expect cleanup (CVE-2026-43027)
  • kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
  • kernel: HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CVE-2026-43051)
  • kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
  • kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
  • kernel: netfilter: xt_tcpmss: check remaining length before reading optlen (CVE-2026-43190)
  • kernel: xfs: fix freemap adjustments when adding xattrs to leaf blocks (CVE-2026-43158)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:21745
Updated
2026-11-02
OSVALSA-2026:25191 No score

Critical: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419)
  • kernel: Linux kernel: Denial of Service in erofs filesystem (CVE-2026-31467)
  • kernel: can: raw: fix ro->uniq use-after-free in raw_rcv() (CVE-2026-31532)
  • kernel: ALSA: 6fire: fix use-after-free on disconnect (CVE-2026-31581)
  • kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)
  • kernel: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (CVE-2026-43501)
  • kernel: selinux: fix overlayfs mmap() and mprotect() access checks (CVE-2026-46054)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:25191
Updated
2026-11-02
OSVAZL-83538 No score

CVE-2026-31532 affecting package kernel for versions less than 6.6.137.1-1

In the Linux kernel, the following vulnerability has been resolved:

can: raw: fix ro->uniq use-after-free in raw_rcv()

raw_release() unregisters raw CAN receive filters via can_rx_unregister(), but receiver deletion is deferred with call_rcu(). This leaves a window where raw_rcv() may still be running in an RCU read-side critical section after raw_release() frees ro->uniq, leading to a use-after-free of the percpu uniq storage.

Move free_percpu(ro->uniq) out of raw_release() and into a raw-specific socket destructor. can_rx_unregister() takes an extra reference to the socket and only drops it from the RCU callback, so freeing uniq from sk_destruct ensures the percpu area is not released until the relevant callbacks have drained.

[mkl: applied manually]

Record
AZL-83538
Updated
2026-11-02
OSVCLSA-2026-1778896895 No score

kernel: Fix of 2 CVEs

  • ptrace: require CAP_SYS_PTRACE when task has no mm
  • net: udp_offload: propagate SKBFL_SHARED_FRAG in skb_gro_receive_list {CVE-2026-46300}
  • can: raw: fix ro->uniq use-after-free in raw_rcv() {CVE-2026-31532}
Record
CLSA-2026-1778896895
Updated
2026-11-02
OSVCLSA-2026-1779200965 No score

Fix CVE(s): CVE-2026-31532, CVE-2026-46300, CVE-2026-46333

  • CVE-2026-46333
    • ptrace: require CAP_SYS_PTRACE when task has no mm
  • CVE-2026-46300
    • net: skbuff: propagate shared-frag marker through copy/coalesce/gro/shift paths
  • CVE-2026-31532
    • can: raw: fix ro->uniq use-after-free in raw_rcv() {CVE-2026-31532}
Record
CLSA-2026-1779200965
Updated
2026-11-02
OSVCLSA-2026-1780562693 No score

kernel: Fix of 111 CVEs

  • fbcon: Fix OOB access in font allocation {CVE-2025-39967}
  • fbcon: fix integer overflow in fbcon_do_set_font {CVE-2025-39967}
  • macvlan: observe an RCU grace period in macvlan_common_newlink() error path {CVE-2026-23273}
  • macvlan: fix error recovery in macvlan_common_newlink() {CVE-2026-23209}
  • net_sched: sch_sfq: move the limit validation {CVE-2025-37752}
  • bpf: Fix oob access in cgroup local storage {CVE-2025-38502}
  • ftrace: Fix possible use-after-free issue in ftrace_location() {CVE-2024-38588}
  • driver core: enforce device_lock for driver_match_device() {CVE-2026-31688}
  • scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT {CVE-2026-43475}
  • unshare: fix unshare_fs() handling {CVE-2026-43472}
  • netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path {CVE-2026-43451}
  • nvme-pci: Fix race bug in nvme_poll_irqdisable() {CVE-2026-43448}
  • e1000/e1000e: Fix leak in DMA error cleanup {CVE-2026-43445}
  • cgroup: fix race between task migration and iteration {CVE-2026-43439}
  • ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces {CVE-2026-43436}
  • usb: image: mdc800: kill download URB on timeout {CVE-2026-43425}
  • tipc: fix divide-by-zero in tipc_sk_filter_connect() {CVE-2026-43411}
  • nouveau/dpcd: return EBUSY for aux xfer if the device is asleep {CVE-2026-43381}
  • ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() {CVE-2026-43068}
  • netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP {CVE-2026-31424}
  • net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() {CVE-2026-31423}
  • net/sched: cls_flow: fix NULL pointer dereference on shared blocks {CVE-2026-31422}
  • net/sched: cls_fw: fix NULL pointer dereference on shared blocks {CVE-2026-31421}
  • netfilter: ipset: drop logically empty buckets in mtype_del {CVE-2026-31418}
  • netfilter: nfnetlink_log: account for netlink header size {CVE-2026-31416}
  • sunrpc: fix cache_request leak in cache_release {CVE-2026-31400}
  • PM: runtime: Fix a race condition related to device removal {CVE-2026-23452}
  • net: usb: kaweth: validate USB endpoints {CVE-2026-23312}
  • nvdimm/bus: Fix potential use after free in asynchronous initialization {CVE-2026-31399}
  • net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448}
  • nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set {CVE-2026-43449}
  • netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() {CVE-2026-43453}
  • netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450}
  • RDMA/umem: Fix double dma_buf_unpin in failure path {CVE-2026-43128}
  • usbip: validate number_of_packets in usbip_pack_ret_submit() {CVE-2026-31607}
  • net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown {CVE-2026-23454}
  • netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() {CVE-2025-38441}
  • nvmet: fix memory leak of bio integrity {CVE-2025-38405}
  • nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. {CVE-2025-38400}
  • dmaengine: idxd: fix memory leak in error handling path of idxd_alloc {CVE-2025-38015}
  • bonding: check xdp prog when set bond mode {CVE-2025-22105}
  • usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}
  • netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD {CVE-2026-31428}
  • netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp {CVE-2026-31427}
  • ipv6: avoid overflows in ip6_datagram_send_ctl() {CVE-2026-31415}
  • net: atm: fix crash due to unvalidated vcc pointer in sigd_send() {CVE-2026-31411}
  • RDMA/umad: Reject negative data_len in ib_umad_write {CVE-2026-23243}
  • perf/x86/intel/uncore: Fix die ID init and look up bugs {CVE-2026-43344}
  • x86/apic: Disable x2apic on resume if the kernel expects so {CVE-2026-43363}
  • dm: remove fake timeout to avoid leak request {CVE-2026-43314}
  • drm: Account property blob allocations to memcg {CVE-2026-43287}
  • HID:…
Record
CLSA-2026-1780562693
Updated
2026-11-02
OSVCLSA-2026-1782145985 No score

kernel: Fix of 62 CVEs

  • libceph: prevent potential out-of-bounds reads in handle_auth_done() {CVE-2026-22984}
  • drm/i915: Fix NULL ptr deref by checking new_crtc_state {CVE-2023-53833}
  • netfilter: nf_tables: release flowtable after rcu grace period on error {CVE-2026-23392}
  • wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110}
  • xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
  • mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() {CVE-2026-31586}
  • scsi: sg: Do not sleep in atomic context {CVE-2025-40259}
  • Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} {CVE-2023-53827}
  • drm/i915/gem: add missing boundary check in vm_access {CVE-2023-28410}
  • ASoC: SOF: debug: Fix potential buffer overflow by snprintf() {CVE-2022-50051}
  • tipc: fix use-after-free Read in tipc_named_reinit {CVE-2022-49696}
  • wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration {CVE-2022-49022}
  • ethtool: do not perform operations on net devices being unregistered {CVE-2021-47517}
  • cxgb4: avoid accessing registers when clearing filters {CVE-2021-47138}
  • bpf: Fix ringbuf helper function compatibility {CVE-2021-34866}
  • HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq {CVE-2026-43051}
  • Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408}
  • net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448}
  • nbd: defer config unlock in nbd_genl_connect {CVE-2025-68366}
  • asix: fix uninit-value in asix_mdio_read() {CVE-2021-47101}
  • kyber: fix out of bounds access when preempted {CVE-2021-46984}
  • can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004}
  • tls: separate no-async decryption request handling from async {CVE-2024-58240}
  • ftrace: Also allocate and copy hash for reading of filter files {CVE-2025-39689}
  • Make filldir64 verify the directory entry filename is valid {CVE-2019-10220}
  • scsi: qla2xxx: Fix bsg_done() causing double free {CVE-2025-71238}
  • team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091}
  • bonding: limit BOND_MODE_8023AD to Ethernet devices {CVE-2026-23099}
  • Bluetooth: btusb: revert use of devm_kzalloc in btusb {CVE-2025-71082}
  • proc/vmcore: fix clearing user buffer by properly using clear_user() {CVE-2021-47566}
  • nfsd: fix use-after-free due to delegation race {CVE-2021-47506}
  • drm: bridge/panel: Cleanup connector on bridge detach {CVE-2021-47063}
  • usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}
  • nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402}
  • ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452}
  • wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052}
  • netfilter: nfnetlink_osf: avoid OOB read {CVE-2023-39189}
  • crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id {CVE-2025-68724}
  • ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581}
  • Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock {CVE-2026-31500}
  • drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370}
  • net: use dst_dev_rcu() in sk_setup_caps() {CVE-2025-40170}
  • wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() {CVE-2022-50258}
  • x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer {CVE-2021-47226}
  • kvm: LAPIC: Restore guard to prevent illegal APIC register access {CVE-2021-47255}
  • tunnels: fix kasan splat when generating ipv4 pmtu error {CVE-2023-53600}
  • macvlan: fix error recovery in macvlan_common_newlink() {CVE-2026-23209}
  • ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191}
  • RDMA/cxgb4: Do not dma memory off of the stack {CVE-2019-17075}
  • netfilter: nf_conntrack_helper: pass helper to expect cleanup {CVE-2026-43027}
  • KVM: nVMX: unconditionally cancel preemption timer in free_nested (CVE-2019-7221) {CVE-2019-7221}
  • RDMA/umad: Reject negative data_len in…
Record
CLSA-2026-1782145985
Updated
2026-11-02
OSVCLSA-2026-1782146775 No score

kernel: Fix of 58 CVEs

  • libceph: prevent potential out-of-bounds reads in handle_auth_done() {CVE-2026-22984}
  • svcrdma: bound check rq_pages index in inline path {CVE-2025-71068}
  • drm/i915: Fix NULL ptr deref by checking new_crtc_state {CVE-2023-53833}
  • netfilter: nf_tables: release flowtable after rcu grace period on error {CVE-2026-23392}
  • wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110}
  • xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
  • mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() {CVE-2026-31586}
  • scsi: sg: Do not sleep in atomic context {CVE-2025-40259}
  • bpf, sockmap: Fix race between element replace and close() {CVE-2024-56664}
  • Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} {CVE-2023-53827}
  • drm/i915/gem: add missing boundary check in vm_access {CVE-2023-28410}
  • ASoC: SOF: debug: Fix potential buffer overflow by snprintf() {CVE-2022-50051}
  • tipc: fix use-after-free Read in tipc_named_reinit {CVE-2022-49696}
  • wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration {CVE-2022-49022}
  • drm/i915/gem: Really move i915_gem_context.link under ref protection {CVE-2022-48662}
  • drm/i915: Release i915_gem_context from a worker {CVE-2022-48662}
  • KVM: x86/mmu: Don't advance iterator after restart due to yielding {CVE-2021-47094}
  • HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq {CVE-2026-43051}
  • Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408}
  • nbd: defer config unlock in nbd_genl_connect {CVE-2025-68366}
  • netfilter: xt_tcpmss: check remaining length before reading optlen {CVE-2026-43190}
  • media: dvb-net: fix OOB access in ULE extension header tables {CVE-2026-31405}
  • net: sched: sfb: fix null pointer access issue when sfb_init() fails {CVE-2022-50356}
  • skbuff: skb_segment, Call zero copy functions before using skbuff frags {CVE-2023-53354}
  • nfsd: call op_release, even when op_func returns an error {CVE-2023-53241}
  • icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). {CVE-2023-53343}
  • RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device {CVE-2023-53393}
  • scsi: target: iscsi: Fix a race condition between login_work and the login thread {CVE-2022-50350}
  • Make filldir64 verify the directory entry filename is valid {CVE-2019-10220}
  • usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}
  • crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id {CVE-2025-68724}
  • nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402}
  • drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370}
  • net: use dst_dev_rcu() in sk_setup_caps() {CVE-2025-40170}
  • team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091}
  • proc/vmcore: fix clearing user buffer by properly using clear_user() {CVE-2021-47566}
  • cxgb4: avoid accessing registers when clearing filters {CVE-2021-47138}
  • bpf: Fix ringbuf helper function compatibility {CVE-2021-34866}
  • ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452}
  • wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052}
  • atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050}
  • ext4: block range must be validated before use in ext4_mb_clear_bb() {CVE-2022-50021}
  • bonding: limit BOND_MODE_8023AD to Ethernet devices {CVE-2026-23099}
  • net/sched: cls_u32: use skb_header_pointer_careful() {CVE-2026-23204}
  • scsi: qla2xxx: Fix bsg_done() causing double free {CVE-2025-71238}
  • ice: Fix memory corruption in VF driver {CVE-2022-49722}
  • net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448}
  • netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450}
  • tunnels: fix kasan splat when generating ipv4 pmtu error {CVE-2023-53600}
  • Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020}
  • netfilter: nf_conntrack_helper: pass helper to…
Record
CLSA-2026-1782146775
Updated
2026-11-02
OSVCLSA-2026-1783336710 No score

kernel-uek: Fix of 10 CVEs

  • KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role {CVE-2026-46113}
  • net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088}
  • scsi: aic94xx: fix use-after-free in device removal path {CVE-2025-71075}
  • i2c: piix4: Fix adapter not be removed in piix4_remove() {CVE-2022-49900}
  • Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020}
  • ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452}
  • can: raw: fix ro->uniq use-after-free in raw_rcv() {CVE-2026-31532}
  • ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581}
  • ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY {CVE-2026-31597}
  • netfilter: nf_conntrack_helper: pass helper to expect cleanup {CVE-2026-43027}
  • drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370}
Record
CLSA-2026-1783336710
Updated
2026-11-02
OSVCLSA-2026-1783336721 No score

Fix of 30 CVEs

  • CVE-2026-46113
    • KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role {CVE-2026-46113}
  • CVE-2022-50300
    • btrfs: fix extent map use-after-free when handling missing device in read_one_chunk {CVE-2022-50300}
  • CVE-2022-50082
    • ext4: fix warning in ext4_iomap_begin as race between bmap and write {CVE-2022-50082}
  • CVE-2026-43052
    • wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052}
  • CVE-2026-43386
    • staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie {CVE-2026-43386}
  • CVE-2026-23281
    • wifi: libertas: fix use-after-free in lbs_free_adapter() {CVE-2026-23281}
  • CVE-2026-43141
    • ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut {CVE-2026-43141}
  • CVE-2026-23209
    • macvlan: fix error recovery in macvlan_common_newlink() {CVE-2026-23209}
  • CVE-2026-23001
    • macvlan: fix possible UAF in macvlan_forward_source() {CVE-2026-23001}
  • CVE-2026-31532
    • can: raw: fix ro->uniq use-after-free in raw_rcv() {CVE-2026-31532}
  • CVE-2026-31688
    • driver core: enforce device_lock for driver_match_device() {CVE-2026-31688}
  • CVE-2023-53680
    • NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL {CVE-2023-53680}
  • CVE-2025-38718
    • sctp: linearize cloned gso packets in sctp_rcv {CVE-2025-38718}
  • CVE-2025-38102
    • VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify {CVE-2025-38102}
  • CVE-2024-42120
    • drm/amd/display: Check pipe offset before setting vblank {CVE-2024-42120}
  • CVE-2022-50093
    • iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) {CVE-2022-50093}
  • CVE-2022-50410
    • NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-50410}
  • CVE-2026-23234
    • f2fs: fix to avoid UAF in f2fs_write_end_io() {CVE-2026-23234}
  • CVE-2026-43203
    • atm: fore200e: fix use-after-free in tasklets during device removal {CVE-2026-43203}
  • CVE-2026-43373
    • net: ncsi: fix skb leak in error paths {CVE-2026-43373}
  • CVE-2026-43450
    • netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450}
  • CVE-2026-31399
    • nvdimm/bus: Fix potential use after free in asynchronous initialization {CVE-2026-31399}
  • CVE-2026-43449
    • nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set {CVE-2026-43449}
  • CVE-2026-43427
    • usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}
  • CVE-2026-31452
    • ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452}
  • CVE-2026-23397
    • nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397}
  • CVE-2025-71082
    • Bluetooth: btusb: revert use of devm_kzalloc in btusb {CVE-2025-71082}
  • CVE-2025-39955
    • tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-39955}
  • CVE-2022-49770
    • ceph: avoid putting the realm twice when decoding snaps fails {CVE-2022-49770}
  • CVE-2026-43283
    • net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle {CVE-2026-43283}
  • Bump ABI 4.15.0-261
Record
CLSA-2026-1783336721
Updated
2026-11-02
OSVCLSA-2026-1783337056 No score

Fix of 30 CVEs

  • CVE-2026-46113
    • KVM: x86: Fix shadow paging use-after-free due to unexpected GFN/role {CVE-2026-46113}
  • CVE-2022-50300
    • btrfs: fix extent map use-after-free when handling missing device in read_one_chunk {CVE-2022-50300}
  • CVE-2022-50082
    • ext4: fix warning in ext4_iomap_begin as race between bmap and write {CVE-2022-50082}
  • CVE-2026-43052
    • wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052}
  • CVE-2026-43386
    • staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie {CVE-2026-43386}
  • CVE-2026-23281
    • wifi: libertas: fix use-after-free in lbs_free_adapter() {CVE-2026-23281}
  • CVE-2026-43141
    • ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut {CVE-2026-43141}
  • CVE-2026-23209
    • macvlan: fix error recovery in macvlan_common_newlink() {CVE-2026-23209}
  • CVE-2026-23001
    • macvlan: fix possible UAF in macvlan_forward_source() {CVE-2026-23001}
  • CVE-2026-31532
    • can: raw: fix ro->uniq use-after-free in raw_rcv() {CVE-2026-31532}
  • CVE-2026-31688
    • driver core: enforce device_lock for driver_match_device() {CVE-2026-31688}
  • CVE-2023-53680
    • NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL {CVE-2023-53680}
  • CVE-2025-38718
    • sctp: linearize cloned gso packets in sctp_rcv {CVE-2025-38718}
  • CVE-2025-38102
    • VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify {CVE-2025-38102}
  • CVE-2024-42120
    • drm/amd/display: Check pipe offset before setting vblank {CVE-2024-42120}
  • CVE-2022-50093
    • iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) {CVE-2022-50093}
  • CVE-2022-50410
    • NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-50410}
  • CVE-2026-23234
    • f2fs: fix to avoid UAF in f2fs_write_end_io() {CVE-2026-23234}
  • CVE-2026-43203
    • atm: fore200e: fix use-after-free in tasklets during device removal {CVE-2026-43203}
  • CVE-2026-43373
    • net: ncsi: fix skb leak in error paths {CVE-2026-43373}
  • CVE-2026-43450
    • netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450}
  • CVE-2026-31399
    • nvdimm/bus: Fix potential use after free in asynchronous initialization {CVE-2026-31399}
  • CVE-2026-43449
    • nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set {CVE-2026-43449}
  • CVE-2026-43427
    • usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}
  • CVE-2026-31452
    • ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452}
  • CVE-2026-23397
    • nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397}
  • CVE-2025-71082
    • Bluetooth: btusb: revert use of devm_kzalloc in btusb {CVE-2025-71082}
  • CVE-2025-39955
    • tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). {CVE-2025-39955}
  • CVE-2022-49770
    • ceph: avoid putting the realm twice when decoding snaps fails {CVE-2022-49770}
  • CVE-2026-43283
    • net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle {CVE-2026-43283}
  • Bump ABI 4.15.0-261
Record
CLSA-2026-1783337056
Updated
2026-11-02
OSVCLSA-2026-1787304608 No score

kernel-uek: Fix of 34 CVEs

  • Rebased onto Oracle UEK base 5.4.17-2136.357.2.el7uek
  • sctp: don't free the ASCONF's own transport in DEL-IP processing {CVE-2026-64564}
  • ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison {CVE-2026-53309}
  • ocfs2/dlm: validate qr_numregions in dlm_match_regions() {CVE-2026-53043}
  • ixgbevf: fix use-after-free in VEPA multicast source pruning {CVE-2026-64113}
  • ipv4: raw: reject IP_HDRINCL packets with ihl < 5 {CVE-2026-64114}
  • NFSv4: include MAY_WRITE in open permission mask for O_TRUNC {CVE-2026-64298}
  • fuse: re-lock request before returning from fuse_ref_folio() {CVE-2026-64266}
  • scsi: isci: Fix use-after-free in device removal path {CVE-2026-64103}
  • crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-23060}
  • futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock {CVE-2026-53166}
  • net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088}
  • scsi: aic94xx: fix use-after-free in device removal path {CVE-2025-71075}
  • i2c: piix4: Fix adapter not be removed in piix4_remove() {CVE-2022-49900}
  • Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020}
  • ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452}
  • can: raw: fix ro->uniq use-after-free in raw_rcv() {CVE-2026-31532}
  • ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581}
  • ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY {CVE-2026-31597}
  • netfilter: nf_conntrack_helper: pass helper to expect cleanup {CVE-2026-43027}
  • drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370}
  • xfrm_user: fix info leak in build_mapping() {CVE-2026-43089}
  • xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158}
  • libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116}
  • e1000: fix OOB in e1000_tbi_should_accept() {CVE-2025-71093}
  • ALSA: usb-audio: Use correct version for UAC3 header validation {CVE-2026-23318}
  • nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397}
  • Squashfs: check metadata block offset is within range {CVE-2026-23388}
  • net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled {CVE-2026-23381}
  • wifi: mac80211: fix NULL deref in mesh_matches_local() {CVE-2026-23396}
  • icmp: fix NULL pointer dereference in icmp_tag_validation() {CVE-2026-23398}
  • HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them {CVE-2026-23382}
  • net: usb: kalmia: validate USB endpoints {CVE-2026-23365}
  • wifi: radiotap: reject radiotap with unknown bits {CVE-2026-23367}
  • drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() {CVE-2026-23356}
  • batman-adv: reject oversized global TT response buffers {CVE-2026-31659}
  • drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() {CVE-2026-43206}
  • net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040}
  • ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602}
  • nvdimm/bus: Fix potential use after free in asynchronous initialization {CVE-2026-31399}
  • usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}
  • media: dvb-net: fix OOB access in ULE extension header tables {CVE-2026-31405}
  • sysctl: Fix data races in proc_douintvec(). {CVE-2022-49641}
  • netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450}
  • ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778}
  • atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050}
  • fs: writeback: fix use-after-free in __mark_inode_dirty() {CVE-2025-39866}
  • usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760}
  • crypto: lzo - Fix compression buffer overrun {CVE-2025-38068}
  • KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
  • vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint {CVE-2025-22083}
  • mm:…
Record
CLSA-2026-1787304608
Updated
2026-11-02
OSVCLSA-2026-1788449727 No score

Fix of 235 CVEs

  • Bump kernel ABI to 29: ship the ELS kernel as 4.19.0-29-*, distinct from the prior 4.19.0-28.
  • CVE-2021-46984
    • kyber: fix out of bounds access when preempted {CVE-2021-46984}
  • CVE-2021-47049
    • Drivers: hv: vmbus: Use after free in __vmbus_open() {CVE-2021-47049}
  • CVE-2021-47101
    • asix: fix uninit-value in asix_mdio_read() {CVE-2021-47101}
  • CVE-2021-47191
    • scsi: scsi_debug: Fix out-of-bound read in resp_readcap16() {CVE-2021-47191}
  • CVE-2021-47352
    • virtio-net: Add validation for used length {CVE-2021-47352}
  • CVE-2021-47379
    • blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd {CVE-2021-47379}
  • CVE-2021-47391
    • RDMA/cma: Ensure rdma_addr_cancel() happens before issuing more requests {CVE-2021-47391}
  • CVE-2021-47479
    • staging: rtl8712: fix use-after-free in rtl8712_dl_fw {CVE-2021-47479}
  • CVE-2022-21546
    • scsi: target: Fix WRITE_SAME No Data Buffer crash {CVE-2022-21546}
  • CVE-2022-39189
    • KVM: x86: do not report a vCPU as preempted outside instruction boundaries {CVE-2022-39189}
  • CVE-2022-43945
    • SUNRPC: Fix svcxdr_init_encode's buflen calculation {CVE-2022-43945}
    • NFSD: Cap rsize_bop result based on send buffer size {CVE-2022-43945}
  • CVE-2022-48744
    • net/mlx5e: Avoid field-overflowing memcpy() {CVE-2022-48744}
  • CVE-2022-49026
    • e100: Fix possible use after free in e100_xmit_prepare {CVE-2022-49026}
  • CVE-2022-49720
    • block: Fix handling of offline queues in blk_mq_alloc_request_hctx() {CVE-2022-49720}
  • CVE-2022-49975
    • bpf: Don't redirect packets with invalid pkt_len {CVE-2022-49975}
    • bpf: Move skb->len == 0 checks into __bpf_redirect {CVE-2022-49975}
  • CVE-2022-50066
    • net: atlantic: fix aq_vec index out of range error {CVE-2022-50066}
  • CVE-2022-50103
    • sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
  • CVE-2022-50129
    • RDMA/srpt: Introduce a reference count in struct srpt_device {CVE-2022-50129}
    • RDMA/srpt: Fix a use-after-free {CVE-2022-50129}
  • CVE-2022-50300
    • btrfs: fix extent map use-after-free when handling missing device in read_one_chunk {CVE-2022-50300}
  • CVE-2022-50406
    • iomap: iomap: fix memory corruption when recording errors during writeback {CVE-2022-50406}
  • CVE-2022-50422
    • scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() {CVE-2022-50422}
  • CVE-2022-50552
    • blk-mq: use quiesced elevator switch when reinitializing queues {CVE-2022-50552}
  • CVE-2023-51779
    • Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2023-51779}
  • CVE-2023-52434
    • smb: client: fix potential OOBs in smb2_parse_contexts() {CVE-2023-52434}
  • CVE-2023-52515
    • RDMA/srp: Do not call scsi_done() from srp_abort() {CVE-2023-52515}
  • CVE-2023-52531
    • wifi: iwlwifi: mvm: Fix a memory corruption issue {CVE-2023-52531}
  • CVE-2023-52741
    • cifs: Fix use-after-free in rdata->read_into_pages() {CVE-2023-52741}
  • CVE-2023-53000
    • netlink: prevent potential spectre v1 gadgets {CVE-2023-53000}
  • CVE-2023-53039
    • workqueue: Add resource managed version of delayed work init {CVE-2023-53039}
    • devm-helpers: Fix devm_delayed_work_autocancel() kerneldoc {CVE-2023-53039}
    • devm-helpers: Add resource managed version of work init {CVE-2023-53039}
    • HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039}
    • HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev->devc {CVE-2023-53039}
  • CVE-2023-53111
    • loop: Fix use-after-free issues {CVE-2023-53111}
  • CVE-2023-53254
    • cacheinfo: Fix shared_cpu_map to handle shared caches at different levels…
Record
CLSA-2026-1788449727
Updated
2026-11-02
OSVCLSA-2026-1792753605 No score

Fix of 16 CVEs

  • CVE-2026-74581
    • net: ipv6: clear suppressed fib6 rule result {CVE-2026-74581}
  • CVE-2026-46331
    • net/sched: fix pedit partial COW leading to page cache corruption {CVE-2026-46331}
  • CVE-2026-64007
    • netfilter: synproxy: refresh tcphdr after skb_ensure_writable {CVE-2026-64007}
  • CVE-2026-31532
    • can: raw: fix ro->uniq use-after-free in raw_rcv() {CVE-2026-31532}
  • CVE-2026-98375
    • xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}
  • CVE-2026-98266
    • ALSA: core: Fix potential UAF after asynchronous card release {CVE-2026-98266}
  • CVE-2026-98194
    • wifi: libertas_tf: fix UAF in lbtf_free_adapter() {CVE-2026-98194}
  • CVE-2026-98196
    • wifi: brcmsmac: fix UAF in brcms_free_timer() {CVE-2026-98196}
  • CVE-2026-98349
    • wifi: libipw: reject too-short beacon and probe responses {CVE-2026-98349}
  • CVE-2026-98348
    • wifi: libipw: reject too-short association responses {CVE-2026-98348}
  • CVE-2026-98217
    • IB/mlx4: Fix use-after-free on pkey sysfs registration failure {CVE-2026-98217}
  • CVE-2026-64002
    • ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() {CVE-2026-64002}
  • CVE-2026-98193
    • wifi: libipw: reject TKIP frames without a full MIC {CVE-2026-98193}
  • CVE-2026-53059
    • dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059}
  • CVE-2022-50103
    • sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed {CVE-2022-50103}
  • CVE-2025-38563
    • perf/core: Prevent VMA split of buffer mappings {CVE-2025-38563}
  • CVE-2025-39839
    • batman-adv: fix OOB read/write in network-coding decode {CVE-2025-39839}
  • Bump ABI 4.4.0-290
Record
CLSA-2026-1792753605
Updated
2026-11-02
OSVLSN-0122-1 No score

Kernel Live Patch Security Notice

In the Linux kernel, the following vulnerability has been resolved: fs: dlm: fix use after free in midcomms commit While working on processing dlm message in softirq context I experienced the following KASAN use-after-free warning: .

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix oops due to NULL pointer dereference in brcmf_sdiod_sglist_rw() This patch fixes a NULL pointer dereference bug in brcmfmac that occurs when a high 'sd_sgentry_align' value applies (e.g. 512) and a lot of queued SKBs are sent from the pkt queue.

In the Linux kernel, the following vulnerability has been resolved: padata: fix UAF in padata_reorder A bug was found when run ltp test: BUG: KASAN: slab-use-after-free in padata_find_next+0x29/0x1a0 Read of size 4 at addr ffff88bbfe003524 by task kworker/u113:2/3039206 CPU: 0 PID: 3039206 Comm: kworker/u113:2 Kdump: loaded Not tainted 6.6.0+ Workqueue: pdecrypt_parallel padata_parallel_worker Call Trace: <TASK> dump_stack_lvl+0x32/0x50 print_address_description.constprop.0+0x6b/0x3d0 print_report+0xdd/0x2c0 kasan_report+0xa5/0xd0 padata_find_next+0x29/0x1a0 padata_reorder+0x131/0x220 padata_parallel_worker+0x3d/0xc0 process_one_work+0x2ec/0x5a0 If 'mdelay(10)' is added before calling 'padata_find_next' in the 'padata_reorder' function, this issue could be reproduced easily with ltp test (pcrypt_aead01).

In the Linux kernel, the following vulnerability has been resolved: geneve: Fix use-after-free in geneve_find_dev().

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_sessions_deregister() In multichannel mode, UAF issue can occur in session_deregister when the second channel sets up a session through the connection of the first channel.

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_tunnel: fix geneve_opt type confusion addition When handling multiple NFTA_TUNNEL_KEY_OPTS_GENEVE attributes, the parsing logic should place every geneve_opt structure one by one compactly.

In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4_xattr_inode_dec_ref_all' we should ignore xattrs entries past the 'end' entry.

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in __smb2_lease_break_noti() Move tcp_transport free to ksmbd_conn_free.

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix dangling pointer in krb_authenticate krb_authenticate frees sess->user and does not set the pointer to NULL.

In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too Similarly to the previous patch, we need to safe guard hfsc_dequeue() too. But for this one, we don't have a reliable reproducer.)(CVE-2025-37823).

In the Linux kernel, the following vulnerability has been resolved: jbd2: remove wrong sb->s_sequence check Journal emptiness is not determined by sb->s_sequence .

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix mode1 reset crash issue If HW scheduler hangs and mode1 reset is used to recover GPU, KFD signal user space to abort the processes.

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Use local fence in error path of xe_migrate_clear The intent of the error path in xe_migrate_clear is to wait on locally generated fence and then return.

In the Linux kernel, the following vulnerability has been resolved: net_sched: qfq: Fix double list add in class with netem as child qdisc As described in Gerrard's report .

In the Linux kernel, the following vulnerability has been resolved: net_sched: ets: Fix double list add in class with netem as child qdisc As described in Gerrard's report .

In the Linux kernel, the following vulnerability has been resolved: vxlan: vnifilter: Fix unlocked deletion of default FDB entry When a VNI is deleted…

Record
LSN-0122-1
Updated
2026-11-03
OSVopenSUSE-SU-2026:10703-1 No score

kernel-devel-7.0.3-1.1 on GA media

These are all security issues fixed in the kernel-devel-7.0.3-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10703-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21555-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues:

The following security issues were fixed:

  • CVE-2026-23259: io_uring/rw: free potentially allocated iovec on cache put failure (bsc#1259866).
  • CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled (bsc#1262652).
  • CVE-2026-31561: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask (bsc#1263059).
  • CVE-2026-43091: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).
  • CVE-2026-43114: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (bsc#1264601).
  • CVE-2026-43168: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).
  • CVE-2026-43172: wifi: iwlwifi: fix 22000 series SMEM parsing (bsc#1264543).
  • CVE-2026-43204: ASoC: qcom: q6asm: handle the responses after closing (bsc#1264531).
  • CVE-2026-43216: net: Drop the lock in skb_may_tx_timestamp() (bsc#1264319).
  • CVE-2026-43230: net/rds: Clear reconnect pending bit (bsc#1264539).
  • CVE-2026-43244: kcm: fix zero-frag skb in frag_list on partial sendmsg error (bsc#1264321).
  • CVE-2026-43262: gfs2: fiemap page fault fix (bsc#1264422).
  • CVE-2026-43266: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418).
  • CVE-2026-43273: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).
  • CVE-2026-43275: scsi: ufs: core: Flush exception handling work when RPM level is zero (bsc#1264303).
  • CVE-2026-43281: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).
  • CVE-2026-43304: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).
  • CVE-2026-43308: btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() (bsc#1264712).
  • CVE-2026-43309: md raid: fix hang when stopping arrays with metadata through dm-raid (bsc#1264827).
  • CVE-2026-43353: i3c: mipi-i3c-hci: Fix race in DMA ring dequeue (bsc#1265089).
  • CVE-2026-43424: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling (bsc#1264678).
  • CVE-2026-43445: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).
  • CVE-2026-43451: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).
  • CVE-2026-43496: net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1266000).
  • CVE-2026-45839: bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() (bsc#1266399).
  • CVE-2026-45845: net/sched: taprio: fix NULL pointer dereference in class dump (bsc#1266393).
  • CVE-2026-45849: net: mscc: ocelot: extract ocelot_xmit_timestamp() helper (bsc#1266690).
  • CVE-2026-45859: netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation (bsc#1266714).
  • CVE-2026-45865: mctp i2c: initialise event handler read bytes (bsc#1266694).
  • CVE-2026-45873: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).
  • CVE-2026-45895: quota: fix livelock between quotactl and freeze_super (bsc#1266882).
  • CVE-2026-45905: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).
  • CVE-2026-45913: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).
  • CVE-2026-45915: fat: avoid parent link count underflow in rmdir (bsc#1266896).
  • CVE-2026-45917: ipvs: do not keep dest_dst if dev is going down (bsc#1266900).
  • CVE-2026-45930: net: mctp: ensure our nlmsg responses are initialised (bsc#1266730).
  • CVE-2026-45944: iommu/vt-d: Clear Present bit before tearing down context entry (bsc#1267203).
  • CVE-2026-45973: RDMA/mlx5: Fix UMR hang in LAG error state unload (bsc#1267025).
  • CVE-2026-45981: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204).
  • CVE-2026-45994: ibmasm: fix OOB reads in command_file_write due to missing size checks (bsc#1267432).
  • CVE-2026-46003: net: qrtr: ns: Limit the total number of nodes (bsc#1267210).
  • CVE-2026-46015: tcp: call sk_data_ready() after listener migration (bsc#1267439).
  • CVE-2026-46023: dm mirror: fix integer…
Record
openSUSE-SU-2026:21555-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-64k
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-64k-core
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-64k-debug
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-64k-debug-core
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-64k-debug-devel
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-64k-debug-devel-matched
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-64k-debug-modules
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-64k-devel
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-64k-devel-matched
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-64k-modules
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-64k-modules-core
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-64k-modules-extra
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-abi-stablelists
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-core
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-cross-headers
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-debug
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-debug-core
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-debug-devel
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-debug-devel-matched
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-debug-modules
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-debug-modules-core
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-debug-modules-extra
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-debug-uki-virt
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-devel
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-devel-matched
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-doc
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-headers
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-modules
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-modules-core
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-modules-extra
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-rt
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-rt-64k
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-rt-64k-core
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-rt-64k-debug
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-rt-64k-debug-core
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-rt-64k-debug-devel
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-rt-64k-debug-modules
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-rt-64k-debug-modules-core
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-rt-64k-debug-modules-extra
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-rt-64k-devel
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-rt-64k-modules
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-rt-64k-modules-core
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-rt-64k-modules-extra
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-rt-core
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-rt-debug
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-rt-debug-core
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-rt-debug-devel
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-rt-debug-modules
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-rt-debug-modules-core
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel-rt-debug-modules-extra
AlmaLinux:9
From an advisory covering 18 CVEs
 before 5.14.0-687.10.1.el9_8
5.14.0-687.10.1.el9_8
kernel
Azure Linux:3
 before 6.6.137.1-1
6.6.137.1-1
linux-lts
Alpaquita:23
 6.1.174-r0 up to 6.1.175-r0
6.1.175-r0
linux-lts
Alpaquita:25
 6.12.81-r0 up to 6.12.85-r0
6.12.85-r0
linux-lts
Alpaquita:stream
 6.12.92-r1 up to 6.18.35-r1
6.18.35-r1
bpftool
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 7.0.0-284.1101.el9_2.tuxcare.7.els35
7.0.0-284.1101.el9_2.tuxcare.7.els35
kernel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-64k
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-64k-core
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-64k-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-64k-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-64k-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-64k-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-64k-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-64k-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-64k-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-64k-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-64k-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-64k-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-64k-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-64k-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-64k-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-64k-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-64k-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-64k-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-abi-stablelists
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-core
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-cross-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-debug
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-debug-core
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-debug-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-debug-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-debug-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-debug-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-debug-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-debug-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-debug-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-debug-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-devel-matched
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-doc
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-headers
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-ipaclones-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-modules
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-modules-core
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-modules-extra
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-modules-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-modules-partner
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-selftests-internal
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-tools
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-tools-libs
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-tools-libs-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
kernel-uki-virt
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
libbpf
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.7.els35
2:1.0.0-2.el9_2.tuxcare.7.els35
libbpf-devel
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.7.els35
2:1.0.0-2.el9_2.tuxcare.7.els35
libbpf-static
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 2:1.0.0-2.el9_2.tuxcare.7.els35
2:1.0.0-2.el9_2.tuxcare.7.els35
perf
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
python3-perf
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 5.14.0-284.1101.el9_2.tuxcare.7.els35
5.14.0-284.1101.el9_2.tuxcare.7.els35
Kernel
Linux
 4.1.0 up to 5.10.258, 5.11.0 up to 5.15.209, 5.16.0 up to 6.1.175, 6.2.0 up to 6.6.136, 6.7.0 up to 6.12.83, 6.13.0 up to 6.18.24, 6.19.0 up to 6.19.14, 6.20.0 up to 7.0.1
5.10.2585.15.2096.1.1756.6.1366.12.836.18.246.19.147.0.1
linux
Debian:12
 before 6.1.176-1, plus listed versions
6.1.106-16.1.106-26.1.106-36.1.112-16.1.115-1
Show 45 moreShow less
6.1.119-16.1.123-16.1.124-16.1.128-16.1.129-16.1.133-16.1.135-16.1.137-16.1.139-16.1.140-16.1.147-16.1.148-16.1.153-16.1.158-16.1.159-16.1.162-16.1.164-16.1.170-16.1.170-26.1.170-36.1.172-16.1.174-16.1.27-16.1.37-16.1.38-16.1.38-26.1.38-2~bpo11+16.1.38-36.1.38-46.1.38-4~bpo11+16.1.52-16.1.55-16.1.55-1~bpo11+16.1.64-16.1.66-16.1.67-16.1.69-16.1.69-1~bpo11+16.1.76-16.1.76-1~bpo11+16.1.82-16.1.85-16.1.90-16.1.90-1~bpo11+16.1.94-1
6.1.176-1
linux
Debian:13
 before 6.12.85-1, plus listed versions
6.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-1
Show 12 moreShow less
6.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-1~bpo12+1
6.12.85-1
linux
Debian:14
 before 6.19.14-1, plus listed versions
6.12.100-16.12.101-16.12.105-16.12.107-16.12.111-1
Show 45 moreShow less
6.12.113-16.12.38-16.12.41-16.12.43-16.12.43-1~bpo12+16.12.48-16.12.57-16.12.57-1~bpo12+16.12.63-16.12.63-1~bpo12+16.12.69-16.12.69-1~bpo12+16.12.73-16.12.73-1~bpo12+16.12.74-16.12.74-26.12.74-2~bpo12+16.12.85-16.12.85-1~bpo12+16.12.86-16.12.86-1~bpo12+16.12.88-16.12.88-1~bpo12+16.12.90-16.12.90-1~bpo12+16.12.90-26.12.90-2~bpo12+16.12.94-16.12.94-1~bpo12+16.12.95-16.12.95-1~bpo12+16.12.96-16.13.10-1~exp16.13.11-1~exp16.13.2-1~exp16.13.3-1~exp16.13.4-1~exp16.13.5-1~exp16.13.6-1~exp16.13.7-1~exp16.13.8-1~exp16.13.9-1~exp16.13~rc6-1~exp16.13~rc7-1~exp16.14.3-1~exp1
6.19.14-1
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-1197.210~16.04.1, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
4.15.0-1197.210~16.04.1
linux-aws
Ubuntu:Pro:16.04:LTS
From an advisory covering 150 CVEs
 before 4.4.0-1197.212, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
4.4.0-1197.212
linux-azure
Ubuntu:Pro:16.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-1208.223~16.04.1, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
4.15.0-1208.223~16.04.1
linux-gcp
Ubuntu:Pro:16.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-1190.207~16.04.1, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
4.15.0-1190.207~16.04.1
linux-hwe
Ubuntu:Pro:16.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-260.272~16.04.2, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
4.15.0-260.272~16.04.2
linux
Ubuntu:Pro:16.04:LTS
From an advisory covering 150 CVEs
 before 4.4.0-288.322, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
4.4.0-288.322
linux-aws
Ubuntu:Pro:18.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-1197.210, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
4.15.0-1197.210
linux-azure-4.15
Ubuntu:Pro:18.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-1207.222, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 45 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.1274.15.0-1115.1284.15.0-1118.1314.15.0-1121.1344.15.0-1122.1354.15.0-1123.1364.15.0-1124.1374.15.0-1125.1384.15.0-1126.1394.15.0-1127.1404.15.0-1129.1424.15.0-1130.1434.15.0-1131.1444.15.0-1133.1464.15.0-1134.1474.15.0-1136.1494.15.0-1137.1504.15.0-1138.1514.15.0-1139.1524.15.0-1142.1564.15.0-1145.1604.15.0-1146.1614.15.0-1149.1644.15.0-1150.1654.15.0-1151.1664.15.0-1153.1684.15.0-1157.1724.15.0-1158.1734.15.0-1159.1744.15.0-1161.176
4.15.0-1207.222
linux-gcp-4.15
Ubuntu:Pro:18.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-1190.207, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 45 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.1124.15.0-1100.1134.15.0-1103.1164.15.0-1106.1204.15.0-1107.1214.15.0-1108.1224.15.0-1109.1234.15.0-1110.1244.15.0-1111.1254.15.0-1112.1264.15.0-1114.1284.15.0-1115.1294.15.0-1116.1304.15.0-1118.1324.15.0-1119.1334.15.0-1120.1344.15.0-1121.1354.15.0-1122.1364.15.0-1124.1384.15.0-1127.1424.15.0-1130.1464.15.0-1131.1474.15.0-1134.1504.15.0-1135.1514.15.0-1136.1524.15.0-1137.1534.15.0-1138.1544.15.0-1141.1574.15.0-1142.1584.15.0-1143.1594.15.0-1145.161
4.15.0-1190.207
linux
Ubuntu:Pro:18.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-260.272, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
4.15.0-260.272
linux-hwe-5.4
Ubuntu:Pro:18.04:LTS
From an advisory covering 150 CVEs
 before 5.4.0-244.264~18.04.1, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 45 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.15.4.0-74.83~18.04.15.4.0-77.86~18.04.15.4.0-80.90~18.04.15.4.0-81.91~18.04.15.4.0-84.94~18.04.15.4.0-86.97~18.04.15.4.0-87.98~18.04.15.4.0-89.100~18.04.15.4.0-90.101~18.04.15.4.0-91.102~18.04.15.4.0-92.103~18.04.25.4.0-94.106~18.04.15.4.0-96.109~18.04.15.4.0-97.110~18.04.15.4.0-99.112~18.04.15.4.0-100.113~18.04.15.4.0-104.118~18.04.15.4.0-105.119~18.04.15.4.0-107.121~18.04.15.4.0-109.123~18.04.15.4.0-110.124~18.04.15.4.0-113.127~18.04.15.4.0-117.132~18.04.15.4.0-120.136~18.04.15.4.0-121.137~18.04.15.4.0-122.138~18.04.1
5.4.0-244.264~18.04.1
linux-oracle
Ubuntu:Pro:18.04:LTS
From an advisory covering 150 CVEs
 before 4.15.0-1160.171, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 45 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.794.15.0-1072.804.15.0-1075.834.15.0-1078.864.15.0-1079.874.15.0-1080.88
4.15.0-1160.171
linux
Ubuntu:Pro:20.04:LTS
From an advisory covering 150 CVEs
 before 5.4.0-244.264, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 45 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.825.4.0-74.835.4.0-77.865.4.0-80.905.4.0-81.915.4.0-84.945.4.0-86.975.4.0-88.995.4.0-89.1005.4.0-90.1015.4.0-91.1025.4.0-92.1035.4.0-94.1065.4.0-96.1095.4.0-97.110
5.4.0-244.264
linux-aws
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 5.15.0-1119.126, plus listed versions
5.13.0-1005.65.15.0-1002.45.15.0-1003.55.15.0-1004.65.15.0-1005.7
Show 45 moreShow less
5.15.0-1008.105.15.0-1009.115.15.0-1011.145.15.0-1013.175.15.0-1014.185.15.0-1015.195.15.0-1017.215.15.0-1019.235.15.0-1020.245.15.0-1021.255.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.325.15.0-1030.345.15.0-1031.355.15.0-1033.375.15.0-1034.385.15.0-1035.395.15.0-1036.405.15.0-1037.415.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1042.475.15.0-1043.485.15.0-1044.495.15.0-1045.505.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1055.605.15.0-1056.615.15.0-1057.635.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.705.15.0-1065.71
5.15.0-1119.126
linux-aws-6.8
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1065.68~22.04.1, plus listed versions
6.8.0-1009.9~22.04.26.8.0-1010.10~22.04.26.8.0-1011.12~22.04.16.8.0-1013.14~22.04.16.8.0-1014.15~22.04.1
Show 38 moreShow less
6.8.0-1015.16~22.04.16.8.0-1016.17~22.04.26.8.0-1017.18~22.04.16.8.0-1018.19~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1023.25~22.04.16.8.0-1024.26~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1035.37~22.04.16.8.0-1036.38~22.04.16.8.0-1039.41~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.44~22.04.16.8.0-1043.45~22.04.16.8.0-1044.46~22.04.16.8.0-1045.47~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.16.8.0-1050.53~22.04.16.8.0-1051.54~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1055.58~22.04.16.8.0-1057.60~22.04.16.8.0-1060.63~22.04.16.8.0-1061.64~22.04.16.8.0-1062.65~22.04.26.8.0-1063.66~22.04.16.8.0-1064.67~22.04.1
6.8.0-1065.68~22.04.1
linux-azure
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 5.15.0-1125.134, plus listed versions
5.13.0-1006.75.15.0-1001.25.15.0-1002.35.15.0-1003.45.15.0-1005.6
Show 45 moreShow less
5.15.0-1007.85.15.0-1008.95.15.0-1010.125.15.0-1012.155.15.0-1013.165.15.0-1014.175.15.0-1017.205.15.0-1019.245.15.0-1020.255.15.0-1021.265.15.0-1022.275.15.0-1023.295.15.0-1024.305.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1033.405.15.0-1034.415.15.0-1035.425.15.0-1036.435.15.0-1037.445.15.0-1038.455.15.0-1039.465.15.0-1040.475.15.0-1041.485.15.0-1042.495.15.0-1044.515.15.0-1045.525.15.0-1046.535.15.0-1047.545.15.0-1049.565.15.0-1050.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1056.645.15.0-1057.655.15.0-1058.665.15.0-1059.675.15.0-1060.695.15.0-1061.705.15.0-1063.725.15.0-1064.735.15.0-1066.75
5.15.0-1125.134
linux-gcp
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 5.15.0-1120.130, plus listed versions
5.13.0-1005.65.15.0-1001.35.15.0-1002.55.15.0-1003.65.15.0-1004.7
Show 45 moreShow less
5.15.0-1005.85.15.0-1006.95.15.0-1008.125.15.0-1010.155.15.0-1013.185.15.0-1016.215.15.0-1017.235.15.0-1018.245.15.0-1019.255.15.0-1021.285.15.0-1022.295.15.0-1025.325.15.0-1026.335.15.0-1027.345.15.0-1029.365.15.0-1030.375.15.0-1031.385.15.0-1032.405.15.0-1034.425.15.0-1035.435.15.0-1036.445.15.0-1037.455.15.0-1038.465.15.0-1039.475.15.0-1040.485.15.0-1041.495.15.0-1042.505.15.0-1044.525.15.0-1045.535.15.0-1046.545.15.0-1047.555.15.0-1048.565.15.0-1049.575.15.0-1051.595.15.0-1052.605.15.0-1053.615.15.0-1054.625.15.0-1055.635.15.0-1058.665.15.0-1059.675.15.0-1060.685.15.0-1062.705.15.0-1063.715.15.0-1064.725.15.0-1065.73
5.15.0-1120.130
linux-gcp-6.8
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1069.77~22.04.1, plus listed versions
6.8.0-1010.11~22.04.16.8.0-1011.12~22.04.16.8.0-1012.13~22.04.16.8.0-1013.14~22.04.16.8.0-1014.16~22.04.1
Show 39 moreShow less
6.8.0-1015.17~22.04.16.8.0-1016.18~22.04.16.8.0-1017.19~22.04.16.8.0-1018.20~22.04.16.8.0-1019.21~22.04.16.8.0-1020.22~22.04.16.8.0-1021.23~22.04.16.8.0-1024.26~22.04.16.8.0-1025.27~22.04.16.8.0-1026.28~22.04.16.8.0-1027.29~22.04.16.8.0-1028.30~22.04.16.8.0-1029.31~22.04.16.8.0-1030.32~22.04.16.8.0-1031.33~22.04.16.8.0-1032.34~22.04.16.8.0-1033.35~22.04.16.8.0-1034.36~22.04.26.8.0-1036.38~22.04.16.8.0-1037.39~22.04.16.8.0-1040.42~22.04.16.8.0-1041.43~22.04.16.8.0-1042.45~22.04.16.8.0-1043.46~22.04.16.8.0-1044.47~22.04.16.8.0-1045.48~22.04.16.8.0-1046.49~22.04.16.8.0-1047.50~22.04.26.8.0-1048.51~22.04.16.8.0-1052.55~22.04.16.8.0-1053.56~22.04.16.8.0-1054.57~22.04.16.8.0-1058.61~22.04.16.8.0-1060.63~22.04.16.8.0-1063.69~22.04.16.8.0-1064.72~22.04.16.8.0-1065.73~22.04.16.8.0-1066.74~22.04.16.8.0-1067.75~22.04.1
6.8.0-1069.77~22.04.1
linux
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 5.15.0-202.212, plus listed versions
5.13.0-19.195.15.0-17.175.15.0-18.185.15.0-22.225.15.0-23.23
Show 45 moreShow less
5.15.0-25.255.15.0-27.285.15.0-30.315.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.515.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.865.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.965.15.0-87.975.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.115
5.15.0-202.212
linux-hwe-6.8
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-138.138~22.04.1, plus listed versions
6.8.0-38.38~22.04.16.8.0-39.39~22.04.16.8.0-40.40~22.04.36.8.0-45.45~22.04.16.8.0-47.47~22.04.1
Show 31 moreShow less
6.8.0-48.48~22.04.16.8.0-49.49~22.04.16.8.0-50.51~22.04.16.8.0-51.52~22.04.16.8.0-52.53~22.04.16.8.0-57.59~22.04.16.8.0-58.60~22.04.16.8.0-59.61~22.04.16.8.0-60.63~22.04.16.8.0-64.67~22.04.16.8.0-65.68~22.04.16.8.0-78.78~22.04.16.8.0-79.79~22.04.16.8.0-83.83~22.04.16.8.0-84.84~22.04.16.8.0-85.85~22.04.16.8.0-86.87~22.04.16.8.0-87.88~22.04.16.8.0-88.89~22.04.26.8.0-90.91~22.04.16.8.0-94.96~22.04.16.8.0-100.100~22.04.16.8.0-101.101~22.04.16.8.0-106.106~22.04.16.8.0-107.107~22.04.16.8.0-110.110~22.04.16.8.0-111.111~22.04.16.8.0-117.117~22.04.16.8.0-124.124~22.04.16.8.0-134.134~22.04.16.8.0-136.136~22.04.1
6.8.0-138.138~22.04.1
linux-gke
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 5.15.0-1115.121, plus listed versions
5.15.0-1002.25.15.0-1003.35.15.0-1004.55.15.0-1005.65.15.0-1006.7
Show 45 moreShow less
5.15.0-1008.105.15.0-1010.135.15.0-1011.145.15.0-1014.175.15.0-1015.185.15.0-1016.195.15.0-1017.205.15.0-1019.235.15.0-1020.255.15.0-1023.285.15.0-1024.295.15.0-1027.325.15.0-1028.335.15.0-1030.355.15.0-1031.365.15.0-1032.375.15.0-1033.385.15.0-1034.395.15.0-1035.405.15.0-1036.415.15.0-1037.425.15.0-1038.435.15.0-1039.445.15.0-1040.455.15.0-1041.465.15.0-1042.475.15.0-1044.495.15.0-1045.505.15.0-1046.515.15.0-1047.525.15.0-1048.535.15.0-1049.545.15.0-1050.555.15.0-1051.565.15.0-1052.575.15.0-1053.585.15.0-1054.595.15.0-1057.625.15.0-1058.635.15.0-1059.645.15.0-1060.665.15.0-1061.675.15.0-1062.685.15.0-1063.695.15.0-1064.70
5.15.0-1115.121
linux-ibm
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 5.15.0-1113.117, plus listed versions
5.15.0-1002.25.15.0-1003.35.15.0-1004.45.15.0-1005.55.15.0-1007.8
Show 45 moreShow less
5.15.0-1009.115.15.0-1010.125.15.0-1012.145.15.0-1013.155.15.0-1015.175.15.0-1017.205.15.0-1018.215.15.0-1021.245.15.0-1022.255.15.0-1023.265.15.0-1025.285.15.0-1026.295.15.0-1027.305.15.0-1028.315.15.0-1029.325.15.0-1030.335.15.0-1031.345.15.0-1032.355.15.0-1033.365.15.0-1034.375.15.0-1035.385.15.0-1036.395.15.0-1037.405.15.0-1038.415.15.0-1040.435.15.0-1041.445.15.0-1042.455.15.0-1043.465.15.0-1044.475.15.0-1045.485.15.0-1046.495.15.0-1047.505.15.0-1048.515.15.0-1049.525.15.0-1050.535.15.0-1053.565.15.0-1054.575.15.0-1055.585.15.0-1056.595.15.0-1057.605.15.0-1058.615.15.0-1059.625.15.0-1060.635.15.0-1061.645.15.0-1062.65
5.15.0-1113.117
linux-ibm-6.8
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1066.67~22.04.1, plus listed versions
6.8.0-1008.8~22.04.16.8.0-1010.10~22.04.16.8.0-1011.11~22.04.16.8.0-1012.12~22.04.16.8.0-1013.13~22.04.1
Show 35 moreShow less
6.8.0-1014.14~22.04.16.8.0-1015.15~22.04.16.8.0-1016.16~22.04.16.8.0-1017.17~22.04.16.8.0-1018.18~22.04.16.8.0-1019.19~22.04.16.8.0-1023.23~22.04.16.8.0-1024.24~22.04.16.8.0-1025.25~22.04.16.8.0-1026.26~22.04.16.8.0-1027.27~22.04.16.8.0-1028.28~22.04.16.8.0-1029.29~22.04.16.8.0-1030.30~22.04.16.8.0-1033.33~22.04.16.8.0-1036.36~22.04.16.8.0-1037.37~22.04.16.8.0-1038.38~22.04.16.8.0-1039.39~22.04.16.8.0-1040.40~22.04.16.8.0-1041.41~22.04.16.8.0-1042.42~22.04.16.8.0-1043.43~22.04.16.8.0-1044.44~22.04.16.8.0-1045.45~22.04.16.8.0-1049.49~22.04.16.8.0-1050.50~22.04.16.8.0-1051.51~22.04.16.8.0-1052.52~22.04.16.8.0-1055.56~22.04.16.8.0-1057.58~22.04.16.8.0-1060.61~22.04.16.8.0-1061.62~22.04.16.8.0-1062.63~22.04.16.8.0-1063.64~22.04.1
6.8.0-1066.67~22.04.1
linux-lowlatency
Ubuntu:Pro:22.04:LTS
From an advisory covering 150 CVEs
 before 5.15.0-197.207, plus listed versions
5.15.0-22.225.15.0-23.235.15.0-24.245.15.0-27.285.15.0-30.31
Show 45 moreShow less
5.15.0-33.345.15.0-35.365.15.0-37.395.15.0-39.425.15.0-40.435.15.0-41.445.15.0-43.465.15.0-46.495.15.0-47.535.15.0-48.545.15.0-50.565.15.0-52.585.15.0-53.595.15.0-56.625.15.0-57.635.15.0-58.645.15.0-60.665.15.0-67.745.15.0-69.765.15.0-70.775.15.0-71.785.15.0-72.795.15.0-73.805.15.0-75.825.15.0-76.835.15.0-78.855.15.0-79.885.15.0-82.915.15.0-83.925.15.0-84.935.15.0-86.955.15.0-87.965.15.0-88.985.15.0-89.995.15.0-91.1015.15.0-92.1025.15.0-94.1045.15.0-97.1075.15.0-100.1105.15.0-101.1115.15.0-102.1125.15.0-105.1155.15.0-106.1165.15.0-107.1175.15.0-110.120
5.15.0-197.207
linux-aws
Ubuntu:Pro:24.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1065.68, plus listed versions
6.5.0-1008.86.6.0-1001.16.8.0-1001.16.8.0-1006.66.8.0-1008.8
Show 45 moreShow less
6.8.0-1009.96.8.0-1010.106.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.156.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1023.256.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.296.8.0-1028.306.8.0-1029.316.8.0-1030.326.8.0-1031.336.8.0-1032.346.8.0-1033.356.8.0-1035.376.8.0-1036.386.8.0-1038.406.8.0-1039.416.8.0-1040.426.8.0-1041.436.8.0-1042.446.8.0-1043.456.8.0-1044.466.8.0-1045.476.8.0-1046.496.8.0-1047.506.8.0-1050.536.8.0-1051.546.8.0-1052.556.8.0-1053.566.8.0-1055.586.8.0-1057.606.8.0-1060.636.8.0-1061.646.8.0-1062.65
6.8.0-1065.68
linux-azure
Ubuntu:Pro:24.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1068.76, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1001.16.8.0-1005.56.8.0-1006.6
Show 38 moreShow less
6.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1012.146.8.0-1013.156.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.206.8.0-1018.216.8.0-1020.236.8.0-1021.256.8.0-1025.306.8.0-1026.316.8.0-1027.326.8.0-1028.336.8.0-1029.346.8.0-1030.356.8.0-1031.366.8.0-1034.396.8.0-1038.446.8.0-1040.466.8.0-1041.476.8.0-1042.486.8.0-1044.506.8.0-1046.526.8.0-1051.576.8.0-1052.586.8.0-1054.606.8.0-1056.626.8.0-1058.646.8.0-1059.656.8.0-1062.696.8.0-1063.716.8.0-1064.726.8.0-1065.736.8.0-1067.75
6.8.0-1068.76
linux-gcp
Ubuntu:Pro:24.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1069.77, plus listed versions
6.5.0-1007.76.6.0-1001.16.8.0-1002.26.8.0-1005.56.8.0-1006.6
Show 45 moreShow less
6.8.0-1007.76.8.0-1008.96.8.0-1009.106.8.0-1010.116.8.0-1011.126.8.0-1012.136.8.0-1013.146.8.0-1014.166.8.0-1015.176.8.0-1016.186.8.0-1017.196.8.0-1018.206.8.0-1019.216.8.0-1020.226.8.0-1021.236.8.0-1024.266.8.0-1025.276.8.0-1026.286.8.0-1027.296.8.0-1028.306.8.0-1029.316.8.0-1030.326.8.0-1031.336.8.0-1032.346.8.0-1033.356.8.0-1034.366.8.0-1036.386.8.0-1037.396.8.0-1039.416.8.0-1040.426.8.0-1041.436.8.0-1042.456.8.0-1043.466.8.0-1044.476.8.0-1045.486.8.0-1046.496.8.0-1047.506.8.0-1048.516.8.0-1052.556.8.0-1053.566.8.0-1054.576.8.0-1055.586.8.0-1058.616.8.0-1060.636.8.0-1063.69
6.8.0-1069.77
linux
Ubuntu:Pro:24.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-142.142, plus listed versions
6.5.0-9.96.6.0-14.146.8.0-11.116.8.0-20.206.8.0-22.22
Show 45 moreShow less
6.8.0-28.286.8.0-31.316.8.0-35.356.8.0-36.366.8.0-38.386.8.0-39.396.8.0-40.406.8.0-41.416.8.0-44.446.8.0-45.456.8.0-47.476.8.0-48.486.8.0-49.496.8.0-50.516.8.0-51.526.8.0-52.536.8.0-53.556.8.0-54.566.8.0-55.576.8.0-56.586.8.0-57.596.8.0-58.606.8.0-59.616.8.0-60.636.8.0-62.656.8.0-63.666.8.0-64.676.8.0-71.716.8.0-78.786.8.0-79.796.8.0-83.836.8.0-84.846.8.0-85.856.8.0-86.876.8.0-87.886.8.0-88.896.8.0-90.916.8.0-94.966.8.0-100.1006.8.0-101.1016.8.0-106.1066.8.0-107.1076.8.0-110.1106.8.0-111.1116.8.0-117.117
6.8.0-142.142
linux-gke
Ubuntu:Pro:24.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1064.72, plus listed versions
6.8.0-1003.56.8.0-1004.76.8.0-1005.86.8.0-1006.96.8.0-1007.10
Show 44 moreShow less
6.8.0-1008.116.8.0-1009.126.8.0-1010.136.8.0-1011.146.8.0-1012.156.8.0-1013.176.8.0-1014.186.8.0-1015.196.8.0-1016.206.8.0-1017.216.8.0-1019.236.8.0-1020.246.8.0-1021.256.8.0-1022.266.8.0-1023.276.8.0-1024.286.8.0-1025.296.8.0-1026.306.8.0-1027.316.8.0-1028.326.8.0-1029.336.8.0-1032.366.8.0-1033.376.8.0-1035.396.8.0-1036.406.8.0-1037.416.8.0-1038.436.8.0-1039.446.8.0-1040.456.8.0-1041.466.8.0-1042.476.8.0-1043.486.8.0-1044.496.8.0-1048.536.8.0-1049.546.8.0-1050.566.8.0-1051.576.8.0-1054.606.8.0-1055.616.8.0-1058.646.8.0-1059.676.8.0-1060.686.8.0-1061.696.8.0-1062.70
6.8.0-1064.72
linux-ibm
Ubuntu:Pro:24.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1065.66, plus listed versions
6.5.0-1009.96.8.0-1001.16.8.0-1003.36.8.0-1004.46.8.0-1005.5
Show 45 moreShow less
6.8.0-1006.66.8.0-1007.76.8.0-1008.86.8.0-1009.96.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.156.8.0-1016.166.8.0-1017.176.8.0-1018.186.8.0-1019.196.8.0-1022.226.8.0-1023.236.8.0-1024.246.8.0-1025.256.8.0-1026.266.8.0-1027.276.8.0-1028.286.8.0-1029.296.8.0-1030.306.8.0-1033.336.8.0-1036.366.8.0-1037.376.8.0-1038.386.8.0-1039.396.8.0-1040.406.8.0-1041.416.8.0-1042.426.8.0-1043.436.8.0-1044.446.8.0-1045.456.8.0-1049.496.8.0-1050.506.8.0-1051.516.8.0-1052.526.8.0-1055.566.8.0-1057.586.8.0-1060.616.8.0-1061.626.8.0-1062.636.8.0-1063.646.8.0-1064.65
6.8.0-1065.66
linux-oracle
Ubuntu:Pro:24.04:LTS
From an advisory covering 150 CVEs
 before 6.8.0-1062.65, plus listed versions
6.5.0-1010.106.6.0-1001.16.8.0-1001.16.8.0-1004.46.8.0-1005.5
Show 44 moreShow less
6.8.0-1006.66.8.0-1008.86.8.0-1010.106.8.0-1011.116.8.0-1012.126.8.0-1013.136.8.0-1014.146.8.0-1015.166.8.0-1016.176.8.0-1017.186.8.0-1018.196.8.0-1019.206.8.0-1020.216.8.0-1021.226.8.0-1022.236.8.0-1023.246.8.0-1024.256.8.0-1025.266.8.0-1026.276.8.0-1027.286.8.0-1028.296.8.0-1029.306.8.0-1030.316.8.0-1032.336.8.0-1033.346.8.0-1035.366.8.0-1037.386.8.0-1038.396.8.0-1039.406.8.0-1040.416.8.0-1041.426.8.0-1042.436.8.0-1043.446.8.0-1044.456.8.0-1047.486.8.0-1049.506.8.0-1050.516.8.0-1052.536.8.0-1054.556.8.0-1057.586.8.0-1058.616.8.0-1059.626.8.0-1060.636.8.0-1061.64
6.8.0-1062.65
linux-aws
Ubuntu:Pro:26.04:LTS
From an advisory covering 150 CVEs
 before 7.0.0-1011.11, plus listed versions
6.17.0-1002.26.17.0-1003.36.19.0-1002.26.19.0-1003.37.0.0-1001.1
Show 6 moreShow less
7.0.0-1003.37.0.0-1004.47.0.0-1006.67.0.0-1008.87.0.0-1009.97.0.0-1010.10
7.0.0-1011.11
linux-azure
Ubuntu:Pro:26.04:LTS
From an advisory covering 150 CVEs
 before 7.0.0-1012.12, plus listed versions
6.17.0-1003.36.17.0-1004.46.19.0-1001.16.19.0-1002.27.0.0-1001.1
Show 7 moreShow less
7.0.0-1002.27.0.0-1003.37.0.0-1004.47.0.0-1007.77.0.0-1009.97.0.0-1010.107.0.0-1011.11
7.0.0-1012.12
linux-gcp
Ubuntu:Pro:26.04:LTS
From an advisory covering 150 CVEs
 before 7.0.0-1010.10, plus listed versions
6.17.0-1002.26.17.0-1003.36.19.0-1001.17.0.0-1001.17.0.0-1002.2
Show 4 moreShow less
7.0.0-1003.37.0.0-1005.57.0.0-1007.77.0.0-1008.8
7.0.0-1010.10
linux
Ubuntu:Pro:26.04:LTS
From an advisory covering 150 CVEs
 before 7.0.0-30.30, plus listed versions
6.17.0-5.56.17.0-6.66.17.0-8.86.18.0-8.86.18.0-9.9
Show 14 moreShow less
6.19.0-3.36.19.0-5.56.19.0-6.66.19.0-9.97.0.0-7.77.0.0-10.107.0.0-12.127.0.0-13.137.0.0-14.147.0.0-15.157.0.0-22.227.0.0-27.277.0.0-28.287.0.0-29.29
7.0.0-30.30
kernel
openEuler:24.03-LTS-SP1
From an advisory covering 101 CVEs
 before 6.6.0-145.1.14.152.oe2403sp1
6.6.0-145.1.14.152.oe2403sp1
kernel
openEuler:24.03-LTS-SP3
From an advisory covering 150 CVEs
 before 6.6.0-145.3.14.145.oe2403sp3
6.6.0-145.3.14.145.oe2403sp3
bpftool-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:7.3.0-427.124.1.el9_4
0:7.3.0-427.124.1.el9_4
kernel-64k-debug-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-64k-debug-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-64k-debug-devel-matched
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-64k-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-64k-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-64k-devel-matched
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-debug-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-debug-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-debug-devel-matched
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-debuginfo-common-aarch64
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-debuginfo-common-ppc64le
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-debuginfo-common-s390x
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-debuginfo-common-x86_64
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-devel-matched
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-doc
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-rt-debug-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-rt-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-tools-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-zfcpdump-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-zfcpdump-devel
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-zfcpdump-devel-matched
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
libperf-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
perf
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
perf-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
python3-perf-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
rtla
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
rv
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
bpftool
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 6 CVEs
 before 0:7.3.0-427.124.1.el9_4
0:7.3.0-427.124.1.el9_4
bpftool-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 6 CVEs
 before 0:7.3.0-427.124.1.el9_4
0:7.3.0-427.124.1.el9_4
kernel
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-64k
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-64k-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-64k-debug
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-64k-debug-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-64k-debug-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-64k-debug-modules
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-64k-debug-modules-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-64k-debug-modules-extra
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-64k-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-64k-modules
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-64k-modules-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-64k-modules-extra
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-abi-stablelists
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-debug
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-debug-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-debug-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-debug-modules
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel-debug-modules-core
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 6 CVEs
 before 0:5.14.0-427.124.1.el9_4
0:5.14.0-427.124.1.el9_4
kernel
Rocky Linux:9
From an advisory covering 17 CVEs
 before 0:5.14.0-687.10.1.el9_8.0.1
0:5.14.0-687.10.1.el9_8.0.1
kernel
Rocky Linux:8
From an advisory covering 18 CVEs
 before 0:4.18.0-553.126.1.el8_10
0:4.18.0-553.126.1.el8_10
kernel-rt
Rocky Linux:8
From an advisory covering 18 CVEs
 before 0:4.18.0-553.126.1.rt7.467.el8_10
0:4.18.0-553.126.1.rt7.467.el8_10
kernel
Rocky Linux:10
From an advisory covering 7 CVEs
 before 0:6.12.0-211.22.1.el10_2
0:6.12.0-211.22.1.el10_2
linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
rootio-linux
Root:Debian:11
 before 5.10.262-1.aikido.113
5.10.262-1.aikido.1135.10.262-1.aikido.114
linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
rootio-linux
Root:Debian:12
 before 6.1.190-1.aikido.167
6.1.190-1.aikido.167
linux
Root:Debian:13
 before 6.12.115-2.aikido.164
6.12.115-2.aikido.164
rootio-linux
Root:Debian:13
 before 6.12.115-2.aikido.164
6.12.115-2.aikido.164
linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
rootio-linux
Root:Ubuntu:22.04
 before 5.15.0-203.213.aikido.119
5.15.0-203.213.aikido.119
linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
rootio-linux
Root:Ubuntu:24.04
 before 6.8.0-149.149.aikido.91
6.8.0-149.149.aikido.91
kernel-obs-build
SUSE:Linux Micro Extras 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-syms
SUSE:Linux Micro Extras 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-64kb
SUSE:Linux Micro 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default
SUSE:Linux Micro 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default-base
SUSE:Linux Micro 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1.160000.2.19
6.12.0-160000.37.1.160000.2.19
kernel-rt
SUSE:Linux Micro 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-source
SUSE:Linux Micro 6.2
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-rt
SUSE:Linux Micro 6.1
From an advisory covering 648 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-source-rt
SUSE:Linux Micro 6.1
From an advisory covering 648 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-default
SUSE:Linux Micro 6.1
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-kvmsmall
SUSE:Linux Micro 6.1
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-source
SUSE:Linux Micro 6.1
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-64kb
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-azure
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default-base
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1.160000.2.19
6.12.0-160000.37.1.160000.2.19
kernel-docs
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-kvmsmall
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-obs-qa
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-source
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-syms
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-zfcpdump
SUSE:Linux Enterprise Server 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-64kb
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-azure
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default-base
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1.160000.2.19
6.12.0-160000.37.1.160000.2.19
kernel-docs
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-kvmsmall
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-obs-qa
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-source
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-syms
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-zfcpdump
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-rt
SUSE:Linux Micro 6.0
From an advisory covering 648 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-source-rt
SUSE:Linux Micro 6.0
From an advisory covering 648 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-default
SUSE:Linux Micro 6.0
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-kvmsmall
SUSE:Linux Micro 6.0
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-source
SUSE:Linux Micro 6.0
From an advisory covering 647 CVEs
 before 6.4.0-51.1
6.4.0-51.1
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 84 CVEs
 before 4.12.14-122.317.1
4.12.14-122.317.1
kgraft-patch-SLE12-SP5_Update_84
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 84 CVEs
 before 1-8.7.1
1-8.7.1
kernel-default
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 84 CVEs
 before 4.12.14-122.317.1
4.12.14-122.317.1
kernel-source
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 84 CVEs
 before 4.12.14-122.317.1
4.12.14-122.317.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 84 CVEs
 before 4.12.14-122.317.1
4.12.14-122.317.1
kernel-default
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 84 CVEs
 before 4.12.14-122.317.1
4.12.14-122.317.1
kernel-source
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 84 CVEs
 before 4.12.14-122.317.1
4.12.14-122.317.1
kernel-syms
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 84 CVEs
 before 4.12.14-122.317.1
4.12.14-122.317.1
kernel-livepatch-SLE15-SP7-RT_Update_18
SUSE:Linux Enterprise Live Patching 15 SP7
From an advisory covering 513 CVEs
 before 1-150700.1.5.1
1-150700.1.5.1
kernel-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 513 CVEs
 before 6.4.0-150700.7.67.1
6.4.0-150700.7.67.1
kernel-source-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 513 CVEs
 before 6.4.0-150700.7.67.1
6.4.0-150700.7.67.1
kernel-syms-rt
SUSE:Real Time Module 15 SP7
From an advisory covering 513 CVEs
 before 6.4.0-150700.7.67.1
6.4.0-150700.7.67.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 513 CVEs
 before 6.4.0-150700.53.73.2
6.4.0-150700.53.73.2
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 513 CVEs
 before 6.4.0-150700.53.73.2
6.4.0-150700.53.73.2
linux-aws
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9
Show 45 moreShow less
4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80
 None known
linux-azure
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
 None known
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
 None known
linux
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
 None known
linux-aws
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
 None known
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 45 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.14.15.0-1103.110~16.04.14.15.0-1106.113~16.04.14.15.0-1109.116~16.04.14.15.0-1110.117~16.04.14.15.0-1111.118~16.04.14.15.0-1112.119~16.04.1
 None known
linux-azure
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
 None known
linux-gcp
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
 None known
linux-hwe
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
 None known
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-kvm
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15
Show 45 moreShow less
4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84
 None known
linux-oracle
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 45 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.14.15.0-1072.80~16.04.14.15.0-1075.83~16.04.14.15.0-1078.86~16.04.14.15.0-1079.87~16.04.14.15.0-1080.88~16.04.14.15.0-1081.89~16.04.14.15.0-1082.90~16.04.1
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:16.04:LTS
 All versions, plus listed versions
4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13
Show 45 moreShow less
4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78
 None known
linux-fips
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.14.4.0-1002.2
 None known
linux
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
 None known
linux-aws
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
kernel-source
openSUSE:Tumbleweed
From an advisory covering 60 CVEs
 before 7.0.3-1.1
7.0.3-1.1
dtb-aarch64
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-64kb
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-azure
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-default-base
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1.160000.2.19
6.12.0-160000.37.1.160000.2.19
kernel-docs
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-kvmsmall
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-obs-build
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-obs-qa
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-rt
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-source
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-syms
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1
kernel-zfcpdump
openSUSE:Leap 16.0
From an advisory covering 894 CVEs
 before 6.12.0-160000.37.1
6.12.0-160000.37.1

History

History
RecordedChangedSources
affectedOSV
affectedOSV
affectedOSV
affectedOSV
affected, factsOSV
affectedOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-31532 is a high vulnerability (CVSS 7.8) in Linux, published April 23, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.17%, the 5th percentile. Fixed in kernel 6.6.137.1-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,752 package rows, 2,801 versions, 5,033 references and the rest of 9 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 44 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open