Every CVE Search/ Get API key

CVE-2021-31916

An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in...

6.7 MediumFix available

An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.70%Down 0.1 points since May 7, 2021
90%50%10%1%

What each source reports

NVD Score used 6.7

An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.

Record
CVE-2021-31916
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
6.1 MediumAV:L/AC:L/Au:N/C:P/I:P/A:C
Weakness
CWE-787
Updated
2026-11-02
CVE List No score

An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.

Record
CVE-2021-31916
Weakness
CWE-787
Updated
2026-11-02
EUVDEUVD-2021-18791 No score

An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.

Record
EUVD-2021-18791
Updated
2026-11-03
GitHub AdvisoriesGHSA-2x6w-89x6-c628 No score

An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in...

An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.

Record
GHSA-2x6w-89x6-c628
Weakness
CWE-787
Updated
2026-11-02
OSVAZL-6558 6.7

CVE-2021-31916 affecting package kernel for versions less than 5.10.78.1-1

An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.

Record
AZL-6558
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 6.7

An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.

Record
CVE-2021-31916
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 31 moreShow less
OSVDEBIAN-CVE-2021-31916 6.7

An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.

Record
DEBIAN-CVE-2021-31916
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2021-1176 7.8

kernel security update

The Linux Kernel, the operating system core itself.

Security Fix(es):

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-f232326f6966. This affects pointer types that do not define a ptr_limit.(CVE-2020-27170)

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error (with a resultant integer underflow) affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-10d2bb2e6b1d.(CVE-2020-27171)

rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] array. NOTE: from the perspective of kernel.org releases, CVE IDs are not normally used for drivers/staging/* (unfinished work); however, system integrators may have situations in which a drivers/staging issue is relevant to their own customer base.(CVE-2021-28660)

A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (BUG) because of a lack of locking on an extent buffer before a cloning operation, aka CID-dbcc7d57bffc.(CVE-2021-28964)

In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occurs because add_slot_store and remove_slot_store mishandle drc_name '\0' termination, aka CID-cc7a0bb058b8.(CVE-2021-28972)

In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on some Haswell CPUs, userspace applications (such as perf-fuzzer) can cause a system crash because the PEBS status in a PEBS record is mishandled, aka CID-d88d05a9e0b6.(CVE-2021-28971)

An out-of-bounds (OOB) memory access flaw was found in x25_bind in net/x25/af_x25.c in the Linux kernel. A bounds check failure allows a local attacker with a user account on the system to gain access to out-of-bounds memory, leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.(CVE-2020-35519)

There is a flaw reported in drivers/gpu/drm/nouveau/nouveau_sgdma.c in nouveau_sgdma_create_ttm in Nouveau DRM subsystem. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker with a local account with a root privilege, can leverage this vulnerability to escalate privileges and execute code in the context of the kernel.(CVE-2021-20292)

The bpf verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with the ability to load bpf programs could use this gain out-of-bounds reads in kernel memory leading to information disclosure (kernel memory), and possibly out-of-bounds writes that could potentially lead to code execution. This issue was addressed in the upstream kernel in commit 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero") and in Linux stable kernels 5.11.2, 5.10.19, and 5.4.101.(CVE-2021-3444)

An issue was discovered in the Linux kernel before 5.11.7. usbip_sockfd_store in drivers/usb/usbip/stub_dev.c allows attackers to cause a denial of service (GPF) because the stub-up sequence has race conditions during an update of the local and shared status, aka CID-9380afd6df70.(CVE-2021-29265)

An issue was discovered in the Linux kernel through 5.11.10.…

Record
OESA-2021-1176
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:4140 7.8

Red Hat Security Advisory: kernel-rt security and bug fix update

Record
RHSA-2021:4140
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:4356 7.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record
RHSA-2021:4356
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-31916 6.7

An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability.

Record
UBUNTU-CVE-2021-31916
CVSS 3.1
6.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-06
OSVALSA-2021:4356 No score

Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: out-of-bounds reads in pinctrl subsystem (CVE-2020-0427)
  • kernel: Improper input validation in some Intel(R) Ethernet E810 Adapter drivers (CVE-2020-24502)
  • kernel: Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers (CVE-2020-24503)
  • kernel: Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers (CVE-2020-24504)
  • kernel: Fragmentation cache not cleared on reconnection (CVE-2020-24586)
  • kernel: Reassembling fragments encrypted under different keys (CVE-2020-24587)
  • kernel: wifi frame payload being parsed incorrectly as an L2 frame (CVE-2020-24588)
  • kernel: Forwarding EAPOL from unauthenticated wifi client (CVE-2020-26139)
  • kernel: accepting plaintext data frames in protected networks (CVE-2020-26140)
  • kernel: not verifying TKIP MIC of fragmented frames (CVE-2020-26141)
  • kernel: accepting fragmented plaintext frames in protected networks (CVE-2020-26143)
  • kernel: accepting unencrypted A-MSDU frames that start with RFC1042 header (CVE-2020-26144)
  • kernel: accepting plaintext broadcast fragments as full frames (CVE-2020-26145)
  • kernel: powerpc: RTAS calls can be used to compromise kernel integrity (CVE-2020-27777)
  • kernel: locking inconsistency in tty_io.c and tty_jobctrl.c can lead to a read-after-free (CVE-2020-29660)
  • kernel: buffer overflow in mwifiex_cmd_802_11_ad_hoc_start function via a long SSID value (CVE-2020-36158)
  • kernel: slab out-of-bounds read in hci_extended_inquiry_result_evt() (CVE-2020-36386)
  • kernel: Improper access control in BlueZ may allow information disclosure vulnerability. (CVE-2021-0129)
  • kernel: Use-after-free in ndb_queue_rq() in drivers/block/nbd.c (CVE-2021-3348)
  • kernel: Linux kernel eBPF RINGBUF map oversized allocation (CVE-2021-3489)
  • kernel: double free in bluetooth subsystem when the HCI device initialization fails (CVE-2021-3564)
  • kernel: use-after-free in function hci_sock_bound_ioctl() (CVE-2021-3573)
  • kernel: eBPF 32-bit source register truncation on div/mod (CVE-2021-3600)
  • kernel: DoS in rb_per_cpu_empty() (CVE-2021-3679)
  • kernel: Mounting overlayfs inside an unprivileged user namespace can reveal files (CVE-2021-3732)
  • kernel: heap overflow in __cgroup_bpf_run_filter_getsockopt() (CVE-2021-20194)
  • kernel: Race condition in sctp_destroy_sock list_del (CVE-2021-23133)
  • kernel: fuse: stall on CPU can occur because a retry loop continually finds the same bad inode (CVE-2021-28950)
  • kernel: System crash in intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c (CVE-2021-28971)
  • kernel: protection can be bypassed to leak content of kernel memory (CVE-2021-29155)
  • kernel: improper input validation in tipc_nl_retrieve_key function in net/tipc/node.c (CVE-2021-29646)
  • kernel: lack a full memory barrier may lead to DoS (CVE-2021-29650)
  • kernel: local escalation of privileges in handling of eBPF programs (CVE-2021-31440)
  • kernel: protection of stack pointer against speculative pointer arithmetic can be bypassed to leak content of kernel memory (CVE-2021-31829)
  • kernel: out-of-bounds reads and writes due to enforcing incorrect limits for pointer arithmetic operations by BPF verifier (CVE-2021-33200)
  • kernel: reassembling encrypted fragments with non-consecutive packet numbers (CVE-2020-26146)
  • kernel: reassembling mixed encrypted/plaintext fragments (CVE-2020-26147)
  • kernel: the copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check (CVE-2020-29368)
  • kernel: flowtable list del corruption with kernel BUG at lib/list_debug.c:50 (CVE-2021-3635)
  • kernel: NULL pointer dereference in llsec_key_alloc() in net/mac802154/llsec.c (CVE-2021-3659)
  • kernel: setsockopt System Call Untrusted Pointer Dereference Information Disclosure (CVE-2021-20239)
  • kernel: out of bounds array access in drivers/md/dm-ioctl.c (CVE-2021-31916)
Record
ALSA-2021:4356
Updated
2026-11-02
OSVCLSA-2024-1720468480 No score

kernel: Fix of 101 CVEs

  • kvm: initialize all of the kvm_debugregs structure before sending it to userspace {CVE-2023-1513}
  • wifi: mac80211: fix MBSSID parsing use-after-free {CVE-2022-42719}
  • mac80211: always allocate struct ieee802_11_elems {CVE-2022-42719}
  • netfilter: nf_tables: initialize registers in nft_do_chain() {CVE-2022-1016}
  • xprtrdma: fix incorrect header size calculations {CVE-2022-0812}
  • net: usb: fix memory leak in smsc75xx_bind {CVE-2021-47171}
  • i2c: i801: Don't generate an interrupt on bus reset {CVE-2021-47153}
  • pid: take a reference when initializing cad_pid {CVE-2021-47118}
  • Input: appletouch - initialize work before device registration {CVE-2021-46932}
  • HID: usbhid: fix info leak in hid_submit_ctrl {CVE-2021-46906}
  • quota: check block number when reading the block in quota file {CVE-2021-45868}
  • mwifiex: Fix skb_over_panic in mwifiex_usb_recv() {CVE-2021-43976}
  • atlantic: Fix OOB read and write in hw_atl_utils_fw_rpc_wait {CVE-2021-43975}
  • isdn: cpai: check ctr->cnr to avoid array index out of bound {CVE-2021-43389}
  • usb: hso: fix error handling code of hso_create_net_device {CVE-2021-37159}
  • can: bcm: fix infoleak in struct bcm_msg_head {CVE-2021-34693}
  • dm ioctl: fix out of bounds array access when no devices {CVE-2021-31916}
  • KVM: x86: hyper-v: Fix Hyper-V context null-ptr-deref {CVE-2021-30178}
  • perf/x86/intel: Fix a crash caused by zero PEBS status {CVE-2021-28971}
  • btrfs: fix race when cloning extent buffer during rewind of an old root {CVE-2021-28964}
  • ovl: fix missing negative dentry check in ovl_rename() {CVE-2021-20321}
  • drm/ttm/nouveau: don't call tt destroy callback on alloc failure. {CVE-2021-20292}
  • bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds() {CVE-2021-4159}
  • btrfs: unlock newly allocated extent buffer after error {CVE-2021-4149}
  • tracing: Fix bug in rb_per_cpu_empty() that might cause deadloop. {CVE-2021-3679}
  • net: mac802154: Fix general protection fault {CVE-2021-3659}
  • nfsd4: readdirplus shouldn't return parent of export {CVE-2021-3178}
  • Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2021-0129}
  • drm/nouveau: clean up all clients on device removal {CVE-2020-27820}
  • drm/nouveau: Add a dedicated mutex for the clients list {CVE-2020-27820}
  • drm/nouveau: use drm_dev_unplug() during device removal {CVE-2020-27820}
  • Bluetooth: SMP: Fail if remote and local public keys are identical {CVE-2020-26555}
  • vsock: Fix memory leak in vsock_connect() {CVE-2022-3629}
  • RDMA/core: Don't infoleak GRH fields {CVE-2021-3923}
  • xen/netfront: force data bouncing when backend is untrusted {CVE-2022-33741}
  • net: Rename and export copy_skb_header
  • floppy: use a statically allocated error counter {CVE-2022-1652}
  • fuse: fix pipe buffer lifetime for direct_io {CVE-2022-1011}
  • aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts {CVE-2024-26898}
  • smb: client: fix use-after-free bug in cifs_debug_data_proc_show() {CVE-2023-52752}
  • media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445}
  • media: dm1105: Fix use after free bug in dm1105_remove due to race condition {CVE-2023-35824}
  • perf: Fix perf_event_validate_size() lockdep splat {CVE-2023-6931}
  • perf: Fix perf_event_validate_size() {CVE-2023-6931}
  • net/sched: sch_hfsc: Ensure inner classes have fsc curve {CVE-2023-4623}
  • relayfs: fix out-of-bounds access in relay_file_read {CVE-2023-3268}
  • xfs: verify buffer contents when we skip log replay {CVE-2023-2124}
  • Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition {CVE-2023-1989}
  • Fix double fget() in vhost_net_set_backend() {CVE-2023-1838}
  • net/sched: cls_tcindex: downgrade to imperfect hash {CVE-2023-1829}
  • xen/netfront: fix leaking data in shared pages {CVE-2022-33740}
  • can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path {CVE-2022-28390}
  • xen/blkfront: fix leaking data in shared pages {CVE-2022-26365}
  • mISDN: fix use-after-free bugs in l1oip timer…
Record
CLSA-2024-1720468480
Updated
2026-11-02
OSVopenSUSE-SU-2021:1501-1 No score

Security update for the Linux Kernel

The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)

    You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0)

  • CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).

  • CVE-2021-31916: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel A bound check failure allowed an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability (bnc#1192781).

  • CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)

  • CVE-2021-34981: Fixed file refcounting in cmtp when cmtp_attach_device fails (bsc#1191961).

  • CVE-2021-43389: There was an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c (bnc#1191958).

  • CVE-2021-37159: hso_free_net_device in drivers/net/usb/hso.c called unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free (bnc#1188601).

The following non-security bugs were fixed:

  • ABI: sysfs-kernel-slab: Document some stats (git-fixes).
  • ALSA: hda: Reduce udelay() at SKL+ position reporting (git-fixes).
  • ALSA: ua101: fix division by zero at probe (git-fixes).
  • ALSA: usb-audio: Add Audient iD14 to mixer map quirk table (git-fixes).
  • ALSA: usb-audio: Add Schiit Hel device to mixer map quirk table (git-fixes).
  • ASoC: cs42l42: Correct some register default values (git-fixes).
  • ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER (git-fixes).
  • ASoC: cs42l42: Do not set defaults for volatile registers (git-fixes).
  • ASoC: dt-bindings: cs42l42: Correct description of ts-inv (git-fixes).
  • ASoC: mediatek: mt8195: Remove unsued irqs_lock (git-fixes).
  • ASoC: rockchip: Use generic dmaengine code (git-fixes).
  • ata: sata_mv: Fix the error handling of mv_chip_id() (git-fixes).
  • ath10k: fix control-message timeout (git-fixes).
  • ath10k: fix division by zero in send path (git-fixes).
  • ath10k: fix max antenna gain unit (git-fixes).
  • ath10k: Fix missing frame timestamp for beacon/probe-resp (git-fixes).
  • ath6kl: fix control-message timeout (git-fixes).
  • ath6kl: fix division by zero in send path (git-fixes).
  • ath9k: Fix potential interrupt storm on queue reset (git-fixes).
  • auxdisplay: ht16k33: Connect backlight to fbdev (git-fixes).
  • auxdisplay: ht16k33: Fix frame buffer device blanking (git-fixes).
  • auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string (git-fixes).
  • b43: fix a lower bounds test (git-fixes).
  • b43legacy: fix a lower bounds test (git-fixes).
  • Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync (git-fixes).
  • Bluetooth: fix init and cleanup of sco_conn.timeout_work (git-fixes).
  • bpf: Add kconfig knob for disabling unpriv bpf by default (jsc#SLE-22573)
  • bpf: Disallow unprivileged bpf by default (jsc#SLE-22573).
  • bpf: Fix potential race in tail call compatibility check (git-fixes).
  • btrfs: block-group: Rework documentation of check_system_chunk function (bsc#1192896).
  • btrfs: fix deadlock between chunk allocation and chunk btree modifications (bsc#1192896).
  • btrfs: fix memory ordering between normal and ordered work functions (git-fixes).
  • btrfs: update comments for chunk allocation -ENOSPC cases (bsc#1192896).
  • cgroup/cpuset: Change…
Record
openSUSE-SU-2021:1501-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:3806-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel for Azure was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)

    You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0)

  • CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).

  • CVE-2021-31916: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel A bound check failure allowed an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability (bnc#1192781).

  • CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)

  • CVE-2021-34981: Fixed file refcounting in cmtp when cmtp_attach_device fails (bsc#1191961).

  • CVE-2021-43389: There was an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c (bnc#1191958).

  • CVE-2021-37159: hso_free_net_device in drivers/net/usb/hso.c called unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free (bnc#1188601).

The following non-security bugs were fixed:

  • ABI: sysfs-kernel-slab: Document some stats (git-fixes).
  • ALSA: hda: fix general protection fault in azx_runtime_idle (git-fixes).
  • ALSA: hda: Free card instance properly at probe errors (git-fixes).
  • ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14 (git-fixes).
  • ALSA: hda: Reduce udelay() at SKL+ position reporting (git-fixes).
  • ALSA: hda: Use position buffer for SKL+ again (git-fixes).
  • ALSA: ua101: fix division by zero at probe (git-fixes).
  • ALSA: uapi: Fix a C++ style comment in asound.h (git-fixes).
  • ALSA: usb-audio: Add Audient iD14 to mixer map quirk table (git-fixes).
  • ALSA: usb-audio: Add minimal-mute notion in dB mapping table (bsc#1192375).
  • ALSA: usb-audio: Add Schiit Hel device to mixer map quirk table (git-fixes).
  • ALSA: usb-audio: Fix dB level of Bose Revolve+ SoundLink (bsc#1192375).
  • ALSA: usb-audio: Use int for dB map values (bsc#1192375).
  • ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE (bsc#1192473).
  • ASoC: cs42l42: Correct some register default values (git-fixes).
  • ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER (git-fixes).
  • ASoC: cs42l42: Do not set defaults for volatile registers (git-fixes).
  • ASoC: dt-bindings: cs42l42: Correct description of ts-inv (git-fixes).
  • ASoC: mediatek: mt8195: Remove unsued irqs_lock (git-fixes).
  • ASoC: rockchip: Use generic dmaengine code (git-fixes).
  • ASoC: SOF: topology: do not power down primary core during topology removal (git-fixes).
  • ASoC: topology: Fix stub for snd_soc_tplg_component_remove() (git-fixes).
  • ata: sata_mv: Fix the error handling of mv_chip_id() (git-fixes).
  • ath10k: fix control-message timeout (git-fixes).
  • ath10k: fix division by zero in send path (git-fixes).
  • ath10k: fix max antenna gain unit (git-fixes).
  • ath10k: Fix missing frame timestamp for beacon/probe-resp (git-fixes).
  • ath10k: sdio: Add missing BH locking around napi_schdule() (git-fixes).
  • ath6kl: fix control-message timeout (git-fixes).
  • ath6kl: fix division by zero in send path (git-fixes).
  • ath9k: Fix potential interrupt storm on queue reset (git-fixes).
  • auxdisplay: ht16k33: Connect backlight to fbdev (git-fixes).
  • auxdisplay: ht16k33: Fix frame buffer device blanking (git-fixes). -…
Record
openSUSE-SU-2021:3806-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:3876-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)

    You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0)

  • CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).

  • CVE-2021-31916: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel A bound check failure allowed an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability (bnc#1192781).

  • CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)

  • CVE-2021-34981: Fixed file refcounting in cmtp when cmtp_attach_device fails (bsc#1191961).

  • CVE-2021-37159: hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free (bnc#1188601).

  • CVE-2021-3772: Fixed sctp vtag check in sctp_sf_ootb (bsc#1190351).

  • CVE-2021-3655: Missing size validations on inbound SCTP packets may have allowed the kernel to read uninitialized memory (bnc#1188563).

  • CVE-2021-33033: The Linux kernel has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value (bnc#1186109 bnc#1186390 bnc#1188876).

  • CVE-2021-3760: Fixed a use-after-free vulnerability with the ndev->rf_conn_info object (bsc#1190067).

  • CVE-2021-42739: The firewire subsystem in the Linux kernel has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bnc#1184673).

  • CVE-2021-3542: Fixed heap buffer overflow in firedtv driver (bsc#1186063).

  • CVE-2018-13405: The inode_init_owner function in fs/inode.c in the Linux kernel allowed local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID (bnc#1100416 bnc#1129735).

  • CVE-2021-3715: Fixed a use-after-free in route4_change() in net/sched/cls_route.c (bsc#1190349).

  • CVE-2021-34556: An unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack (bnc#1188983).

  • CVE-2021-35477: An unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting store operation did not necessarily occur before a store operation that has an attacker-controlled value (bnc#1188985).

  • CVE-2021-42252: An issue was discovered in aspeed_lpc_ctrl_mmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel Local attackers able to access the Aspeed LPC control interface could overwrite memory in…

Record
openSUSE-SU-2021:3876-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:3941-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)

    You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0)

  • CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045 ).

  • CVE-2021-31916: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel A bound check failure allowed an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability (bnc#1192781).

  • CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)

  • CVE-2021-34981: Fixed file refcounting in cmtp when cmtp_attach_device fails (bsc#1191961).

The following non-security bugs were fixed:

  • ABI: sysfs-kernel-slab: Document some stats (git-fixes).
  • ALSA: hda: fix general protection fault in azx_runtime_idle (git-fixes).
  • ALSA: hda: Free card instance properly at probe errors (git-fixes).
  • ALSA: usb-audio: Add Audient iD14 to mixer map quirk table (git-fixes).
  • ALSA: usb-audio: Add minimal-mute notion in dB mapping table (bsc#1192375).
  • ALSA: usb-audio: Add Schiit Hel device to mixer map quirk table (git-fixes).
  • ALSA: usb-audio: Fix dB level of Bose Revolve+ SoundLink (bsc#1192375).
  • ALSA: usb-audio: Use int for dB map values (bsc#1192375).
  • ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE (bsc#1192473).
  • auxdisplay: ht16k33: Connect backlight to fbdev (git-fixes).
  • auxdisplay: ht16k33: Fix frame buffer device blanking (git-fixes).
  • auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string (git-fixes).
  • bpf: Add kconfig knob for disabling unpriv bpf by default (jsc#SLE-22573)
  • bpf: Add kconfig knob for disabling unpriv bpf by default (jsc#SLE-22574)
  • bpf: Disallow unprivileged bpf by default (jsc#SLE-22573).
  • bpf: Disallow unprivileged bpf by default (jsc#SLE-22574).
  • bpf: Fix BPF_JIT kconfig symbol dependency (git-fixes jsc#SLE-22574).
  • bpf: Fix potential race in tail call compatibility check (git-fixes).
  • bpf, kconfig: Add consolidated menu entry for bpf with core options (jsc#SLE-22574).
  • btrfs: block-group: Rework documentation of check_system_chunk function (bsc#1192896).
  • btrfs: fix deadlock between chunk allocation and chunk btree modifications (bsc#1192896).
  • btrfs: fix memory ordering between normal and ordered work functions (git-fixes).
  • btrfs: update comments for chunk allocation -ENOSPC cases (bsc#1192896).
  • cgroup/cpuset: Change references of cpuset_mutex to cpuset_rwsem (git-fixes).
  • config: disable unprivileged BPF by default (jsc#SLE-22573) Backport of mainline commit 8a03e56b253e ('bpf: Disallow unprivileged bpf by default') only changes kconfig default, used e.g. for 'make oldconfig' when the config option is missing, but does not update our kernel configs used for build. Update also these to make sure unprivileged BPF is really disabled by default.
  • crypto: caam - disable pkc for non-E SoCs (git-fixes).
  • crypto: qat - detect PFVF collision after ACK (git-fixes).
  • crypto: qat - disregard spurious PFVF interrupts (git-fixes).
  • drm/i915: Introduce intel_hpd_hotplug_irqs() (bsc#1192758).
  • drm: prevent spectre issue in vmw_execbuf_ioctl (bsc#1192802).
  • EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell (bsc#1152489).
  • Eradicate Patch-mainline: No The…
Record
openSUSE-SU-2021:3941-1
Updated
2026-11-02
OSVPUB-A-187955767 No score

In list_devices of dm-ioctl.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Record
PUB-A-187955767
Updated
2026-11-05
OSVSUSE-SU-2021:3806-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel for Azure was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)

    You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0)

  • CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).

  • CVE-2021-31916: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel A bound check failure allowed an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability (bnc#1192781).

  • CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)

  • CVE-2021-34981: Fixed file refcounting in cmtp when cmtp_attach_device fails (bsc#1191961).

  • CVE-2021-43389: There was an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c (bnc#1191958).

  • CVE-2021-37159: hso_free_net_device in drivers/net/usb/hso.c called unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free (bnc#1188601).

The following non-security bugs were fixed:

  • ABI: sysfs-kernel-slab: Document some stats (git-fixes).
  • ALSA: hda: fix general protection fault in azx_runtime_idle (git-fixes).
  • ALSA: hda: Free card instance properly at probe errors (git-fixes).
  • ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14 (git-fixes).
  • ALSA: hda: Reduce udelay() at SKL+ position reporting (git-fixes).
  • ALSA: hda: Use position buffer for SKL+ again (git-fixes).
  • ALSA: ua101: fix division by zero at probe (git-fixes).
  • ALSA: uapi: Fix a C++ style comment in asound.h (git-fixes).
  • ALSA: usb-audio: Add Audient iD14 to mixer map quirk table (git-fixes).
  • ALSA: usb-audio: Add minimal-mute notion in dB mapping table (bsc#1192375).
  • ALSA: usb-audio: Add Schiit Hel device to mixer map quirk table (git-fixes).
  • ALSA: usb-audio: Fix dB level of Bose Revolve+ SoundLink (bsc#1192375).
  • ALSA: usb-audio: Use int for dB map values (bsc#1192375).
  • ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE (bsc#1192473).
  • ASoC: cs42l42: Correct some register default values (git-fixes).
  • ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER (git-fixes).
  • ASoC: cs42l42: Do not set defaults for volatile registers (git-fixes).
  • ASoC: dt-bindings: cs42l42: Correct description of ts-inv (git-fixes).
  • ASoC: mediatek: mt8195: Remove unsued irqs_lock (git-fixes).
  • ASoC: rockchip: Use generic dmaengine code (git-fixes).
  • ASoC: SOF: topology: do not power down primary core during topology removal (git-fixes).
  • ASoC: topology: Fix stub for snd_soc_tplg_component_remove() (git-fixes).
  • ata: sata_mv: Fix the error handling of mv_chip_id() (git-fixes).
  • ath10k: fix control-message timeout (git-fixes).
  • ath10k: fix division by zero in send path (git-fixes).
  • ath10k: fix max antenna gain unit (git-fixes).
  • ath10k: Fix missing frame timestamp for beacon/probe-resp (git-fixes).
  • ath10k: sdio: Add missing BH locking around napi_schdule() (git-fixes).
  • ath6kl: fix control-message timeout (git-fixes).
  • ath6kl: fix division by zero in send path (git-fixes).
  • ath9k: Fix potential interrupt storm on queue reset (git-fixes).
  • auxdisplay: ht16k33: Connect backlight to fbdev (git-fixes).
  • auxdisplay: ht16k33: Fix frame buffer device blanking (git-fixes). -…
Record
SUSE-SU-2021:3806-1
Updated
2026-11-02
OSVSUSE-SU-2021:3807-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)

    You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0)

  • CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).

  • CVE-2021-31916: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel A bound check failure allowed an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability (bnc#1192781).

  • CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)

  • CVE-2021-34981: Fixed file refcounting in cmtp when cmtp_attach_device fails (bsc#1191961).

  • CVE-2021-43389: There was an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c (bnc#1191958).

  • CVE-2021-37159: hso_free_net_device in drivers/net/usb/hso.c called unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free (bnc#1188601).

The following non-security bugs were fixed:

  • ABI: sysfs-kernel-slab: Document some stats (git-fixes).
  • ALSA: hda: Reduce udelay() at SKL+ position reporting (git-fixes).
  • ALSA: ua101: fix division by zero at probe (git-fixes).
  • ALSA: usb-audio: Add Audient iD14 to mixer map quirk table (git-fixes).
  • ALSA: usb-audio: Add Schiit Hel device to mixer map quirk table (git-fixes).
  • ASoC: cs42l42: Correct some register default values (git-fixes).
  • ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER (git-fixes).
  • ASoC: cs42l42: Do not set defaults for volatile registers (git-fixes).
  • ASoC: dt-bindings: cs42l42: Correct description of ts-inv (git-fixes).
  • ASoC: mediatek: mt8195: Remove unsued irqs_lock (git-fixes).
  • ASoC: rockchip: Use generic dmaengine code (git-fixes).
  • Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync (git-fixes).
  • Bluetooth: fix init and cleanup of sco_conn.timeout_work (git-fixes).
  • EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell (bsc#1152489).
  • Eradicate Patch-mainline: No The pre-commit check can reject this deprecated tag then.
  • Fix problem with missing installkernel on Tumbleweed.
  • HID: u2fzero: clarify error check and length calculations (git-fixes).
  • HID: u2fzero: properly handle timeouts in usb_submit_urb (git-fixes).
  • Input: elantench - fix misreporting trackpoint coordinates (bsc#1192918).
  • Input: i8042 - Add quirk for Fujitsu Lifebook T725 (bsc#1191980).
  • PCI/ACPI: Check for _OSC support in acpi_pci_osc_control_set() (bsc#1169263).
  • PCI/ACPI: Clarify message about _OSC failure (bsc#1169263).
  • PCI/ACPI: Move _OSC query checks to separate function (bsc#1169263).
  • PCI/ACPI: Move supported and control calculations to separate functions (bsc#1169263).
  • PCI/ACPI: Remove OSC_PCI_SUPPORT_MASKS and OSC_PCI_CONTROL_MASKS (bsc#1169263).
  • PCI/ACPI: Remove unnecessary osc_lock (bsc#1169263).
  • PCI: aardvark: Do not clear status bits of masked interrupts (git-fixes).
  • PCI: aardvark: Do not spam about PIO Response Status (git-fixes).
  • PCI: aardvark: Do not unmask unused interrupts (git-fixes).
  • PCI: aardvark: Fix checking for link up via LTSSM state (git-fixes).
  • PCI: aardvark: Fix reporting Data Link Layer Link Active (git-fixes).
  • PCI: aardvark: Fix return value of…
Record
SUSE-SU-2021:3807-1
Updated
2026-11-02
OSVSUSE-SU-2021:3848-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)

    You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0)

  • CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).

  • CVE-2021-31916: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel A bound check failure allowed an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability (bnc#1192781).

  • CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)

  • CVE-2021-34981: Fixed file refcounting in cmtp when cmtp_attach_device fails (bsc#1191961).

  • CVE-2021-37159: hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free (bnc#1188601).

  • CVE-2021-3772: Fixed sctp vtag check in sctp_sf_ootb (bsc#1190351).

The following non-security bugs were fixed:

  • EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell (bsc#1114648).
  • Revert 'ibmvnic: check failover_pending in login response' (bsc#1190523 ltc#194510).
  • Revert 'x86/kvm: fix vcpu-id indexed array sizes' (git-fixes).
  • USB: iowarrior: fix control-message timeouts (git-fixes).
  • USB: serial: keyspan: fix memleak on probe errors (git-fixes).
  • arm64/sve: Use correct size when reinitialising SVE state (git-fixes).
  • arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions (git-fixes).
  • bpf: Fix potential race in tail call compatibility check (git-fixes).
  • bpf: Move owner type, jited info into array auxiliary data (bsc#1141655).
  • bpf: Use kvmalloc for map values in syscall (stable-5.14.16).
  • btrfs: fix memory ordering between normal and ordered work functions (git-fixes).
  • ceph: take snap_empty_lock atomically with snaprealm refcount change (bsc#1191888).
  • config.sh: Build cve/linux-4.12 against SLE15-SP1. SLE15 is no longer updated and we will need recent update to suse-module-tools to continue building the kernel.
  • crypto: qat - detect PFVF collision after ACK (git-fixes).
  • crypto: qat - disregard spurious PFVF interrupts (git-fixes).
  • crypto: s5p-sss - Add error handling in s5p_aes_probe() (git-fixes).
  • drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION() (git-fixes).
  • drm: fix spectre issue in vmw_execbuf_ioctl (bsc#1192802).
  • ethernet: dwmac-stm32: Fix copyright (git-fixes).
  • ftrace: Fix scripts/recordmcount.pl due to new binutils (bsc#1192267).
  • fuse: fix page stealing (bsc#1192718).
  • gigaset: fix spectre issue in do_data_b3_req (bsc#1192802).
  • hisax: fix spectre issues (bsc#1192802).
  • hrtimer: Move copyout of remaining time to do_nanosleep() (bsc#1191713).
  • hrtimer_nanosleep(): Pass rmtp in restart_block (bsc#1191713).
  • hysdn: fix spectre issue in hycapi_send_message (bsc#1192802).
  • i2c: synquacer: fix deferred probing (git-fixes).
  • ibmvnic: Process crqs after enabling interrupts (bsc#1192273 ltc#194629).
  • ibmvnic: check failover_pending in login response (bsc#1190523 ltc#194510).
  • ibmvnic: delay complete() (bsc#1094840 ltc#167098 git-fixes).
  • ibmvnic: do not stop queue in xmit (bsc#1192273 ltc#194629).
  • infiniband: fix spectre issue in ib_uverbs_write (bsc#1192802).
  • ipv4: fix…
Record
SUSE-SU-2021:3848-1
Updated
2026-11-02
OSVSUSE-SU-2021:3876-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 LTSS kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)

    You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0)

  • CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).

  • CVE-2021-31916: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel A bound check failure allowed an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability (bnc#1192781).

  • CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)

  • CVE-2021-34981: Fixed file refcounting in cmtp when cmtp_attach_device fails (bsc#1191961).

  • CVE-2021-37159: hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free (bnc#1188601).

  • CVE-2021-3772: Fixed sctp vtag check in sctp_sf_ootb (bsc#1190351).

  • CVE-2021-3655: Missing size validations on inbound SCTP packets may have allowed the kernel to read uninitialized memory (bnc#1188563).

  • CVE-2021-33033: The Linux kernel has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value (bnc#1186109 bnc#1186390 bnc#1188876).

  • CVE-2021-3760: Fixed a use-after-free vulnerability with the ndev->rf_conn_info object (bsc#1190067).

  • CVE-2021-42739: The firewire subsystem in the Linux kernel has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bnc#1184673).

  • CVE-2021-3542: Fixed heap buffer overflow in firedtv driver (bsc#1186063).

  • CVE-2018-13405: The inode_init_owner function in fs/inode.c in the Linux kernel allowed local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID (bnc#1100416 bnc#1129735).

  • CVE-2021-3715: Fixed a use-after-free in route4_change() in net/sched/cls_route.c (bsc#1190349).

  • CVE-2021-34556: An unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack (bnc#1188983).

  • CVE-2021-35477: An unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting store operation did not necessarily occur before a store operation that has an attacker-controlled value (bnc#1188985).

  • CVE-2021-42252: An issue was discovered in aspeed_lpc_ctrl_mmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel Local attackers able to access the Aspeed LPC control interface could overwrite memory in…

Record
SUSE-SU-2021:3876-1
Updated
2026-11-02
OSVSUSE-SU-2021:3877-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)

    You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0)

  • CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).

  • CVE-2021-31916: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel A bound check failure allowed an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability (bnc#1192781).

  • CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)

  • CVE-2021-34981: Fixed file refcounting in cmtp when cmtp_attach_device fails. (bsc#1191961)

The following non-security bugs were fixed:

  • arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions (git-fixes).
  • arm64/sve: Use correct size when reinitialising SVE state (git-fixes).
  • bpf: Add kconfig knob for disabling unpriv bpf by default (jsc#SLE-22913)
  • bpf: Disallow unprivileged bpf by default (jsc#SLE-22913).
  • bpf: Fix potential race in tail call compatibility check (git-fixes).
  • bpf: Move owner type, jited info into array auxiliary data (bsc#1141655).
  • bpf: Use kvmalloc for map values in syscall (stable-5.14.16).
  • btrfs: fix memory ordering between normal and ordered work functions (git-fixes).
  • config: disable unprivileged BPF by default (jsc#SLE-22913)
  • drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION() (git-fixes).
  • drm: fix spectre issue in vmw_execbuf_ioctl (bsc#1192802).
  • EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell (bsc#1114648).
  • fuse: fix page stealing (bsc#1192718).
  • gigaset: fix spectre issue in do_data_b3_req (bsc#1192802).
  • hisax: fix spectre issues (bsc#1192802).
  • hysdn: fix spectre issue in hycapi_send_message (bsc#1192802).
  • i2c: synquacer: fix deferred probing (git-fixes).
  • ibmvnic: check failover_pending in login response (bsc#1190523 ltc#194510).
  • ibmvnic: do not stop queue in xmit (bsc#1192273 ltc#194629).
  • ibmvnic: Process crqs after enabling interrupts (bsc#1192273 ltc#194629).
  • infiniband: fix spectre issue in ib_uverbs_write (bsc#1192802).
  • iwlwifi: fix spectre issue in iwl_dbgfs_update_pm (bsc#1192802).
  • media: dvb_ca_en50221: prevent using slot_info for Spectre attacs (bsc#1192802).
  • media: dvb_ca_en50221: sanity check slot number from userspace (bsc#1192802).
  • media: wl128x: get rid of a potential spectre issue (bsc#1192802).
  • mm/hugetlb: initialize hugetlb_usage in mm_init (bsc#1192906).
  • mpt3sas: fix spectre issues (bsc#1192802).
  • net: sock_diag: Fix spectre v1 gadget in __sock_diag_cmd() (bsc#1192802).
  • osst: fix spectre issue in osst_verify_frame (bsc#1192802).
  • prctl: allow to setup brk for et_dyn executables (git-fixes).
  • printk/console: Allow to disable console output by using console='' or console=null (bsc#1192753).
  • printk: handle blank console arguments passed in (bsc#1192753).
  • printk: Remove printk.h inclusion in percpu.h (bsc#1192987).
  • Revert 'ibmvnic: check failover_pending in login response' (bsc#1190523 ltc#194510).
  • Revert 'x86/kvm: fix vcpu-id indexed array sizes' (git-fixes).
  • scsi: be2iscsi: Fix an error handling path in beiscsi_dev_probe() (git-fixes).
  • scsi: BusLogic: Fix missing pr_cont() use (git-fixes).
  • scsi: core: Fix error handling…
Record
SUSE-SU-2021:3877-1
Updated
2026-11-02
OSVSUSE-SU-2021:3929-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)

    You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0)

  • CVE-2017-5753: Systems with microprocessors utilizing speculative execution and branch prediction may have allowed unauthorized disclosure of information to an attacker with local user access via a side-channel analysis (bnc#1068032). Additional spectrev1 fixes were added to the eBPF code.

  • CVE-2018-13405: The inode_init_owner function in fs/inode.c allowed local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID (bnc#1087082 bnc#1100416 bnc#1129735).

  • CVE-2018-16882: A use-after-free issue was found in the way the KVM hypervisor processed posted interrupts when nested(=1) virtualization is enabled. In nested_get_vmcs12_pages(), in case of an error while processing posted interrupt address, it unmaps the 'pi_desc_page' without resetting 'pi_desc' descriptor address, which is later used in pi_test_and_clear_on(). A guest user/process could use this flaw to crash the host kernel resulting in DoS or potentially gain privileged access to a system. Kernel versions and are vulnerable (bnc#1119934).

  • CVE-2020-0429: In l2tp_session_delete and related functions of l2tp_core.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1176724).

  • CVE-2020-12655: An issue was discovered in xfs_agf_verify in fs/xfs/libxfs/xfs_alloc.c in the Linux kernel Attackers may trigger a sync of excessive duration via an XFS v5 image with crafted metadata, aka CID-d0c7feaf8767 (bnc#1171217).

  • CVE-2020-14305: An out-of-bounds memory write flaw was found in how the Linux kernel’s Voice Over IP H.323 connection tracking functionality handled connections on ipv6 port 1720. This flaw allowed an unauthenticated remote user to crash the system, causing a denial of service. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability (bnc#1173346).

  • CVE-2020-3702: Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic (bnc#1191193).

  • CVE-2021-20265: A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending. This flaw allowed an unprivileged local user to crash the system by exhausting available memory. The highest threat from this vulnerability is to system availability (bnc#1183089).

  • CVE-2021-31916: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel A bound check failure allowed an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability (bnc#1192781).

  • CVE-2021-33033: The Linux kernel has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO…

Record
SUSE-SU-2021:3929-1
Updated
2026-11-02
OSVSUSE-SU-2021:3933-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)

    You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0)

  • CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).

  • CVE-2021-31916: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel A bound check failure allowed an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability (bnc#1192781).

  • CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)

  • CVE-2021-34981: Fixed file refcounting in cmtp when cmtp_attach_device fails (bsc#1191961).

  • CVE-2021-43389: There was an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c (bnc#1191958).

  • CVE-2021-37159: hso_free_net_device in drivers/net/usb/hso.c called unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free (bnc#1188601).

The following non-security bugs were fixed:

  • ABI: sysfs-kernel-slab: Document some stats (git-fixes).
  • ALSA: hda: Reduce udelay() at SKL+ position reporting (git-fixes).
  • ALSA: ua101: fix division by zero at probe (git-fixes).
  • ALSA: usb-audio: Add Audient iD14 to mixer map quirk table (git-fixes).
  • ALSA: usb-audio: Add Schiit Hel device to mixer map quirk table (git-fixes).
  • ASoC: cs42l42: Correct some register default values (git-fixes).
  • ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER (git-fixes).
  • ASoC: cs42l42: Do not set defaults for volatile registers (git-fixes).
  • ASoC: dt-bindings: cs42l42: Correct description of ts-inv (git-fixes).
  • ASoC: mediatek: mt8195: Remove unsued irqs_lock (git-fixes).
  • ASoC: rockchip: Use generic dmaengine code (git-fixes).
  • ata: sata_mv: Fix the error handling of mv_chip_id() (git-fixes).
  • ath10k: fix control-message timeout (git-fixes).
  • ath10k: fix division by zero in send path (git-fixes).
  • ath10k: fix max antenna gain unit (git-fixes).
  • ath10k: Fix missing frame timestamp for beacon/probe-resp (git-fixes).
  • ath6kl: fix control-message timeout (git-fixes).
  • ath6kl: fix division by zero in send path (git-fixes).
  • ath9k: Fix potential interrupt storm on queue reset (git-fixes).
  • auxdisplay: ht16k33: Connect backlight to fbdev (git-fixes).
  • auxdisplay: ht16k33: Fix frame buffer device blanking (git-fixes).
  • auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string (git-fixes).
  • b43: fix a lower bounds test (git-fixes).
  • b43legacy: fix a lower bounds test (git-fixes).
  • Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync (git-fixes).
  • Bluetooth: fix init and cleanup of sco_conn.timeout_work (git-fixes).
  • bpf: Add kconfig knob for disabling unpriv bpf by default (jsc#SLE-22573)
  • bpf: Disallow unprivileged bpf by default (jsc#SLE-22573).
  • bpf: Fix potential race in tail call compatibility check (git-fixes).
  • btrfs: block-group: Rework documentation of check_system_chunk function (bsc#1192896).
  • btrfs: fix deadlock between chunk allocation and chunk btree modifications (bsc#1192896).
  • btrfs: fix memory ordering between normal and ordered work functions (git-fixes).
  • btrfs: update comments for chunk allocation -ENOSPC cases (bsc#1192896).
  • cgroup/cpuset:…
Record
SUSE-SU-2021:3933-1
Updated
2026-11-02
OSVSUSE-SU-2021:3935-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP3 LTSS kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)

    You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0)

  • CVE-2021-31916: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel A bound check failure allowed an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability (bnc#1192781).

  • CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)

  • CVE-2021-34981: Fixed file refcounting in cmtp when cmtp_attach_device fails (bsc#1191961).

  • CVE-2020-12655: An issue was discovered in xfs_agf_verify in fs/xfs/libxfs/xfs_alloc.c. Attackers may trigger a sync of excessive duration via an XFS v5 image with crafted metadata, aka CID-d0c7feaf8767 (bnc#1171217).

  • CVE-2021-43389: There was an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c (bnc#1191958).

  • CVE-2021-37159: hso_free_net_device in drivers/net/usb/hso.c called unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free (bnc#1188601).

  • CVE-2021-34556: An unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack (bnc#1188983).

  • CVE-2021-35477: An unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting store operation did not necessarily occur before a store operation that has an attacker-controlled value (bnc#1188985).

  • CVE-2017-17862: kernel/bpf/verifier.c in the Linux kernel ignores unreachable code, even though it would still be processed by JIT compilers. This behavior, also considered an improper branch-pruning logic issue, could possibly be used by local users for denial of service (bnc#1073928).

  • CVE-2017-17864: kernel/bpf/verifier.c in the Linux kernel mishandled states_equal comparisons between the pointer data type and the UNKNOWN_VALUE data type, which allowed local users to obtain potentially sensitive address information, aka a 'pointer leak (bnc#1073928).

  • CVE-2021-20265: A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending. This flaw allowed an unprivileged local user to crash the system by exhausting available memory. The highest threat from this vulnerability is to system availability (bnc#1183089).

  • CVE-2021-3772: Fixed sctp vtag check in sctp_sf_ootb (bsc#1190351).

  • CVE-2021-3655: Missing size validations on inbound SCTP packets may have allowed the kernel to read uninitialized memory (bnc#1188563).

  • CVE-2018-13405: The inode_init_owner function in fs/inode.c in the Linux kernel allowed local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID (bnc#1100416 bnc#1129735).

  • CVE-2021-3760: Fixed a use-after-free…

Record
SUSE-SU-2021:3935-1
Updated
2026-11-02
OSVSUSE-SU-2021:3941-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)

    You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0)

  • CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045 ).

  • CVE-2021-31916: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel A bound check failure allowed an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability (bnc#1192781).

  • CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)

  • CVE-2021-34981: Fixed file refcounting in cmtp when cmtp_attach_device fails (bsc#1191961).

The following non-security bugs were fixed:

  • ABI: sysfs-kernel-slab: Document some stats (git-fixes).
  • ALSA: hda: fix general protection fault in azx_runtime_idle (git-fixes).
  • ALSA: hda: Free card instance properly at probe errors (git-fixes).
  • ALSA: usb-audio: Add Audient iD14 to mixer map quirk table (git-fixes).
  • ALSA: usb-audio: Add minimal-mute notion in dB mapping table (bsc#1192375).
  • ALSA: usb-audio: Add Schiit Hel device to mixer map quirk table (git-fixes).
  • ALSA: usb-audio: Fix dB level of Bose Revolve+ SoundLink (bsc#1192375).
  • ALSA: usb-audio: Use int for dB map values (bsc#1192375).
  • ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE (bsc#1192473).
  • auxdisplay: ht16k33: Connect backlight to fbdev (git-fixes).
  • auxdisplay: ht16k33: Fix frame buffer device blanking (git-fixes).
  • auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string (git-fixes).
  • bpf: Add kconfig knob for disabling unpriv bpf by default (jsc#SLE-22573)
  • bpf: Add kconfig knob for disabling unpriv bpf by default (jsc#SLE-22574)
  • bpf: Disallow unprivileged bpf by default (jsc#SLE-22573).
  • bpf: Disallow unprivileged bpf by default (jsc#SLE-22574).
  • bpf: Fix BPF_JIT kconfig symbol dependency (git-fixes jsc#SLE-22574).
  • bpf: Fix potential race in tail call compatibility check (git-fixes).
  • bpf, kconfig: Add consolidated menu entry for bpf with core options (jsc#SLE-22574).
  • btrfs: block-group: Rework documentation of check_system_chunk function (bsc#1192896).
  • btrfs: fix deadlock between chunk allocation and chunk btree modifications (bsc#1192896).
  • btrfs: fix memory ordering between normal and ordered work functions (git-fixes).
  • btrfs: update comments for chunk allocation -ENOSPC cases (bsc#1192896).
  • cgroup/cpuset: Change references of cpuset_mutex to cpuset_rwsem (git-fixes).
  • config: disable unprivileged BPF by default (jsc#SLE-22573) Backport of mainline commit 8a03e56b253e ('bpf: Disallow unprivileged bpf by default') only changes kconfig default, used e.g. for 'make oldconfig' when the config option is missing, but does not update our kernel configs used for build. Update also these to make sure unprivileged BPF is really disabled by default.
  • crypto: caam - disable pkc for non-E SoCs (git-fixes).
  • crypto: qat - detect PFVF collision after ACK (git-fixes).
  • crypto: qat - disregard spurious PFVF interrupts (git-fixes).
  • drm/i915: Introduce intel_hpd_hotplug_irqs() (bsc#1192758).
  • drm: prevent spectre issue in vmw_execbuf_ioctl (bsc#1192802).
  • EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell (bsc#1152489).
  • Eradicate Patch-mainline: No The…
Record
SUSE-SU-2021:3941-1
Updated
2026-11-02
OSVSUSE-SU-2021:3969-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573) You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0)

  • CVE-2018-3639: Fixed a speculative execution that may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis. (bsc#1087082)
  • CVE-2021-20320: Fix a bug that allows a local attacker with special user privilege can circumvent the verifier and may lead to a confidentiality problem. (bsc#1190601)
  • CVE-2021-0941: Fixed A missing sanity check to the current MTU check that may allow a local attacker with special user privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. (bnc#1192045)
  • CVE-2021-31916: Fixed a bound check failure that could allows an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash, a leak of internal kernel information, or a privilege escalation problem. (bnc#1192781)
  • CVE-2021-20322: Fixed a bug that provides to an attacker the ability to quickly scan open UDP ports. (bsc#1191790)
  • CVE-2021-3772: Fixed an issue that would allow a blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send packets with spoofed IP addresses. (bsc#1190351)
  • CVE-2021-34981: Fixed an issue that allows an attacker with a local account to escalate privileges when CAPI (ISDN) hardware connection fails. (bsc#1191961)
  • CVE-2018-9517: Fixed possible memory corruption due to a use after free in pppol2tp_connect (bsc#1108488).
  • CVE-2019-3874: Fixed possible denial of service attack via SCTP socket buffer used by a userspace applications (bnc#1129898).
  • CVE-2019-3900: Fixed an infinite loop issue while handling incoming packets in handle_rx() (bnc#1133374).
  • CVE-2020-12770: Fixed sg_remove_request call in a certain failure cases (bsc#1171420).
  • CVE-2020-3702: Fixed a bug which could be triggered with specifically timed and handcrafted traffic and cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure. (bnc#1191193)
  • CVE-2021-22543: Fixed improper handling of VM_IO|VM_PFNMAP vmas in KVM, which could bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allowed users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation (bsc#1186482).
  • CVE-2021-33033: Fixed a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled (bsc#1186109).
  • CVE-2021-34556: Fixed side-channel attack via a Speculative Store Bypass via unprivileged BPF program that could have obtain sensitive information from kernel memory (bsc#1188983).
  • CVE-2021-35477: Fixed BPF stack frame pointer which could have been abused to disclose content of arbitrary kernel memory (bsc#1188985).
  • CVE-2021-3640: Fixed a Use-After-Free vulnerability in function sco_sock_sendmsg() in the bluetooth stack (bsc#1188172).
  • CVE-2021-3653: Missing validation of the int_ctl VMCB field and allows a malicious L1 guest to enable AVIC support for the L2 guest. (bsc#1189399).
  • CVE-2021-3655: Fixed a missing size validations on inbound SCTP packets, which may have allowed the kernel to read uninitialized memory (bsc#1188563).
  • CVE-2021-3656: Missing validation of the the virt_ext VMCB field and allows a malicious L1 guest to disable both VMLOAD/VMSAVE intercepts and VLS for the L2 guest (bsc#1189400). -…
Record
SUSE-SU-2021:3969-1
Updated
2026-11-02
OSVSUSE-SU-2021:3972-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)

    You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0)

The following security bugs were fixed:

  • CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).
  • CVE-2021-31916: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel A bound check failure allowed an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability (bnc#1192781).
  • CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)
  • CVE-2021-34981: Fixed file refcounting in cmtp when cmtp_attach_device fails. (bsc#1191961)
  • CVE-2021-3655: Fixed a missing size validations on inbound SCTP packets, which may have allowed the kernel to read uninitialized memory (bsc#1188563).
  • CVE-2021-3715: Fixed a use-after-free in route4_change() in net/sched/cls_route.c (bsc#1190349).
  • CVE-2021-3760: Fixed a use-after-free vulnerability with the ndev->rf_conn_info object (bsc#1190067).
  • CVE-2021-42739: The firewire subsystem had a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bsc#1184673).
  • CVE-2021-3542: Fixed heap buffer overflow in firedtv driver (bsc#1186063).
  • CVE-2021-42252: Fixed an issue inside aspeed_lpc_ctrl_mmap that could have allowed local attackers to access the Aspeed LPC control interface to overwrite memory in the kernel and potentially execute privileges (bnc#1190479).
  • CVE-2021-41864: Fixed prealloc_elems_and_freelist that allowed unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write (bnc#1191317).
  • CVE-2021-42008: Fixed a slab out-of-bounds write in the decode_data function in drivers/net/hamradio/6pack.c. Input from a process that had the CAP_NET_ADMIN capability could have lead to root access (bsc#1191315).
  • CVE-2021-37159: Fixed use-after-free and a double free inside hso_free_net_device in drivers/net/usb/hso.c when unregister_netdev is called without checking for the NETREG_REGISTERED state (bnc#1188601).
  • CVE-2020-3702: Fixed a bug which could be triggered with specifically timed and handcrafted traffic and cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure. (bnc#1191193)
  • CVE-2021-3752: Fixed a use after free vulnerability in the Linux kernel's bluetooth module. (bsc#1190023)
  • CVE-2021-40490: Fixed a race condition discovered in the ext4 subsystem that could leat to local priviledge escalation. (bnc#1190159)
  • CVE-2021-3744: Fixed a bug which could allows attackers to cause a denial of service. (bsc#1189884)
  • CVE-2021-3764: Fixed a bug which could allows attackers to cause a denial of service. (bsc#1190534)
  • CVE-2021-3772: Fixed a remote denial of service in the SCTP stack, if the attacker can spoof IP addresses and knows the IP-addresses and port numbers being used (bnc#1190351).
  • CVE-2018-9517: Fixed possible memory corruption due to a use after free in pppol2tp_connect (bsc#1108488).
  • CVE-2019-3874: Fixed possible denial of service attack via SCTP socket buffer used by a userspace applications…
Record
SUSE-SU-2021:3972-1
Updated
2026-11-02
OSVSUSE-SU-2021:3978-1 No score

Security update for the Linux RT Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)

    You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0)

  • CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).

  • CVE-2021-31916: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel A bound check failure allowed an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability (bnc#1192781).

  • CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)

  • CVE-2021-34981: Fixed file refcounting in cmtp when cmtp_attach_device fails (bsc#1191961).

  • CVE-2021-43389: There was an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c (bnc#1191958).

  • CVE-2021-37159: hso_free_net_device in drivers/net/usb/hso.c called unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free (bnc#1188601).

  • CVE-2020-27820: Fixed a use-after-free in nouveau's postclose() handler that could have happened during device or driver removal (bnc#1179599).

The following non-security bugs were fixed:

  • ABI: sysfs-kernel-slab: Document some stats (git-fixes).
  • ALSA: hda: Reduce udelay() at SKL+ position reporting (git-fixes).
  • ALSA: ua101: fix division by zero at probe (git-fixes).
  • ALSA: usb-audio: Add Audient iD14 to mixer map quirk table (git-fixes).
  • ALSA: usb-audio: Add Schiit Hel device to mixer map quirk table (git-fixes).
  • ASoC: cs42l42: Correct some register default values (git-fixes).
  • ASoC: cs42l42: Defer probe if request_threaded_irq() returns EPROBE_DEFER (git-fixes).
  • ASoC: cs42l42: Do not set defaults for volatile registers (git-fixes).
  • ASoC: dt-bindings: cs42l42: Correct description of ts-inv (git-fixes).
  • ASoC: mediatek: mt8195: Remove unsued irqs_lock (git-fixes).
  • ASoC: rockchip: Use generic dmaengine code (git-fixes).
  • ata: sata_mv: Fix the error handling of mv_chip_id() (git-fixes).
  • ath10k: fix control-message timeout (git-fixes).
  • ath10k: fix division by zero in send path (git-fixes).
  • ath10k: fix max antenna gain unit (git-fixes).
  • ath10k: Fix missing frame timestamp for beacon/probe-resp (git-fixes).
  • ath6kl: fix control-message timeout (git-fixes).
  • ath6kl: fix division by zero in send path (git-fixes).
  • ath9k: Fix potential interrupt storm on queue reset (git-fixes).
  • auxdisplay: ht16k33: Connect backlight to fbdev (git-fixes).
  • auxdisplay: ht16k33: Fix frame buffer device blanking (git-fixes).
  • auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string (git-fixes).
  • b43: fix a lower bounds test (git-fixes).
  • b43legacy: fix a lower bounds test (git-fixes).
  • Bluetooth: btmtkuart: fix a memleak in mtk_hci_wmt_sync (git-fixes).
  • Bluetooth: fix init and cleanup of sco_conn.timeout_work (git-fixes).
  • bnxt_en: reject indirect blk offload when hw-tc-offload is off (jsc#SLE-8372 bsc#1153275).
  • bpf: Add kconfig knob for disabling unpriv bpf by default (jsc#SLE-22573)
  • bpf: Disallow unprivileged bpf by default (jsc#SLE-22573).
  • bpf: Fix potential race in tail call compatibility check (git-fixes).
  • btrfs: block-group: Rework documentation of check_system_chunk function (bsc#1192896).
  • btrfs: do not ignore error…
Record
SUSE-SU-2021:3978-1
Updated
2026-11-02
OSVSUSE-SU-2021:3979-1 No score

Security update for the Linux RT Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)

    You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0)

  • CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045 ).

  • CVE-2021-31916: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel A bound check failure allowed an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability (bnc#1192781).

  • CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)

  • CVE-2021-34981: Fixed file refcounting in cmtp when cmtp_attach_device fails (bsc#1191961).

The following non-security bugs were fixed:

  • ABI: sysfs-kernel-slab: Document some stats (git-fixes).
  • ALSA: hda: fix general protection fault in azx_runtime_idle (git-fixes).
  • ALSA: hda: Free card instance properly at probe errors (git-fixes).
  • ALSA: usb-audio: Add Audient iD14 to mixer map quirk table (git-fixes).
  • ALSA: usb-audio: Add minimal-mute notion in dB mapping table (bsc#1192375).
  • ALSA: usb-audio: Add Schiit Hel device to mixer map quirk table (git-fixes).
  • ALSA: usb-audio: Fix dB level of Bose Revolve+ SoundLink (bsc#1192375).
  • ALSA: usb-audio: Use int for dB map values (bsc#1192375).
  • ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE (bsc#1192473).
  • auxdisplay: ht16k33: Connect backlight to fbdev (git-fixes).
  • auxdisplay: ht16k33: Fix frame buffer device blanking (git-fixes).
  • auxdisplay: img-ascii-lcd: Fix lock-up when displaying empty string (git-fixes).
  • bpf, kconfig: Add consolidated menu entry for bpf with core options (jsc#SLE-22574).
  • bpf: Add kconfig knob for disabling unpriv bpf by default (jsc#SLE-22573)
  • bpf: Add kconfig knob for disabling unpriv bpf by default (jsc#SLE-22574)
  • bpf: Disallow unprivileged bpf by default (jsc#SLE-22573).
  • bpf: Disallow unprivileged bpf by default (jsc#SLE-22574).
  • bpf: Fix BPF_JIT kconfig symbol dependency (git-fixes jsc#SLE-22574).
  • bpf: Fix potential race in tail call compatibility check (git-fixes).
  • btrfs: block-group: Rework documentation of check_system_chunk function (bsc#1192896).
  • btrfs: fix deadlock between chunk allocation and chunk btree modifications (bsc#1192896).
  • btrfs: fix memory ordering between normal and ordered work functions (git-fixes).
  • btrfs: update comments for chunk allocation -ENOSPC cases (bsc#1192896).
  • cgroup/cpuset: Change references of cpuset_mutex to cpuset_rwsem (git-fixes).
  • config: disable unprivileged BPF by default (jsc#SLE-22573) Backport of mainline commit 8a03e56b253e ('bpf: Disallow unprivileged bpf by default') only changes kconfig default, used e.g. for 'make oldconfig' when the config option is missing, but does not update our kernel configs used for build. Update also these to make sure unprivileged BPF is really disabled by default.
  • crypto: caam - disable pkc for non-E SoCs (git-fixes).
  • crypto: qat - detect PFVF collision after ACK (git-fixes).
  • crypto: qat - disregard spurious PFVF interrupts (git-fixes).
  • drm/i915: Introduce intel_hpd_hotplug_irqs() (bsc#1192758).
  • drm: prevent spectre issue in vmw_execbuf_ioctl (bsc#1192802).
  • e1000e: Separate TGP board type from SPT (bsc#1192874).
  • EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell…
Record
SUSE-SU-2021:3979-1
Updated
2026-11-02
OSVSUSE-SU-2021:3992-1 No score

Security update for the Linux RT Kernel

The SUSE Linux Enterprise 12 SP5 Real Time kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)

    You can reenable via systemctl setting /proc/sys/kernel/unprivileged_bpf_disabled to 0. (kernel.unprivileged_bpf_disabled = 0)

  • CVE-2021-0941: In bpf_skb_change_head of filter.c, there is a possible out of bounds read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation (bnc#1192045).

  • CVE-2021-31916: An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel A bound check failure allowed an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability (bnc#1192781).

  • CVE-2021-20322: Make the ipv4 and ipv6 ICMP exception caches less predictive to avoid information leaks about UDP ports in use. (bsc#1191790)

  • CVE-2021-34981: Fixed file refcounting in cmtp when cmtp_attach_device fails. (bsc#1191961)

The following non-security bugs were fixed:

  • arm64/sve: Use correct size when reinitialising SVE state (git-fixes).
  • arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions (git-fixes).
  • bpf: Add kconfig knob for disabling unpriv bpf by default (jsc#SLE-22913)
  • bpf: Disallow unprivileged bpf by default (jsc#SLE-22913).
  • bpf: Fix potential race in tail call compatibility check (git-fixes).
  • bpf: Move owner type, jited info into array auxiliary data (bsc#1141655).
  • bpf: Use kvmalloc for map values in syscall (stable-5.14.16).
  • btrfs: fix memory ordering between normal and ordered work functions (git-fixes).
  • cifs: fix memory leak of smb3_fs_context_dup::server_hostname (bsc#1190317).
  • cifs: for compound requests, use open handle if possible (bsc#1190317).
  • cifs: release lock earlier in dequeue_mid error case (bsc#1190317).
  • config: disable unprivileged BPF by default (jsc#SLE-22913)
  • drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION() (git-fixes).
  • drm: fix spectre issue in vmw_execbuf_ioctl (bsc#1192802).
  • EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell (bsc#1114648).
  • elfcore: fix building with clang (bsc#1169514).
  • fuse: fix page stealing (bsc#1192718).
  • gigaset: fix spectre issue in do_data_b3_req (bsc#1192802).
  • hisax: fix spectre issues (bsc#1192802).
  • hysdn: fix spectre issue in hycapi_send_message (bsc#1192802).
  • i2c: synquacer: fix deferred probing (git-fixes).
  • ibmvnic: check failover_pending in login response (bsc#1190523 ltc#194510).
  • ibmvnic: do not stop queue in xmit (bsc#1192273 ltc#194629).
  • ibmvnic: Process crqs after enabling interrupts (bsc#1192273 ltc#194629).
  • infiniband: fix spectre issue in ib_uverbs_write (bsc#1192802).
  • iwlwifi: fix spectre issue in iwl_dbgfs_update_pm (bsc#1192802).
  • media: dvb_ca_en50221: prevent using slot_info for Spectre attacs (bsc#1192802).
  • media: dvb_ca_en50221: sanity check slot number from userspace (bsc#1192802).
  • media: wl128x: get rid of a potential spectre issue (bsc#1192802).
  • mm/hugetlb: initialize hugetlb_usage in mm_init (bsc#1192906).
  • mpt3sas: fix spectre issues (bsc#1192802).
  • net: sock_diag: Fix spectre v1 gadget in __sock_diag_cmd() (bsc#1192802).
  • objtool: Support Clang non-section symbols in ORC generation (bsc#1169514).
  • osst: fix spectre issue in osst_verify_frame (bsc#1192802).
  • prctl: allow to setup brk for et_dyn executables (git-fixes).
  • printk/console: Allow to disable console output by using console='' or console=null (bsc#1192753).
  • printk: handle blank console arguments passed in (bsc#1192753).
  • printk: Remove printk.h…
Record
SUSE-SU-2021:3992-1
Updated
2026-11-02
OSVUSN-4948-1 No score

linux-oem-5.10 vulnerabilities

Ryota Shiga discovered that the eBPF implementation in the Linux kernel did not properly verify that a BPF program only reserved as much memory for a ring buffer as was allocated. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2021-3489)

Manfred Paul discovered that the eBPF implementation in the Linux kernel did not properly track bounds on bitwise operations. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2021-3490)

Billy Jheng Bing-Jhong discovered that the io_uring implementation of the Linux kernel did not properly enforce the MAX_RW_COUNT limit in some situations. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2021-3491)

Kiyin (尹亮) discovered that the NFC LLCP protocol implementation in the Linux kernel contained a reference counting error. A local attacker could use this to cause a denial of service (system crash). (CVE-2020-25670)

Kiyin (尹亮) discovered that the NFC LLCP protocol implementation in the Linux kernel did not properly deallocate memory in certain error situations. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2020-25671, CVE-2020-25672)

It was discovered that the Xen paravirtualization backend in the Linux kernel did not properly deallocate memory in some situations. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2021-28688)

It was discovered that the io_uring subsystem in the Linux kernel contained a race condition leading to a deadlock condition. A local attacker could use this to cause a denial of service. (CVE-2021-28951)

John Stultz discovered that the audio driver for Qualcomm SDM845 systems in the Linux kernel did not properly validate port ID numbers. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-28952)

Zygo Blaxell discovered that the btrfs file system implementation in the Linux kernel contained a race condition during certain cloning operations. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2021-28964)

Vince Weaver discovered that the perf subsystem in the Linux kernel did not properly handle certain PEBS records properly for some Intel Haswell processors. A local attacker could use this to cause a denial of service (system crash). (CVE-2021-28971)

It was discovered that the RPA PCI Hotplug driver implementation in the Linux kernel did not properly handle device name writes via sysfs, leading to a buffer overflow. A privileged attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-28972)

It was discovered that the Freescale Gianfar Ethernet driver for the Linux kernel did not properly handle receive queue overrun when jumbo frames were enabled in some situations. An attacker could use this to cause a denial of service (system crash). (CVE-2021-29264)

It was discovered that the vDPA backend virtio driver in the Linux kernel contained a use-after-free vulnerability. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-29266)

It was discovered that the TIPC protocol implementation in the Linux kernel did not properly validate passed encryption key sizes. A local attacker could use this to cause a denial of service (system crash). (CVE-2021-29646)

It was discovered that the Qualcomm IPC router implementation in the Linux kernel did not properly initialize memory passed to user space. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2021-29647)

It was discovered that the BPF user mode driver implementation in the Linux kernel did not properly deallocate memory in some situations. A local attacker could use this to cause a denial of service…

Record
USN-4948-1
Updated
2026-11-02
OSVUSN-4979-1 No score

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities

Kiyin (尹亮) discovered that the NFC LLCP protocol implementation in the Linux kernel contained a reference counting error. A local attacker could use this to cause a denial of service (system crash). (CVE-2020-25670)

Kiyin (尹亮) discovered that the NFC LLCP protocol implementation in the Linux kernel did not properly deallocate memory in certain error situations. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2020-25671, CVE-2020-25672)

Kiyin (尹亮) discovered that the NFC LLCP protocol implementation in the Linux kernel did not properly handle error conditions in some situations, leading to an infinite loop. A local attacker could use this to cause a denial of service. (CVE-2020-25673)

It was discovered that the Realtek RTL8188EU Wireless device driver in the Linux kernel did not properly validate ssid lengths in some situations. An attacker could use this to cause a denial of service (system crash). (CVE-2021-28660)

Zygo Blaxell discovered that the btrfs file system implementation in the Linux kernel contained a race condition during certain cloning operations. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2021-28964)

Vince Weaver discovered that the perf subsystem in the Linux kernel did not properly handle certain PEBS records properly for some Intel Haswell processors. A local attacker could use this to cause a denial of service (system crash). (CVE-2021-28971)

It was discovered that the RPA PCI Hotplug driver implementation in the Linux kernel did not properly handle device name writes via sysfs, leading to a buffer overflow. A privileged attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-28972)

It was discovered that the Qualcomm IPC router implementation in the Linux kernel did not properly initialize memory passed to user space. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2021-29647)

Dan Carpenter discovered that the block device manager (dm) implementation in the Linux kernel contained a buffer overflow in the ioctl for listing devices. A privileged local attacker could use this to cause a denial of service (system crash). (CVE-2021-31916)

It was discovered that the CIPSO implementation in the Linux kernel did not properly perform reference counting in some situations, leading to use- after-free vulnerabilities. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-33033)

Wolfgang Frisch discovered that the ext4 file system implementation in the Linux kernel contained an integer overflow when handling metadata inode extents. An attacker could use this to construct a malicious ext4 file system image that, when mounted, could cause a denial of service (system crash). (CVE-2021-3428)

马哲宇 discovered that the IEEE 1394 (Firewire) nosy packet sniffer driver in the Linux kernel did not properly perform reference counting in some situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-3483)

Record
USN-4979-1
Updated
2026-11-02
OSVUSN-4982-1 No score

linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities

Kiyin (尹亮) discovered that the NFC LLCP protocol implementation in the Linux kernel contained a reference counting error. A local attacker could use this to cause a denial of service (system crash). (CVE-2020-25670)

Kiyin (尹亮) discovered that the NFC LLCP protocol implementation in the Linux kernel did not properly deallocate memory in certain error situations. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2020-25671, CVE-2020-25672)

Kiyin (尹亮) discovered that the NFC LLCP protocol implementation in the Linux kernel did not properly handle error conditions in some situations, leading to an infinite loop. A local attacker could use this to cause a denial of service. (CVE-2020-25673)

It was discovered that the Xen paravirtualization backend in the Linux kernel did not properly deallocate memory in some situations. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2021-28688)

It was discovered that the fuse user space file system implementation in the Linux kernel did not properly handle bad inodes in some situations. A local attacker could possibly use this to cause a denial of service. (CVE-2021-28950)

Zygo Blaxell discovered that the btrfs file system implementation in the Linux kernel contained a race condition during certain cloning operations. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2021-28964)

Vince Weaver discovered that the perf subsystem in the Linux kernel did not properly handle certain PEBS records properly for some Intel Haswell processors. A local attacker could use this to cause a denial of service (system crash). (CVE-2021-28971)

It was discovered that the RPA PCI Hotplug driver implementation in the Linux kernel did not properly handle device name writes via sysfs, leading to a buffer overflow. A privileged attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-28972)

It was discovered that the Freescale Gianfar Ethernet driver for the Linux kernel did not properly handle receive queue overrun when jumbo frames were enabled in some situations. An attacker could use this to cause a denial of service (system crash). (CVE-2021-29264)

It was discovered that the Qualcomm IPC router implementation in the Linux kernel did not properly initialize memory passed to user space. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2021-29647)

Dan Carpenter discovered that the block device manager (dm) implementation in the Linux kernel contained a buffer overflow in the ioctl for listing devices. A privileged local attacker could use this to cause a denial of service (system crash). (CVE-2021-31916)

马哲宇 discovered that the IEEE 1394 (Firewire) nosy packet sniffer driver in the Linux kernel did not properly perform reference counting in some situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-3483)

Record
USN-4982-1
Updated
2026-11-02
OSVUSN-4984-1 No score

linux, linux-aws, linux-azure, linux-gcp, linux-hwe-5.8, linux-kvm, linux-oracle, linux-raspi vulnerabilities

Jan Beulich discovered that the Xen netback backend in the Linux kernel did not properly handle certain error conditions under paravirtualization. An attacker in a guest VM could possibly use this to cause a denial of service (host domain crash). (CVE-2021-28038)

It was discovered that the Realtek RTL8188EU Wireless device driver in the Linux kernel did not properly validate ssid lengths in some situations. An attacker could use this to cause a denial of service (system crash). (CVE-2021-28660)

It was discovered that the Xen paravirtualization backend in the Linux kernel did not properly deallocate memory in some situations. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2021-28688)

It was discovered that the fuse user space file system implementation in the Linux kernel did not properly handle bad inodes in some situations. A local attacker could possibly use this to cause a denial of service. (CVE-2021-28950)

John Stultz discovered that the audio driver for Qualcomm SDM845 systems in the Linux kernel did not properly validate port ID numbers. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-28952)

Zygo Blaxell discovered that the btrfs file system implementation in the Linux kernel contained a race condition during certain cloning operations. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2021-28964)

Vince Weaver discovered that the perf subsystem in the Linux kernel did not properly handle certain PEBS records properly for some Intel Haswell processors. A local attacker could use this to cause a denial of service (system crash). (CVE-2021-28971)

It was discovered that the RPA PCI Hotplug driver implementation in the Linux kernel did not properly handle device name writes via sysfs, leading to a buffer overflow. A privileged attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-28972)

It was discovered that the Qualcomm IPC router implementation in the Linux kernel did not properly initialize memory passed to user space. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2021-29647)

Arnd Bergmann discovered that the video4linux subsystem in the Linux kernel did not properly deallocate memory in some situations. A local attacker could use this to cause a denial of service (memory exhaustion). (CVE-2021-30002)

Dan Carpenter discovered that the block device manager (dm) implementation in the Linux kernel contained a buffer overflow in the ioctl for listing devices. A privileged local attacker could use this to cause a denial of service (system crash). (CVE-2021-31916)

It was discovered that the CIPSO implementation in the Linux kernel did not properly perform reference counting in some situations, leading to use- after-free vulnerabilities. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-33033)

马哲宇 discovered that the IEEE 1394 (Firewire) nosy packet sniffer driver in the Linux kernel did not properly perform reference counting in some situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-3483)

Record
USN-4984-1
Updated
2026-11-02
OSVUSN-5361-1 No score

linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

It was discovered that the VFIO PCI driver in the Linux kernel did not properly handle attempts to access disabled memory spaces. A local attacker could use this to cause a denial of service (system crash). (CVE-2020-12888)

Mathy Vanhoef discovered that the Linux kernel’s WiFi implementation did not properly verify certain fragmented frames. A physically proximate attacker could possibly use this issue to inject or decrypt packets. (CVE-2020-26141)

Mathy Vanhoef discovered that the Linux kernel’s WiFi implementation accepted plaintext fragments in certain situations. A physically proximate attacker could use this issue to inject packets. (CVE-2020-26145)

It was discovered that a race condition existed in the Atheros Ath9k WiFi driver in the Linux kernel. An attacker could possibly use this to expose sensitive information (WiFi network traffic). (CVE-2020-3702)

It was discovered a race condition existed in the Unix domain socket implementation in the Linux kernel, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-0920)

It was discovered that the IPv6 implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-0935)

Zygo Blaxell discovered that the btrfs file system implementation in the Linux kernel contained a race condition during certain cloning operations. A local attacker could possibly use this to cause a denial of service (system crash). (CVE-2021-28964)

Dan Carpenter discovered that the block device manager (dm) implementation in the Linux kernel contained a buffer overflow in the ioctl for listing devices. A privileged local attacker could use this to cause a denial of service (system crash). (CVE-2021-31916)

It was discovered that the Option USB High Speed Mobile device driver in the Linux kernel did not properly handle error conditions. A physically proximate attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-37159)

It was discovered that the network packet filtering implementation in the Linux kernel did not properly initialize information in certain circumstances. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2021-39636)

Jann Horn discovered a race condition in the Unix domain socket implementation in the Linux kernel that could result in a read-after-free. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-4083)

Luo Likang discovered that the FireDTV Firewire driver in the Linux kernel did not properly perform bounds checking in some situations. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-42739)

Brendan Dolan-Gavitt discovered that the Marvell WiFi-Ex USB device driver in the Linux kernel did not properly handle some error conditions. A physically proximate attacker could use this to cause a denial of service (system crash). (CVE-2021-43976)

Amit Klein discovered that the IPv4 implementation in the Linux kernel could disclose internal state in some situations. An attacker could possibly use this to expose sensitive information. (CVE-2021-45486)

Record
USN-5361-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel-tools-libs-devel
AlmaLinux:8
From an advisory covering 45 CVEs
 before 4.18.0-348.el8
4.18.0-348.el8
kernel
Azure Linux:2
 before 5.10.78.1-1
5.10.78.1-1
bpftool
TuxCare:CentOS:7
From an advisory covering 89 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els1
3.10.0-1160.119.1.el7.tuxcare.els1
kernel
TuxCare:CentOS:7
From an advisory covering 89 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els1
3.10.0-1160.119.1.el7.tuxcare.els1
kernel-debug
TuxCare:CentOS:7
From an advisory covering 89 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els1
3.10.0-1160.119.1.el7.tuxcare.els1
kernel-debug-devel
TuxCare:CentOS:7
From an advisory covering 89 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els1
3.10.0-1160.119.1.el7.tuxcare.els1
kernel-devel
TuxCare:CentOS:7
From an advisory covering 89 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els1
3.10.0-1160.119.1.el7.tuxcare.els1
kernel-headers
TuxCare:CentOS:7
From an advisory covering 89 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els1
3.10.0-1160.119.1.el7.tuxcare.els1
kernel-tools
TuxCare:CentOS:7
From an advisory covering 89 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els1
3.10.0-1160.119.1.el7.tuxcare.els1
kernel-tools-libs
TuxCare:CentOS:7
From an advisory covering 89 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els1
3.10.0-1160.119.1.el7.tuxcare.els1
Show 290 moreShow less
Affected packages
PackageAffectedFixed
kernel-tools-libs-devel
TuxCare:CentOS:7
From an advisory covering 89 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els1
3.10.0-1160.119.1.el7.tuxcare.els1
perf
TuxCare:CentOS:7
From an advisory covering 89 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els1
3.10.0-1160.119.1.el7.tuxcare.els1
python-perf
TuxCare:CentOS:7
From an advisory covering 89 CVEs
 before 3.10.0-1160.119.1.el7.tuxcare.els1
3.10.0-1160.119.1.el7.tuxcare.els1
linux
Debian:12
 before 5.10.28-1
5.10.28-1
linux
Debian:13
 before 5.10.28-1
5.10.28-1
linux
Debian:14
 before 5.10.28-1
5.10.28-1
linux
Debian:9
From an advisory covering 34 CVEs
 before 4.9.272-1, plus listed versions
4.9.107-14.9.110-14.9.110-24.9.110-34.9.110-3+deb9u1
Show 45 moreShow less
4.9.110-3+deb9u24.9.110-3+deb9u34.9.110-3+deb9u44.9.110-3+deb9u54.9.110-3+deb9u64.9.130-14.9.130-24.9.135-14.9.144-14.9.144-24.9.144-34.9.144-3.14.9.161-14.9.168-14.9.168-1+deb9u24.9.168-1+deb9u34.9.168-1+deb9u44.9.168-1+deb9u54.9.184-14.9.185-14.9.189-14.9.189-24.9.189-34.9.189-3+deb9u14.9.189-3+deb9u24.9.210-14.9.210-1+deb9u14.9.228-14.9.240-14.9.240-24.9.246-14.9.246-24.9.258-14.9.30-24.9.30-2+deb9u14.9.30-2+deb9u24.9.30-2+deb9u2~bpo8+14.9.30-2+deb9u34.9.30-2+deb9u44.9.30-2+deb9u54.9.30-2+deb9u5~bpo8+14.9.47-14.9.51-14.9.51-1~bpo8+14.9.65-1
4.9.272-1
linux-4.19
Debian:9
From an advisory covering 31 CVEs
 before 4.19.194-1~deb9u1, plus listed versions
4.19.132-1~deb9u14.19.132-1~deb9u24.19.146-1~deb9u14.19.152-1~deb9u14.19.160-2~deb9u14.19.171-2~deb9u14.19.181-1~deb9u1
4.19.194-1~deb9u1
kernel
openEuler:20.03-LTS-SP1
From an advisory covering 32 CVEs
 before 4.19.90-2106.3.0.0095.oe1
4.19.90-2106.3.0.0095.oe1
:linux_kernel:
Android
 :0 up to :2021-10-05, plus listed versions
Kernel
:2021-10-05
kernel-rt
Red Hat:enterprise_linux:8::nfv
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-debug
Red Hat:enterprise_linux:8::nfv
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-debug-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-debug-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::nfv
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt
Red Hat:enterprise_linux:8::realtime
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-core
Red Hat:enterprise_linux:8::realtime
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-debug
Red Hat:enterprise_linux:8::realtime
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-debug-core
Red Hat:enterprise_linux:8::realtime
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::realtime
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::realtime
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::realtime
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::realtime
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::realtime
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::realtime
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-devel
Red Hat:enterprise_linux:8::realtime
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-modules
Red Hat:enterprise_linux:8::realtime
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::realtime
From an advisory covering 46 CVEs
 before 0:4.18.0-348.rt7.130.el8
0:4.18.0-348.rt7.130.el8
bpftool
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
bpftool-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-abi-stablelists
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-debug
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-debug-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-debug-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-debug-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-debug-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-doc
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-tools
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-tools-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-zfcpdump
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-zfcpdump-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-zfcpdump-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-zfcpdump-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-zfcpdump-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
python3-perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
python3-perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
bpftool-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::crb
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::crb
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::crb
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-tools-libs-devel
Red Hat:enterprise_linux:8::crb
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
python3-perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 61 CVEs
 before 0:4.18.0-348.el8
0:4.18.0-348.el8
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP3
From an advisory covering 6 CVEs
 before 5.3.18-38.31.1
5.3.18-38.31.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP3
From an advisory covering 6 CVEs
 before 5.3.18-38.31.1
5.3.18-38.31.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP3
From an advisory covering 6 CVEs
 before 5.3.18-38.31.1
5.3.18-38.31.1
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP2
From an advisory covering 6 CVEs
 before 5.3.18-18.75.1
5.3.18-18.75.1
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP2
From an advisory covering 6 CVEs
 before 5.3.18-18.75.1
5.3.18-18.75.1
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP2
From an advisory covering 6 CVEs
 before 5.3.18-18.75.1
5.3.18-18.75.1
kernel-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 6 CVEs
 before 4.12.14-16.80.1
4.12.14-16.80.1
kernel-source-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 6 CVEs
 before 4.12.14-16.80.1
4.12.14-16.80.1
kernel-syms-azure
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 6 CVEs
 before 4.12.14-16.80.1
4.12.14-16.80.1
kernel-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 6 CVEs
 before 4.12.14-16.80.1
4.12.14-16.80.1
kernel-source-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 6 CVEs
 before 4.12.14-16.80.1
4.12.14-16.80.1
kernel-syms-azure
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 6 CVEs
 before 4.12.14-16.80.1
4.12.14-16.80.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP1
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-livepatch-SLE15-SP1_Update_27
SUSE:Linux Enterprise Live Patching 15 SP1
From an advisory covering 43 CVEs
 before 1-3.3.1
1-3.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP1
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 43 CVEs
 before 4.12.14-197.102.1
4.12.14-197.102.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 43 CVEs
 before 4.12.14-197.102.1
4.12.14-197.102.1
kernel-source
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-default
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-docs
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 43 CVEs
 before 4.12.14-197.102.1
4.12.14-197.102.1
kernel-source
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-syms
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-default
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-docs
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-obs-build
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 43 CVEs
 before 4.12.14-197.102.1
4.12.14-197.102.1
kernel-source
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-syms
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-zfcpdump
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-obs-build
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 43 CVEs
 before 4.12.14-197.102.1
4.12.14-197.102.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-default
SUSE:Enterprise Storage 6
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-docs
SUSE:Enterprise Storage 6
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-obs-build
SUSE:Enterprise Storage 6
From an advisory covering 43 CVEs
 before 4.12.14-197.102.1
4.12.14-197.102.1
kernel-source
SUSE:Enterprise Storage 6
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-syms
SUSE:Enterprise Storage 6
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-default
SUSE:Linux Enterprise High Availability Extension 12 SP5
From an advisory covering 4 CVEs
 before 4.12.14-122.103.1
4.12.14-122.103.1
kernel-default
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 4 CVEs
 before 4.12.14-122.103.1
4.12.14-122.103.1
kgraft-patch-SLE12-SP5_Update_26
SUSE:Linux Enterprise Live Patching 12 SP5
From an advisory covering 4 CVEs
 before 1-8.5.1
1-8.5.1
kernel-docs
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 4 CVEs
 before 4.12.14-122.103.1
4.12.14-122.103.1
kernel-obs-build
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 4 CVEs
 before 4.12.14-122.103.1
4.12.14-122.103.1
kernel-default
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 4 CVEs
 before 4.12.14-122.103.1
4.12.14-122.103.1
kernel-source
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 4 CVEs
 before 4.12.14-122.103.1
4.12.14-122.103.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 4 CVEs
 before 4.12.14-122.103.1
4.12.14-122.103.1
kernel-default
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 4 CVEs
 before 4.12.14-122.103.1
4.12.14-122.103.1
kernel-source
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 4 CVEs
 before 4.12.14-122.103.1
4.12.14-122.103.1
kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 4 CVEs
 before 4.12.14-122.103.1
4.12.14-122.103.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 12 SP5
From an advisory covering 4 CVEs
 before 4.12.14-122.103.1
4.12.14-122.103.1
kernel-default
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 36 CVEs
 before 4.4.121-92.161.1
4.4.121-92.161.1
kernel-source
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 36 CVEs
 before 4.4.121-92.161.1
4.4.121-92.161.1
kernel-syms
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 36 CVEs
 before 4.4.121-92.161.1
4.4.121-92.161.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 6 CVEs
 before 5.3.18-24.96.1
5.3.18-24.96.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 6 CVEs
 before 5.3.18-24.96.1.9.44.1
5.3.18-24.96.1.9.44.1
kernel-preempt
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 6 CVEs
 before 5.3.18-24.96.1
5.3.18-24.96.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 6 CVEs
 before 5.3.18-24.96.1
5.3.18-24.96.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP2
From an advisory covering 6 CVEs
 before 5.3.18-24.96.1
5.3.18-24.96.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP2
From an advisory covering 6 CVEs
 before 5.3.18-24.96.1
5.3.18-24.96.1
kernel-preempt
SUSE:Linux Enterprise Module for Development Tools 15 SP2
From an advisory covering 6 CVEs
 before 5.3.18-24.96.1
5.3.18-24.96.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP2
From an advisory covering 6 CVEs
 before 5.3.18-24.96.1
5.3.18-24.96.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP2
From an advisory covering 6 CVEs
 before 5.3.18-24.96.1
5.3.18-24.96.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP2
From an advisory covering 6 CVEs
 before 5.3.18-24.96.1
5.3.18-24.96.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 6 CVEs
 before 5.3.18-24.96.1
5.3.18-24.96.1
kernel-livepatch-SLE15-SP2_Update_22
SUSE:Linux Enterprise Live Patching 15 SP2
From an advisory covering 6 CVEs
 before 1-5.3.1
1-5.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP2
From an advisory covering 6 CVEs
 before 5.3.18-24.96.1
5.3.18-24.96.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP2
From an advisory covering 6 CVEs
 before 5.3.18-24.96.1
5.3.18-24.96.1
kernel-preempt
SUSE:Linux Enterprise Workstation Extension 15 SP2
From an advisory covering 6 CVEs
 before 5.3.18-24.96.1
5.3.18-24.96.1
kernel-default
SUSE:Linux Enterprise Micro 5.0
From an advisory covering 6 CVEs
 before 5.3.18-24.96.1
5.3.18-24.96.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.0
From an advisory covering 6 CVEs
 before 5.3.18-24.96.1.9.44.1
5.3.18-24.96.1.9.44.1
kernel-default
SUSE:HPE Helion OpenStack 8
From an advisory covering 38 CVEs
 before 4.4.180-94.150.1
4.4.180-94.150.1
kernel-source
SUSE:HPE Helion OpenStack 8
From an advisory covering 38 CVEs
 before 4.4.180-94.150.1
4.4.180-94.150.1
kernel-syms
SUSE:HPE Helion OpenStack 8
From an advisory covering 38 CVEs
 before 4.4.180-94.150.1
4.4.180-94.150.1
kgraft-patch-SLE12-SP3_Update_41
SUSE:HPE Helion OpenStack 8
From an advisory covering 38 CVEs
 before 1-4.3.1
1-4.3.1
kernel-default
SUSE:OpenStack Cloud 8
From an advisory covering 38 CVEs
 before 4.4.180-94.150.1
4.4.180-94.150.1
kernel-source
SUSE:OpenStack Cloud 8
From an advisory covering 38 CVEs
 before 4.4.180-94.150.1
4.4.180-94.150.1
kernel-syms
SUSE:OpenStack Cloud 8
From an advisory covering 38 CVEs
 before 4.4.180-94.150.1
4.4.180-94.150.1
kgraft-patch-SLE12-SP3_Update_41
SUSE:OpenStack Cloud 8
From an advisory covering 38 CVEs
 before 1-4.3.1
1-4.3.1
kernel-default
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 38 CVEs
 before 4.4.180-94.150.1
4.4.180-94.150.1
kernel-source
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 38 CVEs
 before 4.4.180-94.150.1
4.4.180-94.150.1
kernel-syms
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 38 CVEs
 before 4.4.180-94.150.1
4.4.180-94.150.1
linux-aws
Ubuntu:Pro:14.04:LTS
 before 4.4.0-1103.108, plus listed versions
4.4.0-1002.24.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1009.9
Show 45 moreShow less
4.4.0-1010.104.4.0-1011.114.4.0-1012.124.4.0-1014.144.4.0-1016.164.4.0-1017.174.4.0-1019.194.4.0-1022.224.4.0-1023.234.4.0-1024.254.4.0-1025.264.4.0-1027.304.4.0-1028.314.4.0-1029.324.4.0-1031.344.4.0-1032.354.4.0-1034.374.4.0-1036.394.4.0-1037.404.4.0-1038.414.4.0-1039.424.4.0-1040.434.4.0-1042.454.4.0-1044.474.4.0-1045.484.4.0-1046.504.4.0-1048.524.4.0-1050.544.4.0-1052.564.4.0-1054.584.4.0-1055.594.4.0-1056.604.4.0-1058.624.4.0-1059.634.4.0-1060.644.4.0-1061.654.4.0-1062.664.4.0-1064.684.4.0-1065.694.4.0-1066.704.4.0-1067.714.4.0-1073.774.4.0-1074.784.4.0-1075.794.4.0-1076.80
4.4.0-1103.108
linux-azure
Ubuntu:Pro:14.04:LTS
 before 4.15.0-1115.128~14.04.1, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
4.15.0-1115.128~14.04.1
linux-lts-xenial
Ubuntu:Pro:14.04:LTS
 before 4.4.0-223.256~14.04.1, plus listed versions
4.4.0-13.29~14.04.14.4.0-14.30~14.04.24.4.0-15.31~14.04.14.4.0-18.34~14.04.14.4.0-21.37~14.04.1
Show 45 moreShow less
4.4.0-22.39~14.04.14.4.0-22.40~14.04.14.4.0-24.43~14.04.14.4.0-28.47~14.04.14.4.0-31.50~14.04.14.4.0-34.53~14.04.14.4.0-36.55~14.04.14.4.0-38.57~14.04.14.4.0-42.62~14.04.14.4.0-45.66~14.04.14.4.0-47.68~14.04.14.4.0-51.72~14.04.14.4.0-53.74~14.04.14.4.0-57.78~14.04.14.4.0-59.80~14.04.14.4.0-62.83~14.04.14.4.0-63.84~14.04.24.4.0-64.85~14.04.14.4.0-66.87~14.04.14.4.0-67.88~14.04.14.4.0-70.91~14.04.14.4.0-71.92~14.04.14.4.0-72.93~14.04.14.4.0-75.96~14.04.14.4.0-78.99~14.04.24.4.0-79.100~14.04.14.4.0-81.104~14.04.14.4.0-83.106~14.04.14.4.0-87.110~14.04.14.4.0-89.112~14.04.14.4.0-91.114~14.04.14.4.0-92.115~14.04.14.4.0-93.116~14.04.14.4.0-96.119~14.04.14.4.0-97.120~14.04.14.4.0-98.121~14.04.14.4.0-101.124~14.04.14.4.0-103.126~14.04.14.4.0-104.127~14.04.14.4.0-108.131~14.04.14.4.0-109.132~14.04.14.4.0-111.134~14.04.14.4.0-112.135~14.04.14.4.0-116.140~14.04.14.4.0-119.143~14.04.1
4.4.0-223.256~14.04.1
linux
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
3.11.0-12.193.12.0-1.33.12.0-2.53.12.0-2.73.12.0-3.8
Show 45 moreShow less
3.12.0-3.93.12.0-4.103.12.0-4.123.12.0-5.133.12.0-7.153.13.0-1.163.13.0-2.173.13.0-3.183.13.0-4.193.13.0-5.203.13.0-6.233.13.0-7.253.13.0-7.263.13.0-8.273.13.0-8.283.13.0-10.303.13.0-11.313.13.0-12.323.13.0-13.333.13.0-14.343.13.0-15.353.13.0-16.363.13.0-17.373.13.0-18.383.13.0-19.393.13.0-19.403.13.0-20.423.13.0-21.433.13.0-22.443.13.0-23.453.13.0-24.463.13.0-24.473.13.0-27.503.13.0-29.533.13.0-30.543.13.0-30.553.13.0-32.573.13.0-33.583.13.0-34.603.13.0-35.623.13.0-36.633.13.0-37.643.13.0-39.663.13.0-40.693.13.0-41.70
 None known
linux
Ubuntu:Pro:16.04:LTS
 before 4.4.0-223.256, plus listed versions
4.2.0-16.194.2.0-17.214.2.0-19.234.3.0-1.104.3.0-2.11
Show 45 moreShow less
4.3.0-5.164.3.0-6.174.3.0-7.184.4.0-2.164.4.0-4.194.4.0-6.214.4.0-7.224.4.0-8.234.4.0-9.244.4.0-10.254.4.0-11.264.4.0-12.284.4.0-13.294.4.0-14.304.4.0-15.314.4.0-16.324.4.0-17.334.4.0-18.344.4.0-21.374.4.0-22.394.4.0-22.404.4.0-24.434.4.0-28.474.4.0-31.504.4.0-34.534.4.0-36.554.4.0-38.574.4.0-42.624.4.0-43.634.4.0-45.664.4.0-47.684.4.0-51.724.4.0-53.744.4.0-57.784.4.0-59.804.4.0-62.834.4.0-63.844.4.0-64.854.4.0-65.864.4.0-66.874.4.0-67.884.4.0-70.914.4.0-71.924.4.0-72.934.4.0-75.96
4.4.0-223.256
linux-aws
Ubuntu:Pro:16.04:LTS
 before 4.4.0-1139.153, plus listed versions
4.4.0-1001.104.4.0-1003.124.4.0-1004.134.4.0-1007.164.4.0-1009.18
Show 45 moreShow less
4.4.0-1011.204.4.0-1012.214.4.0-1013.224.4.0-1016.254.4.0-1017.264.4.0-1018.274.4.0-1020.294.4.0-1022.314.4.0-1026.354.4.0-1028.374.4.0-1030.394.4.0-1031.404.4.0-1032.414.4.0-1035.444.4.0-1037.464.4.0-1038.474.4.0-1039.484.4.0-1041.504.4.0-1043.524.4.0-1044.534.4.0-1047.564.4.0-1048.574.4.0-1049.584.4.0-1050.594.4.0-1052.614.4.0-1054.634.4.0-1055.644.4.0-1057.664.4.0-1060.694.4.0-1061.704.4.0-1062.714.4.0-1063.724.4.0-1065.754.4.0-1066.764.4.0-1067.774.4.0-1069.794.4.0-1070.804.4.0-1072.824.4.0-1073.834.4.0-1074.844.4.0-1075.854.4.0-1077.874.4.0-1079.894.4.0-1081.914.4.0-1083.93
4.4.0-1139.153
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1103.110~16.04.1, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 39 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.1
4.15.0-1103.110~16.04.1
linux-azure
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1115.128~16.04.1, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
4.15.0-1115.128~16.04.1
linux-gcp
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1100.113~16.04.1, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
4.15.0-1100.113~16.04.1
linux-hwe
Ubuntu:Pro:16.04:LTS
 before 4.15.0-144.148~16.04.1, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
4.15.0-144.148~16.04.1
linux-kvm
Ubuntu:Pro:16.04:LTS
 before 4.4.0-1104.113, plus listed versions
4.4.0-1004.94.4.0-1007.124.4.0-1008.134.4.0-1009.144.4.0-1010.15
Show 45 moreShow less
4.4.0-1012.174.4.0-1013.184.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1020.254.4.0-1021.264.4.0-1023.284.4.0-1026.314.4.0-1027.324.4.0-1029.344.4.0-1031.374.4.0-1032.384.4.0-1033.394.4.0-1035.414.4.0-1036.424.4.0-1037.434.4.0-1038.444.4.0-1039.454.4.0-1040.464.4.0-1041.474.4.0-1043.494.4.0-1044.504.4.0-1046.524.4.0-1047.534.4.0-1048.554.4.0-1051.584.4.0-1052.594.4.0-1054.614.4.0-1056.634.4.0-1058.654.4.0-1059.664.4.0-1060.674.4.0-1062.694.4.0-1063.704.4.0-1064.714.4.0-1065.724.4.0-1066.734.4.0-1068.754.4.0-1069.764.4.0-1070.774.4.0-1071.784.4.0-1075.824.4.0-1076.834.4.0-1077.84
4.4.0-1104.113
linux-oracle
Ubuntu:Pro:16.04:LTS
 before 4.15.0-1072.80~16.04.1, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 38 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.1
4.15.0-1072.80~16.04.1
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-fips
Ubuntu:Pro:FIPS-updates:16.04:LTS
 before 4.4.0-1073.79, plus listed versions
4.4.0-1003.34.4.0-1005.54.4.0-1006.64.4.0-1008.104.4.0-1010.13
Show 45 moreShow less
4.4.0-1011.144.4.0-1012.164.4.0-1013.174.4.0-1015.204.4.0-1017.224.4.0-1019.244.4.0-1021.264.4.0-1022.274.4.0-1023.284.4.0-1025.304.4.0-1026.314.4.0-1027.324.4.0-1028.334.4.0-1029.344.4.0-1031.364.4.0-1032.374.4.0-1033.384.4.0-1034.394.4.0-1041.464.4.0-1042.474.4.0-1043.484.4.0-1044.494.4.0-1045.504.4.0-1046.514.4.0-1048.534.4.0-1049.554.4.0-1051.574.4.0-1052.584.4.0-1054.604.4.0-1055.614.4.0-1056.624.4.0-1057.634.4.0-1058.644.4.0-1060.664.4.0-1061.674.4.0-1062.684.4.0-1063.694.4.0-1064.704.4.0-1065.714.4.0-1066.724.4.0-1067.734.4.0-1068.744.4.0-1069.754.4.0-1071.774.4.0-1072.78
4.4.0-1073.79
linux-fips
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
4.4.0-1001.14.4.0-1002.2
 None known
linux
Ubuntu:18.04:LTS
 before 4.15.0-144.148, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
4.15.0-144.148
linux-aws
Ubuntu:18.04:LTS
 before 4.15.0-1103.110, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
4.15.0-1103.110
linux-aws-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1049.51~18.04.1, plus listed versions
5.4.0-1018.18~18.04.15.4.0-1020.20~18.04.25.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 14 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.30~18.04.15.4.0-1030.31~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.37~18.04.15.4.0-1037.39~18.04.15.4.0-1038.40~18.04.15.4.0-1039.41~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1045.47~18.04.15.4.0-1047.49~18.04.15.4.0-1048.50~18.04.1
5.4.0-1049.51~18.04.1
linux-azure-4.15
Ubuntu:18.04:LTS
 before 4.15.0-1115.128, plus listed versions
4.15.0-1082.924.15.0-1083.934.15.0-1089.994.15.0-1091.1014.15.0-1092.102
Show 16 moreShow less
4.15.0-1093.1034.15.0-1095.1054.15.0-1096.1064.15.0-1099.1104.15.0-1100.1114.15.0-1102.1134.15.0-1103.1144.15.0-1104.1164.15.0-1106.1184.15.0-1108.1204.15.0-1109.1214.15.0-1110.1224.15.0-1111.1234.15.0-1112.1254.15.0-1113.1264.15.0-1114.127
4.15.0-1115.128
linux-azure-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1048.50~18.04.1, plus listed versions
5.4.0-1020.20~18.04.15.4.0-1022.22~18.04.15.4.0-1023.23~18.04.15.4.0-1025.25~18.04.15.4.0-1026.26~18.04.1
Show 12 moreShow less
5.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1034.35~18.04.15.4.0-1035.36~18.04.15.4.0-1036.38~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1041.43~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1047.49~18.04.1
5.4.0-1048.50~18.04.1
linux-dell300x
Ubuntu:18.04:LTS
 before 4.15.0-1022.26, plus listed versions
4.15.0-1005.84.15.0-1006.104.15.0-1007.114.15.0-1009.134.15.0-1010.14
Show 7 moreShow less
4.15.0-1011.154.15.0-1012.164.15.0-1013.174.15.0-1015.194.15.0-1016.204.15.0-1017.214.15.0-1018.22
4.15.0-1022.26
linux-gcp-4.15
Ubuntu:18.04:LTS
 before 4.15.0-1100.113, plus listed versions
4.15.0-1071.814.15.0-1077.874.15.0-1078.884.15.0-1080.904.15.0-1081.92
Show 15 moreShow less
4.15.0-1083.944.15.0-1084.954.15.0-1086.984.15.0-1087.1004.15.0-1088.1014.15.0-1090.1034.15.0-1091.1044.15.0-1092.1054.15.0-1093.1064.15.0-1094.1074.15.0-1095.1084.15.0-1096.1094.15.0-1097.1104.15.0-1098.1114.15.0-1099.112
4.15.0-1100.113
linux-gcp-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1044.47~18.04.2, plus listed versions
5.4.0-1019.19~18.04.25.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 13 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.15.4.0-1033.35~18.04.15.4.0-1034.37~18.04.15.4.0-1036.39~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1040.43~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.1
5.4.0-1044.47~18.04.2
linux-gke-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1044.46~18.04.1, plus listed versions
5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1
Show 8 moreShow less
5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.1
5.4.0-1044.46~18.04.1
linux-gkeop-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1016.17~18.04.1, plus listed versions
5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1
Show 8 moreShow less
5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.1
5.4.0-1016.17~18.04.1
linux-hwe-5.4
Ubuntu:18.04:LTS
 before 5.4.0-74.83~18.04.1, plus listed versions
5.4.0-37.41~18.04.15.4.0-39.43~18.04.15.4.0-40.44~18.04.15.4.0-42.46~18.04.15.4.0-45.49~18.04.2
Show 19 moreShow less
5.4.0-47.51~18.04.15.4.0-48.52~18.04.15.4.0-51.56~18.04.15.4.0-52.57~18.04.15.4.0-53.59~18.04.15.4.0-54.60~18.04.15.4.0-56.62~18.04.15.4.0-58.64~18.04.15.4.0-59.65~18.04.15.4.0-60.67~18.04.15.4.0-62.70~18.04.15.4.0-64.72~18.04.15.4.0-65.73~18.04.15.4.0-66.74~18.04.25.4.0-67.75~18.04.15.4.0-70.78~18.04.15.4.0-71.79~18.04.15.4.0-72.80~18.04.15.4.0-73.82~18.04.1
5.4.0-74.83~18.04.1
linux-kvm
Ubuntu:18.04:LTS
 before 4.15.0-1092.94, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1006.64.15.0-1008.8
Show 45 moreShow less
4.15.0-1010.104.15.0-1011.114.15.0-1012.124.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1026.264.15.0-1027.274.15.0-1028.284.15.0-1029.294.15.0-1030.304.15.0-1031.314.15.0-1032.324.15.0-1034.344.15.0-1035.354.15.0-1036.364.15.0-1038.384.15.0-1039.394.15.0-1042.424.15.0-1043.434.15.0-1044.444.15.0-1046.464.15.0-1047.474.15.0-1048.484.15.0-1050.504.15.0-1051.514.15.0-1052.524.15.0-1053.534.15.0-1056.574.15.0-1058.594.15.0-1059.604.15.0-1060.614.15.0-1067.684.15.0-1069.704.15.0-1071.724.15.0-1072.734.15.0-1074.754.15.0-1075.764.15.0-1077.794.15.0-1079.814.15.0-1081.83
4.15.0-1092.94
linux-oracle
Ubuntu:18.04:LTS
 before 4.15.0-1072.80, plus listed versions
4.15.0-1007.94.15.0-1008.104.15.0-1009.114.15.0-1010.124.15.0-1011.13
Show 40 moreShow less
4.15.0-1013.154.15.0-1014.164.15.0-1015.174.15.0-1017.194.15.0-1018.204.15.0-1021.234.15.0-1022.254.15.0-1023.264.15.0-1025.284.15.0-1026.294.15.0-1027.304.15.0-1029.324.15.0-1030.334.15.0-1031.344.15.0-1033.364.15.0-1035.394.15.0-1037.414.15.0-1038.424.15.0-1039.434.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1050.544.15.0-1051.554.15.0-1053.574.15.0-1054.584.15.0-1057.624.15.0-1058.644.15.0-1059.654.15.0-1061.674.15.0-1062.684.15.0-1063.704.15.0-1064.714.15.0-1065.734.15.0-1066.744.15.0-1067.754.15.0-1068.764.15.0-1069.774.15.0-1070.784.15.0-1071.79
4.15.0-1072.80
linux-oracle-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1046.50~18.04.2, plus listed versions
5.4.0-1019.19~18.04.15.4.0-1021.21~18.04.15.4.0-1022.22~18.04.15.4.0-1024.24~18.04.15.4.0-1025.25~18.04.1
Show 13 moreShow less
5.4.0-1028.29~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1033.355.4.0-1034.36~18.04.15.4.0-1035.38~18.04.15.4.0-1037.40~18.04.15.4.0-1038.41~18.04.15.4.0-1039.42~18.04.15.4.0-1041.44~18.04.15.4.0-1042.45~18.04.15.4.0-1043.46~18.04.15.4.0-1044.47~18.04.1
5.4.0-1046.50~18.04.2
linux-raspi-5.4
Ubuntu:18.04:LTS
 before 5.4.0-1036.39~18.04.1, plus listed versions
5.4.0-1013.13~18.04.15.4.0-1015.15~18.04.15.4.0-1016.17~18.04.15.4.0-1018.20~18.04.15.4.0-1019.21~18.04.1
Show 12 moreShow less
5.4.0-1021.24~18.04.15.4.0-1022.25~18.04.15.4.0-1023.26~18.04.15.4.0-1025.28~18.04.15.4.0-1026.29~18.04.15.4.0-1028.31~18.04.15.4.0-1029.32~18.04.15.4.0-1030.33~18.04.15.4.0-1032.35~18.04.15.4.0-1033.36~18.04.15.4.0-1034.37~18.04.15.4.0-1035.38~18.04.1
5.4.0-1036.39~18.04.1
linux-raspi2
Ubuntu:18.04:LTS
 before 4.15.0-1086.91, plus listed versions
4.13.0-1005.54.13.0-1006.64.13.0-1008.84.15.0-1006.74.15.0-1009.10
Show 45 moreShow less
4.15.0-1010.114.15.0-1011.124.15.0-1012.134.15.0-1013.144.15.0-1017.184.15.0-1018.194.15.0-1020.224.15.0-1021.234.15.0-1022.244.15.0-1024.264.15.0-1026.284.15.0-1027.294.15.0-1028.304.15.0-1029.314.15.0-1030.324.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1038.404.15.0-1040.434.15.0-1041.444.15.0-1043.464.15.0-1044.474.15.0-1045.494.15.0-1047.514.15.0-1048.524.15.0-1049.534.15.0-1050.544.15.0-1052.564.15.0-1053.574.15.0-1054.584.15.0-1055.594.15.0-1057.614.15.0-1060.644.15.0-1061.654.15.0-1062.664.15.0-1063.674.15.0-1065.694.15.0-1067.714.15.0-1068.724.15.0-1070.744.15.0-1071.75
4.15.0-1086.91
linux-snapdragon
Ubuntu:18.04:LTS
 before 4.15.0-1103.112, plus listed versions
4.4.0-1077.824.4.0-1078.834.4.0-1079.844.4.0-1081.864.15.0-1053.57
Show 37 moreShow less
4.15.0-1054.584.15.0-1055.594.15.0-1057.624.15.0-1058.644.15.0-1060.664.15.0-1062.694.15.0-1064.714.15.0-1065.724.15.0-1066.734.15.0-1067.744.15.0-1069.764.15.0-1070.774.15.0-1071.784.15.0-1072.794.15.0-1074.814.15.0-1076.834.15.0-1077.844.15.0-1079.864.15.0-1080.874.15.0-1081.884.15.0-1083.914.15.0-1084.924.15.0-1086.944.15.0-1087.954.15.0-1089.984.15.0-1090.994.15.0-1091.1004.15.0-1093.1024.15.0-1094.1034.15.0-1095.1044.15.0-1096.1054.15.0-1097.1064.15.0-1098.1074.15.0-1099.1084.15.0-1100.1094.15.0-1101.1104.15.0-1102.111
4.15.0-1103.112
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1004.5~18.04.14.18.0-1005.6~18.04.14.18.0-1006.7~18.04.14.18.0-1007.8~18.04.14.18.0-1008.9~18.04.1
Show 7 moreShow less
4.18.0-1009.10~18.04.14.18.0-1011.12~18.04.14.18.0-1012.13~18.04.14.18.0-1013.14~18.04.14.18.0-1015.16~18.04.15.0.0-1011.11~18.04.15.0.0-1013.13~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-2045.47, plus listed versions
4.15.0-2000.44.15.0-2018.184.15.0-2021.214.15.0-2022.224.15.0-2024.24
Show 16 moreShow less
4.15.0-2025.254.15.0-2026.264.15.0-2027.274.15.0-2030.314.15.0-2031.324.15.0-2033.344.15.0-2034.354.15.0-2035.374.15.0-2036.384.15.0-2037.394.15.0-2038.404.15.0-2039.414.15.0-2040.424.15.0-2041.434.15.0-2042.444.15.0-2044.46
4.15.0-2045.47
linux-azure-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-2027.30, plus listed versions
4.15.0-1002.24.15.0-2006.74.15.0-2007.84.15.0-2008.94.15.0-2009.10
Show 13 moreShow less
4.15.0-2012.144.15.0-2013.154.15.0-2015.174.15.0-2016.184.15.0-2017.204.15.0-2018.214.15.0-2020.234.15.0-2021.244.15.0-2022.254.15.0-2023.264.15.0-2024.274.15.0-2025.284.15.0-2026.29
4.15.0-2027.30
linux-fips
Ubuntu:Pro:FIPS-updates:18.04:LTS
 before 4.15.0-1060.68, plus listed versions
4.15.0-1027.324.15.0-1029.344.15.0-1034.394.15.0-1035.404.15.0-1037.42
Show 19 moreShow less
4.15.0-1038.434.15.0-1039.444.15.0-1040.454.15.0-1041.464.15.0-1044.504.15.0-1045.524.15.0-1046.534.15.0-1048.554.15.0-1049.564.15.0-1050.584.15.0-1051.594.15.0-1052.604.15.0-1053.614.15.0-1054.624.15.0-1055.634.15.0-1056.644.15.0-1057.654.15.0-1058.664.15.0-1059.67
4.15.0-1060.68
linux-aws-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-2000.4
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.2
 None known
linux-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1011.12
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.1
 None known
linux
Ubuntu:20.04:LTS
 before 5.4.0-74.83, plus listed versions
5.3.0-18.195.3.0-24.265.4.0-9.125.4.0-18.225.4.0-21.25
Show 31 moreShow less
5.4.0-24.285.4.0-25.295.4.0-26.305.4.0-28.325.4.0-29.335.4.0-31.355.4.0-33.375.4.0-37.415.4.0-39.435.4.0-40.445.4.0-42.465.4.0-45.495.4.0-47.515.4.0-48.525.4.0-51.565.4.0-52.575.4.0-53.595.4.0-54.605.4.0-56.625.4.0-58.645.4.0-59.655.4.0-60.675.4.0-62.705.4.0-64.725.4.0-65.735.4.0-66.745.4.0-67.755.4.0-70.785.4.0-71.795.4.0-72.805.4.0-73.82
5.4.0-74.83
linux-aws
Ubuntu:20.04:LTS
 before 5.4.0-1049.51, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.3.0-1010.115.4.0-1005.5
Show 26 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1017.175.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.305.4.0-1030.315.4.0-1032.335.4.0-1034.355.4.0-1035.375.4.0-1037.395.4.0-1038.405.4.0-1039.415.4.0-1041.435.4.0-1043.455.4.0-1045.475.4.0-1047.495.4.0-1048.50
5.4.0-1049.51
linux-azure
Ubuntu:20.04:LTS
 before 5.4.0-1048.50, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1006.65.4.0-1008.8
Show 22 moreShow less
5.4.0-1009.95.4.0-1010.105.4.0-1012.125.4.0-1016.165.4.0-1019.195.4.0-1020.205.4.0-1022.225.4.0-1023.235.4.0-1025.255.4.0-1026.265.4.0-1031.325.4.0-1032.335.4.0-1034.355.4.0-1035.365.4.0-1036.385.4.0-1039.415.4.0-1040.425.4.0-1041.435.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1047.49
5.4.0-1048.50
linux-bluefield
Ubuntu:20.04:LTS
 before 5.4.0-1012.15, plus listed versions
5.4.0-1007.105.4.0-1011.14
5.4.0-1012.15
linux-gcp
Ubuntu:20.04:LTS
 before 5.4.0-1044.47, plus listed versions
5.3.0-1004.45.3.0-1009.105.3.0-1011.125.4.0-1005.55.4.0-1007.7
Show 23 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1033.355.4.0-1034.375.4.0-1036.395.4.0-1037.405.4.0-1038.415.4.0-1040.435.4.0-1041.445.4.0-1042.455.4.0-1043.46
5.4.0-1044.47
linux-gke
Ubuntu:20.04:LTS
 before 5.4.0-1044.46, plus listed versions
5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.415.4.0-1041.435.4.0-1042.445.4.0-1043.45
5.4.0-1044.46
linux-gkeop
Ubuntu:20.04:LTS
 before 5.4.0-1016.17, plus listed versions
5.4.0-1008.95.4.0-1009.105.4.0-1010.115.4.0-1011.125.4.0-1012.135.4.0-1013.145.4.0-1014.155.4.0-1015.16
5.4.0-1016.17
linux-hwe-5.8
Ubuntu:20.04:LTS
 before 5.8.0-55.62~20.04.1, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 13 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.1
5.8.0-55.62~20.04.1
linux-kvm
Ubuntu:20.04:LTS
 before 5.4.0-1040.41, plus listed versions
5.3.0-1003.35.3.0-1008.95.3.0-1009.105.4.0-1004.45.4.0-1006.6
Show 21 moreShow less
5.4.0-1007.75.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1020.205.4.0-1021.215.4.0-1023.235.4.0-1024.245.4.0-1026.275.4.0-1028.295.4.0-1030.315.4.0-1031.325.4.0-1032.335.4.0-1033.345.4.0-1034.355.4.0-1036.375.4.0-1037.385.4.0-1038.395.4.0-1039.40
5.4.0-1040.41
linux-oem-5.10
Ubuntu:20.04:LTS
 before 5.10.0-1025.26, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 5 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.24
5.10.0-1025.26
linux-oracle
Ubuntu:20.04:LTS
 before 5.4.0-1046.50, plus listed versions
5.3.0-1002.25.3.0-1007.85.3.0-1008.95.4.0-1005.55.4.0-1007.7
Show 23 moreShow less
5.4.0-1008.85.4.0-1009.95.4.0-1011.115.4.0-1015.155.4.0-1018.185.4.0-1019.195.4.0-1021.215.4.0-1022.225.4.0-1024.245.4.0-1025.255.4.0-1028.295.4.0-1029.315.4.0-1030.325.4.0-1032.345.4.0-1034.365.4.0-1035.385.4.0-1037.405.4.0-1038.415.4.0-1039.425.4.0-1041.445.4.0-1042.455.4.0-1043.465.4.0-1045.49
5.4.0-1046.50
linux-raspi
Ubuntu:20.04:LTS
 before 5.4.0-1036.39, plus listed versions
5.4.0-1007.75.4.0-1008.85.4.0-1011.115.4.0-1012.125.4.0-1013.13
Show 16 moreShow less
5.4.0-1015.155.4.0-1016.175.4.0-1018.205.4.0-1019.215.4.0-1021.245.4.0-1022.255.4.0-1023.265.4.0-1025.285.4.0-1026.295.4.0-1028.315.4.0-1029.325.4.0-1030.335.4.0-1032.355.4.0-1033.365.4.0-1034.375.4.0-1035.38
5.4.0-1036.39
linux-riscv-5.8
Ubuntu:20.04:LTS
 before 5.8.0-26.28~20.04.1, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.15.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.1
5.8.0-26.28~20.04.1
linux-azure-fde-5.15
Ubuntu:Pro:20.04:LTS
 before 5.15.0-1114.123~20.04.1, plus listed versions
5.15.0-1019.24~20.04.1.15.15.0-1020.25~20.04.1.15.15.0-1021.26~20.04.1.15.15.0-1029.36~20.04.1.15.15.0-1030.37~20.04.1.1
Show 45 moreShow less
5.15.0-1031.38~20.04.1.15.15.0-1033.40~20.04.1.15.15.0-1034.41~20.04.1.25.15.0-1035.42~20.04.1.15.15.0-1036.43~20.04.1.15.15.0-1037.44~20.04.1.15.15.0-1038.45~20.04.1.15.15.0-1039.46~20.04.1.15.15.0-1040.47~20.04.1.15.15.0-1041.48~20.04.1.15.15.0-1042.49~20.04.1.15.15.0-1043.50~20.04.1.15.15.0-1046.53~20.04.1.15.15.0-1047.54~20.04.1.15.15.0-1049.56~20.04.1.15.15.0-1050.57~20.04.1.15.15.0-1051.59~20.04.1.15.15.0-1052.60~20.04.1.15.15.0-1053.61~20.04.1.15.15.0-1054.62~20.04.1.15.15.0-1056.64~20.04.1.15.15.0-1057.65~20.04.1.15.15.0-1058.66~20.04.2.15.15.0-1059.67~20.04.1.15.15.0-1060.69~20.04.1.15.15.0-1061.70~20.04.1.15.15.0-1063.72~20.04.1.15.15.0-1064.73~20.04.1.15.15.0-1065.74~20.04.1.15.15.0-1067.76~20.04.1.15.15.0-1068.77~20.04.1.15.15.0-1070.79~20.04.1.15.15.0-1071.80~20.04.1.15.15.0-1072.81~20.04.1.15.15.0-1073.82~20.04.1.15.15.0-1074.83~20.04.1.15.15.0-1076.85~20.04.1.15.15.0-1078.87~20.04.1.15.15.0-1081.90~20.04.1.15.15.0-1082.91~20.04.1.15.15.0-1086.95~20.04.1.15.15.0-1087.96~20.04.1.15.15.0-1088.97~20.04.1.15.15.0-1089.98~20.04.1.15.15.0-1091.100~20.04.1.1
5.15.0-1114.123~20.04.1
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-aws-fips
Ubuntu:Pro:FIPS-updates:20.04:LTS
 before 5.4.0-1069.73+fips2, plus listed versions
5.4.0-1021.21+fips2
5.4.0-1069.73+fips2
linux-azure-fips
Ubuntu:Pro:FIPS-updates:20.04:LTS
 before 5.4.0-1073.76+fips1, plus listed versions
5.4.0-1022.22+fips1
5.4.0-1073.76+fips1
linux-gcp-fips
Ubuntu:Pro:FIPS-updates:20.04:LTS
 before 5.4.0-1067.71~20.04.1, plus listed versions
5.4.0-1021.21+fips1
5.4.0-1067.71~20.04.1
linux-aws-fips
Ubuntu:Pro:FIPS:20.04:LTS
 All versions, plus listed versions
5.4.0-1021.21+fips2
 None known
linux-azure-fips
Ubuntu:Pro:FIPS:20.04:LTS
 All versions, plus listed versions
5.4.0-1022.22+fips1
 None known
linux-fips
Ubuntu:Pro:FIPS:20.04:LTS
 All versions, plus listed versions
5.4.0-1007.8
 None known
linux-gcp-fips
Ubuntu:Pro:FIPS:20.04:LTS
 All versions, plus listed versions
5.4.0-1021.21+fips1
 None known
linux-intel-iot-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1073.75
 None known
linux-realtime
Ubuntu:22.04:LTS
 All versions, plus listed versions
5.15.0-1032.35
 None known
linux-raspi-realtime
Ubuntu:24.04:LTS
 All versions, plus listed versions
6.8.0-2019.20
 None known
linux-oem-5.10
Ubuntu:20.04:LTS
From an advisory covering 21 CVEs
 before 5.10.0-1026.27, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 6 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.26
5.10.0-1026.27
linux-azure
Ubuntu:Pro:14.04:LTS
From an advisory covering 13 CVEs
 before 4.15.0-1115.128~14.04.1, plus listed versions
4.15.0-1023.24~14.04.14.15.0-1030.31~14.04.14.15.0-1031.32~14.04.14.15.0-1032.33~14.04.24.15.0-1035.36~14.04.2
Show 45 moreShow less
4.15.0-1036.38~14.04.24.15.0-1037.39~14.04.24.15.0-1039.41~14.04.24.15.0-1040.44~14.04.14.15.0-1041.45~14.04.14.15.0-1042.46~14.04.14.15.0-1045.49~14.04.14.15.0-1046.50~14.04.14.15.0-1047.51~14.04.14.15.0-1049.54~14.04.14.15.0-1050.55~14.04.14.15.0-1051.56~14.04.14.15.0-1052.57~14.04.14.15.0-1055.60~14.04.14.15.0-1056.61~14.04.14.15.0-1057.62~14.04.14.15.0-1059.64~14.04.14.15.0-1060.65~14.04.14.15.0-1061.66~14.04.14.15.0-1063.68~14.04.14.15.0-1064.69~14.04.14.15.0-1066.71~14.04.14.15.0-1067.72~14.04.14.15.0-1069.74~14.04.14.15.0-1071.76~14.04.14.15.0-1074.79~14.04.14.15.0-1077.82~14.04.14.15.0-1082.92~14.04.14.15.0-1083.93~14.04.14.15.0-1089.99~14.04.14.15.0-1091.101~14.04.14.15.0-1092.102~14.04.14.15.0-1093.103~14.04.14.15.0-1095.105~14.04.14.15.0-1096.106~14.04.14.15.0-1098.109~14.04.14.15.0-1100.111~14.04.14.15.0-1102.113~14.04.14.15.0-1103.114~14.04.14.15.0-1106.118~14.04.14.15.0-1108.120~14.04.14.15.0-1109.121~14.04.14.15.0-1110.122~14.04.14.15.0-1111.123~14.04.14.15.0-1112.124~14.04.1
4.15.0-1115.128~14.04.1
linux-aws-hwe
Ubuntu:Pro:16.04:LTS
From an advisory covering 13 CVEs
 before 4.15.0-1103.110~16.04.1, plus listed versions
4.15.0-1030.31~16.04.14.15.0-1031.33~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1035.37~16.04.1
Show 39 moreShow less
4.15.0-1036.38~16.04.14.15.0-1039.41~16.04.14.15.0-1040.42~16.04.14.15.0-1041.43~16.04.14.15.0-1043.45~16.04.14.15.0-1044.46~16.04.14.15.0-1045.47~16.04.14.15.0-1047.49~16.04.14.15.0-1048.50~16.04.14.15.0-1050.52~16.04.14.15.0-1051.53~16.04.14.15.0-1052.54~16.04.14.15.0-1054.56~16.04.14.15.0-1056.58~16.04.14.15.0-1057.59~16.04.14.15.0-1058.60~16.04.14.15.0-1060.62~16.04.14.15.0-1063.67~16.04.14.15.0-1065.69~16.04.14.15.0-1066.70~16.04.14.15.0-1067.71~16.04.14.15.0-1073.77~16.04.14.15.0-1074.78~16.04.14.15.0-1079.83~16.04.14.15.0-1080.84~16.04.14.15.0-1082.86~16.04.14.15.0-1083.87~16.04.14.15.0-1085.90~16.04.14.15.0-1088.93~16.04.14.15.0-1090.95~16.04.14.15.0-1091.96~16.04.14.15.0-1093.99~16.04.14.15.0-1094.101~16.04.14.15.0-1095.102~16.04.14.15.0-1096.103~16.04.14.15.0-1097.104~16.04.14.15.0-1098.105~16.04.14.15.0-1099.106~16.04.14.15.0-1102.109~16.04.1
4.15.0-1103.110~16.04.1
linux-azure
Ubuntu:Pro:16.04:LTS
From an advisory covering 13 CVEs
 before 4.15.0-1115.128~16.04.1, plus listed versions
4.11.0-1009.94.11.0-1011.114.11.0-1013.134.11.0-1014.144.11.0-1015.15
Show 45 moreShow less
4.11.0-1016.164.13.0-1005.74.13.0-1006.84.13.0-1007.94.13.0-1009.124.13.0-1011.144.13.0-1012.154.13.0-1014.174.13.0-1016.194.13.0-1018.214.15.0-1013.13~16.04.24.15.0-1014.14~16.04.14.15.0-1018.18~16.04.14.15.0-1019.19~16.04.14.15.0-1021.21~16.04.14.15.0-1022.22~16.04.14.15.0-1023.24~16.04.14.15.0-1025.26~16.04.14.15.0-1028.29~16.04.14.15.0-1030.31~16.04.14.15.0-1031.32~16.04.14.15.0-1032.33~16.04.14.15.0-1035.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1039.434.15.0-1040.444.15.0-1041.454.15.0-1042.464.15.0-1045.494.15.0-1046.504.15.0-1047.514.15.0-1049.544.15.0-1050.554.15.0-1051.564.15.0-1052.574.15.0-1055.604.15.0-1056.614.15.0-1057.624.15.0-1059.644.15.0-1060.654.15.0-1061.664.15.0-1063.684.15.0-1064.694.15.0-1066.71
4.15.0-1115.128~16.04.1
linux-gcp
Ubuntu:Pro:16.04:LTS
From an advisory covering 13 CVEs
 before 4.15.0-1100.113~16.04.1, plus listed versions
4.10.0-1004.44.10.0-1006.64.10.0-1007.74.10.0-1008.84.10.0-1009.9
Show 45 moreShow less
4.13.0-1002.54.13.0-1006.94.13.0-1007.104.13.0-1008.114.13.0-1011.154.13.0-1012.164.13.0-1013.174.13.0-1015.194.13.0-1017.214.13.0-1019.234.15.0-1014.14~16.04.14.15.0-1015.15~16.04.14.15.0-1017.18~16.04.14.15.0-1018.19~16.04.24.15.0-1019.20~16.04.14.15.0-1021.22~16.04.14.15.0-1023.24~16.04.14.15.0-1024.25~16.04.24.15.0-1025.26~16.04.14.15.0-1026.27~16.04.14.15.0-1027.28~16.04.14.15.0-1028.29~16.04.14.15.0-1029.31~16.04.14.15.0-1030.32~16.04.14.15.0-1032.34~16.04.14.15.0-1033.35~16.04.14.15.0-1034.36~16.04.14.15.0-1036.38~16.04.14.15.0-1037.39~16.04.14.15.0-1040.42~16.04.14.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1046.494.15.0-1047.504.15.0-1049.524.15.0-1050.534.15.0-1052.564.15.0-1055.594.15.0-1058.624.15.0-1060.644.15.0-1061.654.15.0-1071.81~16.04.14.15.0-1077.87~16.04.14.15.0-1078.88~16.04.1
4.15.0-1100.113~16.04.1
linux-hwe
Ubuntu:Pro:16.04:LTS
From an advisory covering 13 CVEs
 before 4.15.0-144.148~16.04.1, plus listed versions
4.8.0-36.36~16.04.14.8.0-39.42~16.04.14.8.0-41.44~16.04.14.8.0-42.45~16.04.14.8.0-44.47~16.04.1
Show 45 moreShow less
4.8.0-45.48~16.04.14.8.0-46.49~16.04.14.8.0-49.52~16.04.14.8.0-51.54~16.04.14.8.0-52.55~16.04.14.8.0-53.56~16.04.14.8.0-54.57~16.04.14.8.0-56.61~16.04.14.8.0-58.63~16.04.14.10.0-27.30~16.04.24.10.0-28.32~16.04.24.10.0-30.34~16.04.14.10.0-32.36~16.04.14.10.0-33.37~16.04.14.10.0-35.39~16.04.14.10.0-37.41~16.04.14.10.0-38.42~16.04.14.10.0-40.44~16.04.14.10.0-42.46~16.04.14.13.0-26.29~16.04.24.13.0-31.34~16.04.14.13.0-32.35~16.04.14.13.0-36.40~16.04.14.13.0-37.42~16.04.14.13.0-38.43~16.04.14.13.0-39.44~16.04.14.13.0-41.46~16.04.14.13.0-43.48~16.04.14.13.0-45.50~16.04.14.15.0-24.26~16.04.14.15.0-29.31~16.04.14.15.0-30.32~16.04.14.15.0-32.35~16.04.14.15.0-33.36~16.04.14.15.0-34.37~16.04.14.15.0-36.39~16.04.14.15.0-38.41~16.04.14.15.0-39.42~16.04.14.15.0-42.45~16.04.14.15.0-43.46~16.04.14.15.0-45.48~16.04.14.15.0-46.49~16.04.14.15.0-47.50~16.04.14.15.0-48.51~16.04.14.15.0-50.54~16.04.1
4.15.0-144.148~16.04.1
linux-oracle
Ubuntu:Pro:16.04:LTS
From an advisory covering 13 CVEs
 before 4.15.0-1072.80~16.04.1, plus listed versions
4.15.0-1007.9~16.04.14.15.0-1008.10~16.04.14.15.0-1009.11~16.04.14.15.0-1010.12~16.04.14.15.0-1011.13~16.04.1
Show 38 moreShow less
4.15.0-1013.15~16.04.14.15.0-1014.16~16.04.14.15.0-1015.17~16.04.14.15.0-1017.19~16.04.24.15.0-1018.20~16.04.14.15.0-1021.23~16.04.14.15.0-1022.25~16.04.14.15.0-1023.26~16.04.14.15.0-1025.28~16.04.14.15.0-1026.29~16.04.14.15.0-1027.30~16.04.14.15.0-1029.32~16.04.14.15.0-1030.33~16.04.14.15.0-1031.34~16.04.14.15.0-1033.36~16.04.14.15.0-1035.38~16.04.14.15.0-1037.41~16.04.14.15.0-1038.42~16.04.14.15.0-1039.43~16.04.14.15.0-1045.49~16.04.14.15.0-1046.50~16.04.14.15.0-1050.54~16.04.14.15.0-1051.55~16.04.14.15.0-1053.57~16.04.14.15.0-1054.58~16.04.14.15.0-1056.61~16.04.14.15.0-1058.64~16.04.14.15.0-1059.65~16.04.14.15.0-1061.67~16.04.14.15.0-1062.68~16.04.14.15.0-1064.71~16.04.14.15.0-1065.73~16.04.14.15.0-1066.74~16.04.14.15.0-1067.75~16.04.14.15.0-1068.76~16.04.14.15.0-1069.77~16.04.14.15.0-1070.78~16.04.14.15.0-1071.79~16.04.1
4.15.0-1072.80~16.04.1
linux
Ubuntu:18.04:LTS
From an advisory covering 13 CVEs
 before 4.15.0-144.148, plus listed versions
4.13.0-16.194.13.0-17.204.13.0-25.294.13.0-32.354.15.0-10.11
Show 45 moreShow less
4.15.0-12.134.15.0-13.144.15.0-15.164.15.0-19.204.15.0-20.214.15.0-22.244.15.0-23.254.15.0-24.264.15.0-29.314.15.0-30.324.15.0-32.354.15.0-33.364.15.0-34.374.15.0-36.394.15.0-38.414.15.0-39.424.15.0-42.454.15.0-43.464.15.0-44.474.15.0-45.484.15.0-46.494.15.0-47.504.15.0-48.514.15.0-50.544.15.0-51.554.15.0-52.564.15.0-54.584.15.0-55.604.15.0-58.644.15.0-60.674.15.0-62.694.15.0-64.734.15.0-65.744.15.0-66.754.15.0-69.784.15.0-70.794.15.0-72.814.15.0-74.844.15.0-76.864.15.0-88.884.15.0-91.924.15.0-96.974.15.0-99.1004.15.0-101.1024.15.0-106.107
4.15.0-144.148
linux-aws
Ubuntu:18.04:LTS
From an advisory covering 13 CVEs
 before 4.15.0-1103.110, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1007.7
Show 45 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1011.114.15.0-1016.164.15.0-1017.174.15.0-1019.194.15.0-1020.204.15.0-1021.214.15.0-1023.234.15.0-1025.254.15.0-1027.274.15.0-1029.304.15.0-1031.334.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1035.374.15.0-1037.394.15.0-1039.414.15.0-1040.424.15.0-1041.434.15.0-1043.454.15.0-1044.464.15.0-1045.474.15.0-1047.494.15.0-1048.504.15.0-1050.524.15.0-1051.534.15.0-1052.544.15.0-1054.564.15.0-1056.584.15.0-1057.594.15.0-1058.604.15.0-1060.624.15.0-1063.674.15.0-1065.694.15.0-1066.704.15.0-1067.714.15.0-1073.774.15.0-1076.804.15.0-1077.814.15.0-1079.834.15.0-1080.844.15.0-1082.864.15.0-1083.87
4.15.0-1103.110
kernel-debug
openSUSE:Leap 15.2
From an advisory covering 6 CVEs
 before 5.3.18-lp152.106.1
5.3.18-lp152.106.1
kernel-default
openSUSE:Leap 15.2
From an advisory covering 6 CVEs
 before 5.3.18-lp152.106.1
5.3.18-lp152.106.1
kernel-default-base
openSUSE:Leap 15.2
From an advisory covering 6 CVEs
 before 5.3.18-lp152.106.1.lp152.8.52.1
5.3.18-lp152.106.1.lp152.8.52.1
kernel-docs
openSUSE:Leap 15.2
From an advisory covering 6 CVEs
 before 5.3.18-lp152.106.1
5.3.18-lp152.106.1
kernel-kvmsmall
openSUSE:Leap 15.2
From an advisory covering 6 CVEs
 before 5.3.18-lp152.106.1
5.3.18-lp152.106.1
kernel-obs-build
openSUSE:Leap 15.2
From an advisory covering 6 CVEs
 before 5.3.18-lp152.106.1
5.3.18-lp152.106.1
kernel-obs-qa
openSUSE:Leap 15.2
From an advisory covering 6 CVEs
 before 5.3.18-lp152.106.1
5.3.18-lp152.106.1
kernel-preempt
openSUSE:Leap 15.2
From an advisory covering 6 CVEs
 before 5.3.18-lp152.106.1
5.3.18-lp152.106.1
kernel-source
openSUSE:Leap 15.2
From an advisory covering 6 CVEs
 before 5.3.18-lp152.106.1
5.3.18-lp152.106.1
kernel-syms
openSUSE:Leap 15.2
From an advisory covering 6 CVEs
 before 5.3.18-lp152.106.1
5.3.18-lp152.106.1
kernel-azure
openSUSE:Leap 15.3
From an advisory covering 6 CVEs
 before 5.3.18-38.31.1
5.3.18-38.31.1
kernel-source-azure
openSUSE:Leap 15.3
From an advisory covering 6 CVEs
 before 5.3.18-38.31.1
5.3.18-38.31.1
kernel-syms-azure
openSUSE:Leap 15.3
From an advisory covering 6 CVEs
 before 5.3.18-38.31.1
5.3.18-38.31.1
kernel-debug
openSUSE:Leap 15.3
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-default
openSUSE:Leap 15.3
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-kvmsmall
openSUSE:Leap 15.3
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-vanilla
openSUSE:Leap 15.3
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
kernel-zfcpdump
openSUSE:Leap 15.3
From an advisory covering 43 CVEs
 before 4.12.14-197.102.2
4.12.14-197.102.2
dtb-aarch64
openSUSE:Leap 15.3
From an advisory covering 4 CVEs
 before 5.3.18-59.37.1
5.3.18-59.37.1
kernel-64kb
openSUSE:Leap 15.3
From an advisory covering 4 CVEs
 before 5.3.18-59.37.2
5.3.18-59.37.2
kernel-debug
openSUSE:Leap 15.3
From an advisory covering 4 CVEs
 before 5.3.18-59.37.2
5.3.18-59.37.2
kernel-default
openSUSE:Leap 15.3
From an advisory covering 4 CVEs
 before 5.3.18-59.37.2
5.3.18-59.37.2
kernel-default-base
openSUSE:Leap 15.3
From an advisory covering 4 CVEs
 before 5.3.18-59.37.2.18.23.3
5.3.18-59.37.2.18.23.3
kernel-docs
openSUSE:Leap 15.3
From an advisory covering 4 CVEs
 before 5.3.18-59.37.2
5.3.18-59.37.2
kernel-kvmsmall
openSUSE:Leap 15.3
From an advisory covering 4 CVEs
 before 5.3.18-59.37.2
5.3.18-59.37.2
kernel-obs-build
openSUSE:Leap 15.3
From an advisory covering 4 CVEs
 before 5.3.18-59.37.3
5.3.18-59.37.3
kernel-obs-qa
openSUSE:Leap 15.3
From an advisory covering 4 CVEs
 before 5.3.18-59.37.1
5.3.18-59.37.1
kernel-preempt
openSUSE:Leap 15.3
From an advisory covering 4 CVEs
 before 5.3.18-59.37.2
5.3.18-59.37.2
kernel-source
openSUSE:Leap 15.3
From an advisory covering 4 CVEs
 before 5.3.18-59.37.2
5.3.18-59.37.2
kernel-syms
openSUSE:Leap 15.3
From an advisory covering 4 CVEs
 before 5.3.18-59.37.1
5.3.18-59.37.1
kernel-zfcpdump
openSUSE:Leap 15.3
From an advisory covering 4 CVEs
 before 5.3.18-59.37.2
5.3.18-59.37.2

History

History
RecordedChangedSources
affectedOSV
affected
factsOSV
aliases, productsEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-31916 is a medium vulnerability (CVSS 6.7) in Debian Linux, published April 30, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.70%, the 53rd percentile. Fixed in kernel 5.10.78.1-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 118 package rows, 675 versions, 581 references and the rest of 21 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open