Every CVE Search/ Get API key

CVE-2021-34866

This vulnerability allows local attackers to escalate privileges on affected installations of...

8.8 HighFix available

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.14-rc3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF programs. The issue results from the lack of proper validation of user-supplied eBPF programs, which can result in a type confusion condition. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-14689.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.97%Up 0.6 points since Jan 26, 2022
90%50%10%1%

What each source reports

CVE List Score used 8.8

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.14-rc3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF programs. The issue results from the lack of proper validation of user-supplied eBPF programs, which can result in a type confusion condition. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-14689.

Record
CVE-2021-34866
CVSS 3.0
8.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-843
Updated
2026-11-02
EUVDEUVD-2021-21513 8.8

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.14-rc3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF programs. The issue results from the lack of proper validation of user-supplied eBPF programs, which can result in a type confusion condition. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-14689.

Record
EUVD-2021-21513
CVSS 3.0
8.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-mrjq-f7fw-fmg2 7.8

This vulnerability allows local attackers to escalate privileges on affected installations of...

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.14-rc3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF programs. The issue results from the lack of proper validation of user-supplied eBPF programs, which can result in a type confusion condition. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-14689.

Record
GHSA-mrjq-f7fw-fmg2
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-843
Updated
2026-11-02
NVD 7.8

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.14-rc3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF programs. The issue results from the lack of proper validation of user-supplied eBPF programs, which can result in a type confusion condition. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-14689.

Record
CVE-2021-34866
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0
8.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-843
Updated
2026-11-02
OSV 7.8

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.14-rc3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF programs. The issue results from the lack of proper validation of user-supplied eBPF programs, which can result in a type confusion condition. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-14689.

Record
CVE-2021-34866
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2021-34866 7.8

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.14-rc3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF programs. The issue results from the lack of proper validation of user-supplied eBPF programs, which can result in a type confusion condition. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-14689.

Record
DEBIAN-CVE-2021-34866
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 13 moreShow less
OSVRHSA-2024:0724 7.8

Red Hat Security Advisory: kernel security and bug fix update

Record
RHSA-2024:0724
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-34866 7.8

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.14-rc3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF programs. The issue results from the lack of proper validation of user-supplied eBPF programs, which can result in a type confusion condition. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-14689.

Record
UBUNTU-CVE-2021-34866
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0
8.8 HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVCLSA-2026-1782145985 No score

kernel: Fix of 62 CVEs

  • libceph: prevent potential out-of-bounds reads in handle_auth_done() {CVE-2026-22984}
  • drm/i915: Fix NULL ptr deref by checking new_crtc_state {CVE-2023-53833}
  • netfilter: nf_tables: release flowtable after rcu grace period on error {CVE-2026-23392}
  • wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110}
  • xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
  • mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() {CVE-2026-31586}
  • scsi: sg: Do not sleep in atomic context {CVE-2025-40259}
  • Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} {CVE-2023-53827}
  • drm/i915/gem: add missing boundary check in vm_access {CVE-2023-28410}
  • ASoC: SOF: debug: Fix potential buffer overflow by snprintf() {CVE-2022-50051}
  • tipc: fix use-after-free Read in tipc_named_reinit {CVE-2022-49696}
  • wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration {CVE-2022-49022}
  • ethtool: do not perform operations on net devices being unregistered {CVE-2021-47517}
  • cxgb4: avoid accessing registers when clearing filters {CVE-2021-47138}
  • bpf: Fix ringbuf helper function compatibility {CVE-2021-34866}
  • HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq {CVE-2026-43051}
  • Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408}
  • net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448}
  • nbd: defer config unlock in nbd_genl_connect {CVE-2025-68366}
  • asix: fix uninit-value in asix_mdio_read() {CVE-2021-47101}
  • kyber: fix out of bounds access when preempted {CVE-2021-46984}
  • can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004}
  • tls: separate no-async decryption request handling from async {CVE-2024-58240}
  • ftrace: Also allocate and copy hash for reading of filter files {CVE-2025-39689}
  • Make filldir64 verify the directory entry filename is valid {CVE-2019-10220}
  • scsi: qla2xxx: Fix bsg_done() causing double free {CVE-2025-71238}
  • team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091}
  • bonding: limit BOND_MODE_8023AD to Ethernet devices {CVE-2026-23099}
  • Bluetooth: btusb: revert use of devm_kzalloc in btusb {CVE-2025-71082}
  • proc/vmcore: fix clearing user buffer by properly using clear_user() {CVE-2021-47566}
  • nfsd: fix use-after-free due to delegation race {CVE-2021-47506}
  • drm: bridge/panel: Cleanup connector on bridge detach {CVE-2021-47063}
  • usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}
  • nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402}
  • ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452}
  • wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052}
  • netfilter: nfnetlink_osf: avoid OOB read {CVE-2023-39189}
  • crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id {CVE-2025-68724}
  • ALSA: 6fire: fix use-after-free on disconnect {CVE-2026-31581}
  • Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock {CVE-2026-31500}
  • drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370}
  • net: use dst_dev_rcu() in sk_setup_caps() {CVE-2025-40170}
  • wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() {CVE-2022-50258}
  • x86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer {CVE-2021-47226}
  • kvm: LAPIC: Restore guard to prevent illegal APIC register access {CVE-2021-47255}
  • tunnels: fix kasan splat when generating ipv4 pmtu error {CVE-2023-53600}
  • macvlan: fix error recovery in macvlan_common_newlink() {CVE-2026-23209}
  • ALSA: aloop: Fix racy access at PCM trigger {CVE-2026-23191}
  • RDMA/cxgb4: Do not dma memory off of the stack {CVE-2019-17075}
  • netfilter: nf_conntrack_helper: pass helper to expect cleanup {CVE-2026-43027}
  • KVM: nVMX: unconditionally cancel preemption timer in free_nested (CVE-2019-7221) {CVE-2019-7221}
  • RDMA/umad: Reject negative data_len in…
Record
CLSA-2026-1782145985
Updated
2026-11-02
OSVCLSA-2026-1782146775 No score

kernel: Fix of 58 CVEs

  • libceph: prevent potential out-of-bounds reads in handle_auth_done() {CVE-2026-22984}
  • svcrdma: bound check rq_pages index in inline path {CVE-2025-71068}
  • drm/i915: Fix NULL ptr deref by checking new_crtc_state {CVE-2023-53833}
  • netfilter: nf_tables: release flowtable after rcu grace period on error {CVE-2026-23392}
  • wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110}
  • xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}
  • mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() {CVE-2026-31586}
  • scsi: sg: Do not sleep in atomic context {CVE-2025-40259}
  • bpf, sockmap: Fix race between element replace and close() {CVE-2024-56664}
  • Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} {CVE-2023-53827}
  • drm/i915/gem: add missing boundary check in vm_access {CVE-2023-28410}
  • ASoC: SOF: debug: Fix potential buffer overflow by snprintf() {CVE-2022-50051}
  • tipc: fix use-after-free Read in tipc_named_reinit {CVE-2022-49696}
  • wifi: mac8021: fix possible oob access in ieee80211_get_rate_duration {CVE-2022-49022}
  • drm/i915/gem: Really move i915_gem_context.link under ref protection {CVE-2022-48662}
  • drm/i915: Release i915_gem_context from a worker {CVE-2022-48662}
  • KVM: x86/mmu: Don't advance iterator after restart due to yielding {CVE-2021-47094}
  • HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq {CVE-2026-43051}
  • Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408}
  • nbd: defer config unlock in nbd_genl_connect {CVE-2025-68366}
  • netfilter: xt_tcpmss: check remaining length before reading optlen {CVE-2026-43190}
  • media: dvb-net: fix OOB access in ULE extension header tables {CVE-2026-31405}
  • net: sched: sfb: fix null pointer access issue when sfb_init() fails {CVE-2022-50356}
  • skbuff: skb_segment, Call zero copy functions before using skbuff frags {CVE-2023-53354}
  • nfsd: call op_release, even when op_func returns an error {CVE-2023-53241}
  • icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). {CVE-2023-53343}
  • RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device {CVE-2023-53393}
  • scsi: target: iscsi: Fix a race condition between login_work and the login thread {CVE-2022-50350}
  • Make filldir64 verify the directory entry filename is valid {CVE-2019-10220}
  • usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}
  • crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id {CVE-2025-68724}
  • nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402}
  • drm/amdgpu: Fix use-after-free race in VM acquire {CVE-2026-43370}
  • net: use dst_dev_rcu() in sk_setup_caps() {CVE-2025-40170}
  • team: fix check for port enabled in team_queue_override_port_prio_changed() {CVE-2025-71091}
  • proc/vmcore: fix clearing user buffer by properly using clear_user() {CVE-2021-47566}
  • cxgb4: avoid accessing registers when clearing filters {CVE-2021-47138}
  • bpf: Fix ringbuf helper function compatibility {CVE-2021-34866}
  • ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452}
  • wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052}
  • atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050}
  • ext4: block range must be validated before use in ext4_mb_clear_bb() {CVE-2022-50021}
  • bonding: limit BOND_MODE_8023AD to Ethernet devices {CVE-2026-23099}
  • net/sched: cls_u32: use skb_header_pointer_careful() {CVE-2026-23204}
  • scsi: qla2xxx: Fix bsg_done() causing double free {CVE-2025-71238}
  • ice: Fix memory corruption in VF driver {CVE-2022-49722}
  • net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448}
  • netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450}
  • tunnels: fix kasan splat when generating ipv4 pmtu error {CVE-2023-53600}
  • Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020}
  • netfilter: nf_conntrack_helper: pass helper to…
Record
CLSA-2026-1782146775
Updated
2026-11-02
OSVopenSUSE-SU-2021:3641-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2021-3772: Fixed sctp vtag check in sctp_sf_ootb (bsc#1190351).
  • CVE-2021-3655: Fixed a missing size validations on inbound SCTP packets, which may have allowed the kernel to read uninitialized memory (bsc#1188563).
  • CVE-2021-43056: Fixed possible KVM host crash via malicious KVM guest on Power8 (bnc#1192107).
  • CVE-2021-3896: Fixed a array-index-out-bounds in detach_capi_ctr in drivers/isdn/capi/kcapi.c (bsc#1191958).
  • CVE-2021-3760: Fixed a use-after-free vulnerability with the ndev->rf_conn_info object (bsc#1190067).
  • CVE-2021-42739: The firewire subsystem had a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bsc#1184673).
  • CVE-2021-3542: Fixed heap buffer overflow in firedtv driver (bsc#1186063).
  • CVE-2021-33033: Fixed a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled (bsc#1186109).
  • CVE-2021-3715: Fixed a use-after-free in route4_change() in net/sched/cls_route.c (bsc#1190349).
  • CVE-2021-34866: Fixed eBPF Type Confusion Privilege Escalation Vulnerability (bsc#1191645).
  • CVE-2021-42252: Fixed an issue inside aspeed_lpc_ctrl_mmap that could have allowed local attackers to access the Aspeed LPC control interface to overwrite memory in the kernel and potentially execute privileges (bnc#1190479).
  • CVE-2021-41864: Fixed prealloc_elems_and_freelist that allowed unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write (bnc#1191317).
  • CVE-2021-42008: Fixed a slab out-of-bounds write in the decode_data function in drivers/net/hamradio/6pack.c. Input from a process that had the CAP_NET_ADMIN capability could have lead to root access (bsc#1191315).

The following non-security bugs were fixed:

  • ACPI: NFIT: Use fallback node id when numa info in NFIT table is incorrect (git-fixes).
  • ACPI: bgrt: Fix CFI violation (git-fixes).
  • ACPI: fix NULL pointer dereference (git-fixes).
  • ACPI: fix NULL pointer dereference (git-fixes).
  • ALSA: hda - Enable headphone mic on Dell Latitude laptops with ALC3254 (git-fixes).
  • ALSA: hda/realtek - ALC236 headset MIC recording issue (git-fixes).
  • ALSA: hda/realtek: Add quirk for Clevo PC50HS (git-fixes).
  • ALSA: hda/realtek: Add quirk for Clevo X170KM-G (git-fixes).
  • ALSA: hda/realtek: Add quirk for TongFang PHxTxX1 (git-fixes).
  • ALSA: hda/realtek: Complete partial device name to avoid ambiguity (git-fixes).
  • ALSA: hda/realtek: Enable 4-speaker output for Dell Precision 5560 laptop (git-fixes).
  • ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo 13s Gen2 (git-fixes).
  • ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW (git-fixes).
  • ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i 15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops (git-fixes).
  • ALSA: hda: avoid write to STATESTS if controller is in reset (git-fixes).
  • ALSA: hda: intel: Allow repeatedly probing on codec configuration errors (bsc#1190801).
  • ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat ioctl (git-fixes).
  • ALSA: seq: Fix a potential UAF by wrong private_free call order (git-fixes).
  • ALSA: usb-audio: Add quirk for VF0770 (git-fixes).
  • ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset (git-fixes).
  • ASoC: DAPM: Fix missing kctl change notifications (git-fixes).
  • ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER (git-fixes).
  • ASoC: Intel: Skylake: Fix passing loadable flag for module (git-fixes).
  • ASoC: Intel: bytcr_rt5640: Move 'Platform Clock' routes to the maps for the matching in-/output (git-fixes).
  • ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic (git-fixes).
  • ASoC: SOF: imx: imx8: Bar index is only valid for…
Record
openSUSE-SU-2021:3641-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:3675-1 No score

Security update for the Linux Kernel

The following security bugs were fixed:

  • CVE-2021-3542: Fixed heap buffer overflow in firedtv driver (bsc#1186063).
  • CVE-2021-3655: Fixed a missing size validations on inbound SCTP packets, which may have allowed the kernel to read uninitialized memory (bsc#1188563).
  • CVE-2021-3715: Fixed a use-after-free in route4_change() in net/sched/cls_route.c (bsc#1190349).
  • CVE-2021-3760: Fixed a use-after-free vulnerability with the ndev->rf_conn_info object (bsc#1190067).
  • CVE-2021-3772: Fixed sctp vtag check in sctp_sf_ootb (bsc#1190351).
  • CVE-2021-3896: Fixed a array-index-out-bounds in detach_capi_ctr in drivers/isdn/capi/kcapi.c (bsc#1191958).
  • CVE-2021-33033: Fixed a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled (bsc#1186109).
  • CVE-2021-34866: Fixed eBPF Type Confusion Privilege Escalation Vulnerability (bsc#1191645).
  • CVE-2021-37159: hso_free_net_device in drivers/net/usb/hso.c called without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free (bnc#1188601).
  • CVE-2021-41864: Fixed prealloc_elems_and_freelist that allowed unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write (bnc#1191317).
  • CVE-2021-42008: Fixed a slab out-of-bounds write in the decode_data function in drivers/net/hamradio/6pack.c. Input from a process that had the CAP_NET_ADMIN capability could have lead to root access (bsc#1191315).
  • CVE-2021-42252: Fixed an issue inside aspeed_lpc_ctrl_mmap that could have allowed local attackers to access the Aspeed LPC control interface to overwrite memory in the kernel and potentially execute privileges (bnc#1190479).
  • CVE-2021-42739: The firewire subsystem had a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bsc#1184673).
  • CVE-2021-43056: Fixed possible KVM host crash via malicious KVM guest on Power8 (bnc#1192107).
  • CVE-2021-43389: There was an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c (bnc#1191958).

The following non-security bugs were fixed:

  • acpi/arm64: fix next_platform_timer() section mismatch error (git-fixes).
  • ACPI: bgrt: Fix CFI violation (git-fixes).
  • ACPI: fix NULL pointer dereference (git-fixes).
  • ACPI: NFIT: Use fallback node id when numa info in NFIT table is incorrect (git-fixes).
  • Add obsolete_rebuilds_subpackage (boo#1172073 bsc#1191731).
  • ALSA: hda: avoid write to STATESTS if controller is in reset (git-fixes).
  • ALSA: hda - Enable headphone mic on Dell Latitude laptops with ALC3254 (git-fixes).
  • ALSA: hda: intel: Allow repeatedly probing on codec configuration errors (bsc#1190801).
  • ALSA: hda/realtek: Add quirk for Clevo PC50HS (git-fixes).
  • ALSA: hda/realtek: Add quirk for Clevo X170KM-G (git-fixes).
  • ALSA: hda/realtek: Add quirk for TongFang PHxTxX1 (git-fixes).
  • ALSA: hda/realtek - ALC236 headset MIC recording issue (git-fixes).
  • ALSA: hda/realtek: Complete partial device name to avoid ambiguity (git-fixes).
  • ALSA: hda/realtek: Enable 4-speaker output for Dell Precision 5560 laptop (git-fixes).
  • ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo 13s Gen2 (git-fixes).
  • ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14 (git-fixes).
  • ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW (git-fixes).
  • ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i 15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops (git-fixes).
  • ALSA: hda: Reduce udelay() at SKL+ position reporting (git-fixes).
  • ALSA: hda: Use position buffer for SKL+ again (git-fixes).
  • ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat ioctl (git-fixes).
  • ALSA: seq: Fix a potential UAF by wrong private_free call order (git-fixes).
  • ALSA: ua101: fix division by zero at probe (git-fixes).
  • ALSA:…
Record
openSUSE-SU-2021:3675-1
Updated
2026-11-02
OSVPUB-A-217307370 No score

In check_map_func_compatibility of verifier.c, there is a possible way to escalate privileges due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

Record
PUB-A-217307370
Updated
2026-11-05
OSVSUSE-SU-2021:3641-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2021-3772: Fixed sctp vtag check in sctp_sf_ootb (bsc#1190351).
  • CVE-2021-3655: Fixed a missing size validations on inbound SCTP packets, which may have allowed the kernel to read uninitialized memory (bsc#1188563).
  • CVE-2021-43056: Fixed possible KVM host crash via malicious KVM guest on Power8 (bnc#1192107).
  • CVE-2021-3896: Fixed a array-index-out-bounds in detach_capi_ctr in drivers/isdn/capi/kcapi.c (bsc#1191958).
  • CVE-2021-3760: Fixed a use-after-free vulnerability with the ndev->rf_conn_info object (bsc#1190067).
  • CVE-2021-42739: The firewire subsystem had a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bsc#1184673).
  • CVE-2021-3542: Fixed heap buffer overflow in firedtv driver (bsc#1186063).
  • CVE-2021-33033: Fixed a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled (bsc#1186109).
  • CVE-2021-3715: Fixed a use-after-free in route4_change() in net/sched/cls_route.c (bsc#1190349).
  • CVE-2021-34866: Fixed eBPF Type Confusion Privilege Escalation Vulnerability (bsc#1191645).
  • CVE-2021-42252: Fixed an issue inside aspeed_lpc_ctrl_mmap that could have allowed local attackers to access the Aspeed LPC control interface to overwrite memory in the kernel and potentially execute privileges (bnc#1190479).
  • CVE-2021-41864: Fixed prealloc_elems_and_freelist that allowed unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write (bnc#1191317).
  • CVE-2021-42008: Fixed a slab out-of-bounds write in the decode_data function in drivers/net/hamradio/6pack.c. Input from a process that had the CAP_NET_ADMIN capability could have lead to root access (bsc#1191315).

The following non-security bugs were fixed:

  • ACPI: NFIT: Use fallback node id when numa info in NFIT table is incorrect (git-fixes).
  • ACPI: bgrt: Fix CFI violation (git-fixes).
  • ACPI: fix NULL pointer dereference (git-fixes).
  • ACPI: fix NULL pointer dereference (git-fixes).
  • ALSA: hda - Enable headphone mic on Dell Latitude laptops with ALC3254 (git-fixes).
  • ALSA: hda/realtek - ALC236 headset MIC recording issue (git-fixes).
  • ALSA: hda/realtek: Add quirk for Clevo PC50HS (git-fixes).
  • ALSA: hda/realtek: Add quirk for Clevo X170KM-G (git-fixes).
  • ALSA: hda/realtek: Add quirk for TongFang PHxTxX1 (git-fixes).
  • ALSA: hda/realtek: Complete partial device name to avoid ambiguity (git-fixes).
  • ALSA: hda/realtek: Enable 4-speaker output for Dell Precision 5560 laptop (git-fixes).
  • ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo 13s Gen2 (git-fixes).
  • ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW (git-fixes).
  • ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i 15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops (git-fixes).
  • ALSA: hda: avoid write to STATESTS if controller is in reset (git-fixes).
  • ALSA: hda: intel: Allow repeatedly probing on codec configuration errors (bsc#1190801).
  • ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat ioctl (git-fixes).
  • ALSA: seq: Fix a potential UAF by wrong private_free call order (git-fixes).
  • ALSA: usb-audio: Add quirk for VF0770 (git-fixes).
  • ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset (git-fixes).
  • ASoC: DAPM: Fix missing kctl change notifications (git-fixes).
  • ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER (git-fixes).
  • ASoC: Intel: Skylake: Fix passing loadable flag for module (git-fixes).
  • ASoC: Intel: bytcr_rt5640: Move 'Platform Clock' routes to the maps for the matching in-/output (git-fixes).
  • ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic (git-fixes).
  • ASoC: SOF: imx: imx8: Bar index is only valid for…
Record
SUSE-SU-2021:3641-1
Updated
2026-11-02
OSVSUSE-SU-2021:3642-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 Real Time kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2021-3772: Fixed sctp vtag check in sctp_sf_ootb (bsc#1190351).
  • CVE-2021-3655: Fixed a missing size validations on inbound SCTP packets, which may have allowed the kernel to read uninitialized memory (bsc#1188563).
  • CVE-2021-43056: Fixed possible KVM host crash via malicious KVM guest on Power8 (bnc#1192107).
  • CVE-2021-3896: Fixed a array-index-out-bounds in detach_capi_ctr in drivers/isdn/capi/kcapi.c (bsc#1191958).
  • CVE-2021-3760: Fixed a use-after-free vulnerability with the ndev->rf_conn_info object (bsc#1190067).
  • CVE-2021-42739: The firewire subsystem had a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bsc#1184673).
  • CVE-2021-3542: Fixed heap buffer overflow in firedtv driver (bsc#1186063).
  • CVE-2021-33033: Fixed a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled (bsc#1186109).
  • CVE-2021-3715: Fixed a use-after-free in route4_change() in net/sched/cls_route.c (bsc#1190349).
  • CVE-2021-34866: Fixed eBPF Type Confusion Privilege Escalation Vulnerability (bsc#1191645).
  • CVE-2021-42252: Fixed an issue inside aspeed_lpc_ctrl_mmap that could have allowed local attackers to access the Aspeed LPC control interface to overwrite memory in the kernel and potentially execute privileges (bnc#1190479).
  • CVE-2021-41864: Fixed prealloc_elems_and_freelist that allowed unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write (bnc#1191317).
  • CVE-2021-42008: Fixed a slab out-of-bounds write in the decode_data function in drivers/net/hamradio/6pack.c. Input from a process that had the CAP_NET_ADMIN capability could have lead to root access (bsc#1191315).

The following non-security bugs were fixed:

  • ACPI: NFIT: Use fallback node id when numa info in NFIT table is incorrect (git-fixes).
  • ACPI: bgrt: Fix CFI violation (git-fixes).
  • ACPI: fix NULL pointer dereference (git-fixes).
  • ACPI: fix NULL pointer dereference (git-fixes).
  • ALSA: hda - Enable headphone mic on Dell Latitude laptops with ALC3254 (git-fixes).
  • ALSA: hda/realtek - ALC236 headset MIC recording issue (git-fixes).
  • ALSA: hda/realtek: Add quirk for Clevo PC50HS (git-fixes).
  • ALSA: hda/realtek: Add quirk for Clevo X170KM-G (git-fixes).
  • ALSA: hda/realtek: Add quirk for TongFang PHxTxX1 (git-fixes).
  • ALSA: hda/realtek: Complete partial device name to avoid ambiguity (git-fixes).
  • ALSA: hda/realtek: Enable 4-speaker output for Dell Precision 5560 laptop (git-fixes).
  • ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo 13s Gen2 (git-fixes).
  • ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW (git-fixes).
  • ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i 15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops (git-fixes).
  • ALSA: hda: avoid write to STATESTS if controller is in reset (git-fixes).
  • ALSA: hda: intel: Allow repeatedly probing on codec configuration errors (bsc#1190801).
  • ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat ioctl (git-fixes).
  • ALSA: seq: Fix a potential UAF by wrong private_free call order (git-fixes).
  • ALSA: usb-audio: Add quirk for VF0770 (git-fixes).
  • ALSA: usb-audio: Provide quirk for Sennheiser GSP670 Headset (git-fixes).
  • ASoC: DAPM: Fix missing kctl change notifications (git-fixes).
  • ASoC: Intel: Skylake: Fix module configuration for KPB and MIXER (git-fixes).
  • ASoC: Intel: Skylake: Fix passing loadable flag for module (git-fixes).
  • ASoC: Intel: bytcr_rt5640: Move 'Platform Clock' routes to the maps for the matching in-/output (git-fixes).
  • ASoC: Intel: sof_sdw: tag SoundWire BEs as non-atomic (git-fixes).
  • ASoC: SOF: imx: imx8: Bar index is only valid for…
Record
SUSE-SU-2021:3642-1
Updated
2026-11-02
OSVSUSE-SU-2021:3675-1 No score

Security update for the Linux Kernel

The following security bugs were fixed:

  • CVE-2021-3542: Fixed heap buffer overflow in firedtv driver (bsc#1186063).
  • CVE-2021-3655: Fixed a missing size validations on inbound SCTP packets, which may have allowed the kernel to read uninitialized memory (bsc#1188563).
  • CVE-2021-3715: Fixed a use-after-free in route4_change() in net/sched/cls_route.c (bsc#1190349).
  • CVE-2021-3760: Fixed a use-after-free vulnerability with the ndev->rf_conn_info object (bsc#1190067).
  • CVE-2021-3772: Fixed sctp vtag check in sctp_sf_ootb (bsc#1190351).
  • CVE-2021-3896: Fixed a array-index-out-bounds in detach_capi_ctr in drivers/isdn/capi/kcapi.c (bsc#1191958).
  • CVE-2021-33033: Fixed a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled (bsc#1186109).
  • CVE-2021-34866: Fixed eBPF Type Confusion Privilege Escalation Vulnerability (bsc#1191645).
  • CVE-2021-37159: hso_free_net_device in drivers/net/usb/hso.c called without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free (bnc#1188601).
  • CVE-2021-41864: Fixed prealloc_elems_and_freelist that allowed unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write (bnc#1191317).
  • CVE-2021-42008: Fixed a slab out-of-bounds write in the decode_data function in drivers/net/hamradio/6pack.c. Input from a process that had the CAP_NET_ADMIN capability could have lead to root access (bsc#1191315).
  • CVE-2021-42252: Fixed an issue inside aspeed_lpc_ctrl_mmap that could have allowed local attackers to access the Aspeed LPC control interface to overwrite memory in the kernel and potentially execute privileges (bnc#1190479).
  • CVE-2021-42739: The firewire subsystem had a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandled bounds checking (bsc#1184673).
  • CVE-2021-43056: Fixed possible KVM host crash via malicious KVM guest on Power8 (bnc#1192107).
  • CVE-2021-43389: There was an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c (bnc#1191958).

The following non-security bugs were fixed:

  • acpi/arm64: fix next_platform_timer() section mismatch error (git-fixes).
  • ACPI: bgrt: Fix CFI violation (git-fixes).
  • ACPI: fix NULL pointer dereference (git-fixes).
  • ACPI: NFIT: Use fallback node id when numa info in NFIT table is incorrect (git-fixes).
  • Add obsolete_rebuilds_subpackage (boo#1172073 bsc#1191731).
  • ALSA: hda: avoid write to STATESTS if controller is in reset (git-fixes).
  • ALSA: hda - Enable headphone mic on Dell Latitude laptops with ALC3254 (git-fixes).
  • ALSA: hda: intel: Allow repeatedly probing on codec configuration errors (bsc#1190801).
  • ALSA: hda/realtek: Add quirk for Clevo PC50HS (git-fixes).
  • ALSA: hda/realtek: Add quirk for Clevo X170KM-G (git-fixes).
  • ALSA: hda/realtek: Add quirk for TongFang PHxTxX1 (git-fixes).
  • ALSA: hda/realtek - ALC236 headset MIC recording issue (git-fixes).
  • ALSA: hda/realtek: Complete partial device name to avoid ambiguity (git-fixes).
  • ALSA: hda/realtek: Enable 4-speaker output for Dell Precision 5560 laptop (git-fixes).
  • ALSA: hda/realtek: Fix for quirk to enable speaker output on the Lenovo 13s Gen2 (git-fixes).
  • ALSA: hda/realtek: Fix mic mute LED for the HP Spectre x360 14 (git-fixes).
  • ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW (git-fixes).
  • ALSA: hda/realtek: Quirks to enable speaker output for Lenovo Legion 7i 15IMHG05, Yoga 7i 14ITL5/15ITL5, and 13s Gen2 laptops (git-fixes).
  • ALSA: hda: Reduce udelay() at SKL+ position reporting (git-fixes).
  • ALSA: hda: Use position buffer for SKL+ again (git-fixes).
  • ALSA: pcm: Workaround for a wrong offset in SYNC_PTR compat ioctl (git-fixes).
  • ALSA: seq: Fix a potential UAF by wrong private_free call order (git-fixes).
  • ALSA: ua101: fix division by zero at probe (git-fixes).
  • ALSA:…
Record
SUSE-SU-2021:3675-1
Updated
2026-11-02
OSVSUSE-SU-2021:3718-1 No score

Security update for the Linux Kernel (Live Patch 6 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-59_24 fixes several issues.

The following security issues were fixed:

  • CVE-2021-34866: Fixed possible eBPF Type Confusion privilege escalation vulnerability via eBPF type confusion (bsc#1191646).
  • CVE-2021-41864: Fixed an integer overflow with a resultant out-of-bounds write in prealloc_elems_and_freelist in kernel/bpf/stackmap.c (bsc#1191318).
Record
SUSE-SU-2021:3718-1
Updated
2026-11-02
OSVSUSE-SU-2021:3738-1 No score

Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-57 fixes several issues.

The following security issues were fixed:

  • CVE-2021-3752: Fixed vulnerability in the linux kernel Bluetooth uaf module (bsc#1190432).
  • CVE-2021-34866: Fixed possible eBPF Type Confusion privilege escalation vulnerability via eBPF type confusion (bsc#1191646).
  • CVE-2021-41864: Fixed an integer overflow with a resultant out-of-bounds write in prealloc_elems_and_freelist in kernel/bpf/stackmap.c (bsc#1191318).
Record
SUSE-SU-2021:3738-1
Updated
2026-11-02
OSVSUSE-SU-2021:3742-1 No score

Security update for the Linux Kernel (Live Patch 5 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-59_19 fixes several issues.

The following security issues were fixed:

  • CVE-2021-34866: Fixed possible eBPF Type Confusion privilege escalation vulnerability via eBPF type confusion (bsc#1191646).
  • CVE-2021-41864: Fixed an integer overflow with a resultant out-of-bounds write in prealloc_elems_and_freelist in kernel/bpf/stackmap.c (bsc#1191318).
Record
SUSE-SU-2021:3742-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bpftool
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-core
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-cross-headers
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-debug
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-debug-core
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-debug-devel
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-debug-modules
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-debug-modules-extra
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-debug-modules-internal
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
Show 172 moreShow less
Affected packages
PackageAffectedFixed
kernel-devel
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-headers
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-ipaclones-internal
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-modules
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-modules-extra
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-modules-internal
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-selftests-internal
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-tools
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-tools-libs
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
kernel-tools-libs-devel
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
perf
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
python3-perf
TuxCare:CentOS:8.4
From an advisory covering 59 CVEs
 before 4.18.0-305.25.1.el8_4.tuxcare.els42
4.18.0-305.25.1.el8_4.tuxcare.els42
bpftool
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-core
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-cross-headers
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-debug
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-debug-core
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-debug-devel
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-debug-modules
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-debug-modules-extra
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-debug-modules-internal
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-devel
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-headers
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-ipaclones-internal
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-modules
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-modules-extra
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-modules-internal
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-selftests-internal
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-tools
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-tools-libs
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
kernel-tools-libs-devel
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
perf
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
python3-perf
TuxCare:CentOS:8.5
From an advisory covering 55 CVEs
 before 4.18.0-348.7.1.el8_5.tuxcare.els42
4.18.0-348.7.1.el8_5.tuxcare.els42
linux
Debian:12
 before 5.14.6-1
5.14.6-1
linux
Debian:13
 before 5.14.6-1
5.14.6-1
linux
Debian:14
 before 5.14.6-1
5.14.6-1
:linux_kernel:
Android
 :0 up to :2022-04-05, plus listed versions
Kernel
:2022-04-05
bpftool-debuginfo
Red Hat:rhev_hypervisor:4.4::el8
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-debug-debuginfo
Red Hat:rhev_hypervisor:4.4::el8
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-debuginfo
Red Hat:rhev_hypervisor:4.4::el8
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-debuginfo-common-x86_64
Red Hat:rhev_hypervisor:4.4::el8
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-devel
Red Hat:rhev_hypervisor:4.4::el8
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-tools-debuginfo
Red Hat:rhev_hypervisor:4.4::el8
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
perf
Red Hat:rhev_hypervisor:4.4::el8
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
perf-debuginfo
Red Hat:rhev_hypervisor:4.4::el8
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
python3-perf-debuginfo
Red Hat:rhev_hypervisor:4.4::el8
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
bpftool
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
bpftool-debuginfo
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-abi-stablelists
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-core
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-debug
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-debug-core
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-debug-debuginfo
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-debug-devel
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-debug-modules
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-debug-modules-extra
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-debuginfo
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-debuginfo-common-aarch64
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-debuginfo-common-ppc64le
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-debuginfo-common-s390x
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-debuginfo-common-x86_64
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-devel
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-doc
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-modules
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-modules-extra
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-tools
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-tools-debuginfo
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-tools-libs
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-zfcpdump
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-zfcpdump-core
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-zfcpdump-debuginfo
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-zfcpdump-devel
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-zfcpdump-modules
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-zfcpdump-modules-extra
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
perf
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
perf-debuginfo
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
python3-perf
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
python3-perf-debuginfo
Red Hat:rhel_eus:8.6::baseos
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
bpftool-debuginfo
Red Hat:rhel_eus:8.6::crb
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-debug-debuginfo
Red Hat:rhel_eus:8.6::crb
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-debuginfo
Red Hat:rhel_eus:8.6::crb
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-debuginfo-common-aarch64
Red Hat:rhel_eus:8.6::crb
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-debuginfo-common-ppc64le
Red Hat:rhel_eus:8.6::crb
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-debuginfo-common-x86_64
Red Hat:rhel_eus:8.6::crb
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-tools-debuginfo
Red Hat:rhel_eus:8.6::crb
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-tools-libs-devel
Red Hat:rhel_eus:8.6::crb
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
perf-debuginfo
Red Hat:rhel_eus:8.6::crb
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
python3-perf-debuginfo
Red Hat:rhel_eus:8.6::crb
From an advisory covering 57 CVEs
 before 0:4.18.0-372.91.1.el8_6
0:4.18.0-372.91.1.el8_6
kernel-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP3
From an advisory covering 13 CVEs
 before 5.3.18-38.28.2
5.3.18-38.28.2
kernel-source-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP3
From an advisory covering 13 CVEs
 before 5.3.18-38.28.2
5.3.18-38.28.2
kernel-syms-azure
SUSE:Linux Enterprise Module for Public Cloud 15 SP3
From an advisory covering 13 CVEs
 before 5.3.18-38.28.1
5.3.18-38.28.1
kernel-rt
SUSE:Real Time Module 15 SP3
From an advisory covering 13 CVEs
 before 5.3.18-60.1
5.3.18-60.1
kernel-rt_debug
SUSE:Real Time Module 15 SP3
From an advisory covering 13 CVEs
 before 5.3.18-60.1
5.3.18-60.1
kernel-source-rt
SUSE:Real Time Module 15 SP3
From an advisory covering 13 CVEs
 before 5.3.18-60.1
5.3.18-60.1
kernel-syms-rt
SUSE:Real Time Module 15 SP3
From an advisory covering 13 CVEs
 before 5.3.18-60.1
5.3.18-60.1
kernel-rt
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 13 CVEs
 before 5.3.18-60.1
5.3.18-60.1
kernel-64kb
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-default
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-default-base
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1.18.21.1
5.3.18-59.34.1.18.21.1
kernel-preempt
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-source
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-zfcpdump
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-docs
SUSE:Linux Enterprise Module for Development Tools 15 SP3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-obs-build
SUSE:Linux Enterprise Module for Development Tools 15 SP3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-preempt
SUSE:Linux Enterprise Module for Development Tools 15 SP3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-source
SUSE:Linux Enterprise Module for Development Tools 15 SP3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-syms
SUSE:Linux Enterprise Module for Development Tools 15 SP3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-default
SUSE:Linux Enterprise Module for Legacy 15 SP3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-default
SUSE:Linux Enterprise Live Patching 15 SP3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-livepatch-SLE15-SP3_Update_9
SUSE:Linux Enterprise Live Patching 15 SP3
From an advisory covering 15 CVEs
 before 1-7.3.1
1-7.3.1
kernel-default
SUSE:Linux Enterprise High Availability Extension 15 SP3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-default
SUSE:Linux Enterprise Workstation Extension 15 SP3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-preempt
SUSE:Linux Enterprise Workstation Extension 15 SP3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-default
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-default-base
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1.18.21.1
5.3.18-59.34.1.18.21.1
kernel-livepatch-SLE15-SP3_Update_3
SUSE:Linux Enterprise Live Patching 15 SP3
From an advisory covering 2 CVEs
 before 6-2.2
6-2.2
kernel-livepatch-SLE15-SP3_Update_6
SUSE:Linux Enterprise Live Patching 15 SP3
From an advisory covering 2 CVEs
 before 2-2.2
2-2.2
kernel-livepatch-SLE15-SP3_Update_0
SUSE:Linux Enterprise Live Patching 15 SP3
From an advisory covering 3 CVEs
 before 8-3.2
8-3.2
kernel-livepatch-SLE15-SP3_Update_1
SUSE:Linux Enterprise Live Patching 15 SP3
From an advisory covering 2 CVEs
 before 6-2.2
6-2.2
kernel-livepatch-SLE15-SP3_Update_2
SUSE:Linux Enterprise Live Patching 15 SP3
From an advisory covering 2 CVEs
 before 6-2.2
6-2.2
kernel-livepatch-SLE15-SP3_Update_4
SUSE:Linux Enterprise Live Patching 15 SP3
From an advisory covering 2 CVEs
 before 5-2.2
5-2.2
kernel-livepatch-SLE15-SP3_Update_5
SUSE:Linux Enterprise Live Patching 15 SP3
From an advisory covering 2 CVEs
 before 4-2.2
4-2.2
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-aws-5.11
Ubuntu:20.04:LTS
 before 5.11.0-1020.21~20.04.2, plus listed versions
5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
5.11.0-1020.21~20.04.2
linux-azure-5.11
Ubuntu:20.04:LTS
 before 5.11.0-1020.21~20.04.1, plus listed versions
5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
5.11.0-1020.21~20.04.1
linux-gcp-5.11
Ubuntu:20.04:LTS
 before 5.11.0-1021.23~20.04.1, plus listed versions
5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1
5.11.0-1021.23~20.04.1
linux-hwe-5.11
Ubuntu:20.04:LTS
 before 5.11.0-38.42~20.04.1, plus listed versions
5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.15.11.0-37.41~20.04.2
5.11.0-38.42~20.04.1
linux-oem-5.10
Ubuntu:20.04:LTS
 before 5.10.0-1050.52, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 15 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.51
5.10.0-1050.52
linux-oem-5.13
Ubuntu:20.04:LTS
 before 5.13.0-1017.21, plus listed versions
5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.18
5.13.0-1017.21
linux-oracle-5.11
Ubuntu:20.04:LTS
 before 5.11.0-1020.21~20.04.1, plus listed versions
5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1
5.11.0-1020.21~20.04.1
linux-riscv-5.11
Ubuntu:20.04:LTS
 before 5.11.0-1021.22~20.04.1, plus listed versions
5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.1
5.11.0-1021.22~20.04.1
linux-aws-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1
 None known
linux-azure-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1
 None known
linux-gcp-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41
 None known
linux-hwe-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1
Show 16 moreShow less
5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1
 None known
linux-intel-5.13
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19
 None known
linux-oem-5.6
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13
Show 24 moreShow less
5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60
 None known
linux-oracle-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1
 None known
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-riscv-5.8
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1
Show 5 moreShow less
5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1
 None known
kernel-azure
openSUSE:Leap 15.3
From an advisory covering 13 CVEs
 before 5.3.18-38.28.2
5.3.18-38.28.2
kernel-source-azure
openSUSE:Leap 15.3
From an advisory covering 13 CVEs
 before 5.3.18-38.28.2
5.3.18-38.28.2
kernel-syms-azure
openSUSE:Leap 15.3
From an advisory covering 13 CVEs
 before 5.3.18-38.28.1
5.3.18-38.28.1
dtb-aarch64
openSUSE:Leap 15.3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-64kb
openSUSE:Leap 15.3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-debug
openSUSE:Leap 15.3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-default
openSUSE:Leap 15.3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-default-base
openSUSE:Leap 15.3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1.18.21.1
5.3.18-59.34.1.18.21.1
kernel-docs
openSUSE:Leap 15.3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-kvmsmall
openSUSE:Leap 15.3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-obs-build
openSUSE:Leap 15.3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-obs-qa
openSUSE:Leap 15.3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-preempt
openSUSE:Leap 15.3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-source
openSUSE:Leap 15.3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-syms
openSUSE:Leap 15.3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1
kernel-zfcpdump
openSUSE:Leap 15.3
From an advisory covering 15 CVEs
 before 5.3.18-59.34.1
5.3.18-59.34.1

History

History
RecordedChangedSources
affected
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-34866 is a high vulnerability (CVSS 8.8) in Linux Kernel, published November 9, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.97%, the 62nd percentile. Fixed in linux 5.14.6-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 291 references and the rest of 7 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open