CVE-2021-47595

net/sched: sch_ets: don't remove idle classes from the round-robin list

5.5 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

net/sched: sch_ets: don't remove idle classes from the round-robin list

Shuang reported that the following script:

tc qdisc add dev ddd0 handle 10: parent 1: ets bands 8 strict 4 priomap 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7
mausezahn ddd0 -A 10.10.10.1 -B 10.10.10.2 -c 0 -a own -b 00:c1:a0:c1:a0:00 -t udp &
tc qdisc change dev ddd0 handle 10: ets bands 4 strict 2 quanta 2500 2500 priomap 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3

crashes systematically when line 2) is commented:

list_del corruption, ffff8e028404bd30->next is LIST_POISON1 (dead000000000100) ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:47! invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 0 PID: 954 Comm: tc Not tainted 5.16.0-rc4+ #478 Hardware name: Red Hat KVM, BIOS 1.11.1-4.module+el8.1.0+4066+0f1aadab 04/01/2014 RIP: 0010:__list_del_entry_valid.cold.1+0x12/0x47 Code: fe ff 0f 0b 48 89 c1 4c 89 c6 48 c7 c7 08 42 1b 87 e8 1d c5 fe ff 0f 0b 48 89 fe 48 89 c2 48 c7 c7 98 42 1b 87 e8 09 c5 fe ff <0f> 0b 48 c7 c7 48 43 1b 87 e8 fb c4 fe ff 0f 0b 48 89 f2 48 89 fe RSP: 0018:ffffae46807a3888 EFLAGS: 00010246 RAX: 000000000000004e RBX: 0000000000000007 RCX: 0000000000000202 RDX: 0000000000000000 RSI: ffffffff871ac536 RDI: 00000000ffffffff RBP: ffffae46807a3a10 R08: 0000000000000000 R09: c0000000ffff7fff R10: 0000000000000001 R11: ffffae46807a36a8 R12: ffff8e028404b800 R13: ffff8e028404bd30 R14: dead000000000100 R15: ffff8e02fafa2400 FS: 00007efdc92e4480(0000) GS:ffff8e02fb600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000682f48 CR3: 00000001058be000 CR4: 0000000000350ef0 Call Trace: <TASK> ets_qdisc_change+0x58b/0xa70 [sch_ets] tc_modify_qdisc+0x323/0x880 rtnetlink_rcv_msg+0x169/0x4a0 netlink_rcv_skb+0x50/0x100 netlink_unicast+0x1a5/0x280 netlink_sendmsg+0x257/0x4d0 sock_sendmsg+0x5b/0x60 ____sys_sendmsg+0x1f2/0x260 ___sys_sendmsg+0x7c/0xc0 __sys_sendmsg+0x57/0xa0 do_syscall_64+0x3a/0x80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7efdc8031338 Code: 89 02 48 c7 c0 ff ff ff ff eb b5 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 8d 05 25 43 2c 00 8b 00 85 c0 75 17 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 41 54 41 89 d4 55 RSP: 002b:00007ffdf1ce9828 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 0000000061b37a97 RCX: 00007efdc8031338 RDX: 0000000000000000 RSI: 00007ffdf1ce9890 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000001 R09: 000000000078a940 R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000688880 R14: 0000000000000000 R15: 0000000000000000 </TASK> Modules linked in: sch_ets sch_tbf dummy rfkill iTCO_wdt iTCO_vendor_support intel_rapl_msr intel_rapl_common joydev pcspkr i2c_i801 virtio_balloon i2c_smbus lpc_ich ip_tables xfs libcrc32c crct10dif_pclmul crc32_pclmul crc32c_intel serio_raw ghash_clmulni_intel ahci libahci libata virtio_blk virtio_console virtio_net net_failover failover sunrpc dm_mirror dm_region_hash dm_log dm_mod [last unloaded: sch_ets] ---[ end trace f35878d1912655c2 ]--- RIP: 0010:__list_del_entry_valid.cold.1+0x12/0x47 Code: fe ff 0f 0b 48 89 c1 4c 89 c6 48 c7 c7 08 42 1b 87 e8 1d c5 fe ff 0f 0b 48 89 fe 48 89 c2 48 c7 c7 98 42 1b 87 e8 09 c5 fe ff <0f> 0b 48 c7 c7 48 43 1b 87 e8 fb c4 fe ff 0f 0b 48 89 f2 48 89 fe RSP: 0018:ffffae46807a3888 EFLAGS: 00010246 RAX: 000000000000004e RBX: 0000000000000007 RCX: 0000000000000202 RDX: 0000000000000000 RSI: ffffffff871ac536 RDI: 00000000ffffffff RBP: ffffae46807a3a10 R08: 0000000000000000 R09: c0000000ffff7fff R10: 0000000000000001 R11: ffffae46807a36a8 R12: ffff8e028404b800 R13: ffff8e028404bd30 R14: dead000000000100 R15: ffff8e02fafa2400 FS: 00007efdc92e4480(0000) GS:ffff8e02fb600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000 ---truncated---

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.24%Up 0.2 points since Jun 20, 2024

What each source reports

NVD Score used 5.5

In the Linux kernel, the following vulnerability has been resolved:

net/sched: sch_ets: don't remove idle classes from the round-robin list

Shuang reported that the following script:

tc qdisc add dev ddd0 handle 10: parent 1: ets bands 8 strict 4 priomap 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7
mausezahn ddd0 -A 10.10.10.1 -B 10.10.10.2 -c 0 -a own -b 00:c1:a0:c1:a0:00 -t udp &
tc qdisc change dev ddd0 handle 10: ets bands 4 strict 2 quanta 2500 2500 priomap 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3

crashes systematically when line 2) is commented:

Record: CVE-2021-47595
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

CVE List No score

net/sched: sch_ets: don't remove idle classes from the round-robin list

In the Linux kernel, the following vulnerability has been resolved:

net/sched: sch_ets: don't remove idle classes from the round-robin list

Shuang reported that the following script:

tc qdisc add dev ddd0 handle 10: parent 1: ets bands 8 strict 4 priomap 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7
mausezahn ddd0 -A 10.10.10.1 -B 10.10.10.2 -c 0 -a own -b 00:c1:a0:c1:a0:00 -t udp &
tc qdisc change dev ddd0 handle 10: ets bands 4 strict 2 quanta 2500 2500 priomap 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3

crashes systematically when line 2) is commented:

Record: CVE-2021-47595
Updated: 2026-11-02

EUVDEUVD-2021-34597 No score

In the Linux kernel, the following vulnerability has been resolved:

net/sched: sch_ets: don't remove idle classes from the round-robin list

Shuang reported that the following script:

tc qdisc add dev ddd0 handle 10: parent 1: ets bands 8 strict 4 priomap 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7
mausezahn ddd0 -A 10.10.10.1 -B 10.10.10.2 -c 0 -a own -b 00:c1:a0:c1:a0:00 -t udp &
tc qdisc change dev ddd0 handle 10: ets bands 4 strict 2 quanta 2500 2500 priomap 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3

crashes systematically when line 2) is commented:

Record: EUVD-2021-34597
Updated: 2026-11-02

GitHub AdvisoriesGHSA-7jvp-hvfw-w5mc 5.5

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_ets: don't...

In the Linux kernel, the following vulnerability has been resolved:

net/sched: sch_ets: don't remove idle classes from the round-robin list

Shuang reported that the following script:

tc qdisc add dev ddd0 handle 10: parent 1: ets bands 8 strict 4 priomap 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7
mausezahn ddd0 -A 10.10.10.1 -B 10.10.10.2 -c 0 -a own -b 00:c1:a0:c1:a0:00 -t udp &
tc qdisc change dev ddd0 handle 10: ets bands 4 strict 2 quanta 2500 2500 priomap 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3

crashes systematically when line 2) is commented:

Record: GHSA-7jvp-hvfw-w5mc
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSV 5.5

In the Linux kernel, the following vulnerability has been resolved:

net/sched: sch_ets: don't remove idle classes from the round-robin list

Shuang reported that the following script:

tc qdisc add dev ddd0 handle 10: parent 1: ets bands 8 strict 4 priomap 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7
mausezahn ddd0 -A 10.10.10.1 -B 10.10.10.2 -c 0 -a own -b 00:c1:a0:c1:a0:00 -t udp &
tc qdisc change dev ddd0 handle 10: ets bands 4 strict 2 quanta 2500 2500 priomap 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3

crashes systematically when line 2) is commented:

Record: CVE-2021-47595
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2021-47595 5.5

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_ets: don't remove idle classes from the round-robin list Shuang reported that the following script: 1) tc qdisc add dev ddd0 handle 10: parent 1: ets bands 8 strict 4 priomap 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 2) mausezahn ddd0 -A 10.10.10.1 -B 10.10.10.2 -c 0 -a own -b 00:c1:a0:c1:a0:00 -t udp & 3) tc qdisc change dev ddd0 handle 10: ets bands 4 strict 2 quanta 2500 2500 priomap 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 crashes systematically when line 2) is commented: list_del corruption, ffff8e028404bd30->next is LIST_POISON1 (dead000000000100) ------------[ cut here ]------------ kernel BUG at lib/list_debug.c:47! invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 0 PID: 954 Comm: tc Not tainted 5.16.0-rc4+ #478 Hardware name: Red Hat KVM, BIOS 1.11.1-4.module+el8.1.0+4066+0f1aadab 04/01/2014 RIP: 0010:__list_del_entry_valid.cold.1+0x12/0x47 Code: fe ff 0f 0b 48 89 c1 4c 89 c6 48 c7 c7 08 42 1b 87 e8 1d c5 fe ff 0f 0b 48 89 fe 48 89 c2 48 c7 c7 98 42 1b 87 e8 09 c5 fe ff <0f> 0b 48 c7 c7 48 43 1b 87 e8 fb c4 fe ff 0f 0b 48 89 f2 48 89 fe RSP: 0018:ffffae46807a3888 EFLAGS: 00010246 RAX: 000000000000004e RBX: 0000000000000007 RCX: 0000000000000202 RDX: 0000000000000000 RSI: ffffffff871ac536 RDI: 00000000ffffffff RBP: ffffae46807a3a10 R08: 0000000000000000 R09: c0000000ffff7fff R10: 0000000000000001 R11: ffffae46807a36a8 R12: ffff8e028404b800 R13: ffff8e028404bd30 R14: dead000000000100 R15: ffff8e02fafa2400 FS: 00007efdc92e4480(0000) GS:ffff8e02fb600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000682f48 CR3: 00000001058be000 CR4: 0000000000350ef0 Call Trace: <TASK> ets_qdisc_change+0x58b/0xa70 [sch_ets] tc_modify_qdisc+0x323/0x880 rtnetlink_rcv_msg+0x169/0x4a0 netlink_rcv_skb+0x50/0x100 netlink_unicast+0x1a5/0x280 netlink_sendmsg+0x257/0x4d0 sock_sendmsg+0x5b/0x60 ____sys_sendmsg+0x1f2/0x260 ___sys_sendmsg+0x7c/0xc0 __sys_sendmsg+0x57/0xa0 do_syscall_64+0x3a/0x80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7efdc8031338 Code: 89 02 48 c7 c0 ff ff ff ff eb b5 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 8d 05 25 43 2c 00 8b 00 85 c0 75 17 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 41 54 41 89 d4 55 RSP: 002b:00007ffdf1ce9828 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 0000000061b37a97 RCX: 00007efdc8031338 RDX: 0000000000000000 RSI: 00007ffdf1ce9890 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000001 R09: 000000000078a940 R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 R13: 0000000000688880 R14: 0000000000000000 R15: 0000000000000000 </TASK> Modules linked in: sch_ets sch_tbf dummy rfkill iTCO_wdt iTCO_vendor_support intel_rapl_msr intel_rapl_common joydev pcspkr i2c_i801 virtio_balloon i2c_smbus lpc_ich ip_tables xfs libcrc32c crct10dif_pclmul crc32_pclmul crc32c_intel serio_raw ghash_clmulni_intel ahci libahci libata virtio_blk virtio_console virtio_net net_failover failover sunrpc dm_mirror dm_region_hash dm_log dm_mod [last unloaded: sch_ets] ---[ end trace f35878d1912655c2 ]--- RIP: 0010:__list_del_entry_valid.cold.1+0x12/0x47 Code: fe ff 0f 0b 48 89 c1 4c 89 c6 48 c7 c7 08 42 1b 87 e8 1d c5 fe ff 0f 0b 48 89 fe 48 89 c2 48 c7 c7 98 42 1b 87 e8 09 c5 fe ff <0f> 0b 48 c7 c7 48 43 1b 87 e8 fb c4 fe ff 0f 0b 48 89 f2 48 89 fe RSP: 0018:ffffae46807a3888 EFLAGS: 00010246 RAX: 000000000000004e RBX: 0000000000000007 RCX: 0000000000000202 RDX: 0000000000000000 RSI: ffffffff871ac536 RDI: 00000000ffffffff RBP: ffffae46807a3a10 R08: 0000000000000000 R09: c0000000ffff7fff R10: 0000000000000001 R11: ffffae46807a36a8 R12: ffff8e028404b800 R13: ffff8e028404bd30 R14: dead000000000100 R15: ffff8e02fafa2400 FS: 00007efdc92e4480(0000) GS:ffff8e02fb600000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000 ---truncated---

Record: DEBIAN-CVE-2021-47595
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 11 moreShow less

OSVUBUNTU-CVE-2021-47595 5.5

Record: UBUNTU-CVE-2021-47595
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVSUSE-SU-2024:2362-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47247: net/mlx5e: Fix use-after-free of encap entry in neigh update handler (bsc#1224865).
CVE-2021-47311: net: qcom/emac: fix UAF in emac_remove (bsc#1225010).
CVE-2021-47368: enetc: Fix illegal access when reading affinity_hint (bsc#1225161).
CVE-2021-47372: net: macb: fix use after free on rmmod (bsc#1225184).
CVE-2021-47379: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd (bsc#1225203).
CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
CVE-2022-48760: USB: core: Fix hang in usb_kill_urb by adding memory barriers (bsc#1226712).
CVE-2023-52707: sched/psi: Fix use-after-free in ep_remove_wait_queue() (bsc#1225109). polled (bsc#1202623).
CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384).
CVE-2024-35789: Check fast rx for non-4addr sta VLAN changes (bsc#1224749).
CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1224766).
CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1224764).
CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1224765).
CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1224703).
CVE-2024-36894: usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete (bsc#1225749).
CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225732).
CVE-2024-36940: pinctrl: core: delete incorrect free in pinctrl_enable() (bsc#1225840).
CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1225866).
CVE-2024-38545: RDMA/hns: Fix UAF for cq async event (bsc#1226595)
CVE-2024-38559: scsi: qedf: Ensure the copied buf is NUL terminated (bsc#1226758).
CVE-2024-38560: scsi: bfa: Ensure the copied buf is NUL terminated (bsc#1226786).

The following non-security bugs were fixed:

NFS: avoid infinite loop in pnfs_update_layout (bsc#1219633 bsc#1226226).
ocfs2: adjust enabling place for la window (bsc#1219224).
ocfs2: fix sparse warnings (bsc#1219224).
ocfs2: improve write IO performance when fragmentation is high (bsc#1219224).
ocfs2: speed up chain-list searching (bsc#1219224).
psi: Fix uaf issue when psi trigger is destroyed while being
x86/tsc: Trust initial offset in architectural TSC-adjust MSRs (bsc#1222015 bsc#1226962).

Record: SUSE-SU-2024:2362-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2372-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47089: kfence: fix memory leak when cat kfence objects (bsc#1220958.
CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek() (bsc#1225391).
CVE-2021-47515: seg6: fix the iif in the IPv6 socket control block (bsc#1225426).
CVE-2021-47538: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (bsc#1225448).
CVE-2021-47539: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (bsc#1225452).
CVE-2021-47555: net: vlan: fix underflow for the real_dev refcnt (bsc#1225467).
CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
CVE-2021-47572: net: nexthop: fix null pointer dereference when IPv6 is not enabled (bsc#1225389).
CVE-2022-48716: ASoC: codecs: wcd938x: fix incorrect used of portid (bsc#1226678).
CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
CVE-2023-52658: Revert 'net/mlx5: Block entering switchdev mode with ns inconsistency' (bsc#1224719).
CVE-2023-52667: net/mlx5e: fix a potential double-free in fs_any_create_groups (bsc#1224603).
CVE-2023-52670: rpmsg: virtio: Free driver_override when rpmsg_remove() (bsc#1224696).
CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
CVE-2023-52835: perf/core: Bail out early if the request AUX area is out of bound (bsc#1225602).
CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
CVE-2023-52869: pstore/platform: Add check for kstrdup (bsc#1225050).
CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
CVE-2023-52882: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (bsc#1225692).
CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
CVE-2024-26644: btrfs: do not abort filesystem when attempting to snapshot deleted subvolume (bsc#1221282bsc#1222072).
CVE-2024-26720: mm: Avoid overflows in dirty throttling logic (bsc#1222364).
CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384).
CVE-2024-26973: fat: fix uninitialized field in nostale filehandles (git-fixesbsc#1223641).
CVE-2024-27432: net: ethernet: mtk_eth_soc: fix PPE hanging issue (bsc#1224716).
CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
CVE-2024-35789: Check fast rx for non-4addr sta VLAN changes (bsc#1224749).
CVE-2024-35790: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (bsc#1224712).
CVE-2024-35807: ext4: fix corruption during on-line resize (bsc#1224735).
CVE-2024-35835: net/mlx5e: fix a double-free in arfs_create_groups (bsc#1224605).
CVE-2024-35848: eeprom: at24: fix memory corruption race condition (bsc#1224612).
CVE-2024-35857: icmp: prevent possible NULL dereferences from icmp_build_probe() (bsc#1224619).
CVE-2024-35861:…

Record: SUSE-SU-2024:2372-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2384-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes.


The following security bugs were fixed:

- CVE-2021-47247: net/mlx5e: Fix use-after-free of encap entry in neigh update handler (bsc#1224865).
- CVE-2021-47311: net: qcom/emac: fix UAF in emac_remove (bsc#1225010).
- CVE-2021-47368: enetc: Fix illegal access when reading affinity_hint (bsc#1225161).
- CVE-2021-47372: net: macb: fix use after free on rmmod (bsc#1225184).
- CVE-2021-47379: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd (bsc#1225203).
- CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
- CVE-2022-2938: psi: Fix uaf issue when psi trigger is destroyed while being polled (bsc#1202623).
- CVE-2022-48760: USB: core: Fix hang in usb_kill_urb by adding memory barriers (bsc#1226712).
- CVE-2023-52707: sched/psi: Fix use-after-free in ep_remove_wait_queue() (bsc#1225109). polled (bsc#1202623).
- CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
- CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
- CVE-2024-26822: Set correct id, uid and cruid for multiuser automounts (bsc#1223011).
- CVE-2024-35789: Check fast rx for non-4addr sta VLAN changes (bsc#1224749).
- CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1224766).
- CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1224764).
- CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1224765).
- CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1224703).
- CVE-2024-36894: usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete (bsc#1225749).
- CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225732).
- CVE-2024-36940: pinctrl: core: delete incorrect free in pinctrl_enable() (bsc#1225840).
- CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1225866).
- CVE-2024-38545: RDMA/hns: Fix UAF for cq async event (bsc#1226595).
- CVE-2024-38559: scsi: qedf: Ensure the copied buf is NUL terminated (bsc#1226785).
- CVE-2024-38560: scsi: bfa: Ensure the copied buf is NUL terminated (bsc#1226786).

The following non-security bugs were fixed:

- NFS: avoid infinite loop in pnfs_update_layout (bsc#1219633 bsc#1226226).
- ocfs2: adjust enabling place for la window (bsc#1219224).
- ocfs2: fix sparse warnings (bsc#1219224).
- ocfs2: improve write IO performance when fragmentation is high (bsc#1219224).
- ocfs2: speed up chain-list searching (bsc#1219224).
- psi: Fix uaf issue when psi trigger is destroyed while being
- x86/tsc: Trust initial offset in architectural TSC-adjust MSRs (bsc#1222015 bsc#1226962).

Record: SUSE-SU-2024:2384-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2394-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47089: kfence: fix memory leak when cat kfence objects (bsc#1220958.
CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek() (bsc#1225391).
CVE-2021-47515: seg6: fix the iif in the IPv6 socket control block (bsc#1225426).
CVE-2021-47538: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (bsc#1225448).
CVE-2021-47539: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (bsc#1225452).
CVE-2021-47555: net: vlan: fix underflow for the real_dev refcnt (bsc#1225467).
CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
CVE-2021-47572: net: nexthop: fix null pointer dereference when IPv6 is not enabled (bsc#1225389).
CVE-2022-48716: ASoC: codecs: wcd938x: fix incorrect used of portid (bsc#1226678).
CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
CVE-2023-52658: Revert 'net/mlx5: Block entering switchdev mode with ns inconsistency' (bsc#1224719).
CVE-2023-52667: net/mlx5e: fix a potential double-free in fs_any_create_groups (bsc#1224603).
CVE-2023-52670: rpmsg: virtio: Free driver_override when rpmsg_remove() (bsc#1224696).
CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
CVE-2023-52835: perf/core: Bail out early if the request AUX area is out of bound (bsc#1225602).
CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
CVE-2023-52869: pstore/platform: Add check for kstrdup (bsc#1225050).
CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
CVE-2023-52882: clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (bsc#1225692).
CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
CVE-2024-26644: btrfs: do not abort filesystem when attempting to snapshot deleted subvolume (bsc#1221282, bsc#1222072).
CVE-2024-26720: mm: Avoid overflows in dirty throttling logic (bsc#1222364).
CVE-2024-26845: scsi: target: core: Add TMF to tmr_list handling (bsc#1223018).
CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384).
CVE-2024-26973: fat: fix uninitialized field in nostale filehandles (bsc#1223641).
CVE-2024-27432: net: ethernet: mtk_eth_soc: fix PPE hanging issue (bsc#1224716).
CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
CVE-2024-35789: Check fast rx for non-4addr sta VLAN changes (bsc#1224749).
CVE-2024-35790: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (bsc#1224712).
CVE-2024-35807: ext4: fix corruption during on-line resize (bsc#1224735).
CVE-2024-35835: net/mlx5e: fix a double-free in arfs_create_groups (bsc#1224605).
CVE-2024-35848: eeprom: at24: fix memory corruption race condition (bsc#1224612).
CVE-2024-35857: icmp: prevent possible…

Record: SUSE-SU-2024:2394-1
Updated: 2026-11-02

OSVSUSE-SU-2024:2939-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47086: phonet/pep: refuse to enable an unbound pipe (bsc#1220952).
CVE-2021-47089: kfence: fix memory leak when cat kfence objects (bsc#1220958).
CVE-2021-47103: net: sock: preserve kabi for sock (bsc#1221010).
CVE-2021-47186: tipc: check for null after calling kmemdup (bsc#1222702).
CVE-2021-47432: lib/generic-radix-tree.c: Do not overflow in peek() (bsc#1225391).
CVE-2021-47515: seg6: fix the iif in the IPv6 socket control block (bsc#1225426).
CVE-2021-47538: rxrpc: Fix rxrpc_local leak in rxrpc_lookup_peer() (bsc#1225448).
CVE-2021-47539: rxrpc: Fix rxrpc_peer leak in rxrpc_look_up_bundle() (bsc#1225452).
CVE-2021-47546: ipv6: fix memory leak in fib6_rule_suppress (bsc#1225504).
CVE-2021-47547: net: tulip: de4x5: fix the problem that the array 'lp->phy' may be out of bound (bsc#1225505).
CVE-2021-47555: net: vlan: fix underflow for the real_dev refcnt (bsc#1225467).
CVE-2021-47566: Fix clearing user buffer by properly using clear_user() (bsc#1225514).
CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518).
CVE-2021-47572: net: nexthop: fix null pointer dereference when IPv6 is not enabled (bsc#1225389).
CVE-2021-47588: sit: do not call ipip6_dev_free() from sit_init_net() (bsc#1226568).
CVE-2021-47590: mptcp: fix deadlock in __mptcp_push_pending() (bsc#1226565).
CVE-2021-47591: mptcp: remove tcp ulp setsockopt support (bsc#1226570).
CVE-2021-47593: mptcp: clear 'kern' flag from fallback sockets (bsc#1226551).
CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1226574).
CVE-2021-47599: btrfs: use latest_dev in btrfs_show_devname (bsc#1226571).
CVE-2021-47606: net: netlink: af_netlink: Prevent empty skb by adding a check on len. (bsc#1226555).
CVE-2021-47623: powerpc/fixmap: Fix VM debug warning on unmap (bsc#1227919).
CVE-2022-48716: ASoC: codecs: wcd938x: fix incorrect used of portid (bsc#1226678).
CVE-2022-48785: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() (bsc#1227927)
CVE-2022-48810: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path (bsc#1227936).
CVE-2022-48850: net-sysfs: add check for netdevice being present to speed_show (bsc#1228071).
CVE-2022-48855: sctp: fix kernel-infoleak for SCTP sockets (bsc#1228003).
CVE-2023-24023: Bluetooth: Add more enc key size check (bsc#1218148).
CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
CVE-2023-52573: net: rds: Fix possible NULL-pointer dereference (bsc#1220869).
CVE-2023-52580: net/core: Fix ETH_P_1588 flow dissector (bsc#1220876).
CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
CVE-2023-52658: Revert 'net/mlx5: Block entering switchdev mode with ns inconsistency' (bsc#1224719).
CVE-2023-52667: net/mlx5e: fix a potential double-free in fs_any_create_groups (bsc#1224603).
CVE-2023-52670: rpmsg: virtio: Free driver_override when rpmsg_remove() (bsc#1224696).
CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
CVE-2023-52675: powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (bsc#1224504).
CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
CVE-2023-52737: btrfs: lock the inode in shared mode before starting fiemap (bsc#1225484).
CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).
CVE-2023-52762: virtio-blk: fix implicit overflow on virtio_max_dma_size (bsc#1225573).
CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
CVE-2023-52784: bonding: stop the device in bond_setup_by_slave() (bsc#1224946).
CVE-2023-52787: blk-mq: make…

Record: SUSE-SU-2024:2939-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02264-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468).
CVE-2021-47595: net/sched: sch_ets: do not remove idle classes from the round-robin list (bsc#1207361 bsc#1226552).
CVE-2023-52924: netfilter: nf_tables: do not skip expired elements during walk (bsc#1236821).
CVE-2023-52925: netfilter: nf_tables: do not fail inserts if duplicate has expired (bsc#1236822).
CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53197: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (bsc#1235464).
CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
CVE-2025-21756: vsock: Orphan socket after transport release (bsc#1238876).
CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1243330).
CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).

The following non-security bugs were fixed:

ALSA: usb-audio: Fix a DMA to stack memory bug (git-fixes).
Fix reference in 'net_sched: sch_sfq: use a temporary work area for validating configuration' (bsc#1242504)
MyBS: Correctly generate build flags for non-multibuild package limit (bsc# 1244241) Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build')
MyBS: Do not build kernel-obs-qa with limit_packages Fixes: 58e3f8c34b2b ('bs-upload-kernel: Pass limit_packages also on multibuild')
MyBS: Simplify qa_expr generation Start with a 0 which makes the expression valid even if there are no QA repositories (currently does not happen). Then separator is always needed.
bs-upload-kernel: Pass limit_packages also on multibuild Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build') Fixes: 747f601d4156 ('bs-upload-kernel, MyBS, Buildresults: Support multibuild (JSC-SLE#5501, boo#1211226, bsc#1218184)')
hugetlb: unshare some PMDs when splitting VMAs (bsc#1245431).
kernel-source: Do not use multiple -r in sed parameters
kernel-source: Remove log.sh from sources
mkspec: Exclude rt flavor from kernel-syms dependencies (bsc#1244337).
mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245431).
mm/hugetlb: unshare…

Record: SUSE-SU-2025:02264-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02321-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468).
CVE-2021-47595: net/sched: sch_ets: do not remove idle classes from the round-robin list (bsc#1207361 bsc#1226552).
CVE-2023-52924: netfilter: nf_tables: do not skip expired elements during walk (bsc#1236821).
CVE-2023-52925: netfilter: nf_tables: do not fail inserts if duplicate has expired (bsc#1236822).
CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
CVE-2024-28956: x86/its: Add support for ITS-safe indirect thunk (bsc#1242006).
CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53197: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (bsc#1235464).
CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
CVE-2025-21756: vsock: Orphan socket after transport release (bsc#1238876).
CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
CVE-2025-37785: ext4: fix OOB read when checking dotdot dir (bsc#1241640).
CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1243330).
CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).

The following non-security bugs were fixed:

ALSA: usb-audio: Fix a DMA to stack memory bug (git-fixes).
Fix conditional for selecting gcc-13 Fixes: 51dacec21eb1 ('Use gcc-13 for build on SLE16 (jsc#PED-10028).')
Fix reference in 'net_sched: sch_sfq: use a temporary work area for validating configuration' (bsc#1242504)
MyBS: Correctly generate build flags for non-multibuild package limit (bsc# 1244241) Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build')
MyBS: Do not build kernel-obs-qa with limit_packages Fixes: 58e3f8c34b2b ('bs-upload-kernel: Pass limit_packages also on multibuild')
MyBS: Simplify qa_expr generation Start with a 0 which makes the expression valid even if there are no QA repositories (currently does not happen). Then separator is always needed.
Require zstd in kernel-default-devel when module compression is zstd To use ksym-provides tool modules need to be uncompressed. Without zstd at least kernel-default-base does not have provides. Link: https://github.com/openSUSE/rpm-config-SUSE/pull/82
Use gcc-13 for build on SLE16 (jsc#PED-10028).
add…

Record: SUSE-SU-2025:02321-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02322-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468).
CVE-2021-47595: net/sched: sch_ets: do not remove idle classes from the round-robin list (bsc#1207361 bsc#1226552).
CVE-2023-52924: netfilter: nf_tables: do not skip expired elements during walk (bsc#1236821).
CVE-2023-52925: netfilter: nf_tables: do not fail inserts if duplicate has expired (bsc#1236822).
CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
CVE-2025-21756: vsock: Orphan socket after transport release (bsc#1238876).
CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1243330).
CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).

The following non-security bugs were fixed:

Fix conditional for selecting gcc-13 Fixes: 51dacec21eb1 ('Use gcc-13 for build on SLE16 (jsc#PED-10028).')
Fix reference in 'net_sched: sch_sfq: use a temporary work area for validating configuration' (bsc#1242504)
MyBS: Correctly generate build flags for non-multibuild package limit (bsc# 1244241) Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build')
MyBS: Do not build kernel-obs-qa with limit_packages Fixes: 58e3f8c34b2b ('bs-upload-kernel: Pass limit_packages also on multibuild')
MyBS: Simplify qa_expr generation Start with a 0 which makes the expression valid even if there are no QA repositories (currently does not happen). Then separator is always needed.
Require zstd in kernel-default-devel when module compression is zstd To use ksym-provides tool modules need to be uncompressed. Without zstd at least kernel-default-base does not have provides. Link: https://github.com/openSUSE/rpm-config-SUSE/pull/82
Test the correct macro to detect RT kernel build Fixes: 470cd1a41502 ('kernel-binary: Support livepatch_rt with merged RT branch')
Use gcc-13 for build on SLE16 (jsc#PED-10028).
add nf_tables for iptables non-legacy network…

Record: SUSE-SU-2025:02322-1
Updated: 2026-11-02

OSVSUSE-SU-2025:02537-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468).
CVE-2021-47595: net/sched: sch_ets: do not remove idle classes from the round-robin list (bsc#1207361 bsc#1226552).
CVE-2023-52924: netfilter: nf_tables: do not skip expired elements during walk (bsc#1236821).
CVE-2023-52925: netfilter: nf_tables: do not fail inserts if duplicate has expired (bsc#1236822).
CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-53057: net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT (bsc#1233551).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
CVE-2024-57947: netfilter: nf_set_pipapo: fix initial map fill (bsc#1236333).
CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
CVE-2025-21756: vsock: Orphan socket after transport release (bsc#1238876).
CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
CVE-2025-37797: net_sched: hfsc: Fix a UAF vulnerability in class handling (bsc#1242417).
CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1243330).
CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).

The following non-security bugs were fixed:

Fix conditional for selecting gcc-13 Fixes: 51dacec21eb1 ('Use gcc-13 for build on SLE16 (jsc#PED-10028).')
Fix reference in 'net_sched: sch_sfq: use a temporary work area for validating configuration' (bsc#1242504)
MyBS: Correctly generate build flags for non-multibuild package limit (bsc# 1244241) Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build')
MyBS: Do not build kernel-obs-qa with limit_packages Fixes: 58e3f8c34b2b ('bs-upload-kernel: Pass limit_packages also on multibuild')
MyBS: Simplify qa_expr generation Start with a 0 which makes the expression valid even if there are no QA repositories (currently does not happen). Then separator is always needed.
Require zstd in kernel-default-devel when module compression is zstd To use ksym-provides tool modules need to be uncompressed. Without zstd at least kernel-default-base does not have provides. Link: https://github.com/openSUSE/rpm-config-SUSE/pull/82
Use gcc-13 for build on SLE16 (jsc#PED-10028).
add nf_tables for iptables non-legacy network handling This is needed for example by docker on the Alpine Linux distribution, but can also be used on openSUSE.
bs-upload-kernel: Pass…

Record: SUSE-SU-2025:02537-1
Updated: 2026-11-02

OSVSUSE-SU-2025:2264-1 No score

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

CVE-2021-47557: net/sched: sch_ets: do not peek at classes beyond 'nbands' (bsc#1207361 bsc#1225468).
CVE-2021-47595: net/sched: sch_ets: do not remove idle classes from the round-robin list (bsc#1207361 bsc#1226552).
CVE-2023-52924: netfilter: nf_tables: do not skip expired elements during walk (bsc#1236821).
CVE-2023-52925: netfilter: nf_tables: do not fail inserts if duplicate has expired (bsc#1236822).
CVE-2024-26808: netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634).
CVE-2024-26924: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (bsc#1225820).
CVE-2024-27397: kabi: place tstamp needed for nftables set in a hole (bsc#1224095).
CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
CVE-2024-46800: sch/netem: fix use after free in netem_dequeue (bsc#1230827).
CVE-2024-53125: bpf: sync_linked_regs() must preserve subreg_def (bsc#1234156).
CVE-2024-53141: netfilter: ipset: add missing range check in bitmap_ip_uadt (bsc#1234381).
CVE-2024-53197: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (bsc#1235464).
CVE-2024-56770: sch/netem: fix use after free in netem_dequeue (bsc#1235637).
CVE-2025-21700: net: sched: Disallow replacing of child qdisc from one parent to another (bsc#1237159).
CVE-2025-21702: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312).
CVE-2025-21703: netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (bsc#1237313).
CVE-2025-21756: vsock: Orphan socket after transport release (bsc#1238876).
CVE-2025-23141: KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (bsc#1242782).
CVE-2025-37752: net_sched: sch_sfq: move the limit validation (bsc#1242504).
CVE-2025-37823: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (bsc#1242924).
CVE-2025-37890: net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (bsc#1243330).
CVE-2025-37997: netfilter: ipset: fix region locking in hash types (bsc#1243832).
CVE-2025-38000: sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (bsc#1244277).
CVE-2025-38001: net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (bsc#1244234).
CVE-2025-38014: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (bsc#1244732).
CVE-2025-38060: bpf: abort verification if env->cur_state->loop_entry != NULL (bsc#1245155).
CVE-2025-38083: net_sched: prio: fix a race in prio_tune() (bsc#1245183).

The following non-security bugs were fixed:

ALSA: usb-audio: Fix a DMA to stack memory bug (git-fixes).
Fix reference in 'net_sched: sch_sfq: use a temporary work area for validating configuration' (bsc#1242504)
MyBS: Correctly generate build flags for non-multibuild package limit (bsc# 1244241) Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build')
MyBS: Do not build kernel-obs-qa with limit_packages Fixes: 58e3f8c34b2b ('bs-upload-kernel: Pass limit_packages also on multibuild')
MyBS: Simplify qa_expr generation Start with a 0 which makes the expression valid even if there are no QA repositories (currently does not happen). Then separator is always needed.
bs-upload-kernel: Pass limit_packages also on multibuild Fixes: 0999112774fc ('MyBS: Use buildflags to set which package to build') Fixes: 747f601d4156 ('bs-upload-kernel, MyBS, Buildresults: Support multibuild (JSC-SLE#5501, boo#1211226, bsc#1218184)')
hugetlb: unshare some PMDs when splitting VMAs (bsc#1245431).
kernel-source: Do not use multiple -r in sed parameters
kernel-source: Remove log.sh from sources
mkspec: Exclude rt flavor from kernel-syms dependencies (bsc#1244337).
mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (bsc#1245431).
mm/hugetlb: unshare…

Record: SUSE-SU-2025:2264-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`linux` Debian:12	before 5.15.15-1	5.15.15-1
`linux` Debian:13	before 5.15.15-1	5.15.15-1
`linux` Debian:14	before 5.15.15-1	5.15.15-1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP3 From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-livepatch-SLE15-SP3_Update_46` SUSE:Linux Enterprise Live Patching 15 SP3 From an advisory covering 72 CVEs	before 1-150300.7.3.1	1-150300.7.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP3 From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1.150300.18.98.1	5.3.18-150300.59.167.1.150300.18.98.1
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1

Show 228 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-preempt` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1.150300.18.98.1	5.3.18-150300.59.167.1.150300.18.98.1
`kernel-docs` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-preempt` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1.150300.18.98.1	5.3.18-150300.59.167.1.150300.18.98.1
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-preempt` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-default` SUSE:Linux Enterprise Micro 5.1 From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.1 From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1.150300.18.98.1	5.3.18-150300.59.167.1.150300.18.98.1
`kernel-default` SUSE:Linux Enterprise Micro 5.2 From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.2 From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1.150300.18.98.1	5.3.18-150300.59.167.1.150300.18.98.1
`kernel-64kb` SUSE:Enterprise Storage 7.1 From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-default` SUSE:Enterprise Storage 7.1 From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-default-base` SUSE:Enterprise Storage 7.1 From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1.150300.18.98.1	5.3.18-150300.59.167.1.150300.18.98.1
`kernel-docs` SUSE:Enterprise Storage 7.1 From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-obs-build` SUSE:Enterprise Storage 7.1 From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-preempt` SUSE:Enterprise Storage 7.1 From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-source` SUSE:Enterprise Storage 7.1 From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-syms` SUSE:Enterprise Storage 7.1 From an advisory covering 72 CVEs	before 5.3.18-150300.59.167.1	5.3.18-150300.59.167.1
`kernel-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 249 CVEs	before 5.14.21-150500.33.60.1	5.14.21-150500.33.60.1
`kernel-source-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 249 CVEs	before 5.14.21-150500.33.60.1	5.14.21-150500.33.60.1
`kernel-syms-azure` SUSE:Linux Enterprise Module for Public Cloud 15 SP5 From an advisory covering 249 CVEs	before 5.14.21-150500.33.60.1	5.14.21-150500.33.60.1
`kernel-azure` openSUSE:Leap 15.5 From an advisory covering 249 CVEs	before 5.14.21-150500.33.60.1	5.14.21-150500.33.60.1
`kernel-source-azure` openSUSE:Leap 15.5 From an advisory covering 249 CVEs	before 5.14.21-150500.33.60.1	5.14.21-150500.33.60.1
`kernel-syms-azure` openSUSE:Leap 15.5 From an advisory covering 249 CVEs	before 5.14.21-150500.33.60.1	5.14.21-150500.33.60.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.1 From an advisory covering 68 CVEs	before 5.3.18-150300.175.1	5.3.18-150300.175.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.1 From an advisory covering 68 CVEs	before 5.3.18-150300.175.1	5.3.18-150300.175.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.2 From an advisory covering 68 CVEs	before 5.3.18-150300.175.1	5.3.18-150300.175.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.2 From an advisory covering 68 CVEs	before 5.3.18-150300.175.1	5.3.18-150300.175.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-livepatch-SLE15-SP5-RT_Update_17` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 249 CVEs	before 1-150500.11.3.1	1-150500.11.3.1
`kernel-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-rt_debug` SUSE:Real Time Module 15 SP5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-source-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-syms-rt` SUSE:Real Time Module 15 SP5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-rt` openSUSE:Leap 15.5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-rt_debug` openSUSE:Leap 15.5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-source-rt` openSUSE:Leap 15.5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-syms-rt` openSUSE:Leap 15.5 From an advisory covering 249 CVEs	before 5.14.21-150500.13.61.1	5.14.21-150500.13.61.1
`kernel-default` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1.150500.6.33.8	5.14.21-150500.55.73.1.150500.6.33.8
`kernel-64kb` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default-base` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1.150500.6.33.8	5.14.21-150500.55.73.1.150500.6.33.8
`kernel-source` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-zfcpdump` SUSE:Linux Enterprise Module for Basesystem 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-docs` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.2	5.14.21-150500.55.73.2
`kernel-obs-build` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-source` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-syms` SUSE:Linux Enterprise Module for Development Tools 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default` SUSE:Linux Enterprise Module for Legacy 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-livepatch-SLE15-SP5_Update_17` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 531 CVEs	before 1-150500.11.3.1	1-150500.11.3.1
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default` SUSE:Linux Enterprise Workstation Extension 15 SP5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default` openSUSE:Leap Micro 5.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default-base` openSUSE:Leap Micro 5.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1.150500.6.33.8	5.14.21-150500.55.73.1.150500.6.33.8
`dtb-aarch64` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-64kb` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-debug` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default-base` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1.150500.6.33.8	5.14.21-150500.55.73.1.150500.6.33.8
`kernel-docs` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.2	5.14.21-150500.55.73.2
`kernel-kvmsmall` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-obs-build` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-obs-qa` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-source` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-syms` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-zfcpdump` openSUSE:Leap 15.5 From an advisory covering 531 CVEs	before 5.14.21-150500.55.73.1	5.14.21-150500.55.73.1
`kernel-default` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-default-base` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1.150500.6.53.1	5.14.21-150500.55.113.1.150500.6.53.1
`kernel-source` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-default` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-livepatch-SLE15-SP5_Update_28` SUSE:Linux Enterprise Live Patching 15 SP5 From an advisory covering 258 CVEs	before 1-150500.11.3.1	1-150500.11.3.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1.150500.6.53.1	5.14.21-150500.55.113.1.150500.6.53.1
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1.150500.6.53.1	5.14.21-150500.55.113.1.150500.6.53.1
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-default` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1.150500.6.53.1	5.14.21-150500.55.113.1.150500.6.53.1
`kernel-docs` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-source` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1.150500.6.53.1	5.14.21-150500.55.113.1.150500.6.53.1
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 258 CVEs	before 5.14.21-150500.55.113.1	5.14.21-150500.55.113.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 260 CVEs	before 5.14.21-150500.13.100.2	5.14.21-150500.13.100.2
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.5 From an advisory covering 260 CVEs	before 5.14.21-150500.13.100.1	5.14.21-150500.13.100.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 221 CVEs	before 5.14.21-150400.15.124.1	5.14.21-150400.15.124.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 221 CVEs	before 5.14.21-150400.15.124.1	5.14.21-150400.15.124.1
`kernel-rt` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 221 CVEs	before 5.14.21-150400.15.124.1	5.14.21-150400.15.124.1
`kernel-source-rt` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 221 CVEs	before 5.14.21-150400.15.124.1	5.14.21-150400.15.124.1
`kernel-default` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2	5.14.21-150400.24.170.2
`kernel-default-base` SUSE:Linux Enterprise Micro 5.3 From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2.150400.24.86.2	5.14.21-150400.24.170.2.150400.24.86.2
`kernel-default` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2	5.14.21-150400.24.170.2
`kernel-default-base` SUSE:Linux Enterprise Micro 5.4 From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2.150400.24.86.2	5.14.21-150400.24.170.2.150400.24.86.2
`kernel-default` SUSE:Linux Enterprise High Availability Extension 15 SP4 From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2	5.14.21-150400.24.170.2
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2	5.14.21-150400.24.170.2
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2	5.14.21-150400.24.170.2
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2.150400.24.86.2	5.14.21-150400.24.170.2.150400.24.86.2
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.1	5.14.21-150400.24.170.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2	5.14.21-150400.24.170.2
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.1	5.14.21-150400.24.170.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.1	5.14.21-150400.24.170.1
`kernel-64kb` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2	5.14.21-150400.24.170.2
`kernel-default` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2	5.14.21-150400.24.170.2
`kernel-default-base` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2.150400.24.86.2	5.14.21-150400.24.170.2.150400.24.86.2
`kernel-docs` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.1	5.14.21-150400.24.170.1
`kernel-obs-build` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2	5.14.21-150400.24.170.2
`kernel-source` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.1	5.14.21-150400.24.170.1
`kernel-syms` SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.1	5.14.21-150400.24.170.1
`kernel-64kb` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2	5.14.21-150400.24.170.2
`kernel-default` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2	5.14.21-150400.24.170.2
`kernel-default-base` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2.150400.24.86.2	5.14.21-150400.24.170.2.150400.24.86.2
`kernel-docs` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.1	5.14.21-150400.24.170.1
`kernel-obs-build` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2	5.14.21-150400.24.170.2
`kernel-source` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.1	5.14.21-150400.24.170.1
`kernel-syms` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.1	5.14.21-150400.24.170.1
`kernel-zfcpdump` SUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2	5.14.21-150400.24.170.2
`kernel-default` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2	5.14.21-150400.24.170.2
`kernel-default-base` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2.150400.24.86.2	5.14.21-150400.24.170.2.150400.24.86.2
`kernel-docs` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.1	5.14.21-150400.24.170.1
`kernel-obs-build` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2	5.14.21-150400.24.170.2
`kernel-source` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.1	5.14.21-150400.24.170.1
`kernel-syms` SUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.1	5.14.21-150400.24.170.1
`kernel-default` SUSE:Manager Proxy 4.3 From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2	5.14.21-150400.24.170.2
`kernel-default-base` SUSE:Manager Proxy 4.3 From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2.150400.24.86.2	5.14.21-150400.24.170.2.150400.24.86.2
`kernel-source` SUSE:Manager Proxy 4.3 From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.1	5.14.21-150400.24.170.1
`kernel-syms` SUSE:Manager Proxy 4.3 From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.1	5.14.21-150400.24.170.1
`kernel-default` SUSE:Manager Server 4.3 From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2	5.14.21-150400.24.170.2
`kernel-default-base` SUSE:Manager Server 4.3 From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2.150400.24.86.2	5.14.21-150400.24.170.2.150400.24.86.2
`kernel-source` SUSE:Manager Server 4.3 From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.1	5.14.21-150400.24.170.1
`kernel-syms` SUSE:Manager Server 4.3 From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.1	5.14.21-150400.24.170.1
`kernel-zfcpdump` SUSE:Manager Server 4.3 From an advisory covering 221 CVEs	before 5.14.21-150400.24.170.2	5.14.21-150400.24.170.2
`linux-hwe-edge` Ubuntu:16.04:LTS	All versions, plus listed versions 4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1 Show 18 moreShow less 4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1	None known
`linux-aws-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30	None known
`linux-aws-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1 Show 5 moreShow less 5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37	None known
`linux-azure` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9 Show 39 moreShow less 4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38	None known
`linux-azure-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1 Show 11 moreShow less 5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36	None known
`linux-azure-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2	None known
`linux-gcp` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8 Show 33 moreShow less 4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35	None known
`linux-gcp-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1 Show 8 moreShow less 5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1	None known
`linux-gke-4.15` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38 Show 28 moreShow less 4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84	None known
`linux-gke-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1025.25~18.04.15.4.0-1027.28~18.04.15.4.0-1029.31~18.04.15.4.0-1030.32~18.04.15.4.0-1032.34~18.04.1 Show 32 moreShow less 5.4.0-1033.35~18.04.15.4.0-1035.37~18.04.15.4.0-1036.38~18.04.15.4.0-1037.39~18.04.15.4.0-1039.41~18.04.15.4.0-1040.42~18.04.15.4.0-1042.44~18.04.15.4.0-1043.45~18.04.15.4.0-1044.46~18.04.15.4.0-1046.48~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.15.4.0-1052.55~18.04.15.4.0-1053.56~18.04.15.4.0-1054.57~18.04.15.4.0-1055.58~18.04.15.4.0-1056.59~18.04.15.4.0-1057.60~18.04.15.4.0-1059.62~18.04.15.4.0-1061.64~18.04.15.4.0-1062.65~18.04.15.4.0-1063.66~18.04.15.4.0-1065.68~18.04.15.4.0-1066.69~18.04.15.4.0-1067.70~18.04.15.4.0-1068.71~18.04.15.4.0-1071.76~18.04.35.4.0-1072.77~18.04.15.4.0-1074.79~18.04.15.4.0-1076.82~18.04.15.4.0-1078.84~18.04.15.4.0-1080.86~18.04.1	None known
`linux-gkeop-5.4` Ubuntu:18.04:LTS	All versions, plus listed versions 5.4.0-1001.15.4.0-1003.35.4.0-1004.55.4.0-1005.65.4.0-1007.8~18.04.1 Show 32 moreShow less 5.4.0-1008.9~18.04.15.4.0-1009.10~18.04.15.4.0-1010.11~18.04.15.4.0-1011.12~18.04.25.4.0-1012.13~18.04.15.4.0-1013.14~18.04.15.4.0-1014.15~18.04.15.4.0-1015.16~18.04.15.4.0-1016.17~18.04.15.4.0-1018.19~18.04.15.4.0-1021.22~18.04.15.4.0-1022.23~18.04.15.4.0-1023.24~18.04.15.4.0-1024.25~18.04.15.4.0-1025.26~18.04.15.4.0-1026.27~18.04.15.4.0-1027.28~18.04.15.4.0-1029.30~18.04.25.4.0-1031.32~18.04.15.4.0-1032.33~18.04.15.4.0-1033.34~18.04.15.4.0-1034.35~18.04.15.4.0-1036.37~18.04.15.4.0-1037.38~18.04.15.4.0-1038.39~18.04.15.4.0-1039.40~18.04.15.4.0-1040.41~18.04.15.4.0-1043.44~18.04.15.4.0-1046.48~18.04.15.4.0-1048.51~18.04.15.4.0-1049.52~18.04.15.4.0-1051.54~18.04.1	None known
`linux-hwe` Ubuntu:18.04:LTS	All versions, plus listed versions 4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1 Show 38 moreShow less 4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72	None known
`linux-hwe-edge` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1 Show 5 moreShow less 5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2	None known
`linux-oem` Ubuntu:18.04:LTS	All versions, plus listed versions 4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12 Show 45 moreShow less 4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114	None known
`linux-oracle-5.0` Ubuntu:18.04:LTS	All versions, plus listed versions 5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19	None known
`linux-oracle-5.3` Ubuntu:18.04:LTS	All versions, plus listed versions 5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1 Show 4 moreShow less 5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1	None known
`linux-aws-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.9~20.04.25.11.0-1014.15~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.25.11.0-1021.22~20.04.25.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-aws-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.25.13.0-1011.12~20.04.15.13.0-1012.13~20.04.15.13.0-1014.15~20.04.15.13.0-1017.19~20.04.1 Show 8 moreShow less 5.13.0-1019.21~20.04.15.13.0-1021.23~20.04.25.13.0-1022.24~20.04.15.13.0-1023.25~20.04.15.13.0-1025.27~20.04.15.13.0-1028.31~20.04.15.13.0-1029.32~20.04.15.13.0-1031.35~20.04.1	None known
`linux-aws-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1041.43~20.04.15.8.0-1042.44~20.04.1	None known
`linux-azure-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1007.7~20.04.25.11.0-1012.13~20.04.15.11.0-1013.14~20.04.15.11.0-1015.16~20.04.15.11.0-1017.18~20.04.1 Show 8 moreShow less 5.11.0-1019.20~20.04.15.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.2	None known
`linux-azure-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.10~20.04.25.13.0-1012.14~20.04.15.13.0-1013.15~20.04.15.13.0-1014.16~20.04.15.13.0-1017.19~20.04.1 Show 7 moreShow less 5.13.0-1021.24~20.04.15.13.0-1022.26~20.04.15.13.0-1023.27~20.04.15.13.0-1025.29~20.04.15.13.0-1028.33~20.04.15.13.0-1029.34~20.04.15.13.0-1031.37~20.04.1	None known
`linux-azure-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1033.35~20.04.15.8.0-1036.38~20.04.15.8.0-1039.42~20.04.15.8.0-1040.43~20.04.15.8.0-1041.44~20.04.15.8.0-1042.45~20.04.15.8.0-1043.46~20.04.1	None known
`linux-azure-fde` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1063.66+cvm2.25.4.0-1063.66+cvm3.25.4.0-1064.67+cvm1.15.4.0-1065.68+cvm2.15.4.0-1067.70+cvm1.1 Show 21 moreShow less 5.4.0-1068.71+cvm1.15.4.0-1069.72+cvm1.15.4.0-1070.73+cvm1.15.4.0-1072.75+cvm1.15.4.0-1073.76+cvm1.15.4.0-1074.77+cvm1.15.4.0-1076.79+cvm1.15.4.0-1078.81+cvm1.15.4.0-1080.83+cvm1.15.4.0-1083.87+cvm1.15.4.0-1085.90+cvm1.15.4.0-1085.90+cvm2.15.4.0-1086.91+cvm1.15.4.0-1089.94+cvm1.25.4.0-1090.95+cvm1.15.4.0-1091.96+cvm1.15.4.0-1092.97+cvm1.15.4.0-1095.101+cvm1.15.4.0-1098.104+cvm1.15.4.0-1100.106+cvm1.15.4.0-1103.109+cvm1.1	None known
`linux-gcp-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1009.10~20.04.15.11.0-1014.16~20.04.15.11.0-1017.19~20.04.15.11.0-1018.20~20.04.25.11.0-1020.22~20.04.1 Show 7 moreShow less 5.11.0-1021.23~20.04.15.11.0-1022.24~20.04.15.11.0-1023.25~20.04.15.11.0-1024.26~20.04.15.11.0-1026.29~20.04.15.11.0-1028.32~20.04.15.11.0-1029.33~20.04.3	None known
`linux-gcp-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1008.9~20.04.35.13.0-1012.15~20.04.15.13.0-1013.16~20.04.15.13.0-1015.18~20.04.15.13.0-1019.23~20.04.1 Show 8 moreShow less 5.13.0-1021.25~20.04.15.13.0-1023.28~20.04.15.13.0-1024.29~20.04.15.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1030.36~20.04.15.13.0-1031.37~20.04.15.13.0-1033.40~20.04.1	None known
`linux-gcp-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1032.34~20.04.15.8.0-1035.37~20.04.15.8.0-1038.40~20.04.15.8.0-1039.41	None known
`linux-gke` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-1033.355.4.0-1035.375.4.0-1036.385.4.0-1037.395.4.0-1039.41 Show 45 moreShow less 5.4.0-1041.435.4.0-1042.445.4.0-1043.455.4.0-1044.465.4.0-1046.485.4.0-1049.525.4.0-1051.545.4.0-1052.555.4.0-1053.565.4.0-1054.575.4.0-1055.585.4.0-1056.595.4.0-1057.605.4.0-1059.625.4.0-1061.645.4.0-1062.655.4.0-1063.665.4.0-1065.685.4.0-1066.695.4.0-1067.705.4.0-1068.715.4.0-1071.765.4.0-1072.775.4.0-1074.795.4.0-1076.825.4.0-1078.845.4.0-1080.865.4.0-1081.875.4.0-1083.895.4.0-1084.905.4.0-1086.935.4.0-1087.945.4.0-1090.975.4.0-1091.985.4.0-1094.1015.4.0-1095.1025.4.0-1096.1035.4.0-1097.1045.4.0-1098.1055.4.0-1099.1065.4.0-1100.1075.4.0-1101.1085.4.0-1102.1095.4.0-1103.1105.4.0-1104.111	None known
`linux-gke-5.15` Ubuntu:20.04:LTS	All versions, plus listed versions 5.15.0-1011.14~20.04.15.15.0-1014.17~20.04.15.15.0-1015.18~20.04.15.15.0-1016.19~20.04.15.15.0-1019.23~20.04.1 Show 13 moreShow less 5.15.0-1020.25~20.04.15.15.0-1023.28~20.04.25.15.0-1027.32~20.04.15.15.0-1028.33~20.04.15.15.0-1029.34~20.04.15.15.0-1031.36~20.04.15.15.0-1032.37~20.04.15.15.0-1033.38~20.04.15.15.0-1034.39~20.04.15.15.0-1036.41~20.04.15.15.0-1037.42~20.04.15.15.0-1038.43~20.04.15.15.0-1039.44~20.04.1	None known
`linux-hwe-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-22.23~20.04.15.11.0-25.27~20.04.15.11.0-27.29~20.04.15.11.0-34.36~20.04.15.11.0-36.40~20.04.1 Show 7 moreShow less 5.11.0-37.41~20.04.25.11.0-38.42~20.04.15.11.0-40.44~20.04.25.11.0-41.45~20.04.15.11.0-43.47~20.04.25.11.0-44.48~20.04.25.11.0-46.51~20.04.1	None known
`linux-hwe-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-21.21~20.04.15.13.0-22.22~20.04.15.13.0-23.23~20.04.25.13.0-25.26~20.04.15.13.0-27.29~20.04.1 Show 11 moreShow less 5.13.0-28.31~20.04.15.13.0-30.33~20.04.15.13.0-35.40~20.04.15.13.0-37.42~20.04.15.13.0-39.44~20.04.15.13.0-40.45~20.04.15.13.0-41.46~20.04.15.13.0-44.49~20.04.15.13.0-48.54~20.04.15.13.0-51.58~20.04.15.13.0-52.59~20.04.1	None known
`linux-hwe-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-23.24~20.04.15.8.0-25.26~20.04.15.8.0-28.30~20.04.15.8.0-29.31~20.04.15.8.0-31.33~20.04.1 Show 16 moreShow less 5.8.0-33.36~20.04.15.8.0-34.37~20.04.25.8.0-36.40~20.04.15.8.0-38.43~20.04.15.8.0-40.45~20.04.15.8.0-41.46~20.04.15.8.0-43.49~20.04.15.8.0-44.50~20.04.15.8.0-45.51~20.04.15.8.0-48.54~20.04.15.8.0-49.55~20.04.15.8.0-50.56~20.04.15.8.0-53.60~20.04.15.8.0-55.62~20.04.15.8.0-59.66~20.04.15.8.0-63.71~20.04.1	None known
`linux-intel-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1007.75.13.0-1008.85.13.0-1009.95.13.0-1010.105.13.0-1011.115.13.0-1014.155.13.0-1017.19	None known
`linux-oem-5.10` Ubuntu:20.04:LTS	All versions, plus listed versions 5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17 Show 21 moreShow less 5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.275.10.0-1029.305.10.0-1032.335.10.0-1033.345.10.0-1034.355.10.0-1038.405.10.0-1044.465.10.0-1045.475.10.0-1049.515.10.0-1050.525.10.0-1051.535.10.0-1052.545.10.0-1053.555.10.0-1055.585.10.0-1057.61	None known
`linux-oem-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1009.105.13.0-1010.115.13.0-1012.165.13.0-1014.185.13.0-1017.21 Show 7 moreShow less 5.13.0-1019.235.13.0-1020.245.13.0-1021.255.13.0-1022.265.13.0-1026.325.13.0-1028.355.13.0-1029.36	None known
`linux-oem-5.14` Ubuntu:20.04:LTS	All versions, plus listed versions 5.14.0-1004.45.14.0-1005.55.14.0-1007.75.14.0-1008.85.14.0-1010.10 Show 30 moreShow less 5.14.0-1011.115.14.0-1013.135.14.0-1018.195.14.0-1020.225.14.0-1022.245.14.0-1024.265.14.0-1027.305.14.0-1029.325.14.0-1031.345.14.0-1032.355.14.0-1033.365.14.0-1034.375.14.0-1036.405.14.0-1038.425.14.0-1042.475.14.0-1044.495.14.0-1045.515.14.0-1046.535.14.0-1047.545.14.0-1048.555.14.0-1049.565.14.0-1050.575.14.0-1051.585.14.0-1052.595.14.0-1054.615.14.0-1055.625.14.0-1056.635.14.0-1057.645.14.0-1058.665.14.0-1059.67	None known
`linux-oem-5.6` Ubuntu:20.04:LTS	All versions, plus listed versions 5.6.0-1007.75.6.0-1008.85.6.0-1010.105.6.0-1011.115.6.0-1013.13 Show 24 moreShow less 5.6.0-1017.175.6.0-1018.185.6.0-1020.205.6.0-1021.215.6.0-1023.235.6.0-1026.265.6.0-1027.275.6.0-1028.285.6.0-1031.325.6.0-1032.335.6.0-1033.355.6.0-1034.365.6.0-1035.375.6.0-1036.395.6.0-1039.435.6.0-1042.465.6.0-1047.515.6.0-1048.525.6.0-1050.545.6.0-1052.565.6.0-1053.575.6.0-1054.585.6.0-1055.595.6.0-1056.60	None known
`linux-oracle-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1008.8~20.04.15.11.0-1013.14~20.04.15.11.0-1016.17~20.04.15.11.0-1017.18~20.04.15.11.0-1019.20~20.04.1 Show 7 moreShow less 5.11.0-1020.21~20.04.15.11.0-1021.22~20.04.15.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1025.27~20.04.15.11.0-1027.30~20.04.15.11.0-1028.31~20.04.1	None known
`linux-oracle-5.13` Ubuntu:20.04:LTS	All versions, plus listed versions 5.13.0-1011.13~20.04.25.13.0-1015.19~20.04.15.13.0-1016.20~20.04.15.13.0-1018.22~20.04.15.13.0-1021.26~20.04.1 Show 7 moreShow less 5.13.0-1025.30~20.04.15.13.0-1027.32~20.04.15.13.0-1028.33~20.04.15.13.0-1030.35~20.04.15.13.0-1033.39~20.04.15.13.0-1034.40~20.04.15.13.0-1036.43~20.04.1	None known
`linux-oracle-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-1031.32~20.04.25.8.0-1033.34~20.04.15.8.0-1034.35~20.04.25.8.0-1037.38~20.04.15.8.0-1038.39~20.04.1	None known
`linux-raspi2` Ubuntu:20.04:LTS	All versions, plus listed versions 5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6	None known
`linux-riscv` Ubuntu:20.04:LTS	All versions, plus listed versions 5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34 Show 7 moreShow less 5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45	None known
`linux-riscv-5.11` Ubuntu:20.04:LTS	All versions, plus listed versions 5.11.0-1015.16~20.04.15.11.0-1017.18~20.04.15.11.0-1018.19~20.04.25.11.0-1020.21~20.04.15.11.0-1021.22~20.04.1 Show 8 moreShow less 5.11.0-1022.23~20.04.15.11.0-1023.24~20.04.15.11.0-1024.25~20.04.15.11.0-1026.28~20.04.15.11.0-1028.31~20.04.15.11.0-1029.32~20.04.15.11.0-1030.345.11.0-1031.35	None known
`linux-riscv-5.8` Ubuntu:20.04:LTS	All versions, plus listed versions 5.8.0-14.16~20.04.15.8.0-14.16~20.04.35.8.0-16.18~20.04.15.8.0-17.19~20.04.15.8.0-18.20~20.04.1 Show 5 moreShow less 5.8.0-20.22~20.04.15.8.0-22.24~20.04.15.8.0-25.27~20.04.15.8.0-26.28~20.04.15.8.0-29.31~20.04.1	None known
`linux-allwinner-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1007.7~22.04.15.19.0-1009.9~22.04.15.19.0-1010.10~22.04.15.19.0-1011.11~22.04.15.19.0-1012.12~22.04.15.19.0-1013.13~22.04.15.19.0-1014.14~22.04.15.19.0-1015.15~22.04.1	None known
`linux-aws-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1019.20~22.04.15.19.0-1020.21~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1024.25~22.04.1 Show 5 moreShow less 5.19.0-1025.26~22.04.15.19.0-1026.27~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1029.30~22.04.1	None known
`linux-aws-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 9 moreShow less 6.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-azure-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.21~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.15.19.0-1025.28~22.04.15.19.0-1026.29~22.04.15.19.0-1027.30~22.04.2	None known
`linux-azure-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1005.5~22.04.16.2.0-1006.6~22.04.16.2.0-1007.7~22.04.16.2.0-1008.8~22.04.16.2.0-1009.9~22.04.3 Show 8 moreShow less 6.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.16.2.0-1019.19~22.04.1	None known
`linux-azure-fde-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1025.28~22.04.1.15.19.0-1026.29~22.04.1.15.19.0-1027.30~22.04.2.1	None known
`linux-azure-fde-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.1.16.2.0-1009.9~22.04.3.16.2.0-1011.11~22.04.1.16.2.0-1012.12~22.04.1.16.2.0-1014.14~22.04.1.1 Show 5 moreShow less 6.2.0-1015.15~22.04.1.16.2.0-1016.16~22.04.1.16.2.0-1017.17~22.04.1.16.2.0-1018.18~22.04.1.16.2.0-1019.19~22.04.1.1	None known
`linux-gcp-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1020.22~22.04.25.19.0-1021.23~22.04.15.19.0-1022.24~22.04.15.19.0-1024.26~22.04.15.19.0-1025.27~22.04.15.19.0-1026.28~22.04.15.19.0-1027.29~22.04.15.19.0-1030.32~22.04.1	None known
`linux-gcp-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1009.9~22.04.36.2.0-1010.10~22.04.16.2.0-1011.11~22.04.16.2.0-1011.11~22.04.36.2.0-1012.12~22.04.1 Show 7 moreShow less 6.2.0-1013.13~22.04.16.2.0-1014.14~22.04.16.2.0-1016.18~22.04.16.2.0-1017.19~22.04.16.2.0-1018.20~22.04.16.2.0-1019.21~22.04.16.2.0-1021.23~22.04.1	None known
`linux-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-28.29~22.04.15.19.0-32.33~22.04.15.19.0-35.36~22.04.15.19.0-38.39~22.04.15.19.0-40.41~22.04.1 Show 6 moreShow less 5.19.0-41.42~22.04.15.19.0-42.43~22.04.15.19.0-43.44~22.04.15.19.0-45.46~22.04.15.19.0-46.47~22.04.15.19.0-50.50	None known
`linux-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-25.25~22.04.26.2.0-26.26~22.04.16.2.0-31.31~22.04.16.2.0-32.32~22.04.16.2.0-33.33~22.04.1 Show 5 moreShow less 6.2.0-34.34~22.04.16.2.0-35.35~22.04.16.2.0-36.37~22.04.16.2.0-37.38~22.04.16.2.0-39.40~22.04.1	None known
`linux-lowlatency-hwe-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1021.22~22.04.15.19.0-1022.23~22.04.15.19.0-1023.24~22.04.1 Show 5 moreShow less 5.19.0-1024.25~22.04.15.19.0-1025.26~22.04.15.19.0-1027.28~22.04.15.19.0-1028.29~22.04.15.19.0-1030.30	None known
`linux-lowlatency-hwe-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1008.8~22.04.16.2.0-1009.9~22.04.16.2.0-1011.11~22.04.16.2.0-1012.12~22.04.16.2.0-1013.13~22.04.1 Show 5 moreShow less 6.2.0-1014.14~22.04.16.2.0-1015.15~22.04.16.2.0-1016.16~22.04.16.2.0-1017.17~22.04.16.2.0-1018.18~22.04.1	None known
`linux-nvidia-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1003.3~22.04.16.2.0-1009.96.2.0-1010.106.2.0-1011.116.2.0-1012.126.2.0-1013.136.2.0-1015.15	None known
`linux-oem-5.17` Ubuntu:22.04:LTS	All versions, plus listed versions 5.17.0-1003.35.17.0-1004.45.17.0-1006.65.17.0-1011.125.17.0-1012.13 Show 21 moreShow less 5.17.0-1013.145.17.0-1014.155.17.0-1015.165.17.0-1016.175.17.0-1017.185.17.0-1018.195.17.0-1019.205.17.0-1020.215.17.0-1021.225.17.0-1024.255.17.0-1025.265.17.0-1026.275.17.0-1027.285.17.0-1028.295.17.0-1029.305.17.0-1030.315.17.0-1031.325.17.0-1032.335.17.0-1033.345.17.0-1034.355.17.0-1035.36	None known
`linux-oem-6.0` Ubuntu:22.04:LTS	All versions, plus listed versions 6.0.0-1006.66.0.0-1007.76.0.0-1008.86.0.0-1009.96.0.0-1010.10 Show 11 moreShow less 6.0.0-1011.116.0.0-1012.126.0.0-1013.136.0.0-1014.146.0.0-1015.156.0.0-1016.166.0.0-1017.176.0.0-1018.186.0.0-1019.196.0.0-1020.206.0.0-1021.21	None known
`linux-oem-6.1` Ubuntu:22.04:LTS	All versions, plus listed versions 6.1.0-1004.46.1.0-1006.66.1.0-1007.76.1.0-1008.86.1.0-1009.9 Show 22 moreShow less 6.1.0-1010.106.1.0-1012.126.1.0-1013.136.1.0-1014.146.1.0-1015.156.1.0-1016.166.1.0-1017.176.1.0-1019.196.1.0-1020.206.1.0-1021.216.1.0-1022.226.1.0-1023.236.1.0-1024.246.1.0-1025.256.1.0-1026.266.1.0-1027.276.1.0-1028.286.1.0-1029.296.1.0-1033.336.1.0-1034.346.1.0-1035.356.1.0-1036.36	None known
`linux-riscv` Ubuntu:22.04:LTS	All versions, plus listed versions 5.13.0-1004.45.13.0-1006.6+22.04.15.13.0-1007.7+22.04.15.13.0-1010.11+22.04.15.15.0-1004.4 Show 18 moreShow less 5.15.0-1005.55.15.0-1006.65.15.0-1007.75.15.0-1008.85.15.0-1011.125.15.0-1012.135.15.0-1014.165.15.0-1015.175.15.0-1016.185.15.0-1017.195.15.0-1018.215.15.0-1019.225.15.0-1020.235.15.0-1022.265.15.0-1023.275.15.0-1026.305.15.0-1027.315.15.0-1028.32	None known
`linux-riscv-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1012.13~22.04.15.19.0-1015.16~22.04.15.19.0-1016.17~22.04.15.19.0-1017.18~22.04.15.19.0-1018.19~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.15.19.0-1021.23~22.04.1	None known
`linux-starfive-5.19` Ubuntu:22.04:LTS	All versions, plus listed versions 5.19.0-1014.16~22.04.15.19.0-1015.17~22.04.15.19.0-1016.18~22.04.15.19.0-1017.19~22.04.15.19.0-1018.20~22.04.15.19.0-1019.21~22.04.15.19.0-1020.22~22.04.1	None known
`linux-starfive-6.2` Ubuntu:22.04:LTS	All versions, plus listed versions 6.2.0-1006.7~22.04.16.2.0-1007.8~22.04.16.2.0-1009.10~22.04.1	None known

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-47595 is a medium vulnerability (CVSS 5.5) in Linux, published June 19, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. Fixed in linux 5.15.15-1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 1 version, 1,560 references and the rest of 8 source descriptions. The JSON record has them.